&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x200fc0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, [], [{0x0, 0x200, 0x10000, 0xffffffffffffffff, 0x1, 0x7}, {0x8, 0x1ab, 0x1, 0xa2, 0x0, 0x7312}], [[], [], [], []]}) [ 2600.629987][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:50:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:50:51 executing program 1 (fault-call:9 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2600.688995][ T735] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2600.716082][ T735] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2600.752336][ T745] FAULT_INJECTION: forcing a failure. [ 2600.752336][ T745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2600.773531][ T745] CPU: 0 PID: 745 Comm: syz-executor.1 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2600.783500][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2600.793537][ T745] Call Trace: [ 2600.796827][ T745] dump_stack+0x1b0/0x21e [ 2600.801152][ T745] ? devkmsg_release+0x11c/0x11c [ 2600.806081][ T745] ? show_regs_print_info+0x12/0x12 [ 2600.811267][ T745] ? kasan_alloc_pages+0x4a/0x60 [ 2600.816197][ T745] should_fail+0x6fb/0x860 [ 2600.820602][ T745] ? setup_fault_attr+0x2b0/0x2b0 [ 2600.825617][ T745] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2600.830983][ T745] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2600.836519][ T745] ? find_get_entry+0x5da/0x670 [ 2600.841359][ T745] ? xa_load+0x323/0x340 [ 2600.845595][ T745] __do_page_cache_readahead+0x244/0x510 02:50:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x4584c4f61458558d) lseek(r0, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) r4 = io_uring_setup(0x7949, &(0x7f0000000080)={0x0, 0x1846, 0x20, 0x2, 0x306}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x20}, {r3, 0x4}, {r2, 0x400}, {r4, 0x100}], 0x4, 0xe2e) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r6, 0x7003) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x200fc0) [ 2600.851225][ T745] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2600.857629][ T745] ? unwind_next_frame+0x1c07/0x22b0 [ 2600.862913][ T745] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2600.868624][ T745] generic_file_read_iter+0x626/0x20a0 [ 2600.874084][ T745] ? find_get_pages_range_tag+0xae0/0xae0 [ 2600.879819][ T745] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2600.885182][ T745] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2600.891240][ T745] ? avc_denied+0x1c0/0x1c0 [ 2600.895739][ T745] generic_file_splice_read+0x491/0x780 [ 2600.901275][ T745] ? splice_shrink_spd+0xb0/0xb0 [ 2600.906185][ T745] ? security_file_permission+0x1e9/0x300 [ 2600.911872][ T745] ? splice_shrink_spd+0xb0/0xb0 [ 2600.916778][ T745] splice_direct_to_actor+0x3cf/0xb00 [ 2600.922119][ T745] ? do_splice_direct+0x3d0/0x3d0 [ 2600.927110][ T745] ? pipe_to_sendpage+0x300/0x300 [ 2600.932105][ T745] ? security_file_permission+0x128/0x300 [ 2600.937801][ T745] do_splice_direct+0x279/0x3d0 [ 2600.942641][ T745] ? splice_direct_to_actor+0xb00/0xb00 [ 2600.948182][ T745] ? security_file_permission+0x128/0x300 [ 2600.953869][ T745] do_sendfile+0x89d/0x1110 [ 2600.958342][ T745] ? compat_writev+0x390/0x390 [ 2600.963075][ T745] ? security_file_permission+0x128/0x300 [ 2600.968771][ T745] ? vfs_write+0x427/0x4f0 [ 2600.973197][ T745] ? fput_many+0x42/0x1a0 [ 2600.977520][ T745] __x64_sys_sendfile64+0x1ae/0x220 [ 2600.982717][ T745] ? __ia32_sys_sendfile+0x240/0x240 [ 2600.987971][ T745] do_syscall_64+0xcb/0x150 [ 2600.992445][ T745] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2600.998319][ T745] RIP: 0033:0x45de29 [ 2601.002202][ T745] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2601.021793][ T745] RSP: 002b:00007f1d0d6c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2601.030168][ T745] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2601.038107][ T745] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2601.046047][ T745] RBP: 00007f1d0d6c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2601.053987][ T745] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000c [ 2601.061928][ T745] R13: 00007fff69397bef R14: 00007f1d0d6ca9c0 R15: 000000000118bf2c 02:50:54 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecf", 0xbf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:50:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40040, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket$nl_route(0x10, 0x3, 