0b239eb2e8b621b18a36fdec83613a3ce4aaf2e54d3910beb6a949021a40d3151f5ab94f07d702da5441eb5abba0874bdf18dc85e14e4bde0cdb869fe87ba6b2b9984827e874f1fbd194542f0bd71374154a0baba4542b9208aa07d2ef62a213444190c34fd017647fa3", 0x1000, 0x4}, {&(0x7f0000000040)="95c123fa0df5f4727fa2d6416a7c62c3a7ff212a0cf859480bb53f21a61a7360765ecce9ffb8455aeacc65ee401c3b8f7ac11a9a183069fb1219546ecbea9ab625a29433078bbe292fc05b4dfe0b4f7e76d1c986b79a337ae151fdeaa70c81", 0x5f, 0x9}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2c2403, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x1, 0x0, 0x2, 0xffffffff, 0x101, 0x9, 0x4a9, 0x0, 0x4, 0x0, 0x7fff, 0x3, 0x7, 0x9, 0x20, {0x1f, 0x3}, 0x7, 0x9}}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2542.208416][T28651] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2542.319566][T28669] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2542.335727][T28672] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2542.349012][T28669] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2542.362876][T28669] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2542.458214][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2543.498048][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2543.648121][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2544.528013][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:34 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:30:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000004ec0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:34 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:34 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @rose, @rose, @bcast, @null, @default, @netrom, @null]}, &(0x7f0000000080)=0x48, 0x80000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x119200, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r3}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r6 = dup(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x34, 0x0, 0x109, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, @can={0x1d, 0x0}, @hci={0x1f, 0xffffffffffffffff, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000380)='veth1_to_hsr\x00', 0x39e, 0x4, 0xde}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0xf0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x28040804}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 07:30:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x3, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000600)="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", 0x1000, 0x4}, {&(0x7f0000000040)="95c123fa0df5f4727fa2d6416a7c62c3a7ff212a0cf859480bb53f21a61a7360765ecce9ffb8455aeacc65ee401c3b8f7ac11a9a183069fb1219546ecbea9ab625a29433078bbe292fc05b4dfe0b4f7e76d1c986b79a337ae151fdeaa70c81", 0x5f, 0x9}], 0x0, &(0x7f00000003c0)=ANY=[]) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2c2403, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x1, 0x0, 0x2, 0xffffffff, 0x101, 0x9, 0x4a9, 0x0, 0x4, 0x0, 0x7fff, 0x3, 0x7, 0x9, 0x20, {0x1f, 0x3}, 0x7, 0x9}}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2544.907368][T28687] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2544.916523][T28693] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:30:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x3, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000600)="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", 0x1000, 0x4}, {&(0x7f0000000040)="95c123fa0df5f4727fa2d6416a7c62c3a7ff212a0cf859480bb53f21a61a7360765ecce9ffb8455aeacc65ee401c3b8f7ac11a9a183069fb1219546ecbea9ab625a29433078bbe292fc05b4dfe0b4f7e76d1c986b79a337ae151fdeaa70c81", 0x5f, 0x9}], 0x0, &(0x7f00000003c0)=ANY=[]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2c2403, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:30:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:35 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2545.010569][T28687] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2545.024425][T28687] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2545.039917][T28713] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:30:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x3, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000600)="04ff2d2d471bf9eba6e4c73d3351a4e94783726dcc671c010aa3e676d43e689a13276473cc80108ff9373693c517c49f8deefe4ca23fb025b69cca9fd9df13bd536761dce79d46aa8390b769a2de53140b9297f48a11ea3ae5d2983fff9fa3fc99a23bf2d04f4d5c1971bcdca20caa91b1c528c765113b88e7580e57901bb986b06d5bce786fc05cce38747ab9a07c37bf84c260779b85eae0a2306dec8e338b243eeb213b40dc7161be22cc71a5cbf7ff52294d89a778783c492ba2a4481417f765a90aacdddccd59f7314069ce77c29d58b6d3768018b0176c499fe8e34761a2b09b71a13fbb329fe7cb768a38afeccf83784197dee7106b342ab091caa5ad3ea07dd5f52f00be546b3770bebeb7d470c53ea0f2a85331e8ddaca3b9ce7c412f41a4c948511de54aa52ced32de3d082f72c9245c016eed6af83ccc1fc2355a10d26278eb655760ec3f5918e55e5cc0e6d461c41d59560e6b0f76167e3d2be17b12c86c239ef27bbd5bf40f339283cdd78233c8a7e3dcfb62fa81409ba7658303253dda292650c06d4f3d268f096aaf1b167e199b1cf607bc2b287f0717b186d179421247259b19cd20a78391145325a54f0906967d082d2a005794efc3cf7723791792d01ecb2a47c01a2218a367b91375a891f0827e3d71a2d5e9eda12d626a9339a81a6380d58c062faa66980cccc25d85766ea8d2ced14d80324a811c77d244543402668442ad25feb7cb111757267fe6aa56364fdf3afcf5d40a2051d53ab6c0259ebf51a2af6a39162dbf04cbb34d86f3882df4eeeca341eff35f2ef4dc19364a2ce7768b0af835d8cb36db091f721ad614d966f1522df2be1ac8b061bf1302a9df1644fdf3334ca96822267364ed7f95d43fa0fd1ea3d2c84e9b2d97f53bf6ff49b872d633998e47575f46f2710171e01ada4c075c37ef1706a2c6bd167df365b6e1c679977494ca5e5b2cbd19696ecc24326081ec665fa7223410edc8e142da55e4d9229ee6dcfaa09955813c4b407da40ca6b3835518ab3ed22918276f432100b1de4c76e61d8e8a69d9ede72df4b144a04e6077bc741c389924300aae7fc0b64a1a338cf41af2d715781bc9fb92dddc7adec18cd9c7a3ffe0280fbdd08993873304a8d66c3d5ea382e2ee2df08a37a5b76f680ff80922fa7521a67b4ebf2833436094d6b819cc28a24bfe78545bcd2814f7e2bf35a9c7a271e41aa99d4810061598ba5c8a9eb07dd29d2127fdb4f45232472dda9fd60578e46356b508b7c8e6f124eaa24b9005a78ca45d09bf5f5201b7a5dcce7065ad098dba57c5d47a5c45713a3947b54fd5766262ad92784110bf0df032890e8b13088a3ca7d0e1d5926b17ad1ddce175933aa602e76ffbaae9bd32df3c1c1f2678a1061d58a67a266aa4f4cd1403c07ca7b4a881452ea588df3ef7b89b789e6625a63cf0aa6729403bd6dfba1c811f3f05308cbeca8014b4153ebf774533e3880ab5a78c9b95e18e63fca8a42581a6fbe047679a3c8565627a150671754bac562a00d1e54d816798a49a258cfc6f3ea26fba0742e40401c42dd1051231e256ea644d441a1d42cd895d34ad56a407beec74d8bac90a9a8f489e4655f5d3b7525fa8d0cea7d7d8e72352b4a3d5f79713b604c57caf16a43bfc3ff6dbe0118de43a8464d68180773f0a8c397743b0d4044831e3e596d9c9dfab8f36ac638d6739746a9e27c422c194212127030ae365d5b7f3352ffda1955076aad10b14ccc1aeaac42f683df72365fbf3a22f0813d5aa677ed8e7f88f5a175a4145f0fc2a4bf2d882497b6698c2220b3ec0057150100c69c481d2f90913d6f6656d3661a682e0c66239417986abc2ee0af917e1162b10de28a40a28c9e7d55f3270a35b287b995239b2707fc1abc886632bf452e75b693ae094d9becc7b7518dd44e88504b8e35bdb09df374c9283c27b78eb399e25fd49c279c65fe419d4aa65d8136ee27ecf62ec5401ca86db2423d0d24afecb3ff4b0022bb3bcd4c8621ec80a240ce4efa135b079e6232b6563642f835670b7c9a7b16327afd4f9d5d20d32a0315a03e57ecbeba2c7ff3f7612f0b1a4ce67bf1805e9f13c3c48eb20758974546f30e4833cdb30d89986b2a94c185d9bf6f6b61752b35150d3c546b783b8fdab470cd7833b58710b923ebe64d4749fb2802a43e09bc84ee5ac28f8100433ca4cb137fa5e9b1f714ebd7acaebe968627c1b543d87f87401083c29e98255acab3cd953fe3552897f2ec263ce430e4003273db75ee8f74006e234b5ae6633a8c55ae48fcb85c18fe11c848325f6bbb1efbcfe040624f7e88b67c8a9b8614798003af0306d82ad07fe690661f5c6a737a60d7d39ef8979afa953ee3d4feb3d9e38d643c04978951fb1d310013e3c6107b9ee97207b239211f0b7bbca272d2a9135359688530db40bffa742cd16c65e3041e0f7d662c2d2f2a4a56bd299cfbfb0360699a11e1277aebabfe41421d343c83d172a66c8f73940a1ac87b02aeea68c0f387b07849b52d71727d1543c86c10ff275eef7e1dbcb6d3b56a16b089d0f63aa4c160d917d54066675a9cee98d32265ace56949dd0168e55a14c5f0f1a61933a6e90e716ec32bca36946344c4f7e494edb45ec29a89dd061672752bde69d4f86f423670351c07a8a8148cc78d1727268cacc349fd7ee8610b3168d96fbed201e261ea587e7eb5a22cde14f557b4f5192181c065c7d60d6ab0992cf49cb25d9a74a69a5b489dbb3621ad3b0e81872a0ca2d292a1cb3b275b38a92dd7cb3543e4ca2739bd85e7f6d1ad0ef085dabefa50a206e34ad50577684c50726e6ea71c409554eda543124bf47a670f2adbef28f83810565e113c379d96e7cb9dc84f20cd261230f56692deaba88d0b3168e52d51066a932d12b4cb5fec7fbcb290f93f4b024cff2dd5fa6b7100356e1e21a8ec10879b3d52596674543a2be95ef5f16a67acaff3a18daab4667ef27fe085c33be2e306547fe68a0830c772f8cebcf077bf496e81c6f65000edbf3a6e5b6915a3d02061f67479f190f5f36a941dd7d043cbe1901c6933bf760d4ce2ee07880644f9d397a5b2d7f5cec625ef6cbd1aa28fb8e6b6c1a3cae07e0056e6c6013570b2900e501c88dacc9e29596cf82171cc037fbaebcf4afde429492370db7d3376543fb4ba67ac0d0470ad5e279a869a443f0e0fa51dbb75b5755e08b27fcec8e2218d1868e3e64cee1ce1336e4bfdeeb5c2b65c6424edd7632744dea6fbaf53e8cabfa69819e32e87a1ea27552f8e0401f870ba6eefc4085364b5d409512918840d5d4a8fa31b4b0514b5d7bd5f0b1a1cbc4c8a11bd1e89d44220527b6df69332754bda431c732521a4df3ee9f51edaee842f7aa38e9e25040b7abdecb6c13addffaf0e38ec9f73bd23c657d5fae83c6f505891814b0e59ca58084090593ce0fa35f0b14ae9f96a9ca4d01212d3dfada139ebe2d2191475f3bff56a893421a50f377d7d35895c3d97e68472cc02947b0a6921e244c04194e275363de634853898e2901c7e35ccc9e645248a8c5a4b3c158846a19f12e62ab2a69d8b731cf23b9f6d608fc00ad591832035f725b70c81267ca623b2b43c7408143e8e7e6cdd8508c27588ef15e0290ece6fedfc7ec6e4a7dd94d6d055afdb25595ee927eb0a3d0e529a879db9c4c97fbbb1065667cfd034c492a23834f63d87099f1cd6e83aea3314e46cd06fce5ab171e9082e093645b3ffab5e1b38731603cd4d5c3a2b5e04084f9a9a0dd09142f063e7fa7a9f57ba6a1901ec0d56b289ef2e23fbb5f42c91187fd7e3cee3a474ce2e822439ff5f3e5b61d290a4fc77942f0313c291f36992d9842ce23751ffae7e3477785357e1222cce80dbff0c7fbc4e85a5bed1176bba2eea8983d8c94a3325d878a0d1f40c558c64d43038e7697c3fe392076883d251711f5bde4751fadbe988dc8ce8203794cb5844174173c5c60f83771cbd36ec7d33b68af6403b9f0912217dab869fde9988887d51583a03c44247e1e0c979b23d38e7824f4e8c52a44bc2b77683ae855e7c0c624f95592f8a4eddc473762530a201b1ed0b961e81d44a783cfd58d4c6f0bcf9615891be473181f6409003cd5d1f00739643780e670ac7edf4a27bb82f6ffc78f9f989c1e8e4b7a647f15b93b7ebc7c763819f2891c7ae94f5e14ab10e394d64f9e9a0ed6d78c6ee70fd92309281b3974c25bd18119948fe31fdc7b0de4827090ed070d58703a9f8e2643f1492cf21dbdcb9c89e703ce004dd7bb9c953db0a778c0acee713149b2e29090a1ed5068b7d162f1a3241f6111005a4eb3831838b5cf23df76bd7fe8beee365b119d546dc38d58990ada16dac93f6332f51b1f6d665a8dfc681c0817e586f53d00bd8678c18a4fb8714f3fa0976c27e3b14b5c7c57f89216224b7154ad94e2a9375ea14bbdc9c324a7afaa2aa84c4ea2a82a6572ea7e59fbfd29289f888f6ab5a2659cfb32272506e71e745ffe1d44d0ecab204ec955a769917d98c6416d71c8d85e52dc2970097a34e9b58a078bc9e592b73ecb05a79abc6855628c13da1dcc9859b415e31d1ca596f381eeabfe6af06c87656715ef5575e303e2566864a7c2925b4d697b1a30ca10218777781f36cf396df0cd823c7da008b286f6b03f0837fd65a6c5ad26b5afe635be1331d525308594d20786e1dbb1b81d6710924d297a844db1b17b84f398fe70a5623035736cda24c02055d14d4861069efe35252d75a8b0bd0e16fe9719910c4f669e6f94147ec6154dc5048edd2e08133dd9b8e2b021d6636d7115dc0735cf0909e1766365adb1aa57d0ff3eda610310a2621a1722116ffea1db99e25cb5edba4bb66248d3b28bfd2583083ca9a7246299de1c2adc6c107faec7ee498f2fbcc155f1b9d6acb02d4613a24d6a5f0c2d8da3664ec22b399dd75ae9d560fba4859a0910e2b0aa18076583acf8a6388a0a0ba053b4ffa7c63e776ca07926d55c53af6035b28c6344885b15f91ab2cde89f6d01dbf735f00ab7296c44bb557029242d6f460f54b347e1fa7d144cc1c385bec22cfb41ae4939adb00b7b483cad33d2b1f7f4b22aa48769cf2141688b00f16faa45f1567865b50616dddd206dd63065d49e4b0de0c90be6606586d7aa868bc25502482f003502ce2ecc1e27f632024e69243e34069633390f183d94f452c4b4b8c8f818d17402011e6ee4299848b577ded9e2c54c0d3d30dd64fb68954b79be059fd1aca048913904beb0d2c1aef8e6c4fa050500db27c98cd6a659046cdaa1106fead4630d0b527803dc6672110eb75735efb5f16a569f0fc1d943d15e25cc2522997a98520fb50297abd1ff8e57ff690abe9884eb52e68d41c147e3b853f419f1cea77b65c2976484850295e6b69e29748ca4ddc7a749822f13de77bdc58bb1414a63dcec0dfbf6dd9a31f258b706ac6d2b65321bd09f15c5fbd1bd1fb015281a5c9b74bcffd5d24b3b72339c2278e623642725b1d2a5d499195bc17589b65b84de5344dd2fb2ab0e8c3b8691bc49d687d76e6085cad5d5b5adfad9af4f695efc7167ae8be3e4ea8a9d302df3c36917e8fd6b84ab99c22173403171fa4e537514fe103bf5bdfa3ef46293822658c824a40f65c11e0ea686cac33eafefb60b239eb2e8b621b18a36fdec83613a3ce4aaf2e54d3910beb6a949021a40d3151f5ab94f07d702da5441eb5abba0874bdf18dc85e14e4bde0cdb869fe87ba6b2b9984827e874f1fbd194542f0bd71374154a0baba4542b9208aa07d2ef62a213444190c34fd017647fa3", 0x1000, 0x4}, {&(0x7f0000000040)="95c123fa0df5f4727fa2d6416a7c62c3a7ff212a0cf859480bb53f21a61a7360765ecce9ffb8455aeacc65ee401c3b8f7ac11a9a183069fb1219546ecbea9ab625a29433078bbe292fc05b4dfe0b4f7e76d1c986b79a337ae151fdeaa70c81", 0x5f, 0x9}], 0x0, &(0x7f00000003c0)=ANY=[]) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:30:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2545.185687][T28725] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2545.199497][T28726] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2545.260980][T28726] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2545.278574][T28726] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2545.567944][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:35 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x5, 0x3) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2545.769948][T28752] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2545.808024][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2545.820152][T28752] EXT4-fs error (device loop3): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2545.840577][T28752] EXT4-fs warning (device loop3): ext4_empty_dir:2887: inode #12: comm syz-executor.3: directory missing '.' [ 2545.854688][T28752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:399: comm syz-executor.3: bg 0: block 3: invalid block bitmap [ 2545.867539][T28752] EXT4-fs error (device loop3) in ext4_free_blocks:5518: Corrupt filesystem [ 2545.876655][T28752] EXT4-fs error (device loop3): ext4_free_inode:351: comm syz-executor.3: bit already cleared for inode 12 [ 2546.617842][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2546.687890][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2547.657822][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:30:37 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:30:37 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:37 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_uring_setup(0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x1) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x4c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$getownex(r0, 0x10, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7ff) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 07:30:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x34, r2, 0x109, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x81, 0x81, 0x3, @local, @private1, 0x8, 0x700, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x452d00, 0x0) r8 = dup(r7) mmap(&(0x7f000099c000/0x4000)=nil, 0x4000, 0x2, 0x28011, r8, 0x0) 07:30:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:30:38 executing program 4: shmctl$SHM_INFO(0x0, 0xe, 0x0) 07:30:38 executing program 4: shmctl$SHM_INFO(0x0, 0xe, 0x0) 07:30:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2547.971003][T28772] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:38 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1f}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 07:30:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2548.013591][T28772] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:30:38 executing program 4: shmctl$SHM_INFO(0x0, 0xe, 0x0) 07:30:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2548.062776][T28772] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:30:38 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:38 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @rose, @rose, @bcast, @null, @default, @netrom, @null]}, &(0x7f0000000080)=0x48, 0x80000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x119200, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r3}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r6 = dup(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x34, 0x0, 0x109, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, @can={0x1d, 0x0}, @hci={0x1f, 0xffffffffffffffff, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000380)='veth1_to_hsr\x00', 0x39e, 0x4, 0xde}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0xf0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x28040804}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) [ 2548.148830][T28774] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:30:38 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_uring_setup(0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x1) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x4c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$getownex(r0, 0x10, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7ff) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 07:30:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2548.248616][T28814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2548.296642][T28814] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2548.358842][T28814] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:30:38 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:38 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:38 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2548.446946][T28832] ptrace attach of "/root/syz-executor.1"[28831] was attempted by "/root/syz-executor.1"[28832] [ 2548.499721][T28838] ptrace attach of "/root/syz-executor.1"[28837] was attempted by "/root/syz-executor.1"[28838] [ 2548.553165][T28836] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2548.573095][T28836] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2548.588474][T28836] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2548.697853][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2548.718718][T28848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:30:39 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2548.980055][T28866] ptrace attach of "/root/syz-executor.1"[28865] was attempted by "/root/syz-executor.1"[28866] [ 2549.727697][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2549.741477][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2550.767663][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:41 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:41 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:41 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 07:30:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:41 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @rose, @rose, @bcast, @null, @default, @netrom, @null]}, &(0x7f0000000080)=0x48, 0x80000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x119200, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r3}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r6 = dup(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x34, 0x0, 0x109, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, @can={0x1d, 0x0}, @hci={0x1f, 0xffffffffffffffff, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000380)='veth1_to_hsr\x00', 0x39e, 0x4, 0xde}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0xf0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x28040804}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) [ 2551.098645][T28876] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:41 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 2551.150062][T28876] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2551.151274][T28889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:30:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2551.212502][T28876] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:30:41 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2551.330569][T28903] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2551.353672][T28889] EXT4-fs error (device loop3): ext4_empty_dir:2879: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 2551.388814][T28903] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:30:41 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2551.441598][T28903] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2551.455295][T28889] EXT4-fs error (device loop3): ext4_free_inode:351: comm syz-executor.3: bit already cleared for inode 12 [ 2551.613983][T28924] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2551.634957][T28924] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2551.648553][T28924] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2551.807590][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2552.767556][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2552.848011][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2553.887451][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x84, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:44 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:44 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:44 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:44 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x7958, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x530, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "3b4d40128eeac6689f5629bc624fea45617f2b109ddb918ffdb57b6e91f62f522328bbf358eb2def9a2a6ecb1d330925e805d8440fda9e2ad979deb6b8709af298db7b1e1ddf1e43a26c1002f0d67f4b5359af3ee405aeee666c2f78b2085c166e2743937c50b0d1c6801b324a2551c0897604431e277345370c1cba30ef947996ad7cb50262c92f9d3bcc2b83028a6531c4e997e4f42df5b6ef898c32d6b6ef0d56fd22ae100d81df405530a873b6aa11f2d4e06de76a8f1495c2a34a531ce0"}]}, {0x434, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x57, 0x1, "4e7ff9b9c52f963927adff0446ac888b21d9791d6018bfdc20622f8778e0c11e8d678f41a3bfff5c51a1588b51ad5e6481f2495af1cf65da562c6b606b1cde9499f41de911e81e72aa54465ccc18f9bf17c31e"}, @NFTA_DATA_VALUE={0x24, 0x1, "ecc26f4629fb646a968efab3f22ce213dc4dd46b1febc74fc7c125485161940a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5ebf}, @NFTA_SET_ELEM_KEY={0x308, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9, 0x1, "b13c1d32a1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "151ffaaa5be3344cc7e057fe840110ff3dc0c586b48b2a3d64af77046ae867f98d416d5b142f7c1e049e3f2d2005d7f0a78c01870ec08a8e17ff39884f911a554cc39669a01ad4254b4152bea8fb8f39129a96e43c5583ca45d76f98b0376d6da865d868a7fdb09e29bf0f2e42cccabb7b5cd63cc21da693acf4e6b47b7f797c926eb985721811aa50cd7d2fcd5b332f347b333929dedfbbd1becd8caa1734bc2332eae833f8e62499a1d47b604fd7b73c2708e3cd400392f484a9f0c968a13afd8dc257b626288c0b0043e3005640dc972554cb7132aae1da9750cc476a7393bd58471c19d6adaf268ce04701"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "7002507d90ae47922f0117a133c28d4976a07652206273c47f953ff8b5947e0e4f56f7f1b833f7f07653d7c4fbe8893f4a213c9de3c49958ee5ca859dd0fc6fae8ea06ece6b0d8f2da5b76789c7e702e0b23de12c0b9511d991fabaf8996067c16d4fe1f5e7c161be223f0980b98efcd54e22f7c8449660549e8b643b4c68cdf14ce5b1a212a20262d66722dd53f674cd22f6bea8ed485794fedc16a6923a9bb6d772582769e84f5698811ef460a3c1c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x73e8, 0x3, 0x0, 0x1, [{0x3e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x2c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4b, 0x1, "adab62bb4bf7001ef955a9b4e16168d6e84ba2a6e784175e87ad2848a8c2a25fbc324dc2c55d83d65b24a02cc9f326c1f8d4534e03ea1d5822b7bc60aa70b65478d81f6a4ce433"}, @NFTA_DATA_VALUE={0xfe, 0x1, "04e6aad9fbd0d29c353faac5635fc72d8f25ef11fd7a17a44daad6eded457e8080bd6519ebbd8377f6526cb610362ffb74e8076c2cd6678d58a840d1ccc5c6676360766f6deeb690ce8046522081b90b7b2afa23a06e1b5d8c424534affb19541eae92f01e045c5d1085c28e6fca4c4acfd3ba274fe47a8ede040fdfac72af42ab6a2463362dcf5a69e4b7868437f2d1bbf9a221a358cf3a07ea3799562ec12ebee8fd9803d8634813ae5d402f763bbc34c01a4fa89f7542994e85d3f0a8fd311d9f7182ab392513021e28aa0455ed97e1b7a9b27f71f67259b6c14062457815f02c16f27a8b94dedf34308681b08173ca85a8acecb2e2eb3f5a"}, @NFTA_DATA_VALUE={0xee, 0x1, "08c12c7f2e1a4ea65fc6d2d9157cca824b827758208effd4b4d7726d53add568a3e1455184c2faace346606a6bfc95d57871769910dc34d64eba4e55404f81513812cbcb0684c5c435b1854f98c7aeb16d4f46264860c81206461cc4c34f8cddea8deab474be083b093ccbdb3b2b11ed523d0d0f0639e67f4da8915b7e3d1e2e7a4b58048e552d624521b8d66c8b867e9dc58c4e835d5b36cc96b9f7edd00a213ca58777a61da7bcfc71545b43119b3954405e9c1cf842ec5a03f5687d4b0343aba094a2f3fabc5babe64e039d7ed8e9dc05433098802ff1b9dd51911fa7438b07d226854e7f4e02ca37"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "8c8aa3eb70d0aa"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "e5df29b921b9ac91abb856f9cc8ab0dcd1ba5fa192ae39921681b885daf6e2850b85f3849c32f2eade1335f93d3aed29b613e9da78a7dc854c37c828e6c27a34fe41a603565c65bae7e7307da0785652721d916532"}, @NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8b, 0x1, "6e889a5fbbc5fa754dc083540069795e68da99d57063d5c81278fe84a9f4c9dd1eba56ed01d1925ff7321731da640f95cf227efab33cf97b297ebab3cfb299c08d8d183ff3554718978a72602bd21a1107fd6764cf27c47d70623fe393d3ea34f138ce3aad53c1660eb246c420f518043326678b604123358d0b900da4e656fcd04a1f7841ebf5"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "49d0f6efb0d5c31e602df9f21ffd482b24ab2838469c464a94b5b68e2403215267d50061ff97200f9ff113ff71a5e24dbe099fba183791d58c4b4be3603a253a7e59064cf370d3d7ac290484c61337eb3de6eefd8470ca1de12e684ab8f7f4f637b687f8a4fb047810a351f8101d706a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x48, 0x1, "7e6d2a5a4772a6937de939fe8df6f2c6f1806777a35b6b9b41f8b745b661476bc1fc69120919216a82f4030676de88c4bf588f13d0dd61f26f7e7c6455652ee5ba80c1f3"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "a0842da0d26b10457adbc334e3b3fd8390fd239bc0ca6c338068003dcb552c7a3f8a5e6d6c3fc6b51f55a6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x178, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "5c61b9d9f86e45"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "bccaefb93b0ae94472460ab97b8e57b1f43e19348be8ac37288907da60c2dd82f429c51ececbd7cb43018f"}]}, @NFTA_SET_ELEM_KEY_END={0x284, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "64aee7e9d46087f50d670be5bdb5b7cdf474731d0a5e90fa32fd8d99648c34a0ba7d1adaa12362ebac38af7d2f19e2f9e849ec906f694c5b935fc58fcf7b034c2b037669918da3e8dcbc9d414460cc92d95fef58d09bf01c5f3017b07c8d3223f58a514c1a2b679fba0a1a3fdd25fa7aa5347c0eff612e7046"}, @NFTA_DATA_VALUE={0xf7, 0x1, "4566e4d1ca74674917b986190f44dc48f98d68f205b8e96c383cdd94c347d45e53bc7da265cb0f4476db058527e8b98f9543fec36a901ef5045bb435b45e6b83017c78e3780d700f8f398324c64bb97817c3d92eb89bad51a8e1f578c2518238de968a97115cd27e8efc390503e91ed8f373643a3d4ac42855eb4e15af31fbfa27822b02bc627fd71de3d4838b7d44e940c680e8c43d84fdb658864cb6583c8f44f5b858c9d723c770f2b5550d87d0c13cfd1c37f4d20f68165bb6eec8eab826f9f348731a2a83be9bdf6eb04a1ff3a7fd62471abf5f55150f27633071a9257d86674f3abe8079281a7543f098c483602a6319"}, @NFTA_DATA_VALUE={0xa9, 0x1, "1eb1e1a4a955056dabba22f53fa0af0fc9aa30978ba4e479d39577d1766a7d14349353d6806b1966f02ff4d8948ddddb54834718dc485f65b0069257eee1058f388ad0da45016d5492d699cf34d27ef5e793bf82e2a32fed128d4c7b0fa0db3b4c0473dd0256a2bd8a0ae3e8332904029c1f0fac4d392f6f061f9272721eb0008226ff24d2b4f6a43675f41a67f8f3614b154e13c7f4b2bdeba693fea6d1796f3ba2220d7d"}]}]}, {0x226c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x11f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "763349ee2660f271fada6c451c11735b1802dd5425f8231aa77df40456b3dde0dece2f10be8b4feeb7974b925e8bfb436e8e3900138ff1107c49ff095e1a525ad0d1d498364cfdf3c6e088c47484a93d0b6b34c4a50e6c54ef0152ad825680c09952c9ad003f7c13880fe598306243c4b14b8dbdcfd6e995d1e357c1e358b895c16514b7b94a5030267d109bd2a06241df30e35781ac8ceceda9855d81b7958b06084de8de61493aa2fae085385cfd4e1681caac7e4bf52e35cf1fa16fb661b3f360686ec6f6749dc154865008830ea2dba862b1efbfe4cf4e6e7acc7f72f8e5945b73e8e09e54ee406c954c26c13d4c2b48c6a997cf76fc169ba2ae18245a8b8bbee7d864285c338d940d6e741d9da3a9c3eaa12ab6a5e82953a44468e48166106e106425e6342137de72c613bfc93996cc9619c9e48542362bb276151d26dab11ed859f3ba8c545897095e5e73297abd00437dbdb3d36442009e093e9c9f1f81fc04f8470638cf6d5234a39fb6fb9f717af6730205ad27ceab052438e0710c6fe2e21962b34fbc2b48b4ce2c616cec28153b9423d3b1415f1a55a428b07cb6c52749bfa0e0113df27f00733f8646cd15d6e392e94cb6dc103cc91457b752e4e2d503ac50ad3807bc824b2e414bf2adb7673d6ac569b4ffa8a53dba790d86aac2eb55b0eb1e2febefe1e0edeb30727b0c9380459dd6428b643587fc4519238962795b8d9d498d61a2a99a49809293962daecb65353d11820042ee3fd43503ce430a2f72a763797c51990097af513fd7d5102fd6c5a0c2677939400baf739cfb4f0e676b6842cf1e2882c4feb3bdd461360c3d177560c7379d8a862945a996a0ae07ef6adeb025ce3faf46bb1ab1f7b8215e5029f16b21e04d62568b577d97da6da08bb5ff51f464bf193d64af3424e09aa9e3f6a853c4cc052b5213e87ebb3dbefdad72e120c67721e8dfc929d2ed8822f9ecefce0c34013e442c82c9bf46df20de84e4d2665f3fecf5d5fa769a7c03307092d283394309eb13442e87fae0b313cc1ff6b4159ada7cb840105adc4e66dba542d65c780a1c95743e62a480bb79845a7b5ea7e610e58544bac0594267390a2c26d9d99377c330c14b0900e14687f6951c925caadbd2d78793f6c3e2d8df77a6bb1e318c33c8ebcc658009a737d43348f81074198f02d30e8666ccedc0c84415b8ff3bdf3fe6b9cb31dd230d485f201de4a140d19354cbabf9fa47e34d406398a8192083984f21e3f4ae9f9c18082632c3760f268d58bfbf286a4b20b72da604ba559984942b90718f5381d60ed5ff7303d6b134a71d630f89b18712f9793d017b6b26b5850978c0f11d65c9f16e8426f234f507dba25373e8cc39c55fb85a175286ea808d2eeaf11a0edbe8a7ece61389f586d3f56f52a0e2708ff4e709c94f6042c96656faf5d15d69c0d692138e2465e3b66eb5fd9c95e87de9ea4ed15068ec65aa5dc321214f581177ab27490e0ed97687119b33457bf08c54f28efdee3300e1fc10a9837814410d03498c9acbcc57a73d607822a9ccb951b07c224367b38e96e6b7a4f3375a0bcb7ff07622429fa35548c840e1905414b270b7a4760deb831adf51539497baeacd304bb1914a930a507d9a00eae9227ba300df73ed1856088816d28d0691ffcad8dee71c063c0e6f239869a3bdae54704211553844e23c8b7837786b45a7ea39cf5b1eb2a7802c6b591b4b83c5b8be7b0ccf5c8113cdd54fe3a017e72804aaff3f4ad0a0cc59e6cc51d8dee44c472855ca42ffc84295c90931494b9ffb9aa5b3caee4b31a50677c142638fdd78e2d49a873cae5fb40c7a1433efeb6ff342c917b23d30ca6eb0d44cbfcb0a9daf17f64acfacf4af58b9a1e15cafca1b864789aa788734a6a2ca0e2ab5f796eb253cb9249be952b068400ea3b41f487d0d97e82e5dd16cf6a79ee311357cf79c2a37f21b640ee729814e68797ce9c08c71a3db5d1493b63e9b0c2a7edfc4bb242a1b2ab0aeb0092b283706b23cdcb062ebb64fa3854b38b3a73611667da2a6d56015186697c59eaf601cf40dab02d7505d88df3193505ab55862c6decc4acbcd37f0a0e581b2a85e153f29468cddb49aa5a8ad6d1ba8e765a845904b5f092d6fa6e82d154a6001fe47d0133b66d66d0974bed77cd7a051d5c8b699a0ba65f068030a24563bdde8c46fa781e2e7f7e8995638d4f200512e1ce3dbffaf093acb8dc3672a9650779ce82586025b363f593887a1310525b854e0956b4296682fa43a6e2629fa3a6c6e3d6ff12a50f31b4d90e0f79a23e5727b653e8ca5f15a22d4451aa27f6518481f3e470f8a49bc934019bd7a900492103630388f27de008e84f4d2ed9368b10722b42dce0c0c7af06d3e9c3f5c37b4f83da3f6f58fadef9d55d20cb76fa054026e7c1b5ac4a74d3447990dbb21e4e5873bc0f100c04a567343b9e0b19c92a14af5d0c343e6e0be1d9d5f64f1db6e16cc6339a9a84a79c326dd9e84c824516efa1cd57dfe4e196231963401a6b205f3327d073a554037d3d0792ab7c92e198d2dd895b7044111d733d1360fee44f3b1598f8f459c12dbfd337bae5114b4e0c15dd241eab82be24f2021f4926d666ae0211869420b5254341424a57fb0f6fb47248196755e7574dfb3ce9fd413daf4e9859e1344e6b26db483f9c572b591225f93d13072b9a0d8e14592c787e3ba31a248128eef1c5b4a14c630f030b4c460b086bf8fead970838ecba90b3b5b970befe6adc47e3bf8c10310dc937b5564f82006a8a5e4049843cc371b626af4e6cd71c1f8151afe6cf92445d072d1ffd686f2ccb1bd0f5a793c341600b45cbc0eb125588990dceec2c5a57942c87b8ea2891e1ff78c71b05a87567389c955d36ba99ca6aec30b8f65cbbc0806f74a190d4aca92e2de242f63eb3aab20d7b297fbc16ae8e331f87ee30e5ba2000927b0d3c5a659b7a4cf6ee29eb9b1ce2157ff82d088a9c27a877b048beb7d90c8dcbf82b0cbe11f5f395547b92aa11e9963562ccd9c98f9494c0ffe2fd9d01cd2aaf86915d1d14a0ebac6c89a659c1c4ffe46a791738db0b50c7168aa13acd3552fb2790ba93f303714f177918a6dffb89161b9e918056654fa2d70d8b2320517326556d1785d241db5a98cecdd51a0bc8a16784a6b9c6ce6318af5f266a17d3505e95afe1591ff3f24a547288d645e8eec6103699629fde94c36387acbb80ad2a2ef24c0b8470cb65fe9fa3cb613b8df08d8c657825bc3ed81005e4a24ac469680c473c0ac0a23c91dd037b2ff03a113b26bfdf2d10653d3dfe47ab95f7d6401884e299d0c60b8a674de5fa12bf90264fb021ee9910a93614d1ae8a6c5975052ea7b50f0caa47e4079d59466bc82b1916f8ec576e249e959b57a8d1a89a3ccd5629270bafb752eb04e8e20d663ab072cc0eeec1b6e60608faacda1c6cde14a6e63b22768ee46cf9a6e3753b8cb35a066c3951d592cc1a872426745aca5af137e68875d010d999bdcb36fa1508c81d2da2a0d5a3f57177169036816406fd61613711c39d8dd3dcddea0d263d638f9690518bf1afd462820ee5c7ff05cefbd558e43b0c1b4f055b8e8c3bdbac74674c4462e39fb14a7650c8af257aafd4c92a634356dd1e65e2a00a7f11a442b813f0eb08a6692e581a41f3dc78aca5bf7d076731289f1f0bf83c3622e5921aed06032c0bd97004ef595f0959536a4041b6ec27ef39d8c3c0889960511a8a13f194e60a5255625ec9779678acfdea0516ec379fbab7cd99009c4280d891866c7c6aa7b7e6d5e54dba2dea6272f319c7c7963b42edc93b3927426052ffe8c6c5b789b02a26de682b011b1c1561572c23f355bfe7c254646e93a4b21e2c88a21704ec44877d59555f99a07e2e7ebb29f7b21a8537cd294222c10a1252c2fcc027bdd8c25155a18aead658ef2da4f087d76830c4e98b792cac43c775f35e0d3117acaee75e6effd99dab957aab31533966cf94c8cf7ac840b7472cc82c2337f44874eed4f314badb73d83ca113231e70dabccff74139ae565a77781e444e30fb357c0555e62d516f2881abd6c109967d4ec67da32d5b0e258b896024b4f7e8f735a18d34dca57b9f50e98cb7618066ff2c6eb60e5e06a9916d1f6ba42855b0690a05510d72b67a86fab965c9807f204d2c6452aab03cd96fb603b5b841b058ed3c7757bc8af30fb7d459c0888534ae73331f2c8edec1dbdd64d5490f13b2baad97fc1e7ed6d0bebbc283223a5d65d56a4ab141a99ab09464f506ec8b830750c89022728d4146bbfaf918d7131cffad193d05c28fb89c781819df335286111a3c049ab2472112dd5ecf785e5eaa29c2680b729dd6dde6e4cfea77354335e23b78422eecc26b60406c3628ce435862a4abfb45d6500c14d8486957a51a8b10594be45a435048dd3b4e2abd0976f40c4d36ba21515e3a11297cae2ded3a52fcd532e1a612c21600eacf6001ea28c3ea7298dc0edbf07823728a05339987368334a9a7405fa116f47fc7f977616f80a1025628870cb84eab559992f2e5abfc66013b2a32678ea689bcde5f1f52cf01952aa93ef3638fabb4dbd3785ce330d99fbeb274c80526d134243aa6dc6bc1bc119ccfc48433ae398eae57bc6ed5a312eefc31e6a558f9906095e22f22f15efe76211880266dc57b1a71e5124b892a12f5c662c0b6b5fca686f4a31934eb58b3ed4d4e2f6a4aaa1985873be2642a6c7b32cbe96cf7b72554373c44698ae563b1f10c333a6ca4248f94b2732d404b11064532dc69d40837a5adafc31ec236d2bf8ba820b4152f2cdbb1f9d791f232fcc5014d54d36918afcd39eac7183398886bb6363c02767ed23cde41a2069cca064c0bdebb1dcad3df05230ef65231d4acba45040f667737a0eab55aca4f6195b5adb1ac37d22ddcf2d5900a8e2b3ec9a6a582e34001a7d584d9a4af3857cf3417b6fa9c505abc28403517443cbcf51454c1309edb113ad6533d8ac5914a028094276c8aa6d51591a664a415990112386622333c28a63950092669d05be5d4db430f57636d9fe7e2e8c88ac2464ee2c40e5eb178f981fd4594ce8264598862440f0b7e8ad54a3dd9217ac83159cf04ae77d2409d169aae9141d5f89c315b5616687b12c9ac55acf9f56b3b9fab8c04535810a35e7fe23c63c0c42dc5b9925214bce3d9b7bcbb766c404fb910b94fe040dd26977958c7714ff696a209d53e4d86de7aa73e785aef48da427d4a87dad4d01278f0b7da00f41aefe3ed7b684e074c6fcd0390f869a9c7708e1603758748d899c1fae86669238c17140f0ca8ac08692c937ab5c4f61469fb95c4741f3a31e7f7f23983685f26aca063a7915960568c4ae7f5ea461b70dbfd57bd42bf18bb72014529c2a33de1cdd041ba4da88be6ce24dc237e565b1dc7f692e3482f6b4893dcd829f0a25103678ead945e3aa32223adae0d63edc1972426c8f2bd0b35f433f010a84e4f597dec02b0191fedb8a4b7c166ce8273cbe3a831b27bdacb544ca514ee9c3b59c2c372650fed20b1e7152e665de7162f2698290a47b8c0defe7dbac89a2127d717061075c5d6f4f32d7a5cbc0ff270d6407e96942dd2e6635023b148df86da68d50f03c87ef4f067c815e5e667bbdd11ae192bc09d83a09a3a74d9fbeb6534451d88d6a32287fd9567ba459d9b1f4fcbcf71d349510ec614ec4490d4e2c9a6b83b64e696c9d7668abc04483403d0f4912332f5b1d372adf38b44f3369ffbf540cd4321c6a2a2878210ae712fb2e151a4d11ad4a3605c3868d7558d63a7bf7"}, @NFTA_DATA_VALUE={0x1e, 0x1, "b321bafee9f505ac7748a4b5e79439c95f1d11b3fb786e4de4ce"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5fac3866a758516d}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "07c6c2b6e0699c62bbf4e11d9efee534d32fc4f31cdd59321ffbb79d9266c33414d85a8976c250468073d0f7869eb5ad4046263230b7c114201a7744f2914046f315f8c26c134bbaaf5854e12e99f5eeaebfad7a4c04a30e46eea84b3afdcb6280edaf938331a9b47cac85d21e8a27d04e471307220de6d746994682c38561f5155e1d69752945adce9720b29b744374b3161cc026eeac882f4060495520ee45d9cc28fb7dd853f3e8cf532cb760b046e3e07ce05f70d72f9324675128fb1e3b23309340c67de6cf45aceb93459df4e0cd691c858c19a9bb4a23f309305da49b7584d75328d6e85745fe"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1044, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "2e85785687e6e8b8ab886f2e5f38834045c34b097919a91bbedafe55257771c11a8bf323bb0a717cbfefd7a38f5dbef9efd51367eb7d264a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x1b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "1c709e134a494caed859ba43c32b9adc565c9b7d2781cdccd38edf0007e83b6d2eed291a3ed01f8fd319671ee861f68864a776ab4df3363cd9f33acbfbdc0db947a3a180f67eaf379e8b448dcd7e96377042f196036ca9f56f035ee048024b68629387ce"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "3642eea0bfc66b4913a3aa09caca942dc8e54c53abef5fe4f6e7c4f96d3b877f30f824246e74531d76644d185e7bab5d49c0e60a494beb41cc72511d8848239c12087cb2bc4aae0f09accda66fcb70bbe62f9251a3e58498"}, @NFTA_DATA_VALUE={0xe0, 0x1, "09ab38fcf17f5b1301544804b3250502491cb7d65837941449df096bd2e49e1691d5a7fa459072d7893947e6437e8b734264a61f135f110ad266a855a20e7735d8ed997b99b9d70840d7cf4918b7555ca4e682837e2505ed8f05a8c877c211f10db23b20dd6c912fa74484689069a3e83177f5887da211ae76ed2a191c1835d115a2ee809557750cc4ca87878c23f3de59dc67740172b7869817945073269665fbde99c20d7aabf472e88f24b4de503e9d0b26a0161c851f54a23248ecacc80a7b322d9cee3d15deb73321bd91171b995445fbf2390bf1e1aaf860b6"}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "e012914fd260fd672fc639ff301acf5618542269da217c50947d415eaa"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x12d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x39, 0x6, 0x1, 0x0, "a2e911b5437f0f97a73cad98c5d25629da67d7b2cbfea337298b66d769cd368feb551630bd430e987ccac5ac57d83c66f96fee936e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "26629bb8f4993fc1b226ff6ef2ba932274f8be23c9b6655f9c033bb9e2fa0a99cc192066fb7e3989d3e460ec3a2f6db02f4f"}, @NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "8f5b815e3541d5019686a000d0bda113c0803aafb851e09413125b4985ad1885c7e9eaff5dddef0fc0ea4f7f3f02344f698b72b1dcd38cc8596b85b2b7f5025a0c2f58b1a4e7a80f50c1f2fbac1e33421eb14ad4e668c2f4e8256c5ed33068a95887fc7beed1d996c26267c514e4eb46e4c24526abfdf4339f9f46a0cb571d89"}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x1154, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "c95d0a9cc6197c38605be61de0f1590b44b06b9906d1e1b6debf18816ab8080f48b2dd29e573297149cafd4512c5d56c3cb4e4866b93a65fb9cc3e907f6ff4893bbfdf5f38530537f4447ae35a58eb1ed95cbdd32e6ca4c10cc90984f4d726bc7d4b184398f5ce9899bbe7dc48a45b4a82a4a3bde9998361cef5fd627059f4182b00a3efc5f1d79866b2c1cca9f015f7cc7582254684b335fdfbc3d61aca348256a211d83be9eae4ea89d9541b62ab5316a3aa67ae786a4f3304f95e19e97ddbd66724ad29a8580b"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "62a20837cacede3e7a81ff667e92289778c347cfdc93f2d2b47c8272eb882d9f2893ac8966e2fa2fde7bc69f82a2ac589a8ca60f0242654c2c728914cf56deedb1161dafc892564ed787a06d910667df81b080cad8f111"}]}, {0x1214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0xc1, 0x6, 0x1, 0x0, "1a566f130a199377d4e9241b34904987da88db94e376c58c77b9a0b4313b9e44a48c8d73e7fc1d4e30db489bd895e4482446b6e9468ce8fde6c4919ea42879ff35866d08738ed4244460592f4b559493317a24ac2f2897df8a8a6ea934cb62071cbcc5067b38f452f21aaf2196c9a2c23507027bb243367ee2a07538f677f05ae74101935b949e5b92e3232d98cd5cf7326f35b6c94ff063863747eaa2c4f77ee2448f3c0db11749f10d28131812d99edfb0369b5ff7f80505f46f315a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff80000001}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe3, 0x1, "d97226e6523873793e550600cb6fed664e3cad7688cda2ca03dc5c3203ee69b38153702cf97d6cf9483e07ca5d8e522d81ca79ee3b76efe97af9e4feee5324a0a157cc44d1aca958abfac075ec09deab5e6e2ac6bb36cf9b9350aa2147c1710abadf5a8f56e643f989660be1dd5d86a11a14672d5b12b4c4d04eb9871574f369ce2ae4246c12c3e4e25ac70e2820db4b2969c88801fed6e7f2d6de1314ba06cdfdd1144bff1d5a2a44d182791c9417d0db85f5298a9bbd033d1846c3ce00e7f7610d4f2f01b22f2f285ce26e397aa328c843720aadda1f0bd75d956fb5ea76"}]}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "571a847083bd0356877a33ff437429b342a9b9caffec6c2fb0f9bda6b4f5cda0e1674510b529e5e9450be27e48f541aa430c34447a4c6f53e5e16544ee4c1471a796ce2fe67f70dc9f09800f558c2af65f2b3836a9d955f1b02477d288c71cfeecbc5e312a61dc3870f735baf6e8ca58203d500f4c74aa4b3c64d509476cb69a748561dcd7cd9d8eff0fd7795acb7491f6c610019ff7b4f6b4242dfaa52ffcd9df04de020eeffccefeb1a0aab0e3cc639914966553ccad68be1066e6d632d91f82cb6bc25b3900bcb7435dfd48e6e2ecc9e9f9fc78521a85d94f13c94ecffc1732896ddb57ff7b0ca49135e60f8c3c9ed85d2844765636692f447c665c9ff5cf2d6e263731eaf279974b64b6c86372d0594e9275ca6aff05eae20fd15ad6584de1db7615c2325ca1e67a49ae0a3a2d148b832b3c8e976e752653bdf9c73a0269bd5c1f0de25afda5ef45d85d49f44184a20177e2cb8e8e80c06b49fcdbefe656d453c300f5afe1f6a39195f69f09aaf3a7931e1c0b1d41b5aa96de88f3696108ae263d1c7e3adaf888e9db5ed7ea37ba76d0b765ca40801ee1703cd0f7c7c5bdcffe916e8ff12536c12e136871941976d2c402cd5532909e25caf671565a3b775e5989826f31770bd6e9d6221da5cd6d6f2decb284cd44ba9b12d3b4e38cdf6b52d4cbd75afef33499417c6fdc0393cc65ec10834f4a68493688b6a1f9d2711ff89f6c506551a15fd3f8cc7d643387e8a50b813bf237b8ef4aac9763d4228eb6a1dcc7af0ae23bda8adf0c9a6c17d99565289e4516a92abeae35aa4a60396955716df265b632c036b8985d6ad4e646dac753ccd4f8587597c66f8f5a2fa315989e2771fb9fcfe515fbf36a8c7105a228008d1dc2ed61df91f060384aeb6ca98b5aeca4d446f00786c18d14277d3413a515e26bb769ee8ec0daee2dcaaaeb5cde5145ff9ee53b1d20286280915c21bd24e808353a47e5e2d65a38009b308e93053331f52c2e326b00965b85ec5a20b35bb5af68d6f6197db46fabf31e8ed43f41f2d109c380225b44ca738b2d80571dd63162d66ace0ef4a759c63c229fd9dc73d044ee1f724c1966fad6326784c5360a338f05bf1d12ba60703adea3b03e520ab310cedd74f2f36f32a8a9e04ab60e57a09bd83f012467152a9ea95a69692e0c1fd303f64491b5ce4fe31cbad79dd842b399b269bbed9bef7b35ffba0acab67348ed8bfdbeead20ce32a2557bda1746ee6319d3c659ed4d0f80bc4c462c952840476a3dff44902c60c390e42841880350f8628326bb4652dd97f86dc617f9ed00234f04e1266937e06b34b77beeb6fffdfc827cb2d73bbde8b715e5b8042779178ac092aea28dc8667ef2e9fa4da813a99524d014a6fe8169774e37856bb296182f3cbe711d112069d4b09ca08c68eb612aa36d40400413db5074382f54514ecd5c3d0665bf444b6d66c2fadb6b850ae37d311445202ea3e31f14889c1c03d9464bd1174f0951d9049465cfc497dabc137a0c353aab9ad8f82065d8c6c2921612c6b72323ef4590156a60e865dfc3593f82f565340addaec560685158c48bcd1e21fea17bb5c4d6fe748b264ed91b25b7fc9287d3576d91cb97a8efa794b58154aade0a71fa1795faf04a531dc3c5fb8ada2bcb9891f07b1fbb6846f7cee6ef2a201ebdf642bea1ec637e95ac2a7596524ce08e8a787fe59ed950d7b1bd4830e2651c3c69b1389b7d1f6fdcf61236b771f956ef68cc9bacce69f391a0c4e66dc263d2694f151f6aaa3ac9b60ad6a613e44edab35d69f92ecf4cb15b4b565a4dffb12491b0f222169a03598a0a3b26afdf50afe184b3eca9feed6085f3b4abe83e02dff4077bd03809ab7dda3aa741cf344cd93078e6e498d3c3c65ebd089bf9e924063437506fd78020d33dde48a0053c402d54141339cb3c792c9ad5f397005d7e74ec89f5913d5c3896d0adbc353ef60e7de072a75bdbda9c6eb62a2409b656c4da69d6f28e60cc4625bd8b188a3f8b123ede2cc86b6a3fe595f0e9a0a487e8bb098004a3eed579518705b0c5431218b556aa7cd001b6653c5f1f424791ba252afcbc7d27994e18413eccb1d8f426a3fc48e29656fe381c296ba6099b3a86feec275633f8e8fc606f5e1be328d8375624f709148577fd0292a88fce04b3a6373343bbd9c691e98a04043d3a0256484a822dd778eca00addaff9119e31b44e2a9fe35e84027c4328f1d76ac39bd8458d52e2e4ab060d39af47d2f345fd3d69ee60fb5a5d9a174e7d946066eb15f3fd148c9156844b644b37f46902923f977d6179568303686e9721ff63f7f66afe8a7d9e92ca0cb899845c60c122fcb1958b7ad715ccf9d4805060406c235e04d02d3052fa151571db8681221eec702d2eacf6324552bd626880c4a0ddfbc0bd09e40ade204d9ad242b445d1a2efda4c9261341766d26041a7002ae062adf85d7d49b6b7b2c013eac954d5c120d661775a58d17206cadcbdfcf938667c8969cf86c5512aa7cfe82473f8b7d8a645eada17f26774d2ed5bd3376450713854ba43ab05f317c1de2449ac30b2dadbb5fa824348ad56ce9788b1882d1a3d8cff33d4f93637818f4c1b1fbf4abd1c83782fba099aa95fbc2209ba70a774790dedd9ec0121a8c91458b456b8d68b3eefabcd3553e3be392e4248b6520e4e918e634dc8ef66ce015adb46f0025d84928567bc92433c9d5d92aa35ece0a33fca3afbca3e70c9c844079eb3de7d642426af193bea0eb9514697216585595ba7646ffd3520226aed23866975f73d94f9e13ba3ff67bd67628fcaba333c1faeecdca2409c1f7b886fb207e979bc1d71ac99969cc20213d40e812199c2925b95aafb8ebbfeeba6d57b0040238348183ceece57663a1e577f806ababc63d709ed4a3eee671b2dec20b7be2f4fbd6d899ca0bf907aac4c0dc030efd44ef5bd97c481f1a78d8eeeb8e734f64954fe86e9944685e3968a6e5bf8126ed7c345041c2faa0b3876a0f7f15fbf9068d0a781a7734a1cf8cbf28d924864fc84fe1f563042da8f6c29be237dae75dc10a73ef8b12fae37a31ca502070a06b16fdeedb3332b4f5bfd490394e7c08f70423da043269ffb02cd70e907986f3ac39e6528cb1ceaf8849d8a3f2fe71345e29d2b7cd9c081501077023ccc9d83e433b699c1d48e6f946de9321eedf23af60549c762dcb06c0fae0f9ef2319ae65f857ef1be0a1c7dc208cce4a1922f54370896471b9e28ecc7c9e80ed92d98ad17c0630d95fbc8ecddbcba18133402624da0a8458eb68b4fbefd2ec8a3ad9f20481e808f81546db47d135d98d81995b487f3afe829cf126d95a2d808f4e9478a694bb11602eb80120ac31f5d661133bd12ca2ecff7b8fcd3f850512350b8fa58d4928db4a3eee607f47261b31f9d93856026cab937bb96f32db64566ac016c2af53473a958b715db5d3b26d6e19e384e8b85fd8afe9d0df047d2d42d030d2f81204b924be810ea9b18f8f0975cea2941384f1c42bbe1a1a829e8306acf9313955c7434d5d1ced80f12de83b4cb1c235b953f0efd89c422130229d5a5d4522a8f8888af8fa4537fe0363a99c9dd72fb633a672422d02b6e30a46121f8dea05b809ade2a0bcc64f9d04137b71d2f0b8875c0ae29e8f4d390c2de1950a98fd09b64e2185aeb819e55782c614dbad81f35fed24ff80a3baed61a4e13b02f9afbed9445b98d728a7564bd69146ec6f4abceb29aa96f446e2b286ed05229496bbd80b417dd7682a6f1964712e6b76c514ce9a216f3e23b222d7b96c784fd1e0f2d6dc4653465c066df8018e4c543d44554f8a1113e996230325b5c5140c1a1454d865aad6359428f0abca80b80497524f46cef21991c49dd9f9434b811b4f324ff328e3dbd3d2ba8ec248c379601ee8e3d3189717d1b63ce92fe8646c5eb28c6d2263a0d050dfcb0ccff716f0f72d94abc22b9ffcab64fd2daf36af303bb72c175e22626c8cc4cedfd1666b541fb6128c5c3916327f9a6e59ce649e0c839f3e9bc8f6ca98737ebbd83333530b74b7f97721b816a3befcdc8320a55163c004fec730595844141a604481ca8130b0851b1ba40149cebf09910a3622c77511337e48d48d6830db6f5403708062b9a7a4c8d7e1fde54c02305493241554431af6b19e06d21b0a773739f8fe1f8aa251dc52794d1e5b8152c9f9f893d15cbbcde38bd9cef51ecd2549c5db054561f609e37c288faa924cc3340fb8beeb4f85ca3aa3e1f5d3171af4dc028b39788b729c4d490b87492b5086674e73fdf42327cfcbdffea6836cdf526642ae46e5bc16dacdcb6ff10b1b00a800c89bebd4744332c75d67a4d52f592169e60cd660c53f3ab186cfab71a75431b883e8fa5304ee5acbaf43c6b1005a80ddb65cdac0918647cf5000d1824abb874c1bfef96455f066d2fd1b1f1941a19cb84113822409fb005ddb2e7d6300ca87421d17278c1094503d7020d4adae2c6e7cd0e0a83a3643e7e42337d031984ace6abc8d0f9d61f8c43fa2d18d301e6bfbba493aeba7db681fc778a4fdf4f61b8a1bf1275aa200c5a44b8b1153927af4587b714f436a63a2a73c2d48c5f8a0b4c16c2b7762f34b848ba09e5433d12869b5eea4291d2f19bbfc904e717c1742563ea6ffda45a6f1da437c3f1fe7cd9d71ac8dd446748b40776514212e88b8975576756a68630cf9c831ef22a4d59ce25195d1f174656b8d79db8517a33596eec11dbe42e04f22e1e18e6c007af78f4d7b27ec464530bdcd650d42af835c5dc9d210bdc6e6443e2df038d33d736471539a9a5258ebf510544c1dfb7dbf47bf16ec0699e6f14a325445b32d743a50e0d08c8e5621ee7e93e0304a62cacc5aeae02ec7ddd59f454646b9e3257fec2e9ac90cc88a43f0c163a9d6afbeb6c38aa4d4dc67d73e6ae03c0a9c6c1d8fa8fd56380b36eb6073f1dbd3b04bc06630129c6039fee986a7710bdf75d5258502d62d297b24156f9cf8c4adf22853778051191d2a9a0a82c83e717234b1ae2e55449821ba8d779ffdf9cf4843b796f68d3e434ff03aa5856818d1470e5bf1edef23a685bd9f3b5170aec50302acad17b14f67e9a585a589af60b5f158b37e670d764db0e39d204a7c58db947e2fd87788c323dfd3e2755f443954e59c30ec405506c93d1b39536b0dcb005407be04432e7e8072fb9b63ed44c0695487147b62229576183856eca5bc5110718ef73afc20abf8350244113e1b4282823afbfaa6907e5a45600b7d39af5fd7cc8e893426506e78565158e4883c54165310a8acd9d6ddcb467095a9ebc08ee9380af9484c0c0cfd20c04d530388ff027023eebbe03addc1c9cfb6ceca2ee2a74fc659f85d55346e77f8e6e0a37f3959bc7132ca2505b1708418e5e3446d6f1ad991fc2a522c493bb3acd67f9ff99ffa95ec8e43a7491fb837a86babf4c9d27b73ee4a8939b3e8c45b4729cbb3b463f9498ea34a024a8377d19f942acea6de7970eee802f0e325b9a3ef8a9cfa8f224ab5d8fa6ef75f5561948c61b7bcd3cf7acb4ab0511bc90e9e1eb391a3bbcf19c4c985f6e0a918ca60d108cc8cd753b04de32f0c2b1e97b8843836f699ccf5df32f200faf7b4f4b0f8735cee8b576fd90fe78f7daa7d03ee472d561dd2637dee8dc80562c6a78ac2c213f1a3b1cf7e4ca863710b266c2095f3b74c0a7b9a35f3e22feb376e829deddd8aaf166f42811be032bb85b9873b25bef090ac8b6d1074296132ecd8e58bf0fd7a408329d164e2e22f6b2fe88dafaa854cecf0234e25aa7ab746af8bd350828246"}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x1104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "695aa41a0267bd3a497d8b287162da32f7b5a84c8752698784c95cdbae27dd48fcd52b83be88fbf34624fd7695f81ab5e61be1c864c81e1b1ee5fe5c70f8795fb06f373f842f589413e6362531f23bd9832df7249084fbb73d422f1ccdb8ef405a8c3e328c9e871abf40f6273b4349c1b45e2be63fcc38c2f8cafd4d103937d6240b6c8788cd084147067b28351be11fe5df36bd6a6b70cd2e445b5d442fa8dbd2b1c454d03cb172a32bfef46c15cc29462256a04386ef35f7d17c94bda38855876bafbfa364ec5f84066fa237279687af77d81a502586e3da2316d6a894"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7958}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 07:30:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2554.120568][T28945] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2554.158393][T28949] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2554.168558][T28945] EXT4-fs error (device loop4): ext4_empty_dir:2879: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 2554.189676][T28945] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:30:44 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:44 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2554.228210][T28949] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2554.245288][T28949] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2554.328183][T28974] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2554.358385][T28985] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:44 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2554.369850][T28975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2554.383374][T28974] EXT4-fs error (device loop4): ext4_empty_dir:2879: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 2554.397314][T28985] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2554.410833][T28985] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2554.448355][T28974] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:30:44 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2554.490339][T28975] EXT4-fs error (device loop3): ext4_empty_dir:2879: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 2554.577603][T28975] EXT4-fs error (device loop3): ext4_free_inode:351: comm syz-executor.3: bit already cleared for inode 12 [ 2554.596112][T29008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2554.617047][T29003] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2554.637133][T29008] EXT4-fs error (device loop4): ext4_empty_dir:2879: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 2554.652796][T29008] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 [ 2554.667360][T29003] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2554.687693][T29003] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2554.937358][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2555.407402][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2555.807322][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2555.977316][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2557.017231][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x84, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1f}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 07:30:47 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:47 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x80010, r1, 0x0) [ 2557.172474][T29033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2557.210061][T29033] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2557.234086][T29033] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:30:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:47 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:47 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r6, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r9, 0x0, 0x0}, 0x0) io_uring_enter(r9, 0x450c, 0x0, 0x0, 0x0, 0x0) r12 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r12, 0x0) [ 2557.432317][T29057] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2557.457116][T29057] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:30:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) [ 2557.491687][T29057] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:30:47 executing program 2: r0 = socket(0x1d, 0x804, 0x8000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x3) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000000c0)={'bond_slave_0\x00'}) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x4095912, r4, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x28011, r2, 0x0) 07:30:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) [ 2557.603619][T29100] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:47 executing program 2: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x1, r0, 0xffffff00, 0x80000}) r6 = dup(r0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) [ 2557.712808][T29109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2558.047272][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2558.847176][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2559.087160][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x84, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2560.127101][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:50 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r6, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r9, 0x0, 0x0}, 0x0) io_uring_enter(r9, 0x450c, 0x0, 0x0, 0x0, 0x0) r12 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r12, 0x0) 07:30:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) 07:30:50 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x2, 0xffffffff, 0xffff, 0x7, 0xe646, 0x4}, 0x4f, [0x6, 0x2dd, 0x9, 0x8, 0x394, 0x20, 0x8, 0x3, 0xc2, 0x1, 0x4, 0x7fffffff, 0x1, 0x58, 0x10000, 0x2, 0x5, 0x2, 0x7, 0x3, 0x9, 0xa2c, 0x1, 0x2, 0x5, 0x20, 0xfffffffe, 0x5, 0x10000, 0x9, 0x2400000, 0x3, 0xff, 0x53b, 0x4, 0x7, 0x8, 0x1, 0x80, 0x5, 0x9, 0x0, 0x1, 0x38000000, 0x800, 0x80000000, 0x9, 0xfffffb37, 0x800, 0x2, 0x6, 0x3, 0x1, 0x400, 0x5, 0x0, 0xffffffe1, 0x1, 0xffff, 0x0, 0xb1, 0x8, 0x3, 0x7, 0xfff, 0x1, 0x9, 0xb89, 0x5, 0x1, 0x3, 0x3, 0x3, 0xfffffff7, 0x7fffffff, 0x66b, 0x1342, 0x4, 0x5, 0x20, 0x2, 0xfff, 0x2, 0x6, 0xfffffffa, 0x2, 0x8, 0x9, 0x81, 0x10000, 0x7ff, 0x6, 0x3, 0x47, 0x5, 0x93, 0x2, 0x8000, 0x1f, 0xc62, 0x6, 0x8, 0x3, 0x3, 0x3ff, 0x5, 0x9d3c, 0x0, 0xe6a6, 0x8, 0x8000, 0xffff8539, 0x27b9, 0x8, 0x9, 0x7, 0xffffffff, 0x8000, 0x7fffffff, 0xa5, 0xfffffe00, 0x9, 0x2, 0x7fffffff, 0x0, 0xff, 0xf1f, 0x2b6, 0xd1, 0x8, 0x5, 0x3c22, 0x3f, 0xffff, 0xff, 0x8, 0x3, 0x3, 0x1f, 0x1, 0x4456, 0x9a, 0x10001, 0xef0f, 0x66b, 0x80, 0x6, 0x6, 0x3, 0x3, 0x0, 0x8, 0x3, 0x1f, 0xffffffff, 0x4, 0xffff, 0x400, 0x5, 0x9, 0x2, 0x10000, 0x3, 0x36d, 0x3, 0x4, 0x3fe, 0x7, 0x8fe, 0x400, 0x9, 0x6fd, 0x81, 0xb9b2, 0x2, 0x1, 0x3, 0x169, 0x7ff, 0x9, 0x3, 0x8000, 0x3, 0xd5d, 0x8, 0x80000001, 0x400, 0x9, 0x3f, 0x6, 0x3, 0xffffff00, 0x977, 0xffffffff, 0x9, 0x2, 0x1f, 0x7fff, 0x6c, 0x5, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0x1ff, 0x6, 0x4, 0x4, 0x3, 0x8, 0x4, 0x5, 0x7, 0x603dec01, 0x8, 0x4, 0x9, 0x5, 0x3, 0x3f, 0x1, 0x2, 0xdca, 0x40, 0x5, 0x401, 0x100, 0x3, 0x3b, 0x1f, 0x3f, 0x200, 0x8001, 0x800, 0x2, 0xfffffff9, 0x1, 0x5, 0x10001, 0x8, 0x1, 0x2, 0x7, 0x1f, 0x400, 0xffff, 0x20, 0x401, 0x8, 0x8000, 0x1, 0x80000001, 0x9, 0x328bc797, 0x9, 0x1, 0x1, 0xbc5b, 0x9, 0x81, 0x80000000, 0x5, 0x6, 0x0, 0x80000001, 0x101, 0x2, 0x4, 0x9d, 0x0, 0x101, 0x7ff, 0xb47, 0x1, 0x0, 0xbc, 0x800, 0x5, 0x1, 0x7, 0xae, 0xfffffff8, 0x3, 0xff, 0xc9, 0x0, 0xa05, 0x2, 0x0, 0x6, 0x99c, 0xffff, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x3, 0x6, 0x8000, 0x0, 0x8001, 0x1, 0x80000001, 0x60, 0x1400000, 0x3, 0x4, 0x8000, 0x101, 0x8, 0x7ff, 0x10001, 0x7, 0x7f, 0x80, 0x7, 0x8, 0x4, 0x13ab, 0x2, 0x100, 0x4, 0x1f, 0x3, 0x8001, 0x7ff, 0x8, 0x8, 0x5, 0x1, 0x4, 0x2ac, 0x7, 0x504c2ce2, 0x339, 0xbbc7, 0xffffffc0, 0x0, 0x5, 0x7fffffff, 0x2, 0xf0, 0x81, 0x4, 0x8, 0x8, 0xfffffffd, 0x6, 0xdc, 0x0, 0xf1, 0x1000, 0x4c5, 0x0, 0x800, 0x8, 0x8, 0x1a49650d, 0x1, 0x80000000, 0x3, 0x1000, 0x5, 0x4, 0x800, 0x2, 0x3, 0xb95a, 0x1, 0xfffffffc, 0x9, 0x1000, 0x80, 0x7, 0x36bb, 0x8, 0x5f, 0x2, 0x7, 0xe436, 0x9, 0x924, 0x336, 0x9e1, 0xd6, 0x65b, 0x8, 0x3, 0x1ff, 0x8, 0x1, 0xffffffff, 0x0, 0x3, 0x3, 0xff, 0x7f, 0x22d, 0xfffffff9, 0x4, 0x8986, 0x6, 0x1, 0x7, 0x101, 0xa759, 0x5, 0xfffffff7, 0x7, 0x1ff, 0x6, 0x5, 0x80000000, 0xffffffff, 0x80, 0x2, 0x3ff, 0x4000000, 0x6, 0x3, 0x400, 0x20, 0x3, 0x2, 0x3, 0x8c, 0x2, 0x5, 0x2, 0x2, 0x4, 0x800, 0x5, 0x80000000, 0x9, 0x5, 0xd0, 0xfff, 0x5, 0x7, 0x1, 0x400, 0x3, 0xff, 0x0, 0x3, 0x9, 0x7ff, 0x8, 0x3, 0x100, 0x20, 0x5, 0xb12e, 0xfffffbff, 0x80, 0x7fffffff, 0x5, 0x800, 0x0, 0x0, 0x7, 0x852d, 0x0, 0x4c, 0x1, 0xe9ee, 0x3, 0x2, 0xfff, 0x2, 0x5, 0x0, 0x9, 0xfff00, 0x7, 0x200, 0x3ff, 0x6, 0x6, 0x2, 0x1, 0x100, 0x0, 0xa4, 0x0, 0x6, 0x1024, 0x80, 0x8001, 0x1, 0xdd5c, 0x6, 0x9, 0x7, 0xffff, 0x9, 0x2, 0x8c8e, 0x9, 0x1, 0x1ff, 0x1f, 0x1, 0x1f, 0x9, 0x3f, 0x8, 0x23, 0x7, 0x8, 0x1, 0x3f, 0x4, 0x5, 0x1, 0xfff, 0x6, 0x3, 0x40, 0x8, 0x6, 0x1f, 0x1, 0x89b4, 0x8, 0x102a, 0x4, 0x7, 0xffff0001, 0x1, 0x4, 0x3, 0x2, 0xfffffff7, 0x80000000, 0x6, 0x3, 0x10001, 0x8, 0x7, 0x29c00000, 0x9, 0x6, 0x92, 0x1, 0x5, 0x1, 0x10000, 0x7fffffff, 0x800, 0x4, 0x40000000, 0x3f, 0x1f6, 0x7fffffff, 0x68000000, 0x101, 0x101, 0x1, 0x80000000, 0x1fffe000, 0x9, 0x9, 0x80000000, 0xa95, 0x1, 0x2, 0xf753, 0x33, 0x7, 0x7, 0x7, 0x9, 0xfffffab9, 0x3, 0x7f, 0x3ff, 0x0, 0x2, 0x1, 0x2, 0x10000, 0x81, 0x8, 0x4, 0x800, 0xb50, 0x1ffe000, 0x800, 0x1, 0x2, 0xb52, 0x7, 0xfffffffe, 0x3, 0x8, 0x6, 0x2, 0x7, 0xfff, 0x7, 0xa000, 0x1, 0x5, 0x6, 0x5, 0x0, 0x3, 0x200, 0x0, 0x5, 0x8, 0x0, 0x9, 0x88990000, 0x7, 0x5, 0x80, 0x4, 0x3f, 0x0, 0x7, 0x47913476, 0xa5, 0x5, 0x4, 0x1, 0x4, 0x9, 0x162, 0x7, 0x80000000, 0x2, 0x62c8, 0x7, 0x5, 0x8000, 0xfffffffa, 0x8, 0x400, 0x0, 0x400, 0x7, 0xcd3, 0x3, 0x6, 0x8, 0xeae, 0xfff, 0x3, 0xff, 0xfffffffe, 0xc243, 0x0, 0xffffff30, 0xfffffffa, 0x5, 0x7, 0x3ff, 0x5, 0x7fffffff, 0x0, 0x9, 0x7, 0x2, 0x4, 0xffffffff, 0x101, 0x1000, 0x6, 0x8, 0x800, 0x100, 0xfffffeff, 0x3488, 0x48, 0x1ff, 0x0, 0x7fffffff, 0x3, 0x8, 0x7f, 0x6, 0x9, 0x80000000, 0x80000001, 0xe00000, 0x2, 0xa73, 0x6, 0x3f, 0x632, 0x6, 0x1, 0x7, 0x6, 0x1, 0x5, 0x6, 0x4, 0x5, 0x1ff, 0xffffffff, 0x80000000, 0x4d, 0x4, 0x8e1, 0x9, 0x0, 0xffff, 0x40, 0x63db, 0xfffffffc, 0x2, 0x3f, 0x2, 0x7, 0x10000, 0x7, 0x686, 0x80, 0x8, 0x0, 0x101, 0x5, 0x5, 0x0, 0xffff, 0x0, 0x23, 0x7ff, 0x8000, 0xd6, 0x2, 0x5, 0x101, 0x7, 0x5, 0x5, 0xfffffffb, 0x4, 0x7ff, 0xfeb8, 0x401, 0x4, 0xc906, 0x3, 0x4, 0x2, 0x45c, 0x40, 0x247f, 0x32e58001, 0x9, 0x6, 0xaf, 0x40, 0xda, 0x2, 0x1ff, 0x80, 0x6, 0x20, 0x8, 0x4, 0x8, 0x478ee9ee, 0x3, 0x8dc8, 0x4, 0x2, 0x81, 0x4, 0x2, 0xffffffff, 0x1, 0x3, 0x1, 0x80000001, 0x8001, 0x1, 0x1, 0xffffffc6, 0x10001, 0x2, 0x97, 0x326, 0x200, 0x7, 0x5, 0x6, 0x3f, 0x10000, 0x0, 0x80000001, 0x2, 0x3f, 0x10001, 0x6, 0x5, 0x3, 0xffffffff, 0x8, 0x4, 0x1800000, 0x4, 0x6, 0x6, 0x80000001, 0xfffffffa, 0xffff, 0x1, 0x400, 0x5, 0x4, 0x200, 0x0, 0x7, 0x3, 0x51, 0x3f, 0x4, 0xe6a, 0x3, 0xa158, 0xa2, 0x7f, 0x0, 0x200, 0x0, 0x0, 0x1ff, 0x0, 0x6918, 0x8, 0x3, 0x800, 0xe06, 0x9, 0x373, 0x101, 0x7fff, 0x81, 0x1, 0x2, 0x10001, 0x401, 0x3, 0x9, 0x400, 0xb5, 0x7ff, 0xffffff80, 0x2, 0x5, 0x3ff, 0x7, 0x3, 0x5, 0x13fd7b53, 0x5, 0x9, 0x101, 0x3, 0x8, 0x7fffffff, 0x101, 0x4, 0x7fffffff, 0x1, 0x7, 0x9, 0xe48, 0x10001, 0x6, 0x7fffffff, 0x6, 0x8, 0x9, 0x2, 0xffff, 0x40, 0x1f, 0x5, 0x4000, 0x0, 0x7fffffff, 0x9cbc, 0x8, 0x1f, 0x800, 0x6, 0x8001, 0x8, 0x9, 0x3, 0x81, 0x2, 0xfffffff7, 0xb4, 0x6, 0x9b51, 0x6, 0xfffffffc, 0x700, 0x8d4, 0x80000000, 0x7, 0x9, 0x2f, 0x4, 0x9, 0x99, 0x100, 0x2, 0x81, 0xffffffff, 0x8, 0x2, 0x2, 0xfffeffff, 0x80000000, 0xbbd7, 0xffff, 0x100, 0xfffffff8, 0x9f, 0x400, 0x3f, 0x8, 0xfff, 0x200, 0x7fffffff, 0x1, 0x8, 0x1, 0x10000, 0x7fff, 0x100, 0x1f, 0x0, 0xffffffff, 0x4c4, 0x8, 0x200, 0x4e99, 0xfffffffe, 0x5, 0x2, 0x81, 0x1000, 0x3, 0xfffff5b4, 0x80, 0x2b9, 0x2, 0x7, 0x5, 0xffffffff, 0x40, 0x4, 0x6, 0x5, 0x8000, 0x5, 0x7ff, 0x1f, 0x5, 0x8, 0x1000, 0x36a, 0x3, 0xda, 0x7, 0x2, 0x7ff, 0x200, 0xba49, 0x1, 0x40, 0x5, 0x20, 0x2, 0x1000, 0x3c9, 0x80000000, 0x82f9, 0x473bc178, 0x6, 0x2, 0xfffffc87, 0x4, 0x4, 0x20, 0x0, 0x8, 0x7, 0xbf, 0x9, 0x2, 0x3, 0x5, 0x8, 0x7, 0x7, 0x374, 0xff, 0x6, 0x3d7ccb79, 0x3, 0x6, 0x9, 0x1000, 0x80, 0x3f, 0x7, 0x7fff, 0x0, 0x7f, 0x8]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 07:30:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x9a, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:50 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) [ 2560.394829][T29141] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:50 executing program 4: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x1, r0, 0xffffff00, 0x80000}) r6 = dup(r0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 07:30:50 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) [ 2560.513922][T29172] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:50 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) [ 2560.646016][T29187] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:50 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 2560.749645][T29196] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2560.899038][T29205] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2561.176968][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2561.888583][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2562.216908][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2563.256823][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:53 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 07:30:53 executing program 4: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x1, r0, 0xffffff00, 0x80000}) r6 = dup(r0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 07:30:53 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) dup(r0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000380)={r6, 0x0, 0x3, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 07:30:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x9a, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:53 executing program 2: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x2000, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r1, 0x0) [ 2563.502269][T29224] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:53 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 2563.686195][T29252] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:30:53 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) dup(r0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000380)={r6, 0x0, 0x3, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 07:30:53 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) io_uring_setup(0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1801}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000000080)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x101}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r1, 0x10, 0x0) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200001, 0x0) [ 2563.914939][T29269] EXT4-fs error (device loop5): ext4_fill_super:4964: inode #2: comm syz-executor.5: iget: bogus i_mode (166400) [ 2563.927416][T29269] EXT4-fs (loop5): get root inode failed [ 2563.933276][T29269] EXT4-fs (loop5): mount failed 07:30:54 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4}, 0xc) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$getenv(0x4201, r5, 0x1ff, &(0x7f0000000380)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000090000002800038014000200726f736506000000000000000000000008000100000000000800030000000000"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x9c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbd9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4004080) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x5, "9e7b40"}, 0x6) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) [ 2564.087424][T29276] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 07:30:54 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000000380)="528f3e9554a74d552572dd2edbe0cb6fca", 0x11, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000000340)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x800}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000000009400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000040)={0x1, 0x4}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000300)=0x63, 0x2) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x3520, r6, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb7}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x70}, @NL80211_ATTR_CSA_IES={0x251c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x4, 0x8]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x7e8, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE={0x44, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x9, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x52}, 0xfb, 0x6, @device_a, 0x7ff, 0x4, 0x8962}}, @chsw_timing={0x68, 0x4, {0x2, 0x8000}}, @mesh_chsw={0x76, 0x6, {0x74, 0x39, 0x31, 0x6}}, @dsss={0x3, 0x1, 0xb7}, @mic={0x8c, 0x10, {0x3, "477fcbebbd74", @short="8fef33234a25fc53"}}]}, @NL80211_ATTR_PROBE_RESP={0x75a, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x81, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x9, 0x3, @device_a, 0x0, 0xfffffffc, 0x8}}, @link_id={0x65, 0x12, {@random="fb54cc366144", @device_b, @device_b}}, @measure_req={0x26, 0x39, {0xc1, 0x3, 0x2, "4b5ffb28f6cb67ea663f3af0e2ed8243453c3e056185580b289a3885b9e73b489e9aa2bf5e76c76ec07ec5cfda92a0c1e9230c560e93"}}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_BEACON_TAIL={0x128, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x19, 0x78, 0x80}}, @dsss={0x3, 0x1, 0x84}, @preq={0x82, 0x3b, @not_ext={{0x1, 0x0, 0x1}, 0xff, 0x1, 0x0, @device_b, 0x6d38, "", 0x6, 0x2, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @device_a, 0x80000000}, {{0x1, 0x0, 0x1}, @broadcast, 0xffffff81}]}}, @random_vendor={0xdd, 0x65, "72fd213008818e82ac2c08118a281f63a62db60fb85c1f42d53af61db9bc21f065764e0ab86645719836a57e627920c651482e714d364c88da487ecb59e5af0b7265dc0fce5fe8c3aa4f33b02975eb67b37b3201a98be58c93bcf4890759dfae2872de34f7"}, @gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x34, 0x20}}, @preq={0x82, 0x67, @not_ext={{0x0, 0x1}, 0x40, 0x2, 0x3, @device_b, 0xfff, "", 0x4152, 0x8001, 0x7, [{{0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x7f}, {{0x0, 0x0, 0x1}, @device_a, 0x80000000}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1}, @broadcast, 0x8000}, {{}, @device_b, 0x8}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x336, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @initial, {0x5}}, @ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x5, @default, 0x40c, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x3f, 0xc1, 0x1, 0xdb49}}, @void, @val={0x5, 0x7, {0x6, 0x3c, 0x20, "7c55039f"}}, @val={0x25, 0x3, {0x1, 0x5c, 0x89}}, @void, @val={0x3c, 0x4, {0x1, 0x20, 0xb3, 0x3e}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x1, 0x0, {0x9, 0x7f, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x8, 0x9}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x3, 0x23, 0x74}}, [{0xdd, 0xa7, "49369fa9f903cbdca27b74d96fde2438e17a7965fc7d4ecd25e4f369a8ce1e43b3d65bedd421fba863ac461409dc9e1c1e42e4860efb2719c1c98e87018fc4dd6097ce6042fc70d7282484418c884a3da3265d71f4f62dbbe0aed64e618c6d0700b22e5ae388c4a3e970275bf2cc857d0e724c96095802201db009d0b9db9832434b6b78229b595f1539087a509bdc7e9e589c911e1fd184fb43f2fe14c6a3881818e3d90c616a"}, {0xdd, 0x33, "957ea4a33fdbbd34acfe0c6ff72bd2c64a168ab4f0968fd8a3b40e13e7057d87b9d035b2f99022f039e99b03f6888070f7a849"}, {0xdd, 0x63, "c809cbf6256aca6f1f46e91b17ee971eedd3d0de2f0de39a9f8bdc0fe66ef1613d8b6b1f744efe28eeaddaafe5adbd758079c488d2ab6c1a871fc0895f6339dda9d257b317b74a35fc950e8220f0a21977fad901cd629b9bdd0e82569a887dd528c502"}, {0xdd, 0xc2, "d210a0ad0bffde752cce74f907a90cbbf9be95f2db0746829489c0eb691f9ed2b79c603e9d3e2833a70cbc6f24d635c69a28bc8d2ccdad86107fe3c926620e16a767d294e33aacd391e0ccf364f2fd921002b1551c05de00aa45e7864539df2bd60d7d15adfdfc47afde63654eba7f9e1ef91c2c196d3b9560bb30c0d3df2149fc8e3912c46b8f18148a65e9ca0555fdd5be55d8648348abefbc9a8e9cda03e1ca0bb81fec77cf5548c040bc0234a1a0cfd4eec91ddc35ac3b46ca0df74302dcae63"}, {0xdd, 0x20, "4f84975401229d9f43c1b78ed4706b2c708b2cc4f4d0fb1cf7172de10219d58a"}, {0xdd, 0x8f, "33b60a345229a0b3c8017b05ad94bac64a758379fe329bfe9c34efca3aac8b97cfb03c571b5862e7cd1df649ca56f1c36a750514a201acd8979b390acc4ae56abb75033951669ded9fdd8053a7450d46775ae3185df9f8316ffdd502a136a94ba32ec1c850345d352f6930601be5c971b0f2779a53a6ef6e6a38263697a98e283d4e6c44f839300de6b7bb53640f89"}]}}, @NL80211_ATTR_BEACON_HEAD={0x32f, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @initial, {0xc}}, 0x513, @default, 0x5843, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x9}, @val={0x4, 0x6, {0x7, 0x7, 0x6, 0x8001}}, @val={0x6, 0x2, 0x41af}, @val={0x5, 0xb0, {0x81, 0x81, 0x0, "407f993cc0ccd9211a7df80c3ba8778fa76010bbcad0f9b003ae39ebeec99c75ac19f21fbbf9942cad1f4864485aec681ee7239c728ed5c836af60ef54bc1a2a5b93cc4d0c58593cbe2721ccf4c38d1dff3045d0163c5ffa5af63f25eb7e436062e82d002a013ddd2c23b2fd39d664960be7a946f559928c4330760b1fb669f5f7dc6dfe95961235924a40f73854df65f4df8b3caf227d8f51d808164b39c35f80b0b10d40146331b5ca6b1114"}}, @val={0x25, 0x3, {0x1, 0x7e4bbc1a6cd9cfae, 0x1}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1, 0xe, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd0, 0x20}}, @void, [{0xdd, 0x4b, "09e70bc0b4a38e1c0bf44553fcade1d653999a848d1ce6e89ea120238f8f8025e46852efb529f8c8bc174704e4d38ed75d230f1cef05cc4d3c19e19351bdc56b45398d80f038f984660af7"}, {0xdd, 0xde, "e898b6378b3c0184abc42a999d9fa0d3bb8b59247caf612766da420036ccbc81357901bf88893d9a2448bc9ccb07470002ca7fb19ee0b2ceeae8d844d7bef15af318d7560c94a00dcd879f37400c3283989de3d38658205aeebc6f60843a2b436a4f5e36102b8f52b8cac785766daeb42670d4632e926b5707165f703774cea9389f578e953dddbeff8a691aa061c6bf060a19ab4fd1a1d918325594f825c1ccf9b6132852454b53126f0d471dbc20d2e75259e1fb8841e1034190ac6259640999af8813ccc3bac359f18f1c7219b47cf5dc9629c41218f93fce3003c3e4"}, {0xdd, 0xf0, "b96e37c0802f35c3358989f0681e62cc9a13069a9ec4501688180c12919700f7b05a0ed6022c092b193f609f23f942914de11024f35ae9a74837b96e65d55033aadf163ea70bf5f4b3e69a59738be3a2016ec54ca6886ee0f45ff9fcc5623d4027b5fef4ff429bfbeb13d981b5eb150df052adbaa3a088b7137df8cacd4f63f9a4bc9a3c7c50fdc7ec510573bacd76836187b31676206fdef47aea0205bf86bc3cbb0d278e121c08155774d36929981449b4b1fe9523ada1e36666c3baaab41146d04189657d55df352e84857b7ca2fdb36f62808093fcdc5401fdafa99839d17a1efeaca3336d491525505be767764b"}]}}, @NL80211_ATTR_PROBE_RESP={0x67b, 