0x0) lseek(r1, 0x44, 0xfffffffffffffffd) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0xa4) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000200)={{0x2c, @private=0xa010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0xffffff00, 0x27}, {@local, 0x4e24, 0x2000, 0x8, 0x1, 0x5f6}}, 0x44) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) renameat2(r5, &(0x7f0000000080)='./bus\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x5) 02:50:54 executing program 1 (fault-call:9 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:50:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:50:54 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:50:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2603.683325][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2603.694065][ T759] FAULT_INJECTION: forcing a failure. [ 2603.694065][ T759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2603.712202][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2603.714760][ T759] CPU: 1 PID: 759 Comm: syz-executor.1 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2603.734486][ T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2603.738117][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2603.744523][ T759] Call Trace: [ 2603.744541][ T759] dump_stack+0x1b0/0x21e [ 2603.744550][ T759] ? devkmsg_release+0x11c/0x11c [ 2603.744558][ T759] ? show_regs_print_info+0x12/0x12 [ 2603.744572][ T759] ? kasan_alloc_pages+0x4a/0x60 [ 2603.782755][ T759] should_fail+0x6fb/0x860 [ 2603.785321][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2603.787157][ T759] ? setup_fault_attr+0x2b0/0x2b0 [ 2603.787169][ T759] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2603.787183][ T759] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2603.815070][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2603.815327][ T759] ? find_get_entry+0x5da/0x670 [ 2603.835745][ T759] ? xa_load+0x323/0x340 [ 2603.839975][ T759] __do_page_cache_readahead+0x244/0x510 [ 2603.845595][ T759] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2603.848460][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2603.851991][ T759] ? unwind_next_frame+0x1c07/0x22b0 [ 2603.851999][ T759] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2603.852009][ T759] generic_file_read_iter+0x626/0x20a0 [ 2603.852023][ T759] ? find_get_pages_range_tag+0xae0/0xae0 [ 2603.868880][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2603.869598][ T759] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2603.875532][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2603.880833][ T759] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2603.880844][ T759] ? avc_denied+0x1c0/0x1c0 [ 2603.880857][ T759] generic_file_splice_read+0x491/0x780 [ 2603.880872][ T759] ? splice_shrink_spd+0xb0/0xb0 [ 2603.892314][ T764] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2603.902169][ T759] ? security_file_permission+0x1e9/0x300 [ 2603.902179][ T759] ? splice_shrink_spd+0xb0/0xb0 [ 2603.902187][ T759] splice_direct_to_actor+0x3cf/0xb00 [ 2603.902199][ T759] ? do_splice_direct+0x3d0/0x3d0 [ 2603.907625][ T764] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2603.919826][ T759] ? pipe_to_sendpage+0x300/0x300 [ 2603.919837][ T759] ? security_file_permission+0x128/0x300 [ 2603.919844][ T759] do_splice_direct+0x279/0x3d0 [ 2603.919853][ T759] ? splice_direct_to_actor+0xb00/0xb00 [ 2603.919868][ T759] ? security_file_permission+0x128/0x300 [ 2604.016334][ T759] do_sendfile+0x89d/0x1110 [ 2604.020825][ T759] ? compat_writev+0x390/0x390 [ 2604.025571][ T759] ? security_file_permission+0x128/0x300 [ 2604.031272][ T759] ? vfs_write+0x427/0x4f0 [ 2604.035673][ T759] ? fput_many+0x42/0x1a0 [ 2604.039989][ T759] __x64_sys_sendfile64+0x1ae/0x220 [ 2604.045169][ T759] ? __ia32_sys_sendfile+0x240/0x240 [ 2604.050439][ T759] do_syscall_64+0xcb/0x150 [ 2604.054932][ T759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2604.060811][ T759] RIP: 0033:0x45de29 [ 2604.064688][ T759] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:50:55 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2604.084270][ T759] RSP: 002b:00007f1d0d6c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2604.092664][ T759] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2604.100619][ T759] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2604.108572][ T759] RBP: 00007f1d0d6c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2604.116544][ T759] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000d [ 2604.124500][ T759] R13: 00007fff69397bef R14: 00007f1d0d6ca9c0 R15: 000000000118bf2c 02:50:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:50:55 executing program 1 (fault-call:9 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2604.273805][ T776] FAULT_INJECTION: forcing a failure. [ 2604.273805][ T776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2604.301354][ T776] CPU: 1 PID: 776 Comm: syz-executor.1 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2604.311323][ T776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2604.321360][ T776] Call Trace: [ 2604.324643][ T776] dump_stack+0x1b0/0x21e [ 2604.328968][ T776] ? devkmsg_release+0x11c/0x11c [ 2604.333896][ T776] ? show_regs_print_info+0x12/0x12 [ 2604.339081][ T776] ? kasan_alloc_pages+0x4a/0x60 [ 2604.344008][ T776] should_fail+0x6fb/0x860 [ 2604.348416][ T776] ? setup_fault_attr+0x2b0/0x2b0 [ 2604.353436][ T776] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2604.358801][ T776] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2604.364337][ T776] ? find_get_entry+0x5da/0x670 [ 2604.369174][ T776] ? xa_load+0x323/0x340 [ 2604.373407][ T776] __do_page_cache_readahead+0x244/0x510 [ 2604.379029][ T776] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2604.385427][ T776] ? unwind_next_frame+0x1c07/0x22b0 [ 2604.390696][ T776] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2604.396401][ T776] generic_file_read_iter+0x626/0x20a0 [ 2604.402219][ T776] ? find_get_pages_range_tag+0xae0/0xae0 [ 2604.407927][ T776] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2604.413309][ T776] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2604.419365][ T776] ? avc_denied+0x1c0/0x1c0 [ 2604.423859][ T776] generic_file_splice_read+0x491/0x780 [ 2604.429391][ T776] ? splice_shrink_spd+0xb0/0xb0 [ 2604.434323][ T776] ? security_file_permission+0x1e9/0x300 [ 2604.440040][ T776] ? splice_shrink_spd+0xb0/0xb0 [ 2604.444967][ T776] splice_direct_to_actor+0x3cf/0xb00 [ 2604.450325][ T776] ? do_splice_direct+0x3d0/0x3d0 [ 2604.455335][ T776] ? pipe_to_sendpage+0x300/0x300 [ 2604.460348][ T776] ? security_file_permission+0x128/0x300 [ 2604.466053][ T776] do_splice_direct+0x279/0x3d0 02:50:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2604.470891][ T776] ? splice_direct_to_actor+0xb00/0xb00 [ 2604.476432][ T776] ? security_file_permission+0x128/0x300 [ 2604.482140][ T776] do_sendfile+0x89d/0x1110 [ 2604.486642][ T776] ? compat_writev+0x390/0x390 [ 2604.491393][ T776] ? security_file_permission+0x128/0x300 [ 2604.497105][ T776] ? vfs_write+0x427/0x4f0 [ 2604.501505][ T776] ? fput_many+0x42/0x1a0 [ 2604.505820][ T776] __x64_sys_sendfile64+0x1ae/0x220 [ 2604.511004][ T776] ? __ia32_sys_sendfile+0x240/0x240 [ 2604.516279][ T776] do_syscall_64+0xcb/0x150 [ 2604.520767][ T776] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2604.526643][ T776] RIP: 0033:0x45de29 [ 2604.530519][ T776] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2604.550107][ T776] RSP: 002b:00007f1d0d6c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2604.558499][ T776] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2604.566454][ T776] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 02:50:55 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2604.574409][ T776] RBP: 00007f1d0d6c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2604.582384][ T776] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000e [ 2604.590339][ T776] R13: 00007fff69397bef R14: 00007f1d0d6ca9c0 R15: 000000000118bf2c 02:50:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) readahead(r5, 0x5, 0x8000) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:50:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x3, 0x40) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:50:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecf", 0xbf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:50:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xa963}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, r0, 0xffffffffffffffff, r2, 0x9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x8a) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0xfffffffc, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x200fc0) 02:50:57 executing program 1 (fault-call:9 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:50:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:50:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:50:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2606.894904][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2606.913041][ T800] FAULT_INJECTION: forcing a failure. [ 2606.913041][ T800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2606.921875][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2606.942990][ T800] CPU: 0 PID: 800 Comm: syz-executor.1 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2606.952957][ T800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.961660][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2606.962999][ T800] Call Trace: [ 2606.981868][ T800] dump_stack+0x1b0/0x21e [ 2606.986182][ T800] ? devkmsg_release+0x11c/0x11c [ 2606.991127][ T800] ? show_regs_print_info+0x12/0x12 [ 2606.994607][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2606.996306][ T800] ? kasan_alloc_pages+0x4a/0x60 [ 2606.996323][ T800] should_fail+0x6fb/0x860 [ 2607.017910][ T800] ? setup_fault_attr+0x2b0/0x2b0 [ 2607.022922][ T800] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2607.022998][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2607.028279][ T800] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2607.028294][ T800] ? find_get_entry+0x5da/0x670 [ 2607.054231][ T800] ? xa_load+0x323/0x340 [ 2607.058457][ T800] __do_page_cache_readahead+0x244/0x510 [ 2607.063115][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2607.064073][ T800] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2607.064087][ T800] ? unwind_next_frame+0x1c07/0x22b0 [ 2607.083764][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2607.088040][ T800] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2607.103640][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2607.109313][ T800] generic_file_read_iter+0x626/0x20a0 [ 2607.126010][ T806] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2607.127024][ T800] ? find_get_pages_range_tag+0xae0/0xae0 [ 2607.127039][ T800] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2607.142664][ T806] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2607.148314][ T800] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2607.148327][ T800] ? avc_denied+0x1c0/0x1c0 [ 2607.176509][ T800] generic_file_splice_read+0x491/0x780 [ 2607.182040][ T800] ? splice_shrink_spd+0xb0/0xb0 [ 2607.186966][ T800] ? security_file_permission+0x1e9/0x300 [ 2607.192668][ T800] ? splice_shrink_spd+0xb0/0xb0 [ 2607.197588][ T800] splice_direct_to_actor+0x3cf/0xb00 [ 2607.202947][ T800] ? do_splice_direct+0x3d0/0x3d0 [ 2607.207954][ T800] ? pipe_to_sendpage+0x300/0x300 [ 2607.212964][ T800] ? security_file_permission+0x128/0x300 [ 2607.218668][ T800] do_splice_direct+0x279/0x3d0 [ 2607.223503][ T800] ? splice_direct_to_actor+0xb00/0xb00 [ 2607.229034][ T800] ? security_file_permission+0x128/0x300 [ 2607.234740][ T800] do_sendfile+0x89d/0x1110 [ 2607.239231][ T800] ? compat_writev+0x390/0x390 [ 2607.244018][ T800] ? security_file_permission+0x128/0x300 [ 2607.249738][ T800] ? vfs_write+0x427/0x4f0 [ 2607.254152][ T800] ? fput_many+0x42/0x1a0 [ 2607.258572][ T800] __x64_sys_sendfile64+0x1ae/0x220 [ 2607.263778][ T800] ? __ia32_sys_sendfile+0x240/0x240 [ 2607.269031][ T800] do_syscall_64+0xcb/0x150 [ 2607.273501][ T800] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2607.279359][ T800] RIP: 0033:0x45de29 [ 2607.283253][ T800] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2607.302842][ T800] RSP: 002b:00007f1d0d6c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2607.311230][ T800] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2607.319170][ T800] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2607.327120][ T800] RBP: 00007f1d0d6c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.335074][ T800] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000f 02:50:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fff}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x30c065, 0x4) sendfile(r1, r3, 0x0, 0x200fc0) 02:50:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:50:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, 0xffffffffffffffff) bind$xdp(r1, 0x0, 0x60) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2607.343027][ T800] R13: 00007fff69397bef R14: 00007f1d0d6ca9c0 R15: 000000000118bf2c 02:50:58 executing program 1 (fault-call:9 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2607.508172][ T819] FAULT_INJECTION: forcing a failure. [ 2607.508172][ T819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2607.528034][ T819] CPU: 0 PID: 819 Comm: syz-executor.1 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2607.537997][ T819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2607.548034][ T819] Call Trace: [ 2607.551316][ T819] dump_stack+0x1b0/0x21e [ 2607.555634][ T819] ? devkmsg_release+0x11c/0x11c [ 2607.560561][ T819] ? show_regs_print_info+0x12/0x12 [ 2607.565755][ T819] ? kasan_alloc_pages+0x4a/0x60 [ 2607.570687][ T819] should_fail+0x6fb/0x860 [ 2607.575117][ T819] ? setup_fault_attr+0x2b0/0x2b0 [ 2607.580134][ T819] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2607.585497][ T819] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2607.591055][ T819] ? find_get_entry+0x5da/0x670 [ 2607.595891][ T819] ? xa_load+0x323/0x340 [ 2607.600142][ T819] __do_page_cache_readahead+0x244/0x510 [ 2607.605762][ T819] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2607.612163][ T819] ? unwind_next_frame+0x1c07/0x22b0 [ 2607.617434][ T819] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2607.623147][ T819] generic_file_read_iter+0x626/0x20a0 [ 2607.628621][ T819] ? find_get_pages_range_tag+0xae0/0xae0 [ 2607.634331][ T819] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2607.639691][ T819] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2607.645749][ T819] ? avc_denied+0x1c0/0x1c0 [ 2607.650244][ T819] generic_file_splice_read+0x491/0x780 [ 2607.655778][ T819] ? splice_shrink_spd+0xb0/0xb0 [ 2607.660708][ T819] ? security_file_permission+0x1e9/0x300 [ 2607.666414][ T819] ? splice_shrink_spd+0xb0/0xb0 [ 2607.671336][ T819] splice_direct_to_actor+0x3cf/0xb00 [ 2607.676696][ T819] ? do_splice_direct+0x3d0/0x3d0 [ 2607.681705][ T819] ? pipe_to_sendpage+0x300/0x300 [ 2607.686719][ T819] ? security_file_permission+0x128/0x300 [ 2607.692426][ T819] do_splice_direct+0x279/0x3d0 [ 2607.697265][ T819] ? splice_direct_to_actor+0xb00/0xb00 [ 2607.702803][ T819] ? security_file_permission+0x128/0x300 [ 2607.708506][ T819] do_sendfile+0x89d/0x1110 [ 2607.713005][ T819] ? compat_writev+0x390/0x390 [ 2607.717763][ T819] ? security_file_permission+0x128/0x300 [ 2607.723474][ T819] ? vfs_write+0x427/0x4f0 [ 2607.727874][ T819] ? fput_many+0x42/0x1a0 [ 2607.732191][ T819] __x64_sys_sendfile64+0x1ae/0x220 [ 2607.737376][ T819] ? __ia32_sys_sendfile+0x240/0x240 [ 2607.742648][ T819] do_syscall_64+0xcb/0x150 [ 2607.747141][ T819] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2607.753023][ T819] RIP: 0033:0x45de29 [ 2607.756906][ T819] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2607.776495][ T819] RSP: 002b:00007f1d0d6c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2607.784888][ T819] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2607.792846][ T819] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2607.800802][ T819] RBP: 00007f1d0d6c9ca0 R08: 0000000000000000 R09: 0000000000000000 02:50:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:50:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2607.808757][ T819] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000010 [ 2607.816733][ T819] R13: 00007fff69397bef R14: 00007f1d0d6ca9c0 R15: 000000000118bf2c 02:51:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:01 executing program 1 (fault-call:9 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, 0xffffffffffffffff) bind$xdp(r1, 0x0, 0x60) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x14) lseek(r0, 0x7ffffe, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) [ 2610.136296][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2610.148352][ T835] FAULT_INJECTION: forcing a failure. [ 2610.148352][ T835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2610.184549][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2610.185048][ T835] CPU: 1 PID: 835 Comm: syz-executor.1 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2610.206813][ T835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2610.216851][ T835] Call Trace: [ 2610.220138][ T835] dump_stack+0x1b0/0x21e [ 2610.224455][ T835] ? devkmsg_release+0x11c/0x11c [ 2610.224953][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2610.229377][ T835] ? show_regs_print_info+0x12/0x12 [ 2610.229386][ T835] ? kasan_alloc_pages+0x4a/0x60 [ 2610.229397][ T835] should_fail+0x6fb/0x860 [ 2610.229411][ T835] ? setup_fault_attr+0x2b0/0x2b0 [ 2610.264500][ T835] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2610.269862][ T835] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2610.275394][ T835] ? find_get_entry+0x5da/0x670 [ 2610.280230][ T835] ? xa_load+0x323/0x340 [ 2610.284458][ T835] __do_page_cache_readahead+0x244/0x510 [ 2610.290078][ T835] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2610.290445][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2610.296473][ T835] ? unwind_next_frame+0x1c07/0x22b0 [ 2610.296482][ T835] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2610.296491][ T835] generic_file_read_iter+0x626/0x20a0 [ 2610.296509][ T835] ? find_get_pages_range_tag+0xae0/0xae0 [ 2610.330896][ T835] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2610.336263][ T835] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2610.342314][ T835] ? avc_denied+0x1c0/0x1c0 [ 2610.346831][ T835] generic_file_splice_read+0x491/0x780 [ 2610.348955][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2610.352367][ T835] ? splice_shrink_spd+0xb0/0xb0 [ 2610.352381][ T835] ? security_file_permission+0x1e9/0x300 [ 2610.352389][ T835] ? splice_shrink_spd+0xb0/0xb0 [ 2610.352402][ T835] splice_direct_to_actor+0x3cf/0xb00 [ 2610.388866][ T835] ? do_splice_direct+0x3d0/0x3d0 [ 2610.393878][ T835] ? pipe_to_sendpage+0x300/0x300 [ 2610.398889][ T835] ? security_file_permission+0x128/0x300 [ 2610.404599][ T835] do_splice_direct+0x279/0x3d0 [ 2610.409437][ T835] ? splice_direct_to_actor+0xb00/0xb00 [ 2610.410045][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2610.414965][ T835] ? security_file_permission+0x128/0x300 [ 2610.414972][ T835] do_sendfile+0x89d/0x1110 02:51:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = fsopen(&(0x7f0000000080)='pipefs\x00', 0x1) fchdir(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) [ 2610.414983][ T835] ? compat_writev+0x390/0x390 [ 2610.414997][ T835] ? security_file_permission+0x128/0x300 [ 2610.447930][ T835] ? vfs_write+0x427/0x4f0 [ 2610.452354][ T835] ? fput_many+0x42/0x1a0 [ 2610.456672][ T835] __x64_sys_sendfile64+0x1ae/0x220 [ 2610.457709][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2610.461853][ T835] ? __ia32_sys_sendfile+0x240/0x240 [ 2610.461864][ T835] do_syscall_64+0xcb/0x150 [ 2610.461873][ T835] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2610.461886][ T835] RIP: 0033:0x45de29 [ 2610.497005][ T835] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2610.499623][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2610.516691][ T835] RSP: 002b:00007f1d0d6c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:51:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2610.516700][ T835] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2610.516704][ T835] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2610.516709][ T835] RBP: 00007f1d0d6c9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2610.516713][ T835] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000011 [ 2610.516718][ T835] R13: 00007fff69397bef R14: 00007f1d0d6ca9c0 R15: 000000000118bf2c 02:51:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) io_getevents(0x0, 0x3, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)={0x77359400}) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2610.713402][ T862] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2610.763956][ T862] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000080)={0x0, 0x7f, [0x7fff, 0x4, 0x3, 0x0, 0x4, 0x7fffffff]}) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x753800, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendto$inet6(r4, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x110, r4, 0x67437000) syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x1, 0x101000) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) bind$xdp(0xffffffffffffffff, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x305) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)=']K&)\x00', 0x0, r2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000000c0)={0x1000, 0x30, [0x8, 0x8, 0x1, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x200fc0) 02:51:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2613.712341][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2613.734871][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2613.748976][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2613.765551][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2613.783947][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2613.800601][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2613.816354][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2613.833206][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x7ffff000) 