0x91, "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"}, @NL80211_ATTR_IE={0x117, 0x2a, [@link_id={0x65, 0x12, {@from_mac}}, @perr={0x84, 0xe3, {0x8a, 0xf, [@ext={{}, @device_a, 0x7fffffff, @device_a, 0x7}, @not_ext={{}, @broadcast, 0x6, "", 0xb}, @ext={{}, @broadcast, 0x5, @device_a, 0xf}, @not_ext={{}, @broadcast, 0x6, "", 0x2c}, @ext={{}, @device_b, 0x100, @device_a, 0x36}, @not_ext={{}, @broadcast, 0x2, "", 0xe}, @not_ext={{}, @device_a, 0x6, "", 0x4}, @not_ext={{}, @device_b, 0xfe800000, "", 0x14}, @not_ext={{}, @device_b, 0x868, "", 0x23}, @ext={{}, @broadcast, 0xfffffff8, @device_b, 0x36}, @not_ext={{}, @device_b, 0x9}, @ext={{}, @device_b, 0x1, @broadcast, 0x1e}, @not_ext={{}, @device_b, 0x10000, "", 0x24}, @not_ext={{}, @broadcast, 0x8, "", 0x18}, @not_ext={{}, @broadcast, 0x6a, "", 0x2a}]}}, @mic={0x8c, 0x18, {0x48e, "c9db8cf88645", @long="ccea7d6194c99cbb02a90f0eb9beea50"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x101, 0x3, 0x6, 0x0, 0x2, 0x5, 0x0, 0x6, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x7, 0xb0d7, 0xaf0, 0x2, 0xad, 0xfc00]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xdb, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x80, 0x1f}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x0, 0x0, {0x40, 0x2, 0x0, 0x80, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x6, 0x3f}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x3, 0xff}}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x1, 0x0, {0x5, 0xde, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x80000001, 0x4}}, @challenge={0x10, 0x1, 0x3f}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @tim={0x5, 0x88, {0x1, 0x40, 0x80, "675f3486d9ce39e41c8c28844518d67ef95797ac5fa48e340197f46e8112642f82b549f521ca51f4e8b3449f4b29bfad85088ef93d19644267c22f0a136c4c1327f2b47541a98c73337f8047cd3315513c460507399179965d7159ead7361962d8b28def931ad99f2f17050debf46b6dca934bf333e9815d697e2024ce0c78ad045ee41081"}}]}, @NL80211_ATTR_BEACON_HEAD={0x3e9, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac, {0x7, 0xff}}, 0x6, @default, 0x3058, @void, @val={0x1, 0x1, [{0x12}]}, @val={0x3, 0x1, 0xb}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x8, 0x6, 0x76}}, @val={0x2d, 0x1a, {0x40, 0x1, 0x5, 0x0, {0x4, 0x20, 0x0, 0x3a2, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x5, 0x80}}, @void, @void, @void, [{0xdd, 0x54, "39f8d68a2b32960a99a745d37a06e2c27501f473d3d7209e4fe788f8eeb7448734d8e22ef425317a7db7c39d52cb947668de1183fb12ac703f605f0b9c71ee5df58919e9cf5b118b233f676c2830e71e99055bf7"}, {0xdd, 0xf3, "435e49bac3a7153ee3db9458017ba8f60a893140dd34e5ab5fd458e4f9484269d7fff491db46560354cf7bd43000ae301088a3da35e3324e0af34e0077f745ae41cf77b383431462a2364b2af04446989df8e246bdd079e5cdbe96da50bb3e4579d99fda1d3f9cb8b69aefec28028512a18c0c2cf4aca9a052da25401185a92e7d525fdcde14836c5ed9854ea816832c2296bd08e61a7e8724ae5500f23fbad1129ace885e725b954e8bea84c37ade584d4d0072267b4cadc2f451cf558482ca436a3d3679d412fb5143886623f5882115c01a397de1a1fce4d25e9790b3fdb42ab8961c050515fa9f8ad42a24aaedc621b1e9"}, {0xdd, 0xf2, "1cf2362a289e6b25156019c5b4b8fdca9a89d2f5cf1ebecf19738bd678225af2be1a4bced0ffc6cb0ef3ea3e72b39e47b306d02ee0d192fda62679596aba4aad58e546a6c72215ff89b161fb91d1ec18b2377f5cf64da4cfe7c5bdb5b17c2e8d45c8188bccf42a21d9de67161b1954f0f359de0713b0ff2420fc1a21188db308060b8f03b8c82e54641a3e5c4b8f1e10a0a92f863759ec753563eac5f7c18217d06ebaac84313a7cc3013f04e44f2f51c2132796ec2fa5d8e48112d3fba35303bd1d657d4053c24b320e60fa50f7ebdaf30c2e44737e575f71c1059e21c45073d649933e9778bf668a42e6370569b05c1957"}, {0xdd, 0xbb, "60560b839740b20f7ab87534fb34a3b0e7a9497161f85af248ae577ccb2b2f01b3ca9ebb20f9c10b873304ad5cffd3ea43f195f0b7c3735f71101237464f24b1fef4ecfd8970a201100669db2a6eae3f63cca4a91666dab87657bb9cb6dad0c0b1f2701115d4a063fef91dffd0d084b7eeb38a6b2b230670742343cb29a3ace4ce6fd218e3679956f84e399c532d36ec0cf9418df8fb0eb3f3d40a0b5ada0ad8e8c8dc8574a3e1378072515faa9d7d86ae513124773262797b0597"}, {0xdd, 0x6f, "06d77475811560fa214ba120a8378fd2be713deae31e5e5ab2ae18e3f0bb73b854696856485ed49a6d2745a3947a46e753858504008eef14657bffd8d4e03523188c3f8f4293acd9a340eb842fe43e05d20bb1a010dd96320e3b6eed130a83871e27746288a1bfaef8cc18c3fa043e"}, {0xdd, 0x2a, "57384d68fe8b36f7855c4500fea087390d387ab60677ddacdc52b20f1b18adbb42b2f2a0284107be0715"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xc5, 0x7f, [@mic={0x8c, 0x10, {0x1ac, "036f2bd608d1", @short="61c893a7d2c6a0a2"}}, @measure_req={0x26, 0xad, {0x6, 0x13, 0x6, "997ec60322da4cf540013f6d810d077f099f68075266c9fda12def5200a22dede8518ee67034b223992588df0693cb2b7d39f7e12de4dea7084b5f92fe71fa02954e5f7d76163b9f9213011597e56f71610bdf387f733f6221e9fb4a77701c97bdbb639c30e5fc4656443eaacc1ead71fa3a6478b40b27fe17a8429ae2a749c7bc5244d2b1bdf36f3d46420cd4f101b08a8592ef692db28e71aa317000c772eac0959602bafef0b7f3b7"}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x13, 0x40]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xfe00, 0x3f, 0x20]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x800]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xfa8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x400, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x6e00]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1de, 0x7f, [@perr={0x84, 0xc1, {0x8, 0xb, [@ext={{}, @device_b, 0xf099, @device_b, 0x3f}, @ext={{}, @device_b, 0x7, @device_b, 0x3a}, @not_ext={{}, @broadcast, 0x101, "", 0x24}, @ext={{}, @device_a, 0x1f, @broadcast, 0x26}, @ext={{}, @broadcast, 0xffff, @broadcast, 0x24}, @ext={{}, @device_a, 0x2, @device_b, 0x5}, @ext={{}, @device_b, 0xffff, @device_b, 0x42}, @not_ext={{}, @broadcast, 0x7, "", 0x3f}, @not_ext={{}, @device_b, 0x2, "", 0x11}, @ext={{}, @device_a, 0x9, @device_b, 0x30}, @ext={{}, @device_a, 0x7fff, @device_b, 0x16}]}}, @ssid={0x0, 0x11, @random="8e3b077096417e68cb8b1daa0e5e328aaf"}, @cf={0x4, 0x6, {0x7c, 0xf9, 0x80, 0x1ff}}, @prep={0x83, 0x1f, @not_ext={{}, 0xfe, 0x80, @device_b, 0xffffffe1, "", 0x40, 0x0, @device_b, 0x6}}, @cf={0x4, 0x6, {0x1, 0x20, 0x3, 0x6}}, @random={0x40, 0xb5, "2341ecde34fa40e76bbdf90635404bb3df66b71169c0e549eb6c76eb8cd9e99bb154a262c24f8b189ce83d5303fb081bf756410f3008405c7f4479813d40370328a03a318c00941f95f570f27e4a379a01df7bbad59078f42319599bbbb10ea84f29552f9bf12719896efa3ab790f773e0645fe17a677f7a769559e101ed8396ba9a166b289ad88b18ca0c3479b33bbbbe4c2ff917c47c5f734a5af59034e17fd9215335eda512ce297f005fe31434b61a35e9a2a5"}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x1, 0x0, {0x3, 0x595, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x8, 0x1f, 0x5}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_PROBE_RESP={0x3db, 0x91, "85cab5bc4ffa0f26fe6a9a70318e116edd9a41eecf7448c8c64b48600ef72716e88c2371f0d256798db4216bb7c6b8a9ae2826afbeead9611d2fe9462426a105cca19b3a9e66af736dddcc9a8b79f8b4f27134329cb5e97ed4bcc064ecf762fc9906905f407065f765b874218e48d5f2eca36a80fa4e2697c6f5e694c350cbe4b2c77630b39c39027ddac050c767401ed8331dd2ed53997ab626ad559747140475b5d90694bece1db348051ae8e4f4c52f4b77bd19a2bd4d2f38235d38a5bd3795f163b78ad3c0db0ce1f6351266a2fae953ae3730b871480ed0483b0913a47940bc133a4f62a271e0b1ff947803d714a4192d6426d908b15a316530172313fb1ea784223e724f960c14926231d09611e27451e64d03fcf2916b3c00e4c2bbf02cf9a904a3cb135f062736351b4f521e010d1f5a313a12baa58e22e50297b7adcf2db6b62d3d0a84f8aec35055e9f432f1f7c8cb5edf538da7681db4054872ffe932bce711036dfbe795a20950586d4d8873ef2b119512c7bab4438cbd768529f5e8ab8677508f36c8cf36421308c94d21f3fe7a5954d76a8e7e6fdfe5bdd7329d226bb8d3cdce534f479ea179b1a1b0bf27c38156be14fdb9a5701ea457df2f7cc042eb9d7d029fc797b89ed4ceff9f398375fa7225e92c03a6b9824edc73d6749c8f69f67de86a60d24ca7af546d9a0a759d931471b6d75f86c3cebef70337f8b94ee37f5bc3aa568c4b2128e5883c2cb8c92674373a9c41d4280b7d2401e968d50ce6857c65f91ef40c9cf9948be9c95fd876659744f9d37ef42baefd6abc283b673d72ccd5d4944dd8a741b7dcd226a22d5fa9d276c1a672709690679179fda7b418c56d0651f841d84f4217b64f9a2a208c5c5acb334630f5b001776f56daace4e0fe670ea07cdc1ffa53762034521c976a7151b2ad66b1155b69b40e96eebd2d9ce008c745475b18fa59de71caa4d155086dbd4ba3100fac8b98dbad3ab6508703f1bbb679b62dc6fe667a49cbd2e6403d39c414c994ae2b7ceea0b2b266b0b42996ab276706c3f781ea8efb4c0a916f7cbc8ff89f910d28e4efc358e34fe37b3251e28f691f64a0acb2b2bc3382707667863ca9f2e37ae984c7e51c1e2e906f54f93412467d38093a72201eea3d160c3d9ff6c573c9663016af9e0ecca5dd9a28d8070924abd2136c2e86120ed655a08e167b7e3005f97ef0ca54b3fb7aaac56bd1f86983d639d5a266277874ed4e8e011cc26097bd3441bc11fe08e349432fc4576fbad25a7d65110053967163fa07161b1121b32e9fc122920a23f06208d2c5a77bd6aa5c2a026b445de7008db7888b7b34966fad650f1d42cbde5bfc60b9670bdbb83338b219fce4062936aea67c98990483"}, @NL80211_ATTR_BEACON_HEAD={0x2b7, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xff}, @device_a, @device_a, @random="49424a8be347", {0x4, 0x20}}, @ver_80211n={0x0, 0x3, 0x0, 0x1}}, 0x20, @random=0x1, 0x820, @void, @val={0x1, 0x1, [{0x16}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb0, 0x8}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x7f, 0x6, 0x7, 0x9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x81, 0x11, 0xffff}}, [{0xdd, 0xec, "858fb086b45234f91b78861ded15c2d60ffe632e631a74535d04e292867bffa7a4ff4c4df40dfa9521f65b4ce8de094077618eae265af4944edc92d2010b1645b35d11fd70fcbcb08c666ac47eb7ff952ef35792ba487d43cb2a699117578da7df9575d58ee9bf4d5db41f340295d8f8537020b618075e0579eb0557cd218da14a67d9e5b8a5e713310124f6493d93b326f2336efafca3c30088fcbd76c29128f9fecd4c1b538420663f7a3e8bc05b93cc0950a6d5e28cf272be712298ca6eb45213e26139b673e5524ef85538d40a43f485e4bce081d960688daedd4a929c65c0145f63bcd79a2078e6144c"}, {0xdd, 0xeb, "6121eab07ff711568d6958f458fa397401a113b5f27026ba4b49c4333643eb11591a43c4f243c6513ddd64bbb5e245847ca86a7cc83f636e0ac4c1feeaa8a18c215bd29f0d6f86181d8583fe2d119059e0ead48b90196ab8db94dc931b5e7d3fadb461c3211bb3c89a0c88c6232c8992b7c867a6708f9e4ea77979d0e52ab05b10180d8f305903d6638c11328cec915fd4d5ec3b11f59ebf4cda1e502f654a90a2572fdd7dc2f767a9aba0786e3893c876fb0c21e20f908d17dc0a9b628e67287171078e50911fe466595a05d5526f49370556a6696427a912471462fc0411aecfca404a9db9519b6a78da"}, {0xdd, 0x8d, "f35b6c683a9bf29c4b9e1179a9d11f8ce4217acd6b830035200a572b400a4e6c43261b36dd3bcb26cd64e66e1d9cc6929d4509abf812fa45378ecb2c92be694ac16ccdd7a60d952d9462390e2086754a3ee1ee09f9b925dd4ecd7fc9708c35648b9271d75cd9e51049f5f668191366a9a9af965c07a14c23ec408fc13d1e636957ffc53c64e7787450ace31292"}]}}], @beacon_params=[@NL80211_ATTR_IE={0x50, 0x2a, [@tim={0x5, 0x36, {0x6, 0x83, 0x8, "843d5398f759e75e1b6af6d1d635639a626be9320d296cf1523a7c904400692d4d7a7ea8f30f1565f6253828f76a539fdc2a8d"}}, @erp={0x2a, 0x1}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x9, 0x40}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x10, 0x7f, [@supported_rates={0x1, 0x2, [{0x1}, {0x5}]}, @cf={0x4, 0x6, {0x5, 0xc1, 0x5, 0x7}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x136, 0x2a, [@random={0x7f, 0x93, "5d76fd776f4665ddbde68259ecb35c88dbd1f666d75f4e5d710ea01daa50a912f91172dd378a53f573614e7bb0190800572b3ec58d8948ce4888f9bd6a090c32f5d56cf90eb66da946b4f8ed4bb2d3af72ca0a56701e7b58156facc4d6bcaac1f4b4cd24c5c7e9bd874fcf7a2944a5c38a48014219b47cd6399180b8f0f15f11c32f7b79344dd1122bc663152d271596173620"}, @mesh_chsw={0x76, 0x6, {0x0, 0x9, 0x3b, 0x6d}}, @perr={0x84, 0x62, {0x7, 0x6, [@not_ext={{}, @broadcast, 0x6, "", 0x2b}, @ext={{}, @device_a, 0x1ff, @device_a, 0xf}, @ext={{}, @device_b, 0x7fffffff, @device_a, 0x1d}, @ext={{}, @device_b, 0x7, @device_a, 0x13}, @not_ext={{}, @broadcast, 0xfffffffa, "", 0x1f}, @not_ext={{}, @device_b, 0x7, "", 0x16}]}}, @challenge={0x10, 0x1, 0x60}, @measure_req={0x26, 0x26, {0x5, 0x1, 0x9, "04abe6265649bb0c3e4901a8641c125ebe23ba4888c0159585bfa0fe9baacf4492c6da"}}, @chsw_timing={0x68, 0x4, {0x521, 0x1ff}}]}, @NL80211_ATTR_BEACON_TAIL={0x56, 0xf, [@mic={0x8c, 0x10, {0x2b0, "be185b5a33c3", @short="0eb387040720f1a7"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @perr={0x84, 0x22, {0x4, 0x2, [@ext={{}, @broadcast, 0x7, @device_b, 0x1a}, @not_ext={{}, @broadcast, 0x10000, "", 0xb}]}}, @gcr_ga={0xbd, 0x6, @broadcast}]}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x2d, 0x91, "3d3a7233a0b74d0af3357356629c66a39d5926d2da30421f76cdf62e5da945f9d4993245e99212bf12"}, @NL80211_ATTR_PROBE_RESP={0x427, 0x91, "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"}, @NL80211_ATTR_IE={0xc4, 0x2a, [@chsw_timing={0x68, 0x4, {0x1ff, 0x4}}, @challenge={0x10, 0x1, 0x9b}, @measure_req={0x26, 0x1d, {0x5, 0x1, 0x0, "322f2306c3a0602bcb025a6d738df66379010c41679fe49ce4ec"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0x24}, @preq={0x82, 0x88, @not_ext={{0x1}, 0x1f, 0x2, 0x6, @broadcast, 0xff, "", 0xe88, 0x4, 0xa, [{{}, @broadcast, 0xffffff86}, {{}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x101}, {{0x1, 0x0, 0x1}, @broadcast, 0x695}, {{0x1, 0x0, 0x1}, @broadcast, 0x7fffffff}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffffb}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x1}, @device_b, 0xffffffff}, {{}, @device_b, 0x1f}, {{0x1, 0x0, 0x1}, @device_a, 0xca62}]}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe5}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7c}, @NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x2d5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x9, 0x4, 0x6, 0xfffc, 0xfffb]}]}]}, 0x3520}, 0x1, 0x0, 0x0, 0x4008000}, 0x1c0) ioctl$CHAR_RAW_IOMIN(r2, 0x1278, &(0x7f00000003c0)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r3, 0x5451) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3ff0ffffff0000000000017faecf250000000c410000001400066272030721386173742d68696e1ed95b6b"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0xffffffffffffffd6}, 0x1, 0x0, 0x0, 0x40815}, 0x4000000) [ 2564.210676][T29276] IPVS: Unknown mcast interface: rose [ 2564.298205][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2564.328049][T29284] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 2564.926857][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2565.006720][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2565.326691][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2566.366742][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:56 executing program 4: io_uring_setup(0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r0, 0x10, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) 07:30:56 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb3600a, 0x2, 0x28011, r1, 0x0) 07:30:56 executing program 2: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x2000, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r1, 0x0) 07:30:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x9a, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2566.582714][T29305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2566.624392][T29305] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2566.644857][T29305] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' [ 2566.670226][T29305] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2566.691432][T29305] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2566.715011][T29305] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:30:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x4, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x28}}, 0x20000850) 07:30:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2566.872000][T29324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2566.885408][T29324] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2566.928148][T29324] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' [ 2566.945823][T29324] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2566.960719][T29324] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem 07:30:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x4, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x28}}, 0x20000850) [ 2566.978463][T29324] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 [ 2567.111299][T29336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2567.139084][T29336] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2567.229859][T29336] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' [ 2567.251296][T29336] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap 07:30:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x4, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x28}}, 0x20000850) [ 2567.278795][T29336] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2567.292799][T29336] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:30:57 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_uring_setup(0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000000140)="ed41200000040000feffffff29c4645f29c4645f0000001018000200618000000037799c61000000ffefe56e64023cf49e0344332083b9b6d1273b071b8460cfad1ec7bd51fdfab342bebc819fff034c7e818aa2701b1db295569f574f99797937b3777752664c866965afa802c8f2cc49eb2b9a33e7932bdca4eaf72b345bba6ab199b65e0dffb2", 0x88, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r0, 0x10, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 2567.406564][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2567.459325][T29348] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2567.459544][T29351] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2567.490971][T29348] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2567.498723][T29351] EXT4-fs error (device loop5): ext4_lookup:1706: inode #12: comm syz-executor.5: iget: bad extra_isize 45418 (inode size 1024) [ 2567.545443][T29348] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' 07:30:57 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_uring_setup(0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000000140)="ed41200000040000feffffff29c4645f29c4645f0000001018000200618000000037799c61000000ffefe56e64023cf49e0344332083b9b6d1273b071b8460cfad1ec7bd51fdfab342bebc819fff034c7e818aa2701b1db295569f574f99797937b3777752664c866965afa802c8f2cc49eb2b9a33e7932bdca4eaf72b345bba6ab199b65e0dffb2", 0x88, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r0, 0x10, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 07:30:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) [ 2567.557704][T29348] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2567.571095][T29348] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2567.580934][T29348] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:30:57 executing program 2: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x2000, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r1, 0x0) [ 2567.715654][T29367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2567.726946][T29367] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2567.747464][T29367] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' [ 2567.747686][T29368] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2567.761534][T29367] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2567.782196][T29367] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2567.791847][T29367] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:30:57 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:30:57 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) [ 2567.986521][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2568.006668][T29380] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2568.027586][T29380] EXT4-fs error (device loop5): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2568.049579][T29380] EXT4-fs warning (device loop5): ext4_empty_dir:2887: inode #12: comm syz-executor.5: directory missing '.' [ 2568.073186][T29380] EXT4-fs error (device loop5): ext4_validate_block_bitmap:399: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2568.106533][T29380] EXT4-fs error (device loop5) in ext4_free_blocks:5518: Corrupt filesystem [ 2568.115708][T29385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2568.135953][T29380] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2568.446578][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2569.486598][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:30:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:30:59 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:30:59 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x80802) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) [ 2569.582777][T29401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2569.593434][T29401] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2569.595990][T29405] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2569.621924][T29401] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' [ 2569.647374][T29401] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2569.665586][T29401] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2569.680411][T29401] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 [ 2569.682808][T29405] EXT4-fs error (device loop5): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2569.712793][T29405] EXT4-fs warning (device loop5): ext4_empty_dir:2887: inode #12: comm syz-executor.5: directory missing '.' [ 2569.732267][T29405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:399: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2569.754519][T29405] EXT4-fs error (device loop5) in ext4_free_blocks:5518: Corrupt filesystem [ 2569.768146][T29405] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:31:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r1]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xeb, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="0fa99af761410ee8c426662a8a7b587f8c5928fbe9543e3e4af28e96d9b3c24afbc0b0f38c03f66d70dc2e28dd58ed917df0610a6d7d46fd70a2cf74dbfd4a6613de0f076d34f7d4ed40ce8d3bbf6db22b60df3cb986fe49cb58a605c4e414070feaf0b29e977f0f930047254a57e4aa437298567365e3442c8eede268174cdbd53032a6d3af85c19fad839593c32efbc6e5547635405fb9e2efbee0145ce6c3084d2ddffeca4a1f049d55837233b0f6477ef02cb8ac81aecc6e02fa24bb1dc615e3cd6700da89e6cdebeb14405f2fbcab8b177b0b468efb", 0xd8, 0x7fffffff}], 0x2000000, &(0x7f00000004c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@obj_role={'obj_role'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, ')'}}, {@smackfsroot={'smackfsroot', 0x3d, '$($'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@euid_eq={'euid', 0x3d, r2}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402, 0x1) 07:31:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa5, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:00 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x804, &(0x7f0000000300)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:00 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x42d02, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36007, 0x2, 0x28011, r1, 0x0) [ 2569.981485][T29425] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2570.005762][T29425] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2570.092765][T29425] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' 07:31:00 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2570.147499][T29425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2570.165654][T29425] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2570.179911][T29425] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 07:31:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r1]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xeb, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="0fa99af761410ee8c426662a8a7b587f8c5928fbe9543e3e4af28e96d9b3c24afbc0b0f38c03f66d70dc2e28dd58ed917df0610a6d7d46fd70a2cf74dbfd4a6613de0f076d34f7d4ed40ce8d3bbf6db22b60df3cb986fe49cb58a605c4e414070feaf0b29e977f0f930047254a57e4aa437298567365e3442c8eede268174cdbd53032a6d3af85c19fad839593c32efbc6e5547635405fb9e2efbee0145ce6c3084d2ddffeca4a1f049d55837233b0f6477ef02cb8ac81aecc6e02fa24bb1dc615e3cd6700da89e6cdebeb14405f2fbcab8b177b0b468efb", 0xd8, 0x7fffffff}], 0x2000000, &(0x7f00000004c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@obj_role={'obj_role'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, ')'}}, {@smackfsroot={'smackfsroot', 0x3d, '$($'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@euid_eq={'euid', 0x3d, r2}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402, 0x1) 07:31:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r1]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xeb, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="0fa99af761410ee8c426662a8a7b587f8c5928fbe9543e3e4af28e96d9b3c24afbc0b0f38c03f66d70dc2e28dd58ed917df0610a6d7d46fd70a2cf74dbfd4a6613de0f076d34f7d4ed40ce8d3bbf6db22b60df3cb986fe49cb58a605c4e414070feaf0b29e977f0f930047254a57e4aa437298567365e3442c8eede268174cdbd53032a6d3af85c19fad839593c32efbc6e5547635405fb9e2efbee0145ce6c3084d2ddffeca4a1f049d55837233b0f6477ef02cb8ac81aecc6e02fa24bb1dc615e3cd6700da89e6cdebeb14405f2fbcab8b177b0b468efb", 0xd8, 0x7fffffff}], 0x2000000, &(0x7f00000004c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@obj_role={'obj_role'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, ')'}}, {@smackfsroot={'smackfsroot', 0x3d, '$($'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@euid_eq={'euid', 0x3d, r2}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402, 0x1) [ 2570.278338][T29440] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2570.290063][T29440] EXT4-fs error (device loop4): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 07:31:00 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = io_uring_setup(0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) io_destroy(r6) signalfd(r1, &(0x7f0000000140)={[0x3e2]}, 0x8) r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r7, 0x10, 0x0) unlinkat(r7, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r8 = signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f00000000c0)=0x1) [ 2570.331966][T29440] EXT4-fs warning (device loop4): ext4_empty_dir:2887: inode #12: comm syz-executor.4: directory missing '.' [ 2570.363494][T29440] EXT4-fs error (device loop4): ext4_validate_block_bitmap:399: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2570.413246][T29440] EXT4-fs error (device loop4) in ext4_free_blocks:5518: Corrupt filesystem [ 2570.432629][T29440] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 [ 2570.526360][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2571.008829][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2571.567391][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:02 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = io_uring_setup(0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) io_destroy(r6) signalfd(r1, &(0x7f0000000140)={[0x3e2]}, 0x8) r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r7, 0x10, 0x0) unlinkat(r7, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r8 = signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f00000000c0)=0x1) [ 2572.606220][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2572.628731][T29464] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 07:31:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:03 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x6c75, 0x4200000000000000, 0x4, 0xbc, 0x7, 0xfffffffffffffffd, 0x7, 0x7, 0x7fffffff, 0xfff, 0x9, 0x81, 0x6, 0x8, 0x1000], 0x1000, 0x801}) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)={0x2c, r4, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r1, 0x0, 0x100000002) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80042, 0x0) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000140)={0x30, 0x400, 0x550, 0x320, 0x2, 0xf2, 0xf, 0x2, {0x10001, 0x2}, {0x7, 0xff}, {0x6, 0x2, 0x1}, {0x3, 0x9, 0x1}, 0x3, 0x40, 0xa, 0x3, 0x1, 0xffffffff, 0x9, 0x3, 0x58, 0x10000, 0x5, 0x8001, 0x17, 0x1, 0x1, 0x3}) io_uring_setup(0x0, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r8, 0x10, 0x0) unlinkat(r8, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:03 executing program 4: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:03 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = io_uring_setup(0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x3082, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) io_destroy(r6) signalfd(r1, &(0x7f0000000140)={[0x3e2]}, 0x8) r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) fcntl$getownex(r7, 0x10, 0x0) unlinkat(r7, &(0x7f0000000100)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r8 = signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f00000000c0)=0x1) 07:31:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa5, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:03 executing program 4: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:03 executing program 4: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2573.160957][ T34] audit: type=1804 audit(1604820663.206:248): pid=29483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir597396298/syzkaller.gB6bST/3839/cgroup.controllers" dev="sda1" ino=16035 res=1 errno=0 07:31:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2573.270810][T29487] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2573.336515][T29487] EXT4-fs error (device loop5): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2573.367067][T29487] EXT4-fs warning (device loop5): ext4_empty_dir:2887: inode #12: comm syz-executor.5: directory missing '.' [ 2573.398414][T29487] EXT4-fs error (device loop5): ext4_validate_block_bitmap:399: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2573.446553][T29487] EXT4-fs error (device loop5) in ext4_free_blocks:5518: Corrupt filesystem [ 2573.468236][T29487] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2573.647517][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2574.046590][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2574.606181][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2574.687294][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:05 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x84800) accept4$unix(r1, &(0x7f00000002c0), &(0x7f00000001c0)=0x6e, 0xc0000) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2575.726052][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x84800) accept4$unix(r1, &(0x7f00000002c0), &(0x7f00000001c0)=0x6e, 0xc0000) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa5, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:06 executing program 5: ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xfffffffffffffffc, 0x6, &(0x7f0000000200)=[{&(0x7f0000000080)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29a6645f0100ffff53ef01000100000029c4645f000000000000000001000000080000f10b00000000046c5de25a82ca43af6bf94b1e52bc7db0f8fad5a462d438cd7d309c7dcb9c6915", 0x7a, 0x1000400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x1}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000000cccf000000000000000000", 0x29, 0xd6}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6b73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x93fe}, {0x0, 0x0, 0x5}], 0x1000010, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) rmdir(&(0x7f0000000480)='./file0\x00') recvfrom$ax25(0xffffffffffffffff, &(0x7f00000004c0)=""/204, 0xcc, 0x0, &(0x7f0000000600)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x2, 0x2, "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", 0x81, 0x1f, 0x8, 0x4e, 0x6, 0xf8, 0x1}}}, 0x120) chroot(&(0x7f0000000300)='./file0\x00') sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x4040001) 07:31:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x84800) accept4$unix(r1, &(0x7f00000002c0), &(0x7f00000001c0)=0x6e, 0xc0000) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2576.297010][T29546] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 07:31:06 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xc0, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x8, @empty, 0xc2}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x6f17a3c9, @private0={0xfc, 0x0, [], 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, [], 0x1}, 0x1ff}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={r1, 0x5e, "8c26007213a0adfb1c8ce38d8a907a5ec06ac3e953d9a64f4c3a8ac2261e9c99f3083752b2102bc23be7d5d16ddc9253f3e036339be3b4cc5ace8fff991437a94fb909e2e05303a7d2269c919696c41239a17b4e61e275b63aa9ef0651a7"}, &(0x7f00000000c0)=0x66) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/timers\x00', 0x0, 0x0) read$proc_mixer(r2, &(0x7f0000000380)=""/32, 0x20) 07:31:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2576.428758][T29565] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2576.441918][T29565] EXT4-fs error (device loop5): ext4_empty_dir:2885: inode #12: block 255: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 2576.474120][T29565] EXT4-fs warning (device loop5): ext4_empty_dir:2887: inode #12: comm syz-executor.5: directory missing '.' [ 2576.491971][T29565] EXT4-fs error (device loop5): ext4_validate_block_bitmap:399: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2576.509006][T29565] EXT4-fs error (device loop5) in ext4_free_blocks:5518: Corrupt filesystem [ 2576.539208][T29565] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2576.765999][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2577.087542][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2577.805901][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:08 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x4, 0x2, 0xff, 0x6, "24490034bbbd2236"}) 07:31:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:08 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2578.683163][T29588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2578.713788][T29588] FAULT_INJECTION: forcing a failure. [ 2578.713788][T29588] name failslab, interval 1, probability 0, space 0, times 0 [ 2578.755982][T29588] CPU: 1 PID: 29588 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 2578.764822][T29588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.774926][T29588] Call Trace: [ 2578.778288][T29588] dump_stack+0x116/0x15d [ 2578.782649][T29588] should_fail+0x231/0x240 [ 2578.787051][T29588] __should_failslab+0x81/0x90 [ 2578.791787][T29588] should_failslab+0x5/0x20 [ 2578.797106][T29588] slab_pre_alloc_hook+0x20/0xb0 [ 2578.802060][T29588] kmem_cache_alloc+0x4d/0x280 [ 2578.806808][T29588] ? getname_flags+0x84/0x3d0 [ 2578.811507][T29588] getname_flags+0x84/0x3d0 [ 2578.815994][T29588] __x64_sys_unlinkat+0x73/0xb0 [ 2578.820829][T29588] do_syscall_64+0x39/0x80 [ 2578.825292][T29588] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2578.831249][T29588] RIP: 0033:0x45deb9 [ 2578.835127][T29588] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2578.854732][T29588] RSP: 002b:00007faf6fd9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2578.863140][T29588] RAX: ffffffffffffffda RBX: 00000000000381c0 RCX: 000000000045deb9 [ 2578.871102][T29588] RDX: 0000000000000200 RSI: 0000000020000100 RDI: 0000000000000005 [ 2578.879065][T29588] RBP: 00007faf6fd9dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2578.887084][T29588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2578.895124][T29588] R13: 00007ffd008f7ebf R14: 00007faf6fd9e9c0 R15: 000000000118bf2c [ 2578.907029][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x4, 0x2, 0xff, 0x6, "24490034bbbd2236"}) 07:31:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b8"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:09 executing program 5 (fault-call:5 fault-nth:1): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2579.373689][T29612] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2579.407381][T29612] FAULT_INJECTION: forcing a failure. [ 2579.407381][T29612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2579.437978][T29612] CPU: 0 PID: 29612 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 2579.446748][T29612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2579.456793][T29612] Call Trace: [ 2579.460070][T29612] dump_stack+0x116/0x15d [ 2579.464387][T29612] should_fail+0x231/0x240 [ 2579.468789][T29612] should_fail_usercopy+0x16/0x20 [ 2579.473812][T29612] strncpy_from_user+0x1e/0x230 [ 2579.478686][T29612] getname_flags+0xb8/0x3d0 [ 2579.483167][T29612] __x64_sys_unlinkat+0x73/0xb0 [ 2579.488085][T29612] do_syscall_64+0x39/0x80 [ 2579.492497][T29612] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2579.498501][T29612] RIP: 0033:0x45deb9 [ 2579.502378][T29612] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2579.521991][T29612] RSP: 002b:00007faf6fd9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2579.530549][T29612] RAX: ffffffffffffffda RBX: 00000000000381c0 RCX: 000000000045deb9 07:31:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x4, 0x2, 0xff, 0x6, "24490034bbbd2236"}) [ 2579.538493][T29612] RDX: 0000000000000200 RSI: 0000000020000100 RDI: 0000000000000005 [ 2579.546457][T29612] RBP: 00007faf6fd9dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2579.554401][T29612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2579.562375][T29612] R13: 00007ffd008f7ebf R14: 00007faf6fd9e9c0 R15: 000000000118bf2c [ 2579.709907][T29625] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (74 blocks) [ 2579.975887][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2580.125803][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2581.006023][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:11 executing program 2 (fault-call:0 fault-nth:0): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:11 executing program 5 (fault-call:5 fault-nth:2): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2581.697936][T29651] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (74 blocks) [ 2581.707959][T29649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2581.740871][T29649] FAULT_INJECTION: forcing a failure. [ 2581.740871][T29649] name failslab, interval 1, probability 0, space 0, times 0 [ 2581.743896][T29661] FAULT_INJECTION: forcing a failure. [ 2581.743896][T29661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2581.753858][T29649] CPU: 0 PID: 29649 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 2581.775302][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2581.785355][T29649] Call Trace: [ 2581.788691][T29649] dump_stack+0x116/0x15d [ 2581.793010][T29649] should_fail+0x231/0x240 [ 2581.797411][T29649] __should_failslab+0x81/0x90 [ 2581.802152][T29649] should_failslab+0x5/0x20 [ 2581.806696][T29649] slab_pre_alloc_hook+0x20/0xb0 [ 2581.811617][T29649] kmem_cache_alloc+0x4d/0x280 [ 2581.816403][T29649] ? __d_alloc+0x36/0x370 [ 2581.820749][T29649] __d_alloc+0x36/0x370 [ 2581.824877][T29649] d_alloc+0x2a/0x100 [ 2581.828834][T29649] __lookup_hash+0x8f/0x180 [ 2581.833325][T29649] do_rmdir+0xf5/0x300 [ 2581.837458][T29649] __x64_sys_unlinkat+0xa0/0xb0 [ 2581.842282][T29649] do_syscall_64+0x39/0x80 [ 2581.846690][T29649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2581.852566][T29649] RIP: 0033:0x45deb9 [ 2581.856438][T29649] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2581.876014][T29649] RSP: 002b:00007faf6fd9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2581.884401][T29649] RAX: ffffffffffffffda RBX: 00000000000381c0 RCX: 000000000045deb9 [ 2581.892350][T29649] RDX: 0000000000000200 RSI: 0000000020000100 RDI: 0000000000000005 [ 2581.900305][T29649] RBP: 00007faf6fd9dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2581.908249][T29649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2581.916207][T29649] R13: 00007ffd008f7ebf R14: 00007faf6fd9e9c0 R15: 000000000118bf2c [ 2581.937374][T29661] CPU: 0 PID: 29661 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 2581.946316][T29661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2581.956358][T29661] Call Trace: [ 2581.959737][T29661] dump_stack+0x116/0x15d [ 2581.964215][T29661] should_fail+0x231/0x240 [ 2581.968653][T29661] should_fail_usercopy+0x16/0x20 [ 2581.973658][T29661] _copy_to_user+0x1c/0x90 [ 2581.978171][T29661] __se_sys_shmctl+0x162/0x3a0 [ 2581.982928][T29661] ? ksys_write+0x157/0x180 [ 2581.987422][T29661] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2581.993482][T29661] __x64_sys_shmctl+0x3f/0x50 [ 2581.998147][T29661] do_syscall_64+0x39/0x80 [ 2582.002604][T29661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2582.008469][T29661] RIP: 0033:0x45deb9 [ 2582.012338][T29661] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2582.033692][T29661] RSP: 002b:00007f23a610cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 2582.043742][T29661] RAX: ffffffffffffffda RBX: 0000000000033e00 RCX: 000000000045deb9 [ 2582.053418][T29661] RDX: 0000000020001600 RSI: 000000000000000e RDI: 0000000000000000 [ 2582.061417][T29661] RBP: 00007f23a610cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2582.070518][T29661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2582.080223][T29661] R13: 00007fff14c4c5df R14: 00007f23a610d9c0 R15: 000000000118bf2c 07:31:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2582.120101][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2582.217802][T29667] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (74 blocks) 07:31:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:12 executing program 5 (fault-call:5 fault-nth:3): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:12 executing program 2 (fault-call:0 fault-nth:1): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b8"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2582.528204][T29680] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (74 blocks) [ 2582.557171][T29688] FAULT_INJECTION: forcing a failure. [ 2582.557171][T29688] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.570054][T29688] CPU: 0 PID: 29688 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 2582.578798][T29688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2582.588834][T29688] Call Trace: [ 2582.592228][T29688] dump_stack+0x116/0x15d [ 2582.596603][T29688] should_fail+0x231/0x240 [ 2582.601015][T29688] __should_failslab+0x81/0x90 [ 2582.605759][T29688] should_failslab+0x5/0x20 [ 2582.610274][T29688] slab_pre_alloc_hook+0x20/0xb0 [ 2582.615304][T29688] kmem_cache_alloc+0x4d/0x280 [ 2582.620055][T29688] ? __anon_vma_prepare+0x3f/0x2a0 [ 2582.625198][T29688] __anon_vma_prepare+0x3f/0x2a0 [ 2582.630144][T29688] do_huge_pmd_anonymous_page+0x7a5/0x840 [ 2582.635952][T29688] ? __rcu_read_unlock+0x51/0x220 [ 2582.641021][T29688] handle_mm_fault+0x11f2/0x1770 [ 2582.646000][T29688] do_user_addr_fault+0x33e/0x730 [ 2582.651012][T29688] exc_page_fault+0x91/0x290 [ 2582.655652][T29688] asm_exc_page_fault+0x1e/0x30 [ 2582.660504][T29688] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 2582.666991][T29688] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 2582.686574][T29688] RSP: 0018:ffffc9000469fe40 EFLAGS: 00010206 [ 2582.692613][T29688] RAX: ffff88802d35fa80 RBX: 0000000000000030 RCX: 0000000000000006 [ 2582.700625][T29688] RDX: 0000000000000000 RSI: ffffc9000469fe78 RDI: 0000000020001600 [ 2582.708577][T29688] RBP: 000000000000000e R08: 0000000000000007 R09: 0000ffffffffffff [ 2582.716680][T29688] R10: 0000c9000469fea7 R11: ffff88802d35f040 R12: 00007ffffffff000 [ 2582.724643][T29688] R13: 0000000020001630 R14: ffffc9000469fe78 R15: 0000000020001600 [ 2582.732631][T29688] _copy_to_user+0x77/0x90 [ 2582.737035][T29688] __se_sys_shmctl+0x162/0x3a0 [ 2582.741782][T29688] ? __fpregs_load_activate+0x103/0x1f0 [ 2582.747304][T29688] __x64_sys_shmctl+0x3f/0x50 [ 2582.752013][T29688] do_syscall_64+0x39/0x80 [ 2582.756410][T29688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2582.762276][T29688] RIP: 0033:0x45deb9 [ 2582.766187][T29688] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2582.788202][T29688] RSP: 002b:00007f23a610cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 2582.805854][T29688] RAX: ffffffffffffffda RBX: 0000000000033e00 RCX: 000000000045deb9 [ 2582.813815][T29688] RDX: 0000000020001600 RSI: 000000000000000e RDI: 0000000000000000 [ 2582.821806][T29688] RBP: 00007f23a610cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2582.829758][T29688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2582.837704][T29688] R13: 00007fff14c4c5df R14: 00007f23a610d9c0 R15: 000000000118bf2c 07:31:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2582.897045][T29686] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2582.907350][T29705] FAULT_INJECTION: forcing a failure. [ 2582.907350][T29705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2582.923535][T29709] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (74 blocks) [ 2582.955564][T29705] CPU: 0 PID: 29705 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 2582.964332][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2582.974436][T29705] Call Trace: [ 2582.977714][T29705] dump_stack+0x116/0x15d [ 2582.982057][T29705] should_fail+0x231/0x240 [ 2582.986600][T29705] should_fail_usercopy+0x16/0x20 [ 2582.991601][T29705] _copy_from_user+0x1c/0xd0 [ 2582.996268][T29705] kstrtouint_from_user+0x6f/0x130 [ 2583.001452][T29705] ? fsnotify_perm+0x59/0x2d0 [ 2583.006108][T29705] proc_fail_nth_write+0x38/0x140 [ 2583.011159][T29705] ? __sb_start_write+0x94/0x130 [ 2583.016112][T29705] ? proc_fail_nth_read+0x140/0x140 [ 2583.021297][T29705] vfs_write+0x1b9/0x690 [ 2583.025513][T29705] ? __fget_light+0x219/0x260 [ 2583.030162][T29705] ksys_write+0xce/0x180 [ 2583.034379][T29705] __x64_sys_write+0x3e/0x50 [ 2583.038973][T29705] do_syscall_64+0x39/0x80 [ 2583.043369][T29705] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2583.049256][T29705] RIP: 0033:0x417751 [ 2583.053130][T29705] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2583.072758][T29705] RSP: 002b:00007faf6fd5bc80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2583.081210][T29705] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417751 [ 2583.089158][T29705] RDX: 0000000000000001 RSI: 00007faf6fd5bcb0 RDI: 0000000000000005 [ 2583.097205][T29705] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 07:31:13 executing program 2 (fault-call:0 fault-nth:2): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2583.105154][T29705] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2583.113111][T29705] R13: 00007ffd008f7ebf R14: 00007faf6fd5c9c0 R15: 000000000118c07c [ 2583.165675][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2583.173751][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2583.203577][T29715] FAULT_INJECTION: forcing a failure. [ 2583.203577][T29715] name failslab, interval 1, probability 0, space 0, times 0 [ 2583.220500][T29715] CPU: 1 PID: 29715 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 2583.231462][T29715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2583.242367][T29715] Call Trace: [ 2583.248883][T29715] dump_stack+0x116/0x15d [ 2583.253676][T29715] should_fail+0x231/0x240 [ 2583.258554][T29715] __should_failslab+0x81/0x90 [ 2583.265509][T29715] should_failslab+0x5/0x20 [ 2583.270286][T29715] slab_pre_alloc_hook+0x20/0xb0 [ 2583.277100][T29715] kmem_cache_alloc+0x4d/0x280 [ 2583.283396][T29715] ? __anon_vma_prepare+0x8d/0x2a0 [ 2583.292099][T29715] __anon_vma_prepare+0x8d/0x2a0 [ 2583.300147][T29715] do_huge_pmd_anonymous_page+0x7a5/0x840 [ 2583.309147][T29715] ? __rcu_read_unlock+0x51/0x220 [ 2583.320297][T29715] handle_mm_fault+0x11f2/0x1770 [ 2583.325311][T29715] do_user_addr_fault+0x33e/0x730 [ 2583.333624][T29715] exc_page_fault+0x91/0x290 [ 2583.342084][T29715] asm_exc_page_fault+0x1e/0x30 [ 2583.348468][T29715] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 2583.358591][T29715] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 2583.378329][T29715] RSP: 0018:ffffc9000414be40 EFLAGS: 00010206 [ 2583.385061][T29715] RAX: ffff88803a868a40 RBX: 0000000000000030 RCX: 0000000000000006 [ 2583.393025][T29715] RDX: 0000000000000000 RSI: ffffc9000414be78 RDI: 0000000020001600 [ 2583.401490][T29715] RBP: 000000000000000e R08: 0000000000000007 R09: 0000ffffffffffff [ 2583.411230][T29715] R10: 0000c9000414bea7 R11: ffff88803a868000 R12: 00007ffffffff000 [ 2583.419967][T29715] R13: 0000000020001630 R14: ffffc9000414be78 R15: 0000000020001600 [ 2583.429403][T29715] _copy_to_user+0x77/0x90 [ 2583.433991][T29715] __se_sys_shmctl+0x162/0x3a0 [ 2583.440532][T29715] ? ksys_write+0x157/0x180 [ 2583.445255][T29715] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2583.452013][T29715] __x64_sys_shmctl+0x3f/0x50 [ 2583.458323][T29715] do_syscall_64+0x39/0x80 [ 2583.462803][T29715] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2583.468866][T29715] RIP: 0033:0x45deb9 [ 2583.473023][T29715] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2583.494041][T29715] RSP: 002b:00007f23a610cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 2583.502783][T29715] RAX: ffffffffffffffda RBX: 0000000000033e00 RCX: 000000000045deb9 [ 2583.514009][T29715] RDX: 0000000020001600 RSI: 000000000000000e RDI: 0000000000000000 [ 2583.523683][T29715] RBP: 00007f23a610cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2583.532496][T29715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2583.542142][T29715] R13: 00007fff14c4c5df R14: 00007f23a610d9c0 R15: 000000000118bf2c [ 2584.205561][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2584.217172][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:14 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:31:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:14 executing program 2 (fault-call:0 fault-nth:3): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2584.712166][T29729] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2584.714594][T29733] FAULT_INJECTION: forcing a failure. [ 2584.714594][T29733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2584.723463][T29725] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (74 blocks) [ 2584.757570][T29733] CPU: 0 PID: 29733 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 2584.768196][T29733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2584.778342][T29733] Call Trace: [ 2584.781624][T29733] dump_stack+0x116/0x15d [ 2584.788195][T29733] should_fail+0x231/0x240 [ 2584.792592][T29733] __alloc_pages_nodemask+0xd8/0x350 [ 2584.799750][T29733] alloc_pages_vma+0x718/0x890 [ 2584.804516][T29733] do_huge_pmd_anonymous_page+0x5ed/0x840 [ 2584.810221][T29733] handle_mm_fault+0x11f2/0x1770 [ 2584.815165][T29733] do_user_addr_fault+0x33e/0x730 [ 2584.821406][T29733] exc_page_fault+0x91/0x290 [ 2584.826010][T29733] asm_exc_page_fault+0x1e/0x30 [ 2584.826544][T29737] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2584.830860][T29733] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 2584.850728][T29733] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 2584.873596][T29733] RSP: 0018:ffffc900052dbe40 EFLAGS: 00010206 [ 2584.880641][T29733] RAX: ffff888048328a80 RBX: 0000000000000030 RCX: 0000000000000006 [ 2584.890564][T29733] RDX: 0000000000000000 RSI: ffffc900052dbe78 RDI: 0000000020001600 [ 2584.899367][T29733] RBP: 000000000000000e R08: 0000000000000007 R09: 0000ffffffffffff [ 2584.908480][T29733] R10: 0000c900052dbea7 R11: ffff888048328040 R12: 00007ffffffff000 [ 2584.917791][T29733] R13: 0000000020001630 R14: ffffc900052dbe78 R15: 0000000020001600 [ 2584.927137][T29733] _copy_to_user+0x77/0x90 [ 2584.931569][T29733] __se_sys_shmctl+0x162/0x3a0 [ 2584.938128][T29733] ? ksys_write+0x157/0x180 [ 2584.942811][T29733] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2584.949377][T29733] __x64_sys_shmctl+0x3f/0x50 [ 2584.954364][T29733] do_syscall_64+0x39/0x80 [ 2584.958956][T29733] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2584.964830][T29733] RIP: 0033:0x45deb9 [ 2584.965896][T29737] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2584.968703][T29733] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2584.968717][T29733] RSP: 002b:00007f23a610cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f 07:31:15 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x202) [ 2585.008105][T29733] RAX: ffffffffffffffda RBX: 0000000000033e00 RCX: 000000000045deb9 [ 2585.016177][T29733] RDX: 0000000020001600 RSI: 000000000000000e RDI: 0000000000000000 [ 2585.024133][T29733] RBP: 00007f23a610cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.032118][T29733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2585.040063][T29733] R13: 00007fff14c4c5df R14: 00007f23a610d9c0 R15: 000000000118bf2c [ 2585.176608][T29752] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2585.265707][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:15 executing program 2 (fault-call:0 fault-nth:4): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:15 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x203) 07:31:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b8"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2585.594021][T29778] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2585.615780][T29777] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2585.633068][T29785] FAULT_INJECTION: forcing a failure. [ 2585.633068][T29785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2585.648548][T29785] CPU: 1 PID: 29785 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 2585.657393][T29785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2585.667692][T29785] Call Trace: [ 2585.671045][T29785] dump_stack+0x116/0x15d [ 2585.675367][T29785] should_fail+0x231/0x240 [ 2585.679818][T29785] __alloc_pages_nodemask+0xd8/0x350 [ 2585.685073][T29785] ? memcg_check_events+0x37a/0x3b0 [ 2585.690329][T29785] alloc_pages_current+0x21d/0x310 [ 2585.695415][T29785] pte_alloc_one+0x13/0x50 [ 2585.699950][T29785] __do_huge_pmd_anonymous_page+0x108/0x8c0 [ 2585.705817][T29785] ? alloc_pages_vma+0x725/0x890 [ 2585.710799][T29785] do_huge_pmd_anonymous_page+0x645/0x840 [ 2585.716491][T29785] handle_mm_fault+0x11f2/0x1770 [ 2585.721482][T29785] do_user_addr_fault+0x33e/0x730 [ 2585.726493][T29785] exc_page_fault+0x91/0x290 [ 2585.731125][T29785] asm_exc_page_fault+0x1e/0x30 [ 2585.735996][T29785] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 2585.742330][T29785] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 2585.761920][T29785] RSP: 0018:ffffc900046efe40 EFLAGS: 00010206 [ 2585.768065][T29785] RAX: ffff88810afeba80 RBX: 0000000000000030 RCX: 0000000000000006 [ 2585.776034][T29785] RDX: 0000000000000000 RSI: ffffc900046efe78 RDI: 0000000020001600 [ 2585.784034][T29785] RBP: 000000000000000e R08: 0000000000000007 R09: 0000ffffffffffff [ 2585.791980][T29785] R10: 0000c900046efea7 R11: ffff88810afeb040 R12: 00007ffffffff000 [ 2585.799966][T29785] R13: 0000000020001630 R14: ffffc900046efe78 R15: 0000000020001600 [ 2585.807927][T29785] _copy_to_user+0x77/0x90 [ 2585.812334][T29785] __se_sys_shmctl+0x162/0x3a0 [ 2585.817074][T29785] ? ksys_write+0x157/0x180 [ 2585.821611][T29785] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2585.827648][T29785] __x64_sys_shmctl+0x3f/0x50 [ 2585.832294][T29785] do_syscall_64+0x39/0x80 [ 2585.836691][T29785] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2585.842581][T29785] RIP: 0033:0x45deb9 [ 2585.846458][T29785] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2585.866041][T29785] RSP: 002b:00007f23a610cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 2585.874493][T29785] RAX: ffffffffffffffda RBX: 0000000000033e00 RCX: 000000000045deb9 [ 2585.882439][T29785] RDX: 0000000020001600 RSI: 000000000000000e RDI: 0000000000000000 [ 2585.890386][T29785] RBP: 00007f23a610cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.898364][T29785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2585.906357][T29785] R13: 00007fff14c4c5df R14: 00007f23a610d9c0 R15: 000000000118bf2c 07:31:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x204) [ 2585.955707][T29800] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (32 blocks) [ 2586.105890][T29810] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2586.206414][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.285518][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2587.335421][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:17 executing program 2 (fault-call:0 fault-nth:5): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:17 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x205) [ 2587.748533][T29833] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (32 blocks) [ 2587.760587][T29831] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2587.789071][T29839] FAULT_INJECTION: forcing a failure. [ 2587.789071][T29839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2587.802363][T29839] CPU: 0 PID: 29839 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 2587.811104][T29839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2587.821145][T29839] Call Trace: [ 2587.824455][T29839] dump_stack+0x116/0x15d [ 2587.828783][T29839] should_fail+0x231/0x240 [ 2587.833252][T29839] should_fail_usercopy+0x16/0x20 [ 2587.838256][T29839] _copy_to_user+0x1c/0x90 [ 2587.842687][T29839] simple_read_from_buffer+0xab/0x120 [ 2587.848071][T29839] proc_fail_nth_read+0xf6/0x140 [ 2587.852990][T29839] ? rw_verify_area+0x136/0x250 [ 2587.857829][T29839] ? proc_fault_inject_write+0x200/0x200 [ 2587.863443][T29839] vfs_read+0x154/0x5c0 [ 2587.867585][T29839] ? __fget_light+0x219/0x260 [ 2587.872368][T29839] ksys_read+0xce/0x180 [ 2587.876503][T29839] __x64_sys_read+0x3e/0x50 [ 2587.881053][T29839] do_syscall_64+0x39/0x80 [ 2587.885472][T29839] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2587.891338][T29839] RIP: 0033:0x4177b1 [ 2587.895215][T29839] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2587.914795][T29839] RSP: 002b:00007f23a610cc80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 2587.923285][T29839] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004177b1 [ 2587.931244][T29839] RDX: 000000000000000f RSI: 00007f23a610ccb0 RDI: 0000000000000003 [ 2587.939196][T29839] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 2587.947142][T29839] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 2587.955128][T29839] R13: 00007fff14c4c5df R14: 00007f23a610d9c0 R15: 000000000118bf2c 07:31:18 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x206) [ 2588.089377][T29851] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2588.365428][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:18 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x207) 07:31:18 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xad, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b8000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:18 executing program 2: shmctl$SHM_INFO(0x0, 0x2, &(0x7f0000001600)=""/4096) 07:31:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xad, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b8000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2588.685029][T29868] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (32 blocks) [ 2588.785560][T29871] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2589.245206][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2589.406313][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2590.445831][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:20 executing program 2: shmctl$SHM_INFO(0x0, 0x3, &(0x7f0000001600)=""/4096) 07:31:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:20 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x208) 07:31:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2590.769008][T29908] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2590.807271][T29910] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2590.917172][T29931] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (12 blocks) [ 2591.485741][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:21 executing program 2: shmctl$SHM_INFO(0x0, 0xb, &(0x7f0000001600)=""/4096) 07:31:21 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x209) 07:31:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xad, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b8000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:21 executing program 2: shmctl$SHM_INFO(0x0, 0xc, &(0x7f0000001600)=""/4096) 07:31:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2591.836325][T29947] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (12 blocks) [ 2591.848155][T29949] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2591.927825][T29968] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (12 blocks) [ 2592.285042][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2592.525136][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.565087][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:23 executing program 2: shmctl$SHM_INFO(0x0, 0xd, &(0x7f0000001600)=""/4096) 07:31:23 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x20a) 07:31:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2593.786539][T29982] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2593.799096][T29982] EXT4-fs (loop4): get root inode failed [ 2593.805248][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.815772][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.824115][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.824904][T29982] EXT4-fs (loop4): mount failed [ 2593.832295][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.847263][T14150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.848788][T29981] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2593.856051][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2593.873042][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2594.041756][T30006] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2594.063769][T30006] EXT4-fs (loop4): get root inode failed [ 2594.091141][T30006] EXT4-fs (loop4): mount failed [ 2594.615067][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:24 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x20b) 07:31:24 executing program 2: shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000001600)=""/4096) 07:31:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2594.847900][T30021] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2594.863083][T30020] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2594.878784][T30020] EXT4-fs (loop4): get root inode failed [ 2594.884635][T30020] EXT4-fs (loop4): mount failed 07:31:25 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x20c) 07:31:25 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socket$inet_dccp(0x2, 0x6, 0x0) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/4106) [ 2594.994332][ T34] audit: type=1800 audit(1604820685.037:249): pid=30048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 2595.015568][ T34] audit: type=1800 audit(1604820685.037:250): pid=30048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 2595.076938][T30052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2595.085238][ T34] audit: type=1800 audit(1604820685.037:251): pid=30048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 2595.146864][ T34] audit: type=1800 audit(1604820685.037:252): pid=30048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 07:31:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:26 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4084) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x24b00, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 07:31:26 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x20d) 07:31:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2596.786094][T30067] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2596.809428][T30072] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2596.859125][T30072] EXT4-fs (loop4): get root inode failed [ 2596.871915][T30072] EXT4-fs (loop4): mount failed [ 2597.726462][ T8087] net_ratelimit: 3 callbacks suppressed [ 2597.726468][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:28 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x100000) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) 07:31:28 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x20e) 07:31:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2598.007580][T30109] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2598.024389][T30107] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2598.037203][T30109] EXT4-fs (loop4): get root inode failed [ 2598.043038][T30109] EXT4-fs (loop4): mount failed 07:31:28 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x20f) 07:31:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:28 executing program 2: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@local, @empty, @dev={[], 0x34}, @link_local]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(r0, &(0x7f00000001c0)=@in={0x2, 0x4e23, @multicast1}, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x5, 0xc, 0x95, 0x2, 0x2, 0x60, "4d857f50"}, 0x3, 0x0, @planes=&(0x7f0000000100)={0x3, 0xffff, @mem_offset=0x80000000, 0x5}, 0xfffffffa, 0x0, r0}) fcntl$getflags(r1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) 07:31:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2598.223433][T30153] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2598.234446][T30149] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2598.250932][T30149] EXT4-fs (loop4): get root inode failed [ 2598.265833][T30149] EXT4-fs (loop4): mount failed [ 2598.764757][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.574859][T14150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.583406][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.595394][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.804693][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.884541][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2600.844595][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:31 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x210) 07:31:31 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4095) 07:31:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2601.102272][ T34] audit: type=1800 audit(1604820691.147:253): pid=30178 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 2601.129036][ T34] audit: type=1800 audit(1604820691.167:254): pid=30178 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 07:31:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2601.143984][T30185] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2601.164626][T30185] EXT4-fs (loop4): get root inode failed [ 2601.170343][T30185] EXT4-fs (loop4): mount failed [ 2601.178436][T30181] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:31 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x211) 07:31:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040)="34b11988fd776cd98a0b8e781eda6412021a34bd0d63b9f3422751a5d9de91f270454be09455758cd3b6d95ab5787ee7485e0e82ba849bd80b3de5f04856f363800814cde3a02bc2d8cb96dd43848289a7b738d0374e6459528721946a508e8545bc24896cd0f6b137f991b24c2648849edff530f85c5b35cfcf75f7526b7712", &(0x7f00000000c0)=""/39, 0x4}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:31 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) 07:31:31 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001600)=""/4096) 07:31:31 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x212) [ 2601.347623][T30208] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2601.369544][T30219] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2601.372047][T30208] EXT4-fs (loop4): get root inode failed 07:31:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2601.429156][T30208] EXT4-fs (loop4): mount failed 07:31:31 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xf89, 0x4, 0x6, 0x5, 0x32cd, 0x647, 0x5b, 0x1ff], 0x8, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r4, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e23, 0x4e0, @private1, 0xee9d}}}, &(0x7f0000000480)=0x84) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x118}, 0x1, 0x0, 0x0, 0x14000044}, 0x4000001) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x444280) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x80, 0x400040) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r5, r6) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r0) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000080)) [ 2601.457378][ T34] audit: type=1800 audit(1604820691.507:255): pid=30244 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 [ 2601.477001][ T34] audit: type=1800 audit(1604820691.517:256): pid=30244 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 2601.559715][T30248] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2601.884608][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2602.924412][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2602.932524][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2603.964521][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:34 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x214) 07:31:34 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000001600)=""/4093) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2b00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB='\x00'/16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a5d0cb6b1427c95fb08a9b5ec12bf5de58aeef", @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000cc00b800500030005000000080002000200000008000200f3ffffff07000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x140, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x972d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd704}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62394eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c59c968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cf}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb87cc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34679816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2007}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f6cb5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0541d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39075d99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x546dcc37}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a2ea6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5782d45f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x354dd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x83c0d4c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf986}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddffda1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="0003000004000000000200800000e6f0722244315c31106b163b04dcff6668ec05bd1dc7c1e259a7977f0e8cf8569b236b1ecce21e87c920c6518e662d6c191e39fb13d01eac4b21e7b20a6cd1e98f8ee183cc0fb903cc16bba4d452d329c2c3cfd1ba880ff02cf95fc6dc78629b26ffe460aa9aa0a0ad15997c656335ec37ced7eb2588244a2ced2388167ae359ebf9717f2999bd127a9c82a0528486f3f9c5a253999b9376f6b8b93c7261"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xdc, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd7faabd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x92c4703}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x921b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa973}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a0f75ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1af9dc7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa299}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ad9}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebe8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x694c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a3b3527}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c0ba373}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5be}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xbc, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53c5a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4188ab5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76b67dba}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eec7c4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008804}, 