02:51:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2613.852479][ T896] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2613.872944][ T896] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x101000, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x20000011) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:51:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1a, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:05 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000140)={0x4, 0x1}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x2000, 0x1) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0xff, {0x1, 0x8, 0x6, 0x5, 0x800}}) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffffffff000) 02:51:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/214, 0xd6}], 0x4) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x11c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x11c}}, 0x20000080) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000600)) 02:51:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2616.859932][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2616.877886][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2616.891942][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2616.908364][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2616.931398][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2616.960226][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2616.986680][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2617.019852][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x370}}, 0xc094) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETATTR(r7, &(0x7f0000000640)={0xa0, 0x19, 0x2, {0x1, {0x10, 0x0, 0x5}, 0x120, 0xee01, 0xee01, 0x200, 0x9, 0x6, 0x7d, 0x6, 0x3c, 0x8, 0x2, 0xfff, 0x2, 0xd74d, 0x3, 0x6afe, 0x3, 0x4f}}, 0xa0) sendfile(r6, r6, 0x0, 0x0) 02:51:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5227c16807dc150b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sendfile(r4, r3, 0x0, 0xffffffffffffff7f) [ 2617.066767][ T943] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2617.082552][ T943] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0xa4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x200, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x2, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x7, 0x3}, 0x10, 0xffffffffffffffff, r0}, 0x78) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000240)=r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) 02:51:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, 0x0, 0x60) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000080)={0x7, 'ip6gretap0\x00', {0x1}, 0x5}) 02:51:11 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000080)=""/135) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, 0x0, 0x60) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:11 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2620.060963][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2620.094000][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2620.121039][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2620.155860][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2620.182894][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2620.217174][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, 0x0, 0x60) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CHAR_RAW_GETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$peek(0x2, r4, &(0x7f0000000080)) sendfile(r1, r3, 0x0, 0x200fc0) [ 2620.245507][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2620.266471][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2620.293561][ T991] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2620.329264][ T991] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(0x0, 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(0x0, 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x11}}}}, ["", "", "", "", "", "", "", ""]}, 0xffffffcf}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) dup2(0xffffffffffffffff, r0) 02:51:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_getlink={0x78, 0x12, 0x2, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x1, 0x1}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x9}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x80000000}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x4000801) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x2, 