0x4400d) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x2bc, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x324777a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x87a8abb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66141af3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x189944b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x462d9cfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x293c210f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ee3cf01}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49c85a0c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d4eca96}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3780d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d4d0cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad1e10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18c78791}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11c98dd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67d10f9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x331dbd0b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5136edc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13a8a6b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51c4d744}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61c7f133}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56976f31}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a118702}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x94d2811}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7aa9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa40f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb81}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8c693e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd05e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e442f93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18c67df3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf7dabd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f1863d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc81f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f37675}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaa1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53e58593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x84f1779}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa316}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22943919}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ee1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadb3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ee54283}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x703426bb}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7890b554}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70242b24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2628}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a36}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca8e}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xc040}, 0x4090) [ 2604.044321][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2604.052983][T29093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2604.064619][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2604.073123][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:34 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x21b) [ 2604.137204][T30281] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2604.142135][T30284] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2604.149606][T30281] EXT4-fs (loop4): get root inode failed [ 2604.187487][ T34] audit: type=1800 audit(1604820694.237:257): pid=30299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0 [ 2604.222924][T30281] EXT4-fs (loop4): mount failed [ 2604.239995][ T34] audit: type=1800 audit(1604820694.237:258): pid=30299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0 [ 2604.259849][ T34] audit: type=1800 audit(1604820694.247:259): pid=30299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=19 res=0 errno=0 07:31:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:34 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000100)={0x1f0000}) [ 2604.279682][ T34] audit: type=1800 audit(1604820694.247:260): pid=30299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=20 res=0 errno=0 [ 2604.327311][T30308] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:34 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x21c) [ 2604.423488][T30325] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2604.435826][T30325] EXT4-fs (loop4): get root inode failed [ 2604.448223][T30325] EXT4-fs (loop4): mount failed 07:31:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:34 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4093) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000016c0)={'ip6tnl0\x00', {0x2, 0x0, @local}}) [ 2604.600135][T30336] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2604.614733][T30337] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2604.656957][T30337] EXT4-fs (loop4): get root inode failed [ 2604.669926][T30337] EXT4-fs (loop4): mount failed [ 2605.005889][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.044526][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2607.084119][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:37 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x21e) 07:31:37 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SVE_GET_VL(0x33, 0xea5f) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, &(0x7f0000000040)=0x8) 07:31:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:37 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000150a0108000000000000e5ff020000090900010073797a31000000000800034000000004"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000c000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') openat$cgroup_subtree(r2, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x100, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x321200, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000200)) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x3e, &(0x7f0000000240)="644090bb7137f45bb6ad4de8d7498086b02c6dc4fe6930ed91c675506aa1992f16d40df4b0ea0086d2494efe472232bb2b9ca3a7db29c3564ebced3cf4e4") read$proc_mixer(r4, &(0x7f0000000080)=""/128, 0x80) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2607.166178][T30365] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2607.178635][T30366] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2607.180717][T30365] EXT4-fs (loop4): get root inode failed [ 2607.208161][T30365] EXT4-fs (loop4): mount failed 07:31:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:37 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x222) 07:31:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400020000", 0x1f, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:37 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x225) [ 2607.409396][T30396] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2607.422800][T30395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 07:31:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2607.518431][T30416] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2607.582133][T30431] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2607.594511][T30431] EXT4-fs (loop4): get root inode failed [ 2607.600393][T30431] EXT4-fs (loop4): mount failed 07:31:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:37 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x227) [ 2607.755389][T30439] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2608.124299][ T8088] net_ratelimit: 1 callbacks suppressed [ 2608.124303][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2609.164039][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2609.172140][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:40 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x23d) 07:31:40 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x6100, 0x41, 0x4}, 0x18) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x6ce6e6d0630b40f4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat2(r2, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x40000, 0x108, 0x2}, 0x18) [ 2610.124354][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2610.190040][T30466] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2610.190220][T30469] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2610.204378][T30466] EXT4-fs (loop4): get root inode failed [ 2610.217143][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:40 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x248) [ 2610.259905][T30466] EXT4-fs (loop4): mount failed 07:31:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:40 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4087) 07:31:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2610.385222][T30495] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:40 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x24a) 07:31:40 executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6, 0x2, 0xff, 0x8, 0x5, 0x9e2a}, 0x20) [ 2610.491358][T30513] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2610.513223][T30513] EXT4-fs (loop4): get root inode failed [ 2610.529955][T30513] EXT4-fs (loop4): mount failed [ 2610.665756][T30529] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:40 executing program 2: write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x102, {0x8, 0x4e9, 0x6}, 0x10, 0xffffffffffffffff, 0xee00, 0x9, 0x6, 0x5, 0x0, 0x6, 0x6, 0x0, 0x7, 0x3, 0x1, 0x1, 0x9, 0x5, 0x5, 0x9}}, 0xa0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000", 0x1a, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2610.798391][T30548] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2610.825533][T30548] EXT4-fs (loop4): get root inode failed [ 2610.832056][T30548] EXT4-fs (loop4): mount failed [ 2611.243966][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2612.283947][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x24b) 07:31:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=[0x9, 0x6, 0xebe, 0x8], &(0x7f0000000040)=[0xd8, 0x800, 0x2], &(0x7f0000000080)=[0x76f, 0xb91, 0xaff5], &(0x7f00000000c0)=[0xeb, 0x1ff, 0x6, 0x20, 0x2000, 0x3, 0x2fd]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001040)=""/4129) 07:31:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000", 0x1a, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2613.163711][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.212058][T30569] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2613.216184][T30574] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2613.226121][T30569] EXT4-fs (loop4): get root inode failed [ 2613.262626][T30569] EXT4-fs (loop4): mount failed [ 2613.323849][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:43 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4084) 07:31:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x24c) 07:31:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000", 0x1a, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2613.478494][T30603] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2613.492346][T30603] EXT4-fs (loop4): get root inode failed [ 2613.494426][T30608] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2613.499695][T30603] EXT4-fs (loop4): mount failed 07:31:43 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 07:31:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2613.651184][T30631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2614.363742][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2615.403794][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:46 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20040, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x1}, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x25c) 07:31:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2616.203508][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2616.240805][T30646] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2616.247311][T30650] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2616.270065][T30650] EXT4-fs (loop4): mount failed 07:31:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:31:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x260) 07:31:46 executing program 2: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x1, 0x1, 0x6, 0xd8f, 0xfad58a7fb8dac6ee, 0x80000000}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:31:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2616.443613][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x268) [ 2616.511931][T30681] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2616.533985][T30690] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2616.540524][T30690] EXT4-fs (loop4): mount failed 07:31:46 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001000)=""/4082) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller1\x00', {}, 0x8}) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) 07:31:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2616.639377][ T34] audit: type=1800 audit(1604820706.688:261): pid=30712 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=21 res=0 errno=0 [ 2616.716123][T30717] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2617.483593][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2618.523642][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2618.763473][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:31:49 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/233, 0xe9}], 0x1, 0xfffffffc, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x4, 0x4, 0x8}}, 0x14) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x3000) [ 2619.244962][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2619.275601][T30739] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2619.282342][T30739] EXT4-fs (loop4): mount failed 07:31:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:49 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x26c) 07:31:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xb4, "d47b9fa3da2e7716574d9b0fd14628e396fcc1f7e4675000c2b023ce7fab2c33e57cd28131197ffeb4b29f2192ba7ea93cf04764f4eac217e8704b9859550bb3998a48ebb1873f4362d74964ed6a7004cf13cd5b02e03718081b6ebdf81cb101d96bd33bf3e1671735a305c1357d8a6378fb13d2be1539f26fc2234bf117119e4ee055f1fb03e68370901cc76606b75ee939e2e5e111c77ef780da8d01453e359c440da794af15efe04d09d281e737f006950d4a"}, &(0x7f0000000180)=0xbc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x70, &(0x7f00000006c0)={r3, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x4}, &(0x7f0000000780)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r2, 0x400}, 0x8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0x4000, 0x2, 0x1, 0xf}) 07:31:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400", 0x1c, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2619.540899][T30759] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2619.549030][T30759] EXT4-fs (loop4): mount failed [ 2619.564784][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2619.580259][T30763] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400", 0x1c, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:49 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x274) [ 2619.704537][T30787] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2619.711029][T30787] EXT4-fs (loop4): mount failed [ 2619.805505][T30797] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2620.603495][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2621.643256][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400", 0x1c, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:52 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x275) [ 2622.286195][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2622.322852][T30825] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2622.329470][T30825] EXT4-fs (loop4): mount failed [ 2622.340479][T30822] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:52 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4080) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x20000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x70, &(0x7f00000006c0)={r4, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000780)=0x98) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x3, 0x7ff}, 0x8) 07:31:52 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:52 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x27a) 07:31:52 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2622.586128][T30856] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2622.599050][T30855] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2622.625722][T30869] ptrace attach of "/root/syz-executor.3"[30868] was attempted by "/root/syz-executor.3"[30869] [ 2622.648183][T30855] EXT4-fs (loop4): get root inode failed [ 2622.683201][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2622.692063][T30855] EXT4-fs (loop4): mount failed 07:31:52 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:52 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x27e) [ 2622.694834][T30877] ptrace attach of "/root/syz-executor.3"[30876] was attempted by "/root/syz-executor.3"[30877] 07:31:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2622.837746][T30891] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2622.850224][T30891] EXT4-fs (loop4): get root inode failed [ 2622.857999][T30891] EXT4-fs (loop4): mount failed [ 2622.869149][T30890] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2622.915105][T30903] ptrace attach of "/root/syz-executor.3"[30902] was attempted by "/root/syz-executor.3"[30903] [ 2623.723102][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2624.763261][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2625.323058][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.348043][T30917] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2625.360557][T30917] EXT4-fs (loop4): get root inode failed [ 2625.368140][T30917] EXT4-fs (loop4): mount failed 07:31:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:55 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x300) 07:31:55 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4092) 07:31:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:55 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x8000, @none, 0xff, 0x2}, 0x80) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000140)) getuid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7563b41d7e6c5aa2cd45a9c7cd"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}], 0x20) syz_mount_image$sysv(&(0x7f0000000080)='sysv\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000200), 0x84, &(0x7f00000001c0)) [ 2625.607967][T30938] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2625.622863][T30938] EXT4-fs (loop4): group descriptors corrupted! [ 2625.632476][T30942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:31:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:55 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x500) 07:31:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2625.805548][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.806410][T30982] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2625.822656][T30970] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2625.843815][T30970] EXT4-fs (loop4): group descriptors corrupted! [ 2626.843087][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2627.882870][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:31:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:58 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001000)=""/4096) 07:31:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2628.364271][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2628.372427][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2628.404610][T31007] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2628.414885][T31007] EXT4-fs (loop4): group descriptors corrupted! 07:31:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:58 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x600) 07:31:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:58 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001600)=""/4096) 07:31:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:31:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2628.642533][ T34] audit: type=1800 audit(1604820718.689:262): pid=31024 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=23 res=0 errno=0 [ 2628.662330][T31021] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2628.677178][T31021] EXT4-fs (loop4): group descriptors corrupted! [ 2628.698131][T31020] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2628.719569][ T34] audit: type=1800 audit(1604820718.769:263): pid=31024 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=24 res=0 errno=0 07:31:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:31:58 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001040)=""/4124) [ 2628.751582][ T34] audit: type=1800 audit(1604820718.799:264): pid=31024 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=25 res=0 errno=0 [ 2628.778417][ T34] audit: type=1800 audit(1604820718.799:265): pid=31024 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 07:31:58 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x700) [ 2628.822761][ T34] audit: type=1800 audit(1604820718.799:266): pid=31024 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=27 res=0 errno=0 [ 2628.929226][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2628.970782][T31060] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2629.962914][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2631.012691][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 07:32:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2631.379505][T31076] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2631.389665][T31076] EXT4-fs (loop4): group descriptors corrupted! [ 2631.403313][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:01 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4094) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x2, 0x44802) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x17}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0xc000) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)={0x1, 0x0, "1f1b490e269de92fe424cbb218533fe4"}, 0x18, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0, 0xb3, 0xf7}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha384\x00'}}, &(0x7f00000000c0)="4a449d10676de7b18b02076a77b77a91454a8e856b907610aa569be06482fa22b52da6b6c79c9a2a47021984b5d408342f068fdc037ac0961ce7b4cfbfc265c62cf105e1e06dcd1880c82a956f314197c67534eed8a95f61ea479030fec185590c95d170ea98b641a8be5ebc86f6e13a8438b57c99cf4067a8793e779b918cafd4b1fd2dd41f83dfd49dab457f881c0233e6658188143debb9f3d7d8f8f0ee2375a42d621e55b327ca5a1d62a476cbc5377c44", &(0x7f0000000180)=""/247) 07:32:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0xa00) 07:32:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:01 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001040)=""/4108) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x80000001) [ 2631.677091][T31089] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2631.689245][T31096] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2631.704035][T31096] EXT4-fs (loop4): group descriptors corrupted! 07:32:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0xc00) 07:32:01 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2631.872655][T31120] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2631.885313][T31124] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2631.897687][T31120] EXT4-fs (loop4): group descriptors corrupted! 07:32:02 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@builtin='builtin_trusted\x00') [ 2632.052616][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2633.082688][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2634.123277][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 07:32:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2634.427345][T31157] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2634.437571][T31157] EXT4-fs (loop4): group descriptors corrupted! [ 2634.443989][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:04 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x2000) 07:32:04 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4091) 07:32:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2634.687628][T31173] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2634.697808][T31173] EXT4-fs (loop4): group descriptors corrupted! 07:32:04 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 07:32:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:04 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x21) [ 2634.814378][T31176] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2634.814724][T31192] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2634.844275][T31192] EXT4-fs (loop4): group descriptors corrupted! 07:32:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:04 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x2500) 07:32:05 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0xa00, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000010) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4a00, 0x181) syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x6ac9c602, 0x7, &(0x7f0000000540)=[{&(0x7f0000000080)="37ee59bdbc3696e8ca3f266af2dac1ba2764e4972f11c1e8a665a32e9b08591d1c6f66660888e7b50c5c079f127c1982857544a18ec410fc018792a34918d5513c73b07fd54b71b3434abc8f6eed4c4e33a5dff033b74cc0d0d219cc7b5a58e4751466c8ef7c8710d25547b4d596c6d0366ad8f669b387913c27503e00e5f77d08a42b5c6bd9e5e291deb96768afef11ca8e14b7c0c0396dcac2756d5a32b372df961aa95634e0f1dc138e41e30baa744b58a9dd901890b719647bc2725301b50740354cff30f3334fbefb60c217cb19dbbf6796ef", 0xd5, 0xc5}, {&(0x7f0000000180)="d07b48ef67aaebc8c2bd6d3272d282b177abdaa259c7c767b96b6b0ed534ab1623a5a6a1860741e020e11481b8157fa0873c18f1f67744b2f31ef2f21a13e168ac4b6eb08ce48da9eb00efe292210c93fe63c935cc88fadc20bead05bc0eb90c413e0ffba5e68e9b765d086d5c4a59e7cce1157f9f7554455e6aeabb7155767dad7a35f9fe3bebb4587d0feb2cff26c978082bdf9e26993ee847f98c13d2c35ec2c3", 0xa2, 0x3}, {&(0x7f0000000240)="4a05de4c45a6dc19bac0a4be4f747a049f3e609e9ab94b462abbd6c2d64e5938d9a1d6e6bbd47dab6c853199541c26c5642bc3a66379f1779eda0dacebe8cec456050a030e7d17bd7e9176d768a87e796579fd5c1287c0d791005215b2920310b4e28df9c05825bf705ac4a943d7efc162b41a96c546c0ff6932650441b179d00f8d1e88b54bc6d559751c5f6dcfaafc7d3e19a39acca58aade7cc29", 0x9c, 0xe}, {&(0x7f0000000300)="3a12dc9a942a782b77808f15538e5849531a02e3a835f2ee8d900f0d167e", 0x1e, 0x1ff}, {&(0x7f0000000340)="2be468087604e953c75382bc03cf6e3c5bacea2d29a9102664303737d5df19902e4cad9dffe2b21ac7087fe695789145a6af81f4f5a4002c264fdde04738b7a1098892429ed29781955e7c2e56", 0x4d, 0xffffffff}, {&(0x7f00000003c0)="fbef0c8805997ad09bc7f58d9b1909abbaa361152d612180ecfa88d0a33797ba72777cf93fc1ae08b304159e7060017e554903f37594c523bdd342418d610b433365c4c277d2a1201509d573cb70db7758fb54f30c979f07756dff77b8e19d76425b7ad1f1344bc2dc4294594231e97308e1fb094d7cdc99aa685f9ec3dd4c3c3a7966b197bf656c4e631818ed850209783369c10b8e2589fbd563f3393efc47c661dafacac6dc8501fdb95547fc7a1bebb3378054c7e26f1fe08e0c04491df8bcfed367dabed4f5c6e6810ea0081f1cc32407ccdc82a6866bfd1dd737ad8ce175d4275b06e3b0ca441a", 0xea}, {&(0x7f00000004c0)="0fe532901bef43de9d30a4feef4a0b2fe2db7d2a5d43d5cde578d9f85018035b51668a3580ce73ced6b3aae61829f5d7bac92b8e368c001f1294c7b9eb3023cd453bdabc0234ae8376865b3bbb65dfca9befe00d2f556ae10c47bc462ca06be2cd", 0x61, 0x1}], 0x1, &(0x7f0000000600)={[{@session={'session', 0x3d, 0x5}}, {@lastblock={'lastblock', 0x3d, 0x1ff}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@anchor={'anchor', 0x3d, 0x8539}}], [{@uid_lt={'uid<', 0xee01}}]}) [ 2635.005158][T31206] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2635.045012][T31206] EXT4-fs (loop4): group descriptors corrupted! [ 2635.051577][T31208] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2635.174578][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2636.202515][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2637.252470][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 07:32:07 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4097) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001100)='/dev/full\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000001040)={0x0}) r3 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f00000010c0)={r2, &(0x7f0000001080)=""/18}) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) [ 2637.439754][ T34] audit: type=1800 audit(1604820727.490:267): pid=31235 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=31 res=0 errno=0 [ 2637.460350][ T34] audit: type=1800 audit(1604820727.510:268): pid=31235 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=32 res=0 errno=0 [ 2637.485429][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:07 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x4000) 07:32:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/94, 0x5e}, {&(0x7f0000001300)=""/92, 0x5c}, {&(0x7f0000001380)=""/87, 0x57}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x6, &(0x7f0000001480)=""/178, 0xb2}, 0x40002100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001540)={0x0, @in6={{0xa, 0x4e21, 0x100, @mcast2, 0x7}}, 0x9, 0xf801, 0xde, 0xb1, 0x48, 0x56, 0x6}, &(0x7f0000003600)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x10001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r3, 0x2466}, 0x8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:32:07 executing program 2: shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001600)=""/4096) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) [ 2637.744785][T31246] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2637.749439][T31247] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2637.775936][T31247] EXT4-fs (loop4): group descriptors corrupted! 07:32:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:07 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xb2ce}, &(0x7f0000000080)=0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_RAGET(r2, 0x1263, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x20001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x7, 0x6, {{0x1e, 0x4, 0x3, 0x24, 0x78, 0x68, 0x0, 0x73, 0x29, 0x0, @broadcast, @remote, {[@rr={0x7, 0xb, 0x8a, [@local, @remote]}, @timestamp_prespec={0x44, 0x34, 0xa2, 0x3, 0x7, [{@private=0xa010100, 0x4b9}, {@loopback, 0x6}, {@local, 0x7}, {@loopback}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x80000001}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x5, [{@remote, 0x7}, {@local, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@rand_addr=0x64010101, 0x2}]}]}}}}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000280)="bf1f8276f92c12b374c0d1b910911f09cb7c2f08878b6063a7f6485aa3f94a6b8ec7cda9820351d4e401683550a1414ba1281261df1cea459cac4386415970310a98a9a7432d46ca460db93c64b57ee9092affc2f020d4f851799d2c5e93b76b0f3424c75673bb959e96904aa0059986b8e5d2a999c2f88ff3fa8990bb78b356fa0694b9e7b27822c9ee82cb193b5b5573a443d650a6d8838b8e01e45cc07cba12e9477bf36fd1ae3c2bea374722c43cfe2ed6e9152b71afc4a8260ec3a418e4907d", 0xc2) 07:32:07 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x6400) 07:32:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2637.896169][T31272] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2637.906378][T31272] EXT4-fs (loop4): group descriptors corrupted! [ 2637.962193][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2638.040990][T31281] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2638.051762][T31282] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2638.064560][T31282] EXT4-fs (loop4): group descriptors corrupted! [ 2638.283120][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2639.332270][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2640.363895][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:32:10 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) shmget(0x2, 0x1000, 0x8, &(0x7f0000001000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r2, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r2, 0x10}, &(0x7f0000000180)=0x8) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f00000000c0)={0x1f, "3ff5ebe2c9e8a801257f70b8973257480576e0afff78b9ea6ab9eab1aa4b30c0", 0x1, 0x8001, 0x3ff, 0x2, 0x4}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = signalfd(r3, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x3) [ 2640.447018][ T34] audit: type=1800 audit(1604820730.500:269): pid=31302 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=38 res=0 errno=0 [ 2640.467016][ T34] audit: type=1800 audit(1604820730.520:270): pid=31302 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=40 res=0 errno=0 [ 2640.522033][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:10 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x7d03) 07:32:10 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000080), 0x4) r1 = syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2888155751e41df11a", 0x9, 0x20}, {&(0x7f0000000100)="52933d39f0ce2b60c0149f616050471da241988a0c3e420de729ce9f9460e4689d0ecf9e75d9bc617980ed6c6af2861b455c135457bb675dfddedab618f1acab195bc218e8718ee3201128c86f405ad4587411c903f12945e1668073ffdeb5ca91458574915631c23bb78fcd1fe61fdcfffe7187e42ac89f5616134216af32811f00010100009a1724", 0x89, 0x6}], 0x4020, &(0x7f0000000200)={[{'-*!\\\''}, {}, {'\x8b$\x85'}, {'.'}, {'--'}, {'\''}, {'\x00'}, {'[\':'}, {'&#+'}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002600)={{0x0, 0x180000000000, 0x8, 0x81, 0x8, 0x7fff, 0x4, 0x3, 0x7, 0xfffff86a, 0xfffffffc, 0x200, 0x7, 0x5, 0x40}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000440)=@hopopts={0x84, 0x20, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0xf5, "0a3173896f281c2980b32629f95ad6b2de265e9fd61eb9839baf953554e628cc11f6be538bd69cdb5d65a2c1f2282e02f802bd36ea0310ead6c6f199752389e81e30b68eaf82f452e835783f9647265009a2e6689fa7c3d25e1513e5fe4ea1ad56f97d35fa759cff1028b169f3e839b8d9345e903cf38f75882b590c046694b5e59335296c202efffe93f4d3eda6e9d1a1473d8b6bff52127c50c02a9a5e2dc9ee7ad77046316029fc3267dfe90473efa2fa80c84e32815bf5a6dd26d27a3a35b447c5df25e5801eb2628bf7b6ca23f56a5adc2b03b3177d5f40de07b127c6912b04e366e2cad834f2dde7d833f248a6b5fc9022d0"}, @ra={0x5, 0x2, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0xf6}]}, 0x110) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000003c0)={'ip_vti0\x00', r6, 0x700, 0x1, 0x9, 0xaf6, {{0x5, 0x4, 0x2, 0x3d, 0x14, 0x64, 0x0, 0x3, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl(r1, 0x4, &(0x7f0000000240)="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") shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001600)=""/4096) 07:32:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2640.779095][T31311] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2640.789327][T31311] EXT4-fs (loop4): group descriptors corrupted! [ 2640.794663][T31310] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2640.815515][ T34] audit: type=1800 audit(1604820730.870:271): pid=31321 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=46 res=0 errno=0 [ 2640.858372][ T34] audit: type=1800 audit(1604820730.900:272): pid=31321 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=47 res=0 errno=0 07:32:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:11 executing program 2: r0 = shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000001040)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000001080)={"6e61096289d16f00b41db425e56f742cd0ffd8c30d8ed70713eddf5c8760", 0xffffff80, 0x1, 0x401, 0x7f, 0x3ff, 0x10d, 0xc3141f95, 0x2, [0x9, 0x400, 0x7, 0x7, 0xfffffff9, 0x101, 0x3dca, 0x3, 0x9, 0x8, 0x200, 0x1000, 0xed57, 0x5b, 0x0, 0x1, 0x1, 0x6, 0x100]}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4109) 07:32:11 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x8803) [ 2640.967841][T31336] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2640.984481][T31336] EXT4-fs (loop4): group descriptors corrupted! 07:32:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:11 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xc1]}, 0x8, 0x80000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101200, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) [ 2641.128742][T31348] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2641.140630][T31353] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2641.160259][T31353] EXT4-fs (loop4): group descriptors corrupted! [ 2641.402959][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2642.451919][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:32:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2643.475019][T31372] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2643.485941][T31372] EXT4-fs (loop4): group descriptors corrupted! [ 2643.494574][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2643.563045][T29989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:13 executing program 2: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000140)=[0x8, 0x4, 0x60, 0x5, 0x0], &(0x7f0000000040)=[0xa41b, 0xe9, 0x3], &(0x7f0000000080)=[0x4, 0x3], &(0x7f00000000c0)=[0xf001, 0x3fd, 0x20, 0x1000, 0x200, 0x1, 0x5]}) 07:32:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0xf403) 07:32:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2643.815665][T31387] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2643.818743][T31383] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2643.827061][T31387] EXT4-fs (loop4): group descriptors corrupted! 07:32:13 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x40100) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$netrom(r1, &(0x7f00000001c0)={{0x3, @rose}, [@remote, @netrom, @null, @default, @netrom, @rose, @default, @default]}, &(0x7f00000000c0)=0x48) openat$cgroup_freezer_state(r1, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x401, 0x0) 07:32:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:14 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0xfa03) [ 2643.965705][T31406] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2643.976297][T31406] EXT4-fs (loop4): group descriptors corrupted! 07:32:14 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @netrom, @netrom, @remote, @bcast, @remote, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x3, 0x1000) 07:32:14 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x10000, 0x1, 0x94, 0x81, 0x8, 0x7, 0x8, 0xff, 0x9, 0x4, 0x3, 0x40}, {0x0, 0x0, 0x54, 0x1f, 0x6, 0x9, 0x1, 0x40, 0x3c, 0x4, 0x6, 0x0, 0x4}, {0x4, 0x5, 0x5, 0xd0, 0x5, 0x3f, 0xd2, 0x8, 0x2, 0x3e, 0x1, 0x1, 0x200}], 0x3}) [ 2644.110200][T31420] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2644.523516][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2645.571921][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaf, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b80000007581"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:32:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2646.491168][T31441] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2646.501374][T31441] EXT4-fs (loop4): group descriptors corrupted! [ 2646.601830][ T8088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2646.609933][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0xfc03) 07:32:16 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r2, 0x1) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001600)=""/4096) 07:32:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2646.816167][T31449] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2646.917821][T31455] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:17 executing program 2: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000001600)=""/4096) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/246) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$getregs(0xe, r0, 0x2, &(0x7f0000000140)=""/232) 07:32:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:17 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:17 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f00000002c0)={0x58, 0x1, 0x0, 0x1fc1, "f04ae83e114dc4ef2a6a3027cfd591122ef931352b50bc504b80404d01bb72a2967eb876eb52b46489750740199798efe067c4001e02d05a590b7f1081d9ac3c"}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = accept4$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0xe, 0x80000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r8, 0xba953000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "48c1e80eaeb278be48dd12efda"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0x68}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x805}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xccd}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x100) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0x11}, 0x2, 0x0) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2647.073494][T31480] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2647.100164][T31482] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2647.144189][T31482] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2647.170756][T31482] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2647.222978][T31507] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2647.561679][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2647.641741][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2648.691541][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2648.700112][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2648.711096][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2648.719464][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:19 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYRES64, @ANYBLOB="885b6ccc5824c4eedec6a18d8855f4cfd2fd429f5a0967d95fc2bd3bd0cfca57381b5b7ce9c04e2e6adf11d4dc14c7323f66b75855bdcdc015afbac92a5826c89bd0", @ANYRES16=r0]) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000180)) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x0, 0x0}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$FBIOGET_VSCREENINFO(r10, 0x4600, &(0x7f0000000340)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200) [ 2649.512957][T31522] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2649.519810][T31524] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2649.601222][T31524] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2649.630150][T31524] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2649.641741][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:19 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) syz_mount_image$affs(&(0x7f0000000000)='affs\x00', &(0x7f0000000040)='./file0\x00', 0xb096, 0x8, &(0x7f0000001500)=[{&(0x7f0000000080)="fda2926d62ed62bf27d42dbc17bf586729459fb2696a0aecbf6fb3a0a3d7", 0x1e, 0x2a}, {&(0x7f00000000c0)="fdf6ad7f7fc4d93c73f4a0302dbe34ac22fdbd34e699596af157f087ffc2087ddb4f5b6dec7b9f8a88d56d888d82b8043e8bb9fbf9ac23bfd3950ae6abe015958e65a42b86ea26fe2a70ea4e25c370bef8406d1ccd5fae4a98fde2a1d8423082ccb7f7f7ca4152f07722b5083f2bad40def5aa615dc996ede8c1a8f930feceefed3a25ea66209af9035d48b1341a3042e327ca45af142a368817668d5bd131f475335ede400ab2bac7350813fc6a93d820e9001d102c4f6c183faf0d1e0d5e6ad8b9460daa", 0xc5, 0x8}, {&(0x7f00000001c0)="47d687d93ddef7f85a63e3bcbe50bf1eefc306f61a6e345e8a95d8233909d7512e73e6129a7daea7367572cf3ddbf4b11043feb891139adaaa0a6270ea0311016fcc4c73c1a334f71614bb578d73f3ad7897034e8bcf9df52d3bdff879ab77d0fb9db0bdf872659dda0d8d71279c8dcf98e6e6acb1a7ce32f464ee311739dabf9f63905bef3a245d4fd3d86fe484f2d10e14549affcdc29c012b04042d8d026169c588865db26c3d606890bdaf2f2922474b42794e4f85b2a1", 0xb9, 0x2}, {&(0x7f0000000280), 0x0, 0xffffffffffff9101}, {&(0x7f00000002c0)="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", 0x1000, 0x7f}, {&(0x7f00000012c0)="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", 0xfe, 0x5}, {&(0x7f00000013c0)="06677f3a5bb8a40ebf1a0c1135e0c2fd8a9c2ff2eb6f1af00fdbc3e123e9672fb1fe3c4c1d4977ce223dcd7fe57e8892fdffb4", 0x33, 0xaf19}, {&(0x7f0000001400)="a67d707b0b1d6f3cb3e5b420077083491d3e32430f971badc121943db12bc046c913dba3923f79761019f4a86f32641f6d330bc1202b3843d3801c99f56aa5a7b9b45b90b148aba7fb0ecb70b2c57ea780f9124b85414f3da6cb565b6d7125977325c4bd7ad901a6afa8cf4c22c2fdc147ab1bc7b1151378012ab832ebdcc91797475df1f493fd5e77cbb87d81f997e5c13a0fc02d73dc013e5865eabaa8e63ecc57e704d25016633184cd7760c6eaf85401530aa1c34ed921c2322fe847a32759b3387accfa6834674e63002f36b64d5b25c88e30967a", 0xd7, 0xfffffffffffffffb}], 0x80800, &(0x7f0000002600)={[{'\v*\x1e-(\'W'}, {'@:-@(]('}, {',,'}, {}, {'-'}, {'('}, {'-+'}, {'{)'}, {'{[\''}, {'\x04'}], [{@euid_lt={'euid<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x13}}, {@dont_measure='dont_measure'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '\xbe'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x34, 0x64, 0x66, 0x61, 0x63, 0x34, 0x33], 0x2d, [0x36, 0x34, 0x34, 0x66], 0x2d, [0x37, 0x39, 0x3b, 0x38], 0x2d, [0x64, 0x32, 0x64, 0x86fce9b4ef114a8f], 0x2d, [0x65, 0x32, 0x63, 0x61, 0x65, 0x43, 0x32, 0x37]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise_type='appraise_type=imasig'}]}) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x1000) 07:32:19 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2649.801458][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2649.862638][T31550] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:32:20 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000002040)=""/4085) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {r1, r2/1000+60000}}, &(0x7f0000000080)) 07:32:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:20 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffbc}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r4 = syz_io_uring_setup(0x4fdd, &(0x7f0000000080)={0x0, 0x7793, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d4000/0x1000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r4, 0x450f, 0x189, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r0], 0x1) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v1={0x1000000, [{0x8, 0x400000}]}, 0xc, 0x1) 07:32:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2650.279528][T31571] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2650.313008][T31573] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2650.408539][T31573] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2650.412596][T31603] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2650.428935][T31573] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2650.841413][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2651.881260][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2652.691245][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:22 executing program 2: ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'veth1_macvtap\x00'}) r0 = shmget$private(0x0, 0xc000, 0x8, &(0x7f0000ff2000/0xc000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001040)=""/4109) 07:32:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:22 executing program 5: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x7f, 0xffff, 0x4, 0x9, 0x4}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000440)=r0, 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r2 = syz_io_uring_setup(0x2a08, &(0x7f00000002c0)={0x0, 0x966, 0x20, 0xfffffffc, 0x2fc}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r2, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000001c0)={0x40, 0x48, [0x4, 0x0, 0x0, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) [ 2652.899249][T31628] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2652.923133][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2652.935078][T31638] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2652.949716][T31628] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2652.967726][T31628] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:23 executing program 2: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xabd}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x6, @loopback, 0xa6d}}}, 0x84) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x3000) 07:32:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:23 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x667e, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2000}}, 0x7) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) rmdir(&(0x7f0000000180)='./file0\x00') r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x40000, 0x0) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x434, 0x3f4, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x1, 0x3c, [0x5, 0xfffffffa, 0x7, 0x3f, 0x7, 0x3, 0x200, 0x1, 0x1, 0x0, 0x4, 0xe76b, 0x4, 0x5aa6908a, 0x0, 0x5, 0x8, 0x80000000, 0x4, 0x6, 0x1, 0x5, 0x0, 0xffffff26, 0x20, 0x7fffffff, 0x5, 0x1000, 0x5, 0x3f, 0x3ff, 0x0, 0xfff, 0x5, 0x80000000, 0xac4, 0x0, 0x1f, 0x7, 0x9, 0xc0f9737, 0x3, 0x0, 0x3, 0x7, 0xe07a, 0xe576, 0x8000, 0x0, 0x4, 0xed45, 0xfff, 0x80, 0x7e3, 0x1ff, 0x6, 0xffffffff, 0x20000000, 0x10000, 0x5d, 0x8199299, 0x0, 0x200, 0x5], [0x80000000, 0x2, 0x0, 0x96, 0xff, 0x1, 0x5, 0x9, 0x8, 0x4, 0x2, 0x100, 0x80000001, 0x401, 0x6, 0x6, 0x4, 0x79c, 0xfffffffb, 0x87ce, 0x0, 0x6, 0xffffffe1, 0xffffffe1, 0x8, 0x8001, 0x20, 0x5a, 0xe0, 0x2, 0x3, 0x0, 0x5, 0x4, 0xfff, 0x5e, 0xfff, 0x9, 0x1, 0x7, 0x101, 0x401, 0x9, 0x7, 0x1ff, 0x0, 0x0, 0xe0000, 0x6, 0x5, 0x8, 0x8, 0x3ff, 0x52c, 0x1, 0x80000001, 0x758f, 0x8, 0x40, 0x1, 0xd19, 0x0, 0x5, 0x80000000], [0x7f, 0xc79, 0xe006, 0x25f, 0xde, 0x2, 0x20, 0x1ff, 0x6, 0x3f, 0x1ff, 0x9, 0x7fffffff, 0x1c00, 0x4, 0xc1, 0x3, 0xfffffffe, 0x2, 0x4, 0x6, 0x8, 0x2, 0x8, 0x6, 0x4, 0x20, 0x8, 0x2, 0x1000, 0x82, 0x3, 0x400, 0x1, 0x4, 0x4, 0x1ff, 0xcdf, 0xff, 0xfa, 0x0, 0x1, 0x6, 0x15e3, 0x6, 0x8, 0x4, 0x9, 0x0, 0x6, 0x5, 0x0, 0x6, 0x7, 0x2, 0x800, 0xffff0001, 0x8001, 0x3, 0x200, 0x1ffe0000, 0x80000001, 0x3, 0x1f], [0x4, 0x4, 0x4, 0x786a4122, 0x101, 0x2, 0x23, 0x19c, 0xffff0001, 0x8, 0x8583, 0x7fffffff, 0x0, 0x9, 0x7, 0x7ff, 0x8, 0xdcf, 0x6, 0x1, 0x4, 0x6, 0x0, 0x9, 0x2, 0x2, 0x8, 0x2, 0x3, 0xfffffffa, 0x4, 0xfffffffb, 0x8, 0x34e, 0x1, 0x5, 0x3ff, 0x2, 0x7fff, 0xc4b0, 0x5, 0x8, 0x10, 0x8, 0x8, 0xd6, 0x3f, 0xe3, 0x7, 0x9, 0xfffffff8, 0x6, 0x1b5, 0xffffffc1, 0x9, 0x6e, 0x5, 0x4, 0x78, 0x9, 0x7, 0x80, 0x1f, 0x2], 0x13, ['ext4\x00', 'ext4\x00', '\x00', '--*[)$\x00', '\x00']}, ["", "", "", ""]}, 0x434}}, 0x48884) 07:32:23 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x8000, @none, 0xff, 0x2}, 0x80) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000140)) getuid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7563b41d7e6c5aa2cd45a9c7cd"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}], 0x20) syz_mount_image$sysv(&(0x7f0000000080)='sysv\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000200), 0x84, &(0x7f00000001c0)) 07:32:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x5, 0x3, 0x8000, 0x7fff, 0x1, 0x200, 0x8, {0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x6, 0x0, 0x7, 0x3ff, 0x3}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x3}, 0x8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2653.348743][T31669] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2653.360291][T31672] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2653.503120][T31696] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2653.526355][T31696] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2653.971241][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2655.001060][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2655.721081][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xb4, "d47b9fa3da2e7716574d9b0fd14628e396fcc1f7e4675000c2b023ce7fab2c33e57cd28131197ffeb4b29f2192ba7ea93cf04764f4eac217e8704b9859550bb3998a48ebb1873f4362d74964ed6a7004cf13cd5b02e03718081b6ebdf81cb101d96bd33bf3e1671735a305c1357d8a6378fb13d2be1539f26fc2234bf117119e4ee055f1fb03e68370901cc76606b75ee939e2e5e111c77ef780da8d01453e359c440da794af15efe04d09d281e737f006950d4a"}, &(0x7f0000000180)=0xbc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x70, &(0x7f00000006c0)={r3, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x4}, &(0x7f0000000780)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r2, 0x400}, 0x8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0x4000, 0x2, 0x1, 0xf}) 07:32:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029", 0x2d, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:25 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000042b227e8b", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2f3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x2007, @fd=r1, 0x0, 0x0}, 0x0) syz_io_uring_complete(0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "48c1e80eaeb278be48dd12efda"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x20040000) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000001c0)) 07:32:25 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r2) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8002220}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x8004) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000002400)=ANY=[@ANYBLOB="50c30000ef", @ANYRES16=r6, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x24001814}, 0x4005) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000009d4eada4881b1f5c882bac68f098c7372106922bf8c900514148378a51e5c39e182b9d6ffa2199cd2078180a", @ANYRES16=r6, @ANYBLOB="08cf27bd7000fcdbdf25010000001400020076657468305f746f5f626174616476000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x94, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_auth_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x94}, 0x1, 0x0, 0x0, 0x24044001}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 07:32:26 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000040)=""/117, 0x75) [ 2655.924492][T31719] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2655.992918][T31722] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2116168452)! [ 2656.027784][T31722] EXT4-fs (loop5): group descriptors corrupted! [ 2656.042305][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2656.048074][T31736] dlm: non-version read from control device 117 [ 2656.065873][T31740] dlm: non-version read from control device 117 [ 2656.106213][T31722] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2116168452)! [ 2656.123361][T31722] EXT4-fs (loop5): group descriptors corrupted! 07:32:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029", 0x2d, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:26 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4108) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000001080)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001940)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000018c0)={0x3, 'bond0\x00', {}, 0x9a79}) 07:32:26 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2656.451599][T31753] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 07:32:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029", 0x2d, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2656.533033][T31755] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2656.567140][T31755] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:32:26 executing program 2: r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2713, 0x0, &(0x7f00000000c0)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2656.568016][T31774] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2656.602388][T31755] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2657.080980][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2657.161818][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2658.121001][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2658.760862][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x88, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f02"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f", 0x44, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:29 executing program 2: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000080)={0x0, 0x8001, [0x200, 0xfffffffffffffff9, 0x6, 0x2, 0x6, 0x1]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) keyctl$session_to_parent(0x12) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "cedf18bd0a88114da6e039cb538ec9e6"}, 0x11, 0x1) r1 = dup(r0) r2 = fsmount(r1, 0x0, 0x70) accept4$vsock_stream(r2, &(0x7f0000000400), 0x10, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$rds(r1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x48, {0x2, 0x4, 0x2, 0x1, 0xffffffffffffff00}}) 07:32:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2659.009860][T31793] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2659.047294][T31793] EXT4-fs (loop4): get root inode failed 07:32:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2659.068326][T31793] EXT4-fs (loop4): mount failed [ 2659.160857][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f", 0x44, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/233, 0xe9}], 0x1, 0xfffffffc, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x4, 0x4, 0x8}}, 0x14) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x3000) 07:32:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_mount_image$jffs2(&(0x7f0000000180)='jffs2\x00', &(0x7f00000001c0)='./file0\x00', 0x10000, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="cd743f3b1031f023e5f62b81d789e3255ff509403d06e93ce3a0b4dca635f9c894a40fa8603ea5ee36d3dbccdb01b0792314a511a386baf026217e9a227aac0cf2cd488df838edabdc0175fe7e345e76f8bcd6f555be997356547644af75b7b5dc4bd23f50da585289f58676ce5e37b35ae24a230002731929b6a1d06383af88f104155c3d49632a842559758e787d6854cb257d4e0036dd5627e2e38e17bc92cbab66ae7aa6a72267dcd7c6c47ddb1242fbe772403cbf6abf9aed5ffbe45e9fd42a5b4173d2b11584895d15adb8f1999bd4de4d53fba79baad85ba59748da78c89e74ccee96382638061721317979c5dcc2", 0xf2, 0x7}], 0x60040, &(0x7f0000000400)={[{@compr_lzo='compr=lzo'}, {@compr_none='compr=none'}, {@compr_lzo='compr=lzo'}, {@compr_zlib='compr=zlib'}], [{@smackfsdef={'smackfsdef'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000600)={0x0, 0x1, 0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:30 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) process_madvise(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000001000)="09a55689f11b8c5c34070eca033ff4cc13cab133f8ce51dc8044100af2a9547ad622c369bceee71bdd0a3f887d1cff45e77b0ec894d44ca4b2b46fa21aea64109c52b39343c17dfedee05588b20a6541bb1b3e2d8b229ff23ab992cff1dd1db45a9b27340a0e9238834cc47c112d20c4668604c18250e964e15f1398a5aae6a5b455698f5ecfbd9fd71f88012de6cfe2f14fe67b0e430dcbe8ee12e26aa0acd696b3ce882fcba6eaa82ec2fe8d276ba0cb4f16f6733b9aa89b70d58639583e5f1cca95b0b9fd3c4cc2d819ec8a035074c7be07101770366f61ae04bb3b7d3d72e7", 0xe1}, {&(0x7f0000001100)="29f2b3a5925e7f7df517da9bb640e8c882402659bea6b1d2d4836fa76b87c559cf2984a5799a02d4f02ac68674a962488e584d2344e6cfc4571e6a882a805f91d97944d003b8d683b5468df6d5b1753275c6057908416a27fce8a98aa96a8afb5ce991213fb03ff5c181adbda0c2efe9461bb4b6f6c734324a0afd0ab4c9d969464a9a71", 0x84}], 0x2, 0x15, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/4062) 07:32:30 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) [ 2659.989103][T31816] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2660.012666][T31815] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2660.045782][T31816] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2660.059457][T31815] EXT4-fs (loop4): get root inode failed [ 2660.069521][T31815] EXT4-fs (loop4): mount failed [ 2660.084973][ T34] audit: type=1800 audit(1604820750.131:273): pid=31833 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=57 res=0 errno=0 [ 2660.106356][ T34] audit: type=1800 audit(1604820750.161:274): pid=31833 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=59 res=0 errno=0 [ 2660.106985][T31816] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2660.200855][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2661.240688][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2661.800642][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:32 executing program 2: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/4090) 07:32:32 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000150a0108000000000000e5ff020000090900010073797a31000000000800034000000004"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000c000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') openat$cgroup_subtree(r2, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x100, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x321200, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000200)) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x3e, &(0x7f0000000240)="644090bb7137f45bb6ad4de8d7498086b02c6dc4fe6930ed91c675506aa1992f16d40df4b0ea0086d2494efe472232bb2b9ca3a7db29c3564ebced3cf4e4") read$proc_mixer(r4, &(0x7f0000000080)=""/128, 0x80) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:32:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f", 0x44, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:32 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_mount_image$omfs(&(0x7f0000000180)='omfs\x00', &(0x7f00000001c0)='./file0\x00', 0xff, 0x6, &(0x7f00000007c0)=[{&(0x7f00000002c0)="8fb7323bb32aa70002769900603410c598d6af99f77fa029ef5bc0d947a4c61303a7f33e428883873d0a04dd1fb56af1c694b776200fc624793470eefaa19437d123f2aec5", 0x45, 0x7}, {&(0x7f0000000340)="b4998ea5bfdc156eda14dc0dd0924a7dfacbe7414c25a763aee25d465a83a069920c89531f3a757d053dc36c97b5c08b1ff3763bbdad71bcfa7f9c438fcd9eeeb8e6b5a48c65eb5b4ed1489f9b49d346caa2f090b18bf4644d71c27d33ee5a68750bf804bd5dcda00bc35710ee36185fa13116516a607693afc76915b4e46913dc058f09da861a5cff18598560c4fce37bf8d821c1ba149d7f21d1b8686a325c17f3aa394ee8bc793b89ab9ef4c7fa7ceec69e6807de5e2e5de9b1d26cfb56820f01a2bccda59fbf1ef13d5a18c78ee5060496d03465bd22f59b726d9e2e97d10b37c7ac0a2f28cbc825ade37d464a42e308f14d927b705dac", 0xf9, 0x3}, {&(0x7f0000000440)="2c9f90ca0aacf0cdaf762296861892db7f6e89b4c73d7638e88720cfdb191f42b6e777c443c22425970d5955033078f5272c7fdfa8957f25f2bdf3a0b769f411667746ff304424401b3132f625d9f19ff12bffde5b2e364edffd593aa4b0a511902ecc74b60a0083dccbda1748586ba968ace84e2b9f415cb8c85623bc55e4920548547d2e41273b108bdaab119c57a9509b704fa4c7e516405db72dafbc0670b62d0e5cab1fcfc15570bb6d8d46b88658bf8f5412aa8e54c21501743d6894e81327edd76f1e0090a8d7ae8e94d71999b3", 0xd1, 0x1}, {&(0x7f0000000540)="482940bc61c56564ca25349ad5161d6de21a935984d8b4329022d7020df7bbacbb49490f26a2d1dbb85f37af897dc997bfcc777bfdbffdf668d4e51f823de8a3f85776240d1f19f2108f34228b76d66db889b0102b9bf266e77dfb7b6b360067ae1b949660080d98ab911e46735f0c9f35b8e16c", 0x74, 0x7}, {&(0x7f0000000600)="182322f2eae98ea3a5775ed3a5387fd1bfba709c1063bc0b2accee2e9fdd777018995d6daf663912359be9c2feb5f1ff0788a11d46997c34eed97de004867c83112b9ffe21baacce6979b08a0f900540fdb48f2334e789fc53768202d012a6bdbfe8a0841d3318edef5ce7ae2d9151c34cb1df4a99181a26f0aa55c8351a29795837e6b1b05811ed6372feeaf59f42e15c9a7a4a958ca1aea1805da8e05da346f655eab39d8fb3d3fbc3b735cb263b", 0xaf, 0xbf34}, {&(0x7f00000006c0)="201fc0a256c83e8ee8ab2780719ee47654410cf80b91b2c521fd069535b18eec9c051ff7a76068874899cc092af74e3fc26dfe9eaf2905aa9401c88d5cfe12ddab4af1a19cdfb0c1e4bdb8b90d13aaf4b3f9858f43c5bac513f0a1600c252abe09395214c23398fc30a98597848be743ec31e487543cb3dbbe8305bcbf8f156514deea2a35d0a79d08c70f038c1ceb58cd8f477bcd7cb4564fe01953eca2f4436b4f7b3a90e39c2bebde033241c3a0041b9492fede1a74cae92360e90e2f3548c89017d97aa0efecf23b03616e3de3458fe8ce7d6ea7a7", 0xd7, 0x80}], 0x84031, &(0x7f0000000880)={[], [{@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2661.992512][T31852] EXT4-fs error (device loop4): ext4_fill_super:4964: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2662.004928][T31852] EXT4-fs (loop4): get root inode failed [ 2662.022734][T31852] EXT4-fs (loop4): mount failed [ 2662.033839][T31857] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:32 executing program 2: shmget$private(0x0, 0x800000, 0x200, &(0x7f00007fd000/0x800000)=nil) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000), 0x0) dup2(r1, r2) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x30, r1, 0x6) r3 = syz_mount_image$ubifs(&(0x7f0000000000)='ubifs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="43dd7be92fad1c65918909e176971109697f69b36537ae5fca0ecb1703b669788c3f24845615ff10f364b0b306680caf1b705668757159ee14edf2", 0x3b, 0x400}, {&(0x7f00000000c0)="b8bd2fe4440b5fc78f4329570e1b49f85be9ce921082f5e87b7279a5efdf97e7e9adead8739e21265b9ed400fac816765d52b0a397", 0x35, 0x6}, {&(0x7f0000000100)="5cafe3c682fab3aed610172b281c13667b5014f3febf3b7579c039a5964cf66d2610f16b46743c99dcbfefce97b123b32504df7c004d920b470fc639066f46be04203fb1af5fdd536d9d897cebe45121b71a19de85f40487b28e0434b0504bc5edaa244aa2fde5e5ad204770853bbcf6aa", 0x71, 0x81}, {&(0x7f0000000180)="397cae4e8fe233071f10c0d0b5cbcf1915e9a67adbed523cf9ec5ada41b7", 0x1e, 0x6}, {&(0x7f00000001c0)="9b2c07dbd5be08c57e821511652e90f71a4f32da2ae8c5da352934bdec372f5470aa33a23a1df758de2c7aa5bb3aeec116d0046489aa67dcdfa83aaf3a4f182af7c63783ddd323517509ace7e902dabb0987f68092726da2074b0e72dd828d24150978c8946cebce63971d3b8b885a4bbced2b9cb30e21f6e0c38f9201913a19f387086a417c1ac145a05b2a61c7b49afb4739da59f1abfe7df83c1ef39912d4c52f10e565862f7e2af625a024a2cdd8f17eb947563c65ad8b4c159b852a28bd4616215d3af8cafdf5dbcc48b2e2e3e537267791126e9c7b163864f457e9bf8e1e2b4f368150ab4d4ddf45b0971c7d7a0a63ae7aef62bda8", 0xf8, 0x1000}, {&(0x7f00000002c0)="ca6cf726d489b369f67362ac8aa92587f8a2ef77f086b039b9f30538af53b7f7d0037d663553444d14a1c5c2c7c711aca4e06e59acbf7863d1d2961668e42a04f34bee9437c7cd6d69b21c25d16022937630eae81481831c84d5c3ea9f6c534749ab7bd7a7727e956cfcc278468f3d3f865fe03e05c6d9e351893c42bd2dd49281976054703e063aec23562244ba92270ed101c62a4bacd1c89643a5d440598adade20c407db84721c19637a926d13cf8e468742b737d31666fcf86fecca3e34a0617fca50f014839b6440c3a23e8f38962a155bf9334077b51571", 0xdb, 0x100000000}, {&(0x7f00000004c0)="86ab3558d528328c090c73b3220acb36cee2b6945ca57fb606633c7f2ba25f2a4e3f10161c61324a0d00e830f6e44a7d1bd81065f8fba712fcd56e12321dec9275d56c5e5901638b746b49621877d1a067ca13196c4d1d731157a945b3c3f12f2a618b477ce7bb3c9144d17d40ed38486f797eb22762193c8ccafc4f9a5206a9f1d9ff0531953af27b9787a27a24d6649c82a8a8ca2ae9f9a89a00e873289afe355da4055df74577317e43a597e6210bbc4d1daf759b5da63a6fb2595e92aed5e97bc0b67daf7f4680904ae0815b709332a9e3cf818ff7", 0xd7, 0x8}, {&(0x7f00000003c0)="daf42d869a6a34a18881ca37872c603c148eeb46d1d8132e65d1febb311641006c9176ba79e0d3df77389398d498442371d58385282e94f41bcb9eddd2a2c4087052664d0cadbafcc92184df54ba3872f89c8ffbcb5d", 0x56, 0x8000}], 0x3000, &(0x7f0000000680)) execveat(r3, &(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)=[&(0x7f00000007c0)='$-*\x9a\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='!+@*}(-}}(,{#\x00', &(0x7f0000000880)='\x91\x00'], &(0x7f0000000a00)=[&(0x7f0000000900)='.\x00', &(0x7f0000000940)='{-\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='\x00'], 0x1000) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001600)=""/4096) [ 2662.098758][T31857] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2662.128162][ T34] audit: type=1800 audit(1604820752.171:275): pid=31871 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=61 res=0 errno=0 [ 2662.137422][T31857] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2662.281557][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:33 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000000)=0x1, 0x4) 07:32:33 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x10, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x1}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', 0xee01}}, {@fowner_lt={'fowner<', 0xee01}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsdef={'smackfsdef'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@appraise='appraise'}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:33 executing program 0: shmget$private(0x0, 0x800000, 0x200, &(0x7f00007fd000/0x800000)=nil) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000), 0x0) dup2(r1, r2) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x30, r1, 0x6) r3 = syz_mount_image$ubifs(&(0x7f0000000000)='ubifs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="43dd7be92fad1c65918909e176971109697f69b36537ae5fca0ecb1703b669788c3f24845615ff10f364b0b306680caf1b705668757159ee14edf2", 0x3b, 0x400}, {&(0x7f00000000c0)="b8bd2fe4440b5fc78f4329570e1b49f85be9ce921082f5e87b7279a5efdf97e7e9adead8739e21265b9ed400fac816765d52b0a397", 0x35, 0x6}, {&(0x7f0000000100)="5cafe3c682fab3aed610172b281c13667b5014f3febf3b7579c039a5964cf66d2610f16b46743c99dcbfefce97b123b32504df7c004d920b470fc639066f46be04203fb1af5fdd536d9d897cebe45121b71a19de85f40487b28e0434b0504bc5edaa244aa2fde5e5ad204770853bbcf6aa", 0x71, 0x81}, {&(0x7f0000000180)="397cae4e8fe233071f10c0d0b5cbcf1915e9a67adbed523cf9ec5ada41b7", 0x1e, 0x6}, {&(0x7f00000001c0)="9b2c07dbd5be08c57e821511652e90f71a4f32da2ae8c5da352934bdec372f5470aa33a23a1df758de2c7aa5bb3aeec116d0046489aa67dcdfa83aaf3a4f182af7c63783ddd323517509ace7e902dabb0987f68092726da2074b0e72dd828d24150978c8946cebce63971d3b8b885a4bbced2b9cb30e21f6e0c38f9201913a19f387086a417c1ac145a05b2a61c7b49afb4739da59f1abfe7df83c1ef39912d4c52f10e565862f7e2af625a024a2cdd8f17eb947563c65ad8b4c159b852a28bd4616215d3af8cafdf5dbcc48b2e2e3e537267791126e9c7b163864f457e9bf8e1e2b4f368150ab4d4ddf45b0971c7d7a0a63ae7aef62bda8", 0xf8, 0x1000}, {&(0x7f00000002c0)="ca6cf726d489b369f67362ac8aa92587f8a2ef77f086b039b9f30538af53b7f7d0037d663553444d14a1c5c2c7c711aca4e06e59acbf7863d1d2961668e42a04f34bee9437c7cd6d69b21c25d16022937630eae81481831c84d5c3ea9f6c534749ab7bd7a7727e956cfcc278468f3d3f865fe03e05c6d9e351893c42bd2dd49281976054703e063aec23562244ba92270ed101c62a4bacd1c89643a5d440598adade20c407db84721c19637a926d13cf8e468742b737d31666fcf86fecca3e34a0617fca50f014839b6440c3a23e8f38962a155bf9334077b51571", 0xdb, 0x100000000}, {&(0x7f00000004c0)="86ab3558d528328c090c73b3220acb36cee2b6945ca57fb606633c7f2ba25f2a4e3f10161c61324a0d00e830f6e44a7d1bd81065f8fba712fcd56e12321dec9275d56c5e5901638b746b49621877d1a067ca13196c4d1d731157a945b3c3f12f2a618b477ce7bb3c9144d17d40ed38486f797eb22762193c8ccafc4f9a5206a9f1d9ff0531953af27b9787a27a24d6649c82a8a8ca2ae9f9a89a00e873289afe355da4055df74577317e43a597e6210bbc4d1daf759b5da63a6fb2595e92aed5e97bc0b67daf7f4680904ae0815b709332a9e3cf818ff7", 0xd7, 0x8}, {&(0x7f00000003c0)="daf42d869a6a34a18881ca37872c603c148eeb46d1d8132e65d1febb311641006c9176ba79e0d3df77389398d498442371d58385282e94f41bcb9eddd2a2c4087052664d0cadbafcc92184df54ba3872f89c8ffbcb5d", 0x56, 0x8000}], 0x3000, &(0x7f0000000680)) execveat(r3, &(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)=[&(0x7f00000007c0)='$-*\x9a\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='!+@*}(-}}(,{#\x00', &(0x7f0000000880)='\x91\x00'], &(0x7f0000000a00)=[&(0x7f0000000900)='.\x00', &(0x7f0000000940)='{-\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='\x00'], 0x1000) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001600)=""/4096) [ 2663.021982][T31885] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2663.026383][ T34] audit: type=1800 audit(1604820753.071:276): pid=31888 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 07:32:33 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SVE_GET_VL(0x33, 0xea5f) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, &(0x7f0000000040)=0x8) [ 2663.072805][T31885] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2663.073392][T31889] EXT4-fs (loop4): invalid first ino: 0 [ 2663.100536][T31885] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2663.320712][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2664.360500][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2664.840552][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:35 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000440)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x18241, 0x0) setsockopt$sock_void(r8, 0x1, 0x3f, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x800, 0x78, 0x4}, 0x18) ioctl$CHAR_RAW_IOOPT(r9, 0x1279, &(0x7f0000000380)) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000180)) getrlimit(0xe, &(0x7f00000003c0)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:35 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x21b) 07:32:35 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x180, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x39f4f80bb0152e05}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0xa041) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:32:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2665.032443][T31918] EXT4-fs (loop4): invalid first ino: 0 [ 2665.046496][T31921] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2665.071007][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2665.093285][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2665.123536][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2665.133908][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2665.231238][T31921] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2665.245854][T31921] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2665.410421][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x21b) 07:32:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:36 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) 07:32:36 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_mount_image$ubifs(&(0x7f00000004c0)='ubifs\x00', &(0x7f0000000500)='./file0\x00', 0x81, 0x6, &(0x7f0000001880)=[{&(0x7f0000000600)="3e38c8f29f55af936c7db272d0ab6bf2e1e3bdc41bf8914ab2e5fab5ab778a8b86a6b73617454ac2cba3160e2ab27dc5cd85db86ccbf2f183a587926f3a26c53907e851b055e3132e5aabae0a63d337cfd00b33dd138ccf4ec6f0138e7a69bde928171190b56a2cfc0d011847e3930a38b1d5bd7c5aecc6c7b6aec6a08f4fef7bd4b0031434f6ac66206672ccc8667ed268a5a886b", 0x95, 0x40}, {&(0x7f00000006c0)="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", 0x1000, 0x7}, {&(0x7f0000000540)="f68bdd49521f16315deabb95d7ea13c7dd100ef5544a74bd317b782fe9e1ef5817daa779c17abf1e48bfb952968e0836afd225e68df4a72b775dc852fce918c640e65c566f7817a2eacfc287b68aa2", 0x4f, 0x9}, {&(0x7f00000016c0)="4cff48c8ec8c0f9e4258e3fcb754ef9133a7738dcf405898b3b2b9e04a5b65cf4b59ffc47bb3807c946b4edb8bd499f5", 0x30, 0x1}, {&(0x7f0000001700)="a74bec0ea2f65d273e29de55d04cf75affb330f85d20bf0538dfa0faacfd18ed3bf3552578ca816e603df32e655cd74f7929a6a8bfdd0d5fc2d4f7267c9fc5dca7e1bc7655575692edd4ece3965434ea3093531d6ad17170b6f958f0fb6dd3aa3b8d760026591828eec3fbe78e1e281991b42474dac79c1e02b6ed0790071601eccfa372f3c46b0e50fcc24a5bd77c142a591418d98545bf15609948d9dbb2eab3fc41075a73fab5c8f06a2d5bddf215e1d68a4fa04154fed783b65672ea8b00db28d6f8e2ec868db7339ae61105853f1a274e5a33c27b633166a243f88b24bd6554a129e52178f4629c642f12cf4017", 0xf0, 0x9}, {&(0x7f0000001800)="e750bbbb5df5c9fc90edbed864aee6a148925cc5b5c986de9aff61a3f86afac95bbbc28ed53045a89621c061e91a26ac659b6e14b00ce849e2b4ff0eb2340dc929e2865a78311ee1b424d700de4fd184a1ada5c48dc63a65f24a59c47a0b97d6a181b226445d1ada2813", 0x6a, 0x5}], 0x20000, &(0x7f0000001940)={[{@compr_lzo='compr=lzo'}, {@compr_lzo='compr=lzo'}, {@auth_hash_name={'auth_hash_name', 0x3d, 'sha1'}}], [{@hash='hash'}]}) readlinkat(r1, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)=""/95, 0x5f) r2 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0xd}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}]}, 0x9c}}, 0x2004) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r2, 0x0, 0x0}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001b00)={0x3, 0x77, "28884897cd377d0c16492fa1fae1e667bc5d02b2ac50abc9d1cceacd3eb63315729a49213ad94d4998327242aa24c4887f4831b95b8a925ccb11b6c09f5b4db8d03df1ec6f18fe6b9804cb30ee101625e52113c9fbac3087042963886c2332ad3cc2254dc802ba9acc7d2fbe204d83160cb1fb80a1fd0f"}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000001a40)={0xa, {0x4, 0xc9, 0x6f}}, 0xa) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000300)={r6, 0x6c, 0x200, 0x6, 0x7fffffff, 0x8, 0x40, 0x694, 0x3ff, 0x0, 0xff, 0x80000000}) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001ac0)={&(0x7f0000001a80)='initcall_finish\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x40, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000811}, 0x841) 07:32:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x21b) 07:32:36 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xc080) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xa0280, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'vxcan1\x00'}) [ 2666.207884][T31971] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2666.208532][T31972] EXT4-fs (loop4): invalid first ino: 0 07:32:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000440)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x18241, 0x0) setsockopt$sock_void(r8, 0x1, 0x3f, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x800, 0x78, 0x4}, 0x18) ioctl$CHAR_RAW_IOOPT(r9, 0x1279, &(0x7f0000000380)) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000180)) getrlimit(0xe, &(0x7f00000003c0)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2666.292254][T31971] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2666.330742][T31971] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:36 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40000, 0x0) write$P9_RLERRORu(r4, &(0x7f00000001c0)={0x12, 0x7, 0x1, {{0x5, 'ext4\x00'}, 0x4}}, 0x12) [ 2666.378918][T31999] EXT4-fs (loop4): unsupported inode size: 0 [ 2666.387764][T31999] EXT4-fs (loop4): blocksize: 1024 07:32:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000440)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x18241, 0x0) setsockopt$sock_void(r8, 0x1, 0x3f, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x800, 0x78, 0x4}, 0x18) ioctl$CHAR_RAW_IOOPT(r9, 0x1279, &(0x7f0000000380)) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000180)) getrlimit(0xe, &(0x7f00000003c0)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2666.441923][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2666.528330][T32024] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2666.545519][T32024] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2666.559326][T32024] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2666.760366][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2667.480260][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2667.880192][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2668.520118][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:39 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x70, &(0x7f00000006c0)={r3, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000780)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r3, 0x7, 0x1f}, 0x8) 07:32:39 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000440)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x18241, 0x0) setsockopt$sock_void(r8, 0x1, 0x3f, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x800, 0x78, 0x4}, 0x18) ioctl$CHAR_RAW_IOOPT(r9, 0x1279, &(0x7f0000000380)) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000180)) getrlimit(0xe, &(0x7f00000003c0)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:39 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_pts(r5, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'gre0\x00', 0x2}, 0x18) bind$tipc(r5, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x1}}, 0x10) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2669.334355][T32049] EXT4-fs (loop4): unsupported inode size: 0 [ 2669.342181][T32049] EXT4-fs (loop4): blocksize: 1024 07:32:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:39 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x214) [ 2669.426129][T32052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2669.462384][T32052] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:32:39 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x214) [ 2669.496501][T32077] EXT4-fs (loop4): unsupported inode size: 0 [ 2669.506177][T32077] EXT4-fs (loop4): blocksize: 1024 [ 2669.511762][T32052] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:39 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x2, 0x1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2669.570058][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2669.683807][T32092] EXT4-fs (loop4): unsupported inode size: 0 [ 2669.689991][T32092] EXT4-fs (loop4): blocksize: 1024 [ 2669.753240][T32095] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2669.765969][T32095] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2669.804461][T32095] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2670.599892][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2670.919912][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:41 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x214) [ 2671.639796][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000180)=0x7fff, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:42 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2000, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)={0x87, 0xe, 0x2, 0x8, 0x0, [@loopback, @dev={0xfe, 0x80, [], 0x32}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @local, @mcast2]}, 0x78) prctl$PR_SET_UNALIGN(0x6, 0x1) 07:32:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:42 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) read$FUSE(0xffffffffffffffff, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f0000001280)=[{&(0x7f0000000080)="ef2682059fa394adbc", 0x9, 0x5}, {&(0x7f00000000c0)="c5cf938d3bba757ba0a9429ba2ef8a73b4b7297b4829a4b65fc39f3f0386cf26f55c39ce034c0ca3932e20b8d0b266514fe729a1ea475a1a2675a8dce86191201503734be5305bcf49eab46113ab14e604c573d9660dc14302a2dae773f4531b623281e6d2e95fe5fc98eedd04", 0x6d, 0x4}, {&(0x7f0000000140)="a9c79fbf4d6cf196f8041a9e622188f4870c755086259ebe640b3246a337a39fd578684cd3748eda4d0e214ba8faddcdcac81e557e305973ba0cf286088812dced34c187830b849e0fe5c783113dbbae1bb4d5a4a7bf637a3c247ad0501a4a117095a7b44c384be36a36ff2f9fa783b7c073bc2329bbaf9267e6d028f4d32c3405b2cc424e1adc99b5e6b1e870e62eeb20adf6fc4575fd48fae839a4c2d4e09c1d00590de3570742e7ba833a250f1c6f6ea823949cc0009a133160b667980d465ea9b513c53ca9", 0xc7}, {&(0x7f0000000240)="7d12a99b0c5d565841e1893a04a94094fa5d6c4fb0054f05f598723ec6acdbe049bfa710c7cc50", 0x27, 0x7}, {&(0x7f0000000280)="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", 0x1000, 0x3}], 0x400, &(0x7f0000001380)=ANY=[@ANYBLOB="5d2c292523292d2c212d2c5d2d2825232a295c5b2e2c2c40232cb52c2f212a252c736d61636b66737472616e736d7574653d2c2a7d4027f9407d252e5bd67b287d2c6d6561737572652c7569643c", @ANYRESDEC=r0, @ANYBLOB="00f191604786691c00"/20]) 07:32:42 executing program 2: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:32:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2672.351031][T32128] EXT4-fs (loop4): unsupported inode size: 0 [ 2672.357128][T32128] EXT4-fs (loop4): blocksize: 1024 [ 2672.390696][T32130] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:42 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000000)) [ 2672.454121][T32130] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2672.502807][T32130] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2672.526712][T32161] EXT4-fs (loop4): unsupported inode size: 0 [ 2672.535127][T32161] EXT4-fs (loop4): blocksize: 1024 [ 2672.691293][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.729592][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.959555][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:44 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x74, 0x3ed, 0x200, 0x70bd26, 0x25dfdbfc, "b0c4451690b4a1451d96401e960e842752193942cf8f3db301bbb232f38cefb14b58ea638d10e81410f8af840213a147783cc3a9c4bee06d6e79e76875f0dc2b1d3f32c74c26dbe7d5d50825e3acbb914ed4f5dbf5493fcbd14cb80a2053bf21c62d710f", ["", "", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x20000804) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2674.171149][T32176] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2674.183861][T32176] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2674.218455][T32176] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2674.759498][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:45 executing program 2: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x600, 0x4c26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="000000001b999ff2a84a9cdfe408898cf8c8c53e34e88f4f74", @ANYRES16=r0, @ANYBLOB="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"], 0x1984}, 0x1, 0x0, 0x0, 0x4800}, 0x44001) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:32:45 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xd0, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbb}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8014}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000440)={0x3}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2675.542700][T32202] EXT4-fs (loop4): unsupported inode size: 0 [ 2675.548829][T32202] EXT4-fs (loop4): blocksize: 1024 [ 2675.564580][T32201] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2675.607128][T32201] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2675.645323][T32216] EXT4-fs (loop4): unsupported inode size: 0 [ 2675.651707][T32216] EXT4-fs (loop4): blocksize: 1024 07:32:45 executing program 2: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x8c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2375}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x5) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/4071) [ 2675.657320][T32201] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:45 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x81f, 0x4e21, 0x5, 0xa, 0xe0, 0x0, 0x2b}, {0x2, 0x8, 0x1800000, 0xffffffff, 0x20, 0x53, 0x6, 0x1}, {0x1, 0x3fffc00, 0x7ff, 0x2}, 0x10000, 0x6e6bb9, 0x1, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d2, 0x3c}, 0x2, @in6=@private1, 0x34ff, 0x2, 0x0, 0xab, 0x8, 0x3, 0x7}}, 0xe8) [ 2675.709448][ T34] audit: type=1800 audit(1604820765.762:277): pid=32220 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=64 res=0 errno=0 [ 2675.732749][ T34] audit: type=1800 audit(1604820765.762:278): pid=32220 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=65 res=0 errno=0 07:32:45 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r4]) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) fchown(r1, r4, r6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0xc003, &(0x7f0000000180)=0x3f, 0x1, 0x7) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2675.801394][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2675.865681][T32232] EXT4-fs (loop4): unsupported inode size: 0 [ 2675.873077][T32232] EXT4-fs (loop4): blocksize: 1024 [ 2675.883567][T32235] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2675.899695][T32235] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2675.921175][T32235] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2676.359341][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2676.839211][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2676.999371][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:47 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) open(&(0x7f00000000c0)='./file0\x00', 0x303000, 0x3c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x101000, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/169) [ 2677.879148][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:48 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:48 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) fsetxattr$security_evm(r2, &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x3, 0x0, 0xa, 0x6, 0x41, "90dabf60d71f16f2e4d0fc2cce08e1f0fdcc6167c5fe9cccd1cdd22b011087e898f522dfa12abfccec8481c7a4d30e69170e75935f065e67dd1ebf40774dcf3bca"}, 0x4a, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r2, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) fadvise64(r2, 0xa9a, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x225}}}, 0x84) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x408000, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf255e0000000c0099004de7000046000000050018012a0000000800ba0094d600000800a1000fb700000800a100090000000800270001000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8085) 07:32:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2678.556762][T32261] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2678.571313][T32266] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2678.583555][T32261] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:32:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2678.597975][T32261] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:48 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x6, &(0x7f0000000480)=[{&(0x7f0000000240)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004be3e8425ab864577b28f0475733068d6729927030bde3556a5019738c8cc435c627676768191851199bff3928973797c787e9244344ae747ac4ff1ef3fd16bbf1e7d73024fa7050e187bd02766276abb01359fb39f126e06c22ddaba1677a4393f9425f4166a85ad0895355871c9b860a9cafa7faf6b4925f212c973bcf0e867e93146e9c54012386cef048f773622b3be6d3c81e06f8fc8a8ddc07cf2aa26", 0xf9, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4180000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4002}, {&(0x7f0000000180)="0a0000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530dbe8af6bc453078f431f1af8e6f258f3725d78bbee66c3a2f7abeed40dff1e013954c9", 0x5c, 0x93fe}, {0x0, 0x0, 0x5}], 0x2001880, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2678.686190][T32296] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2678.921433][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2679.958943][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2680.038865][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:50 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) 07:32:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x800, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:50 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0xc473}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x141000, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x80) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000180)={0x3, 0x2862afa11c374834, [0x10001, 0xd7ee, 0x401, 0xdc46, 0x80, 0x9, 0x1ff, 0xfff]}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x410340, 0x0) setrlimit(0x8, &(0x7f0000000380)={0x401, 0x80}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f00000002c0)={0xffffffffffffffff, r5, 0x7}) 07:32:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2680.235741][T32338] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2680.247369][T32337] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2680.319786][T32337] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2680.341315][T32337] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2680.998818][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:51 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:51 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0xc4000, &(0x7f00000000c0)={'trans=unix,', {[{@aname={'aname', 0x3d, ':'}}, {@version_L='version=9p2000.L'}, {@cache_loose='cache=loose'}, {@afid={'afid', 0x3d, 0x1}}, {@privport='privport'}, {@nodevmap='nodevmap'}], [{@fsname={'fsname'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+'}}, {@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'root'}}]}}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001040)=""/4105) read$char_raw(0xffffffffffffffff, &(0x7f0000007080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090a483448d8d05a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097e0f287c7915f85ce14fb537cee9bc11173e2ca89b27f484dca59bce214e55a743b998e997bbd7c66d0d2605a132e534f200070eea72d3afe8291a80275b850e9a4718e1"], 0x4e00) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_matches\x00') ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x80, 0x1, 0x1, "82b2d714976930f9e89eee4720ab4e711024c68b8fdd56ea34f09b84ef86e3c3", 0x35303553}) 07:32:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2681.585379][T32368] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2681.606992][T32371] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2681.691695][T32371] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2681.717847][T32371] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2682.038701][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2683.078591][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2683.086686][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:53 executing program 2: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000001080)={0x0, &(0x7f0000001040)=[&(0x7f0000000040)="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"]}) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001180), 0x1000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x321900, 0x0) acct(&(0x7f0000001100)='./file0\x00') 07:32:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:53 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x6, 0x100) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:53 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x7, &(0x7f0000000600)=[{&(0x7f0000000080)="042eec9aee958a4111cd5c66748140f8bff48803317c", 0x16, 0x8}, {&(0x7f00000000c0)="a6eb0cd222530dbf9a7f8064bd6868aa9f18d7986bbe5f4230a39e65842cb689ba506be0327b90908a2aef7e1a2e8fca4170fb9a60dab880632a5232159fb8c65008927bf80fbc09df8d1e484b", 0x4d, 0x7ff}, {&(0x7f0000000140)="7f7d29728c333465f2654ad8423af10bb7d4519542f0a71eeb6540cbee98fabcce7dfee740b6d65e181b7fc89885d60e1741b3df9d867b06d43459037f7c0e56acdcfe19ea9b32701f710b47883dab5a1ccdb840100c24807b6a12e0d058b4c60f4ae6", 0x63}, {&(0x7f00000001c0)="123b1090c320638b30c5500fbde151ee61fc734c244e1c32873e03cea91656482e86d60c19d2fc301d8b019f4c08ad8420328f1a0d1b35e4abb8a4a8b1c86a09d5e103c7427afe7e8ae9262526cae61336556e24caba786a2a528c72b5ee76388187c6a883c4c134040a240fd44dd254f74af4e186af66bd64d2076558af", 0x7e, 0xffffffff}, {&(0x7f0000000240)="552c15127a5d8a9e9bdd2fcf7b775b30994a49cc438916c4e5d6f94bcdf778f9bb57cb2acacf3c7d3ab0bb96ecd84379daf46ccd2dd6acede188c43c4da1ec7eadbfb8717f949d17e4e94bd3554efd26fce6fcbafba2c759e558d5e162cfc714f4d979851d385485f5dc71520c5c84b3564cd57f215f9a24413a0efdbd8eceede0e9710d34e7d8b46080cdf669693e32f04fcba03ddb2c78b8d7b076a1278119634012064cb4c33b21bfcd7b86", 0xad}, {&(0x7f0000000300)="227daa2464667150281cdbf257c054652b6640c1876e1afe1b280153e4488a6520bb096bbb40cb3553d9d25fd6ecc7925b097eda369c2385eb7aa0df964cca547943f840048b0d4f22ce219efc48a6e3d5c1be24aec361636dea5aef29921c155c8ca7d84586e902f1cf851bcb18cbad89abf1c163feae91b78c57bb2a5ff631aff686c5388b1c9cc96868d40405e4eae85c66762e", 0x95, 0x9c}, {&(0x7f00000003c0)="11ea871f4d6467ed7cc6cb650b060589044505cc503e36642fcdf4c54f443d6765adb9832bb9d0ce1fac4417145905eb8ec626404aff640d29a6f77a5c4cebc72927e39300f433291853cc78817fe5d0ed511b44b060d2bc562d84f8d35e187c2bae39bcd4344768480a26e0977c6a82e64abaa3f914374436c905ef2c25d8bbe50c0ca155bed4c37eaac13c8c8d84aa989a22010cf7ccb7b4185aa1f604e615ef963c7260c608bd72309ebe77d1fd214d69a081f17c60371b285c3d040549b4ed4f949d2bc8fa8fc628a6e7e9d97912b8423c2773ba0f", 0xd7, 0x4}], 0x8082, &(0x7f00000004c0)={[{@hide='hide'}, {@overriderock='overriderockperm'}, {@overriderock='overriderockperm'}], [{@subj_user={'subj_user', 0x3d, '\xbd\xf7>\'\x96\xa4QNU\t\x910}\xf6\x01fj\x8ce\f\x84\x88\x91\xefMq\xb9\xbc\x9c\xd2-,\x87(JvH\xe3\xf8\n\v\xa49n\xa1\xca\x9e}f\xe2\x8a\xe8\xf3\xe2\x9d\x95\xb9\xa8\x9d\xb9\xfcK\f\xca\x00\x00\x00\x00\x00\x00\x00\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 2683.279060][T32409] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:53 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='xen_mmu_flush_tlb_one_user\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) read$hidraw(r1, &(0x7f00000000c0)=""/247, 0xf7) [ 2683.335923][T32409] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2683.370241][T32409] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2684.128706][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:54 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1000, 0x10d, 0x1}, 0x18) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x9, 0x4) 07:32:54 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r3) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) msgget(0x0, 0x400) r5 = openat2(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x80, 0x5, 0x16}, 0x18) write$P9_RWALK(r5, &(0x7f00000001c0)={0x23, 0x6f, 0x2, {0x2, [{0x10}, {0x20, 0x1, 0x1}]}}, 0x23) 07:32:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2684.618122][T32446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2684.629231][T32447] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2684.640590][T32447] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2684.655792][T32447] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2685.169561][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2685.958347][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2686.118501][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000004ec0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:56 executing program 5: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x8001, 0x40ea, 0x4, 0x1]}) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000002c0)={0xd6f7, "9e5f948192b8b112c0d577470fd92a90e1c58a86d723aa3e4befe1a5e994f5c9", 0x4, 0x8, 0x3, 0x6e8, 0x10, 0x2, 0xfd, 0x2}) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x4d0c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000340)=""/72) 07:32:56 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="ee394803e733e0fa173165b3eb39feb2ed26278e447b51ce240e59fe81f5b0017260b8e73ef71e6f320cdda65d1b1d572c00da0d67cdd0cc19e69a937d96b8fd123064d7b22d2477557008eb046a8797d8b42d62d8b9e8012ac34ae06f13e0137a88c5469c53fda1a43b6555cdae9d295a83af55a32b7b59290bf4ad0019c05e987760b9d3e7dfb2139ba7194440433a24ed67866d9cc5bb7e08cd94e9c3d95eedcae84e7e368834714c5c110c3294abbb571cc7edad0376b36849fa6efd7a9041401aa4c9ad8533705c3b5fe4bfe6abad08850d06ba2d089b24cf3e38e09de0585b1e8695f20d", 0xe7, 0x4000000, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) [ 2686.208288][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2686.275320][T32482] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2686.287043][T32483] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 07:32:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2686.326090][T32495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2686.339030][T32483] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2686.357013][T32502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2686.368430][T32483] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:56 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000180)={[0x6]}, 0x8, 0xc0000) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2686.414001][T32513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2686.489808][T32518] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2686.538830][T32523] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2686.548945][T32518] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2686.571190][T32518] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2687.238142][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:57 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x2882) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x9, 0xe8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f00000001c0)=""/175, &(0x7f0000000080)=0xaf) 07:32:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:32:57 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x442002) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x5, 0x1], 0x2, 0x2, 0x8, 0x1, 0x7f, 0x4607d079, 0xfff, {0xd32, 0x0, 0x6, 0xfffd, 0x9, 0x3, 0x2, 0x3, 0x7fff, 0x2, 0x7, 0x3, 0x3, 0x10001, "26c524f18e36c0bad417f35782dbaf8323109352794c8e9d12b14874aa722f11"}}) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) fdatasync(r5) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r9 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r11, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x5, 0x8, 0x0, 0xffff3f8e}, 0x80000001) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2687.642557][T32546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2687.650108][T32547] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2687.683568][T32546] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2687.697549][T32546] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:32:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 2687.797553][T32580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2688.278060][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.157975][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:32:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000004ec0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:32:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x9, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000000)=0x5f7a, 0x4) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000002040)=""/4105) 07:32:59 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x4001800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x7a42}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000001c0)={0x2, 0x2}) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:32:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1) [ 2689.294662][T32596] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2689.318893][ T34] audit: type=1800 audit(1604820779.374:279): pid=32603 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=68 res=0 errno=0 07:32:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) [ 2689.325871][T32597] EXT4-fs error (device loop5): ext4_fill_super:4964: inode #2: comm syz-executor.5: iget: root inode unallocated [ 2689.352178][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.375536][T32597] EXT4-fs (loop5): get root inode failed [ 2689.385751][T32597] EXT4-fs (loop5): mount failed 07:32:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000140)=0x706, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="ee", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010100}}, 0x1c) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 2689.461380][T32597] EXT4-fs error (device loop5): ext4_fill_super:4964: inode #2: comm syz-executor.5: iget: root inode unallocated [ 2689.475831][T32619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2689.498519][T32597] EXT4-fs (loop5): get root inode failed [ 2689.504497][T32597] EXT4-fs (loop5): mount failed [ 2690.357887][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 07:33:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="aa1073a5dc33d858eccfe3777476a3e9ae1e05776e6f14ce3eb28d7f8707869fa44dae398ab69923c73e11903e2829d29c3e6f2126f3d9c0283babe06cfabccd2d2177352e3872c8ff07c2a330008ae46cf90a65e13d8031c5de43e77116dde262ab4370f03900"/115, @ANYRES16=0x0, @ANYBLOB="400131bd7000fedb8ab556453e254dcf39acdbc525020000000600030001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x40800) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, [0x8, 0x3f800000000000, 0x88, 0x3]}) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x182b) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 07:33:00 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r1]) r2 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r2]) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x4, &(0x7f00000004c0)=[{&(0x7f00000002c0)="fb288658e4681536a0b0016d887aec4917c85f4ab8ebb323be318c73f3aac5628c393d0186", 0x25, 0x5}, {&(0x7f0000000300)="d92ae5fd8b2818caca5fb7d969045af8f02e80d060915b06a3350dd1cb255f9bbb7283712bb5ce925da4a3141f63b74be5e48c56ee58851339fa790d43b9cdc2c19b220c84eca1ca390b8eeaf821e09f5106a97a038578d8c6b0119d9245b0afb9a7be06146a423ebc6f1bf33ac211a242a73c7b36b2332dc658b491385ebc9a1061b8abe512dabb76af79dbd27377808b1e4734d401c8ba24c1438282fd6b4649fb260312ad765532b95ecd4b07c20415974085b7e19d974a89d67e6a3ebe0698bab2ce692811952f01732db3a79c343d185a95330e3c9db483ce80a7f1", 0xde, 0x9}, {&(0x7f0000000600)="05e0df4cd1bf9db2abeca27aaeb5c58938d2711964eed6bd95b8a720939ffd3bc003267dbd994651eb602e4394c2f010c151361c36da94fa1779f7169cd974245404ffb88f54b3f49c1a1a7c9b659c32c173af246835ac7effc72686424e071c363d9198e091f056512c788cde4130d5f1ccc957c1338f190614c7fe2e4e061f803fc2bb7cceb882b9035758c78a120de3b48da1248f2d4a78ea0cb94e7def35723ff5fcbde9f1b305d37aee4f489fdc6c71c8aab792eb190344a5842f257436cf783f9dd9cabe9acf93e8d11f17317563c50155d1a7f14120004f1f3654f07db48b8dbfcd05e078be35bad58c1b564880dc559de0d862ad6c4ccef53f23689e1e71686e14e0681a2f5981eec7d11e6d1a87775a12308fda34cb84581b645adbd63ebaf8b50a99d53bc3ee15f5de368085ee07a1a43c98b82291584cbd94ed03713e08cbddf3f8fb6a93e43d73c1d49cabace967cec5f564f60aa29568e47d65910c2b9bd88cf4dd0b73bbd04ca4da405938c42f500f30c4cb3006a271dbcd59eebb96280e9a9d9473ff04f67effae987a86e3f7c94e99dde255bfc9dc38b6c7dc7612324439af9002c3cff046a56b48ba8678ef76cb2cab80c79515115ccd8b7d36aad438a18a0cfaa396ab2da928faaea73ef0af765d044b7e4d8f90262b9bb8a1827071c4e1b352c242f75bb28aa2b0e252e5735f3e3f3559461c8e370069223c530416bbabd625edd8ec3d74f86967d8962ab29663658575a27d15cbe3cce46fba31b9e07c969d39e01c98a11b3b796e8943ce3474d894415ba8c7c3475f921a1d0914d1ef3f5456ce71a752c7fb3f0ef38b9a5e9ae9b057599dca32ddda7d8af9bb276c77a0509985504a2e6eb5380325908aae498996b3934e7049df9b437fb581c996611b25fa739b6562ec8eaa24d8cc03a295b40e6b15a1d0f223039d7a3f724c7c4236f7fcd15b2f796a773b8c9b7a67f0b8ae572949123f4dc2a2864b1f588166227ed7f85473574132be57468d6b08c8ba9121c2a1c5fa34c8a8397163bbbe67f91608a2d7141aa3340f504643a7009e0f599d5f7c91744be7fde2a5de10ce64124313b04795652e146cdaebe70a9702d5af1aca710711b2aac8e2a7756ff4703132f86e47c29546404791e5c58bd8aa219c97ed581771881ed0c7062d5649afac330e4e17e8c41e0cc83be7b7fee2777e5c8b224c0d950ff1e56da77c076c0278c9423246216ee99ff761f5e50cebb646ab6cd5f1a1b5a40a44f3f2fbda9a2483844c84c8892da7ca64894b215abe614e83ac7e46302f52655dcdb2f0b5bffb9e0048f2a98963a58fceaf86e20e3741e039409a913a3facdefc83672774075bcec32212fa95b6198e1bda4a7b6f67b12bedaede9bc64f249a2079ee6e9b06a55d2e9026b81fc4a9cc432f1d682c095845db6bc76bb34cd06a1086627887e0af2e121d6d50c237e094a1845a9554dbfa0f920ba8c658f132b991a384bf20ac210fcf52b1759fb03aad596f209725e651757cb045fdd7e9c1e1f9e81456364fba5d745fd9e4b4c9fb2bceb219eca1b687efe28c546ba51fc4872e048eecceba8d4da449630f8a818e7959be03d22f9ecf68fe3fe5b05bed52b684671b269eec674de4e44cf18a42d1e083b37d35ca0e0ffc17c6a82d904d75065c7fa754362cada1a3d97befed83f64ea56bc03e8a145ae44f58a29074bb407f0c59a941097aafe231d2c5ebdc68ae6117ffa9f7b22250e56477b6616adf96b5d19b8fcc4406c8cc50e7227900283bb3454552bb723e9c5a6b9aa6c78812e8ac69be6f8fb4a94c8e3dd83d239b2db748a69d21dde078985e863b667f8f10f9821aeda3b216bbfe78e78b601b1d9a24f011d830f0c7e867b33092f4776fd379e2e7cad3dc568ce0687d1f8759187a1ed0323f2cbb56d45f14fad4db6b5900b0f90d749129ba05c8cb0293d4e9d0d333316119ec9983d08f3d686ebb6b213c2c565b003473c69fd002616c86a845a12d9947692ca7ff480e04e4d13d64621360a1a78ae0d37e79bb420b66dd90f1ae593d424437a537aeab092dc5268985fd75dcbb4de8c7aa8d8c2327829ec4ff5d5b37e1023eb52dc0c15b4e07c366a08172f35509fb8391d7a6d531e9403f8e12a9fb3f1dbcea8aa6554b79cf2e53a8538e9980f835087a6ddd9ca35e432f2b2da1b65cf0a07dc7f68a85ced7697762480cb4cc0dc595e43c475c819835fc36a99e155d64691319c7e6eb27c626266b423444690047ccf66d469543574a143b18a0bd12043300e5aed2bbd4458b3ba6e8e52e5694b7b49b0602713168249ea23a94527d6809e605b4155bd7aa592cdb028dc5d4e6d90c45a5df5f8f1ae45a1c5be986c67c98595918154db2a66a5e91068327825bbf62f6baa58263beb5f22d5e3e2f54c176818a06699ece5fd182b0b6368742d0310560c4fb4f5391d5b00b1376cf9abe1f17667af58b620d32f9b15214df9efd29dca2940da5409bf84ea87261f6a6d23fc592a0d4be9bda16d18d0319067ae672f3163848f825f4be1bd79fa134044136c01cd5522df545eeb7ea6badae0f0532aaf876d8bc5894c246e011a923b3750477b83421acd337faa0dccd5e70b0ed30ae1ae29437d3493f274fa7f67989bcbbb90b93c7b130e91ed32624c5097b8293e8a9323d1093116826685e318bcc7871982d336488ad98e8b4ae9cbdae40211a20a1032dfde637c677c7fff29f9e05d6a1f5ac5810f18391532d953ed0509958eee63a81926c3a0082d8b0d7b566af17163656cea0573e290ff3de584ca4e5ea308752d16b31a249a256e3e797a12e69b4d5f00164bd0efcf6ed3769d1d0ce32e6b7367c56f8e9b5789bdfec5c49cba42925b099f2767eff5b610913098087a6bd3f4ee3df25786a0880e6415b4ab18ca9a1c14175be4b7d44194c7c5c81ed09e14da9f979af9409ee1546a38fb14ebb606ab9d126c31cfb63c75304ff2caff9964e5f0a5395147789b285c89e8e6dd7bb556f2e0e06019ce87ade407672bfc43627e8306a0f73184901c8da21fa1bff5ade34b80ce8fd88cb6e7412fd99910e56d4748fe521e3951e5d4db11a12aa3434e887ef54c30d5e32bafb435c9fe5d1cd0e3b429c673c98cd6ccd5351d584993e9db8f555d8f776a76bbede2e4a1e63b21c39c800097bddcc4a8730d5b5adcbefe59daea8168bcf24a4e4a9bc7e7a3aaf5ab54f917fa1691952d7bd304d68278cffcc832ffd6347477e1e066fb7092d9be3cb33fcb02c702db9a03968cbf70930c3a8ecb13ef7fb1bbeb66e832b7bb6ec6d9d10950693fb89578f1c171ba0056f5c43355b86e18dbb402925428dda2a5df5785f12c2bb6aa4d52949aad16b748b37221da52dace5048ccb8b42840060edf39d685302c51d73871c1245b8a87fe10b791625b0fe2b03b5af77ea272dc6f8d1b6f010a0ab4469dc1898c6729d08c78bf520631d1b8371ecbcbe610743584e167dbec29e0335add9b075cd195b9fdd60d6ec72858610bef132d7ced3686c4370dbc98966401edf069d4aaaa7bbb690e681c17599f12f8b69073571f6cfce6df2139b94e0dc029624978447c1541c305cb3c6411510f597af90a70ec9a6570dc6805fef69fee620f756d46d1ecf1f63f1b26b8a3bda3c630b12ecdd4eb527918395131d54879952fea64e0fb295308cdd6f02cea4038ae9c0c160ece54e87bca5d8992e453c59299a2d856f0d31034f0e8e6ad690c217cbaee933ca327729b4d91a01431d98b465ebce27d6f411a901af3512269f800936c004799332c18acc8a04f3c5b9baec4149583e2838e28d30b1a3ddb32c9c0e0bbce017c4756c3457269548b67794a436f7b45a4ccedfffadbe458bc5c43aecb08b1927e78cdd91c6c69041fce69ed01287cc53d2ead2c34a7729e7b187ef0b8d54189ae33cb6118b057567e3582e108dd91a22481b2b04b6f5e1675fa23e0ebc9268f4242d93212a6b9f4f2d7eaddd626502e17d9263e4f5c6bcd537e7e0a651ded6841e8b82813c9cb9b2750618a786eb3ce7a18b19a50d2f313d29a924ac3e36a862cc8aed448b422c0181700d1cdcc07ef1ae550dda8689280897918c84d848a09c3d783acde71a418a1a0301efd06be751fec13ba8ed5cc6cc403a19b3731b59515251aafe179fc0ca19ba9b0961c6dc1b95343730e60fbf607aa647752d6a6f9acb03633f82a911b5a06f9640e334068be930eaf86b7a443a76625d99310282f7df4c2fccf24a26988e8ae2ae74cc9e5edf900bbe9c40dcb6f1fb11a185c1feb67a00b0ca94016739885ccb58e8a6ecdf0d81447d9c8026d984ffdc9ffc49977c298c747a1b33b3a40563d8ebe86c08350d7fcc7182005812d5b48e6ccf943dd1b4e5fea655d090453b7706bfacef29812bda421267be5e2f4c6636a4108e21adde7159879820cac61d06abbbd0d5bbef2420a61da03e086e169165a5cb6c688cbb55ac1ba007e918729577ac7b2e1c0dba0c979ebe9986ccc6f43f64fae358c49fb4e9cc2b8270e421c7d36bb2196a6904e78137db87a18e6e1d4484ca2226c901e3bbf4d5bfa9eda5b600700f5af0dea8fd06b34d1013e745628662eecd68d0bd60599ed1867b87580e16c284ff2959ebf0f5317c275d4d380f93196f78463191a01ad849a133a16fabe852ebde0027ef5d8de17c37df1a66246ad715c8beb05579b59ca432c9dc5018a31396b0a3e34b098b213860be7969404f88770193f0c2eb109337134255f87484a0f39be810bb87a9491e7eb841cd2b839413c5890dbde1eccd18dd2541887a77c37d2bb06ac80a75107c7a882a685c15684d39cadf1cb842d1883f8e36ecc46fc80ace4ee51f1e39a2e25ddc2000523cc98b52b23b993c8ed43b784cfcd2df9cc65036cafa50b959f7fb5cc09a8d457411a15a7c36f4f12c0c7a088822ff7c3a20444914d51e0ebd427efec7407f313ad9b9b0f72e56e2caedce8f9b2deb465157cdd51f6692f90846fb9853bcc171c18adede517caa96ef0dd03cf27607d319f4df4b93db66c9d101e80901ad48b72015bd5b78cc2a539c108a8eec7f89fd644e0b1b54a7e03f712116e86c3f3eadb2d51619a7822f7ad57e6c5ff94d034befc35516607380cdaaadd313c933500a160962f15263106c523d4a85b8409d98836c3affa5978e025f894e3eb6a941641a730c14a7daf63c849143301f8e8d4048fdd5566fd75ee929c5d2e15164ea7b303f5c489f02ca1ec58f7272a218980712e8b8b5d4de16db4ff6929aa798620983ac5471e3a96ba940f217c622dea1380045e75d49a1579b0ecc4b82779fb46422068cacd6cf2aca2a5e4967173ad6f7deb607d6beb13bee818987555b62222bab4b3a259abf1a7cc534c96c7c748495dc73a3484755642ccdca9471cb61944b57e317061594be21bea6c191f7a66449283070ae3921c93107ea219e7632e20f5f531c73ec12083ade43a79270c54d557036d54072937325ab51a5caad315c96655e3b9b47f1139ba6f34e07b438df385d01e8621942c09e4ecf752aa01e64086f9935f9b0fa11449e03bb171b07c2e578b024b0f7f2e3825ebdf102a988cfdcc9bfff684631c26f7c60d814364ad86f1c23da45585a8a7467e30e2ab370431c9b25ae42c291c002a968d3b7dc3013d9cc00d704dbacb4e1babd6da0f08b3ab6a14e7eb13c66599a6c970cdab96463242c2dd4da91f5ee646c0cbb2688178c12c16909ba1157eec9c3bc02d3512e41bff1fb820520eb787473c190890609b9f8a77ecd207f3c4690", 0x1000, 0x858}, {&(0x7f0000000400)="2c2cdc33a37c643ca589d276d89f22e1e067dc9004941ed57abdcb617833662d293bda7e0b1180d9dbfa4e31360fdf4e1527bc1d2962337b8e9840b504758b44aacf76adbae49d8efc4fb4fdf0004d1b5d602e43965daed85d62a9291cc9577bb489a0913a8365b4eb285659b474ba8ecacc33276db901cb1dea4facd4bea01ed55fdcc7ff6d1c5074a1478654ee797f152da869c7ddb1b268c66b51", 0x9c, 0x1}], 0x40, &(0x7f0000001600)={[{'ext4\x00'}, {'!\''}, {'ext4\x00'}, {'ext4\x00'}, {'-%:#'}, {')@'}], [{@fowner_lt={'fowner<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@obj_user={'obj_user', 0x3d, '3\''}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, '-y'}}]}) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) r6 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r6]) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x7, 0x5, &(0x7f0000001a00)=[{&(0x7f0000001700)="ec43ee38014bfc3eae6b406c88cd1d310cad2dafcc8b595df36c00ebb2e58c23dfd744e6306012daf620e5c2bc7c5ec87169be8e20323c6d20fda4fc0617edc7421fbdb463bec97cd34f32caab4fe64766b557efe397a27299c8eed57b705436676a2b636cb4c578bb0a2b363ff134f34f5693bfb84876d9864d681cc4e9e9c0", 0x80, 0x65a}, {&(0x7f0000001780)="06", 0x1, 0x10001}, {&(0x7f00000017c0)="14cfc77e61dd37350439c00fb8deaf86a5bfc2d77933b989ad738a94cea6caba22775201011fd5be2712f7929c9213ce0609f95ff1ae04dc196d29cf9722093d0db12b51563e70ce9a63e504f100004ff58c5f8eefefc7c80ef423cbdd54959ec6ad57f1c655da5b83019088c89781d79c91746546d398d8dc259895a0acfa5765a6f3a2c109ad96da53071022ac861be55496b10fc1e1c6ea574281549b", 0x9e, 0x9}, {&(0x7f0000001880)="c86dd7a72f08c68143414422966f66f29892537c7ebeb3269a32e9c8976cedab7c683bd45181b7cb9328b570f229963bfc7008210fe6fc726f095607b71bef0d241f2cf4d0fba3c3cd9d4b9f2ec19cb06b9980419b42aea7fd682e7c3128c302870af2dd610c2fd0049559769466e83a5f082b179198bd14c0250b6b07b2e3a9e0b8cc6e5c39d81f115852b53c", 0x8d, 0x80}, {&(0x7f0000001940)="1853cb9fde9335ffeaf6fb7f6af731970a5ef7f1e2d039b3a5533819ded3ed1362cc1794bae15f34875e82b1ac5d91275873996e302129cb1643b24b8bab6c4b37903830c5508dcb8ba5d2864d49032fd1cd0e6872ed765fd9b9d793a65c2515b96bdd7a515633829e72c7f975415646574341e7b4d2f3db2bfdfd8275f887aeb4350a2b7f60a4e1d8b4bc23083cb2ffabf614d23334c4d51b59ebe8f0", 0x9d, 0x7fff}], 0x40, &(0x7f0000001a80)={[{'#*9'}, {'(.&@\\:/'}, {'#-%'}, {'euid'}, {'3\''}, {'-%:#'}], [{@context={'context', 0x3d, 'staff_u'}}, {@permit_directio='permit_directio'}, {@audit='audit'}, {@context={'context', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '!\''}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r6}}]}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2690.667169][T32649] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2690.669489][T32647] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2690.714005][T32647] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2690.731179][T32647] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2691.398841][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2692.198120][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000004ec0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:02 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:02 executing program 2: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/4099) 07:33:02 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2692.325928][T32688] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2692.344504][T32688] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2692.360392][T32688] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:33:02 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000002c0)={0x80000000, 0x1, "b8e0e92155f36eb26005e1d74703027844ac9049f420ca97f26a9d20f6e86821", 0x2aa, 0x1, 0x652, 0x8000, 0x3, 0x2, 0xf, 0xd2, [0x90e, 0xffffffe0, 0x7ff, 0x8001]}) 07:33:02 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001040)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001080)={0x62, 0x76, 0x91, 0x0, 0x180000, 0x1, 0x88, 0x4b, 0x40, 0x6, 0x1, 0x3, 0x0, 0x6, 0x94b, 0x8, 0x0, 0x3f, 0x3f, [], 0x37, 0xff}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4124) [ 2692.383355][T32694] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 07:33:02 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001000)=""/4068) [ 2692.421873][T32694] EXT4-fs error (device loop4): ext4_empty_dir:2879: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 2692.439367][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2692.463334][T32694] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 [ 2692.510192][T32717] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2692.519101][ T34] audit: type=1800 audit(1604820782.574:280): pid=32723 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=70 res=0 errno=0 [ 2692.521767][ T34] audit: type=1800 audit(1604820782.574:281): pid=32723 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=71 res=0 errno=0 [ 2692.597201][T32717] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2692.610962][T32717] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2693.477524][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:03 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r1]) r2 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r2]) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x4, &(0x7f00000004c0)=[{&(0x7f00000002c0)="fb288658e4681536a0b0016d887aec4917c85f4ab8ebb323be318c73f3aac5628c393d0186", 0x25, 0x5}, {&(0x7f0000000300)="d92ae5fd8b2818caca5fb7d969045af8f02e80d060915b06a3350dd1cb255f9bbb7283712bb5ce925da4a3141f63b74be5e48c56ee58851339fa790d43b9cdc2c19b220c84eca1ca390b8eeaf821e09f5106a97a038578d8c6b0119d9245b0afb9a7be06146a423ebc6f1bf33ac211a242a73c7b36b2332dc658b491385ebc9a1061b8abe512dabb76af79dbd27377808b1e4734d401c8ba24c1438282fd6b4649fb260312ad765532b95ecd4b07c20415974085b7e19d974a89d67e6a3ebe0698bab2ce692811952f01732db3a79c343d185a95330e3c9db483ce80a7f1", 0xde, 0x9}, {&(0x7f0000000600)="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", 0x1000, 0x858}, {&(0x7f0000000400)="2c2cdc33a37c643ca589d276d89f22e1e067dc9004941ed57abdcb617833662d293bda7e0b1180d9dbfa4e31360fdf4e1527bc1d2962337b8e9840b504758b44aacf76adbae49d8efc4fb4fdf0004d1b5d602e43965daed85d62a9291cc9577bb489a0913a8365b4eb285659b474ba8ecacc33276db901cb1dea4facd4bea01ed55fdcc7ff6d1c5074a1478654ee797f152da869c7ddb1b268c66b51", 0x9c, 0x1}], 0x40, &(0x7f0000001600)={[{'ext4\x00'}, {'!\''}, {'ext4\x00'}, {'ext4\x00'}, {'-%:#'}, {')@'}], [{@fowner_lt={'fowner<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@obj_user={'obj_user', 0x3d, '3\''}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, '-y'}}]}) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) r6 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r6]) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x7, 0x5, &(0x7f0000001a00)=[{&(0x7f0000001700)="ec43ee38014bfc3eae6b406c88cd1d310cad2dafcc8b595df36c00ebb2e58c23dfd744e6306012daf620e5c2bc7c5ec87169be8e20323c6d20fda4fc0617edc7421fbdb463bec97cd34f32caab4fe64766b557efe397a27299c8eed57b705436676a2b636cb4c578bb0a2b363ff134f34f5693bfb84876d9864d681cc4e9e9c0", 0x80, 0x65a}, {&(0x7f0000001780)="06", 0x1, 0x10001}, {&(0x7f00000017c0)="14cfc77e61dd37350439c00fb8deaf86a5bfc2d77933b989ad738a94cea6caba22775201011fd5be2712f7929c9213ce0609f95ff1ae04dc196d29cf9722093d0db12b51563e70ce9a63e504f100004ff58c5f8eefefc7c80ef423cbdd54959ec6ad57f1c655da5b83019088c89781d79c91746546d398d8dc259895a0acfa5765a6f3a2c109ad96da53071022ac861be55496b10fc1e1c6ea574281549b", 0x9e, 0x9}, {&(0x7f0000001880)="c86dd7a72f08c68143414422966f66f29892537c7ebeb3269a32e9c8976cedab7c683bd45181b7cb9328b570f229963bfc7008210fe6fc726f095607b71bef0d241f2cf4d0fba3c3cd9d4b9f2ec19cb06b9980419b42aea7fd682e7c3128c302870af2dd610c2fd0049559769466e83a5f082b179198bd14c0250b6b07b2e3a9e0b8cc6e5c39d81f115852b53c", 0x8d, 0x80}, {&(0x7f0000001940)="1853cb9fde9335ffeaf6fb7f6af731970a5ef7f1e2d039b3a5533819ded3ed1362cc1794bae15f34875e82b1ac5d91275873996e302129cb1643b24b8bab6c4b37903830c5508dcb8ba5d2864d49032fd1cd0e6872ed765fd9b9d793a65c2515b96bdd7a515633829e72c7f975415646574341e7b4d2f3db2bfdfd8275f887aeb4350a2b7f60a4e1d8b4bc23083cb2ffabf614d23334c4d51b59ebe8f0", 0x9d, 0x7fff}], 0x40, &(0x7f0000001a80)={[{'#*9'}, {'(.&@\\:/'}, {'#-%'}, {'euid'}, {'3\''}, {'-%:#'}], [{@context={'context', 0x3d, 'staff_u'}}, {@permit_directio='permit_directio'}, {@audit='audit'}, {@context={'context', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '!\''}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r6}}]}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:03 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4103) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execveat(r0, &(0x7f0000001080)='./file0\x00', &(0x7f00000011c0)=[&(0x7f00000010c0)='%}\\\x00', &(0x7f0000001100)='L\xae&\x84{#+(]@\\*\'!$^\x00', &(0x7f0000001140)='^:!-$\x00', &(0x7f0000001180)='+:^],\x00'], &(0x7f0000001440)=[&(0x7f0000001200)='#\x00', &(0x7f0000001240)='\x00', &(0x7f0000001280)='%$\x00', &(0x7f00000012c0)='+\'-,', &(0x7f0000001300)='\xa7{/\x00', &(0x7f0000001340)=']\x00', &(0x7f0000001380)='-),#\x00', &(0x7f00000013c0)='\xce\x00', &(0x7f0000001400)='\x00'], 0x1000) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000001040)=0x9) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x4000) ioctl$TCSBRK(r1, 0x5409, 0x1) 07:33:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x8800, 0x0) unlinkat(r3, &(0x7f0000000300)='./file0\x00', 0x200) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @empty}, {0x301}, 0x30, {0x2, 0x4e24, @loopback}, 'bond_slave_0\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) 07:33:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2693.812288][T32742] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2693.823784][T32741] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2693.879675][T32741] EXT4-fs error (device loop4): ext4_empty_dir:2879: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 2693.905628][T32741] EXT4-fs error (device loop4): ext4_free_inode:351: comm syz-executor.4: bit already cleared for inode 12 [ 2694.517461][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2695.247397][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:05 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001000)=""/4088) 07:33:05 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed41000011a53b09d463881bdfd887a45a0044000029c4645f29c4", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9403}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x8000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x290001, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r6, 0x8250aea6, &(0x7f0000000440)=""/179) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r7) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe4) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001000)=""/4068) 07:33:05 executing program 4: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x8c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2375}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x5) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/4071) [ 2695.348743][ T34] audit: type=1800 audit(1604820785.404:282): pid=308 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 07:33:05 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2695.411920][ T314] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2695.421621][ T34] audit: type=1800 audit(1604820785.474:283): pid=321 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 2695.557366][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2695.565940][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2696.607243][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:06 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) 07:33:06 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000000)={{0x1, @addr=0x2}, "f766c9b3ddff2ee90d2cce014262a55f21d9e1319c32569182401f2689f6e655"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'veth0\x00', {0x4}, 0x6}) 07:33:06 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5e, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:06 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) [ 2696.897122][ T347] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2696.919549][ T347] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2696.944159][ T347] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2697.648396][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2698.277115][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:08 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f00000002c0)="ed4100000004000029c41f0029c4645f29c464031c51dbc25f00000000000004000200000000000000deea6ca905000000258cfe41ac0d3a9f10823953e241059533edd9d5d1a037f4be121560d9b2c74aaa611a4d0942ae48c7a64d5ce8aec009f662527c6d21148c51ce216fee7143b760cb6faac7aa806d3a75d668710abbf8fcc472f8b1d37349614e7d23ad235eb65efbb2d6ad17ad2586ec31bfcd022780b4", 0xa2, 0x1800}, {&(0x7f0000000400)="ed4100000004000029c4645f29c4645f29c4645f000000000000026326afcc1a9f44a6ff1c2880e299937d0b8158912b9627a1f9c9b73e1976d7d42d501c2edfb123d7046467ee7a978b14a34c", 0x4d, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRES16=r0]) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r9 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r9, 0x0, 0x0}, 0x0) r12 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r12, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0xc, 0x1, {0x3}}, 0x2) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:08 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) 07:33:08 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001600)=""/4096) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_to_bridge\x00', 0x5, 0x5, 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000140)) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)=r2) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r2) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{}, r2, 0xc, @inherit={0x70, &(0x7f0000001540)=ANY=[@ANYBLOB="00000000000000000500000000000000f506000000070000080000000000000017000000000000000400000000000000060000000000000007000000000000000300000000000000c6060000000000001b0000000000000014000000000000e1e9afa5747c2f3670320df61c6ed9d3004f75157130ff3d609d18e9244b50"]}, @subvolid=0x3ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, r2, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000081e6cf511154affb02f3c7a8d341f100000300000000000000ff01000000000000060000000000000010000000000000000200000000000000070000010400000000000004000000000000002000000000000000d90000000000"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'wlan0\x00', {}, 0x1}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x101, 0x0) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000002600)={"aaeab07d5d330f832f5edf129301d8f7", 0x0, r2, {0x4, 0xa6e}, {0xfffffffffffffffe, 0x1}, 0x8ee, [0x4, 0x3, 0x7f, 0x81, 0x1000, 0x7, 0x637b, 0x57, 0x1, 0x8, 0x3c0b, 0x6, 0x7fffffff, 0x5, 0x7, 0xffffffff]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)=r2) 07:33:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:08 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) sendfile(r0, r0, 0x0, 0xa198) 07:33:08 executing program 2: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) [ 2698.437479][ T379] EXT4-fs (loop5): Unrecognized mount option "0177777777777777777777700000000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615" or missing value [ 2698.618547][ T379] EXT4-fs (loop5): Unrecognized mount option "0177777777777777777777700000000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615" or missing value [ 2698.678823][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2699.716979][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:09 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) sendfile(r0, r0, 0x0, 0xa198) 07:33:09 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x6) connect(r1, &(0x7f0000000180)=@x25={0x9, @null=' \x00'}, 0x80) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x10000000, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:09 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) sendfile(r0, r0, 0x0, 0xa198) [ 2699.920509][ T436] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2699.951544][ T436] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2699.977054][ T436] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2700.758037][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2701.316798][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:11 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0xfff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 07:33:11 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:11 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0xfff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 2701.429593][ T461] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2701.460353][ T461] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2701.487247][ T461] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:33:11 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0xfff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 07:33:11 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2701.680908][ T490] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2701.695087][ T490] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2701.710662][ T490] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2701.806980][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2702.836543][T31805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:13 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) 07:33:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000180)={0x8, 0x80000001, 0x8000}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x44, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2702.996261][ T515] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2703.020813][ T515] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2703.050232][ T515] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2703.887692][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2704.356405][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x66, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad0100000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:14 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) 07:33:14 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x107, 0x1, 0x5, 0x1, 0x87, 0x4f8, 0x4}, 0x9c) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0xe308c83028285596, 0x128) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000480)=0x410d) r10 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000003c0)={0x3, 0x3a, 0x6, 0x0, 0xfff, 0x1, 0x3c, 0x1, 0x7, 0x80, 0xbe, 0x1e, 0x0, 0x8, 0x5, 0x3, 0x3, 0xb4, 0x81, [], 0xa, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000380)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, r4, r5]}, 0x3) 07:33:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:14 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) [ 2704.496192][ T545] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2704.532853][ T545] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block 07:33:14 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) [ 2704.548093][ T545] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 07:33:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socketpair(0x25, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x24, [], 0x2, &(0x7f0000000540)=[{}, {}], &(0x7f0000000580)=""/36}, &(0x7f0000000680)=0x78) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x20000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/182, 0xb6}], 0x3) 07:33:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:14 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) 07:33:14 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f00000002c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x6b, 0x800}, {&(0x7f0000010d00)="ed410000005f29c4645f000000000000040002000000000000000500000025", 0x1f, 0x3}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6600000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 2704.678371][ T578] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2704.790430][ T598] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 2704.801358][ T598] EXT4-fs error (device loop5): ext4_fill_super:4964: inode #2: comm syz-executor.5: iget: root inode unallocated [ 2704.822553][ T598] EXT4-fs (loop5): get root inode failed [ 2704.832963][ T598] EXT4-fs (loop5): mount failed [ 2704.916314][ T598] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 2704.928365][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2704.952389][ T598] EXT4-fs error (device loop5): ext4_fill_super:4964: inode #2: comm syz-executor.5: iget: root inode unallocated [ 2704.964851][ T598] EXT4-fs (loop5): get root inode failed [ 2704.979406][ T598] EXT4-fs (loop5): mount failed [ 2705.156286][ T7019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x107, 0x1, 0x5, 0x1, 0x87, 0x4f8, 0x4}, 0x9c) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0xe308c83028285596, 0x128) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000480)=0x410d) r10 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000003c0)={0x3, 0x3a, 0x6, 0x0, 0xfff, 0x1, 0x3c, 0x1, 0x7, 0x80, 0xbe, 0x1e, 0x0, 0x8, 0x5, 0x3, 0x3, 0xb4, 0x81, [], 0xa, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000380)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, r4, r5]}, 0x3) [ 2705.966385][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2706.996375][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2707.397760][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 07:33:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x66, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad0100000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:17 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) 07:33:17 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x3d39, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r4}, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000180000022dbd7000fedbdf251c102007ff01ff02000400000c000900ff0f1000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="080804006a26d41b0d9d00e473134178fafdede6ce91a6a8887aa0203c3f00289ec5ad4ae82c19dd74b8044f95cc46fe66c9f5a4877111920347a073ba9539e2bee0cab0949c6b0b000000000000713be07911792f1d1f0e39ec79760c836b320cca826f718fc40991810a3e50c076398361ae2f35d56a0300000000000000fc24f86b35685b3e3acb2d19cb14ae88e74898be17afa4989f35ce62f61d5b1ee3ca8a08c4322f336445ef89a868542023af8d2ec9b1e8ffb45c14d84a6e3cc411d951", @ANYRES32=r9, @ANYBLOB], 0x40}}, 0x1) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_FLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x8) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 07:33:17 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f00000003c0)=ANY=[]) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x107, 0x1, 0x5, 0x1, 0x87, 0x4f8, 0x4}, 0x9c) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0xe308c83028285596, 0x128) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000480)=0x410d) r10 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000003c0)={0x3, 0x3a, 0x6, 0x0, 0xfff, 0x1, 0x3c, 0x1, 0x7, 0x80, 0xbe, 0x1e, 0x0, 0x8, 0x5, 0x3, 0x3, 0xb4, 0x81, [], 0xa, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000380)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, r4, r5]}, 0x3) 07:33:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xae, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad010000000000000002a7bef7fdffff9f8b01647a0200169c864e1d5f8179cba2e43112cfb22f021d3c34e36cc9509795b0e053c9d31e145c97aa793dd8ceb8281f3b812e14d71b59b800000075"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:17 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) 07:33:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x66, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e85a63c9a4b0d8b9aad0100000000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:17 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) [ 2707.522529][ T633] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2707.528635][ T647] overlayfs: failed to resolve './file0': -2 [ 2707.589612][ T658] overlayfs: failed to resolve './file0': -2 [ 2707.640796][ T661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:33:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000004ec0)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21116a5b60a00088024c30e478947d1548b000000000000000000000064bfa6186165224897ba4ecb40aa071d905814c90761600032a3b88a1f000000970e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:33:17 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfff) sendfile(r0, r0, 0x0, 0xa198) [ 2707.702777][ T633] EXT4-fs error (device loop5): ext4_empty_dir:2879: inode #12: comm syz-executor.5: Directory hole found for htree leaf block [ 2707.727226][ T633] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 2707.757995][ T661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2707.772694][ T633] ================================================================== [ 2707.780817][ T633] BUG: KCSAN: data-race in __io_import_iovec / io_cqring_overflow_flush [ 2707.789122][ T633] [ 2707.791440][ T633] read-write to 0xffff88801c181c44 of 1 bytes by task 663 on cpu 1: [ 2707.799409][ T633] io_cqring_overflow_flush+0x90/0x7f0 [ 2707.804857][ T633] __io_uring_files_cancel+0x21a/0xff0 [ 2707.810300][ T633] exit_files+0x6a/0xc0 [ 2707.814439][ T633] do_exit+0x422/0x15a0 [ 2707.818575][ T633] do_group_exit+0xc8/0x170 [ 2707.823125][ T633] get_signal+0xf9b/0x1510 [ 2707.827560][ T633] arch_do_signal+0x25/0x260 [ 2707.832141][ T633] exit_to_user_mode_prepare+0xde/0x170 [ 2707.837676][ T633] syscall_exit_to_user_mode+0x16/0x30 [ 2707.843125][ T633] do_syscall_64+0x45/0x80 [ 2707.847542][ T633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2707.853410][ T633] [ 2707.855731][ T633] read to 0xffff88801c181c44 of 1 bytes by task 633 on cpu 0: [ 2707.863166][ T633] __io_import_iovec+0x26c/0x930 [ 2707.868092][ T633] io_req_prep+0xbad/0x21f0 [ 2707.872585][ T633] io_submit_sqe+0x24d/0x620 [ 2707.877167][ T633] io_submit_sqes+0x99a/0x11a0 [ 2707.881916][ T633] __se_sys_io_uring_enter+0x52c/0xac0 [ 2707.887361][ T633] __x64_sys_io_uring_enter+0x74/0x80 [ 2707.892723][ T633] do_syscall_64+0x39/0x80 [ 2707.897227][ T633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2707.903103][ T633] [ 2707.904425][ T689] overlayfs: failed to resolve './file0': -2 [ 2707.905413][ T633] Reported by Kernel Concurrency Sanitizer on: [ 2707.905423][ T633] CPU: 0 PID: 633 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 2707.905428][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2707.905433][ T633] ================================================================== [ 2707.905438][ T633] Kernel panic - not syncing: panic_on_warn set ... [ 2707.905447][ T633] CPU: 0 PID: 633 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 2707.905534][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2707.971481][ T633] Call Trace: [ 2707.975768][ T633] dump_stack+0x116/0x15d [ 2707.980172][ T633] panic+0x1e7/0x5fa [ 2707.985027][ T633] ? vprintk_emit+0x2f2/0x370 [ 2707.989699][ T633] kcsan_report+0x67b/0x680 [ 2707.994570][ T633] ? kcsan_setup_watchpoint+0x46a/0x4d0 [ 2708.000107][ T633] ? __io_import_iovec+0x26c/0x930 [ 2708.005281][ T633] ? io_req_prep+0xbad/0x21f0 [ 2708.009954][ T633] ? io_submit_sqe+0x24d/0x620 [ 2708.016489][ T633] ? io_submit_sqes+0x99a/0x11a0 [ 2708.022770][ T633] ? __se_sys_io_uring_enter+0x52c/0xac0 [ 2708.029403][ T633] ? __x64_sys_io_uring_enter+0x74/0x80 [ 2708.036162][ T633] ? do_syscall_64+0x39/0x80 [ 2708.040810][ T633] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2708.047903][ T633] ? __switch_to+0x14e/0x4c0 [ 2708.052576][ T633] ? get_page_from_freelist+0x30b/0x480 [ 2708.059398][ T633] ? iovec_from_user+0x5d/0x2d0 [ 2708.065867][ T633] kcsan_setup_watchpoint+0x46a/0x4d0 [ 2708.071404][ T633] __io_import_iovec+0x26c/0x930 [ 2708.077639][ T633] io_req_prep+0xbad/0x21f0 [ 2708.082138][ T633] ? __kmalloc+0x143/0x2c0 [ 2708.086934][ T633] ? io_submit_sqe+0x224/0x620 [ 2708.091693][ T633] io_submit_sqe+0x24d/0x620 [ 2708.097054][ T633] io_submit_sqes+0x99a/0x11a0 [ 2708.101810][ T633] __se_sys_io_uring_enter+0x52c/0xac0 [ 2708.108630][ T633] ? put_timespec64+0x61/0x90 [ 2708.113310][ T633] __x64_sys_io_uring_enter+0x74/0x80 [ 2708.119061][ T633] do_syscall_64+0x39/0x80 [ 2708.123748][ T633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2708.130367][ T633] RIP: 0033:0x45deb9 [ 2708.135675][ T633] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2708.155686][ T633] RSP: 002b:00007faf6fd9dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2708.164521][ T633] RAX: ffffffffffffffda RBX: 0000000000008340 RCX: 000000000045deb9 [ 2708.173011][ T633] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000004 [ 2708.181721][ T633] RBP: 000000000118bf78 R08: 0000000000000000 R09: 0000000000000000 [ 2708.191242][ T633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2708.200708][ T633] R13: 00007ffd008f7ebf R14: 00007faf6fd9e9c0 R15: 000000000118bf2c [ 2708.210430][ T633] Kernel Offset: disabled [ 2708.214782][ T633] Rebooting in 86400 seconds..