0xf, "93bfc4d5a33c3c51e5ca022a8c8fec"}) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x200fc0) 02:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(0x0, 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x8a080, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 02:51:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2623.295149][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2623.322655][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2623.361309][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2623.405234][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2623.427142][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r3, 0x0, 0x200fc0) [ 2623.447450][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2623.466211][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2623.484582][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2623.512146][ T1037] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2623.527841][ T1037] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000200)=0x1) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendto$inet6(r4, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)={0x3, 'wlan0\x00', {0x3891}, 0x1}) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, [], [{0xfff, 0x6, 0xfffffffffffffff7, 0x32, 0xfffffffffffffff9, 0x100000001}, {0x7a, 0x9879, 0x8, 0x9, 0xffffffffffff8000, 0x81}], [[]]}) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:17 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2626.513633][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2626.541771][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2626.556068][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2626.581344][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2626.597062][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2626.619054][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendto$inet6(r4, &(0x7f0000000080)="0e042a015c0060004003002cfff57be06c2763bd56373780398df7ff00e506023e1fe81a45d1d5c0184374a7ffe4ec55e0654786a76eae4874c90100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd", 0x1cef, 0x4000006, 0x0, 0x2ff) dup2(r2, r4) [ 2626.657366][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2626.673844][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2626.693974][ T1072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2626.715733][ T1072] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000000000", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000000080)=""/212, 0xd4}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000001c0)=""/129, 0x81}], 0x3, 0x4, 0xdb7, 0x8) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:51:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000600)) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c80)={0x420, 0x3f3, 0x300, 0x70bd27, 0x25dfdbfb, {0x2, 0x2, 0xb, [0x6, 0x0, 0xfffffff7, 0x6, 0x43, 0x2, 0x5, 0x8000, 0x5, 0x3, 0x2, 0xa50, 0x1ff, 0x80000001, 0x2, 0x7b12, 0x4, 0x1, 0x7, 0x5, 0x9, 0x3, 0x80000000, 0x400, 0x3, 0x9, 0x4, 0xffffffff, 0x3f, 0x5, 0x2, 0x9, 0x40, 0x4, 0x1, 0x2, 0x8b4d, 0x0, 0x4, 0x6b, 0x3, 0x9, 0x5, 0x401, 0x1, 0x7, 0x0, 0xa489, 0x5, 0x8, 0x1, 0x5, 0x825, 0x3, 0x9e, 0x8, 0x5, 0x8, 0x3, 0x10001, 0x0, 0x6, 0x5, 0x3], [0xfe7, 0x7ff, 0x5, 0x200, 0x7, 0x7fffffff, 0x3, 0xc00, 0x10001, 0x800, 0x8, 0x3f, 0x1, 0xffffffff, 0x9, 0x1, 0x0, 0x4, 0xf8e, 0x0, 0x8, 0x1, 0x1000, 0x1, 0x9, 0x2, 0x80, 0x5a0, 0x3, 0x9916, 0x8, 0x273, 0x0, 0x8, 0x6, 0xfffffffa, 0xfffffffb, 0x7f, 0x1, 0x8000, 0x8, 0x6da, 0x6, 0x9, 0x80000001, 0x3, 0x80000000, 0x7, 0x6, 0x9, 0x9, 0x7, 0x8, 0xffffff81, 0x3, 0x4, 0x9, 0xa922, 0xc7e, 0x9, 0xfffffffb, 0x800, 0x5, 0x5], [0x34a, 0xfb1, 0x1, 0x7ff, 0x7ff, 0x46a5b44d, 0x8, 0x406, 0x10000, 0x31a, 0x5, 0x7, 0x80000001, 0x5, 0x8001, 0x8, 0xff, 0x7fff, 0x80000000, 0x8, 0x5, 0x3, 0x3, 0x401, 0x1, 0x4, 0xffffff7f, 0x200, 0xfffffff9, 0x80000001, 0x9, 0x80000000, 0x8001, 0x8b9, 0x1c7, 0x5, 0x3ff, 0x1000, 0x7fff, 0x8, 0x3, 0x9, 0x1, 0x1a4, 0x10001, 0x5, 0x756, 0x46, 0x6344, 0x10000, 0x9, 0x2, 0x1ff, 0x0, 0x5, 0x6, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfffffc00, 0x6, 0x6], [0x58d, 0x4, 0x8, 0x8, 0x9, 0x6, 0x2, 0xffff, 0x8000, 0x81, 0x0, 0xff, 0x4, 0x2, 0x40000008, 0x1, 0x8e, 0x5, 0x4, 0xa4, 0x0, 0x7, 0x101, 0xb5, 0xe, 0x1, 0x0, 0x3f, 0x0, 0x8001, 0x73f0, 0xff7ffffc, 0xffc00000, 0x3f, 0x0, 0x8e1, 0x3, 0x0, 0x63d, 0xb8e, 0x7, 0x4, 0x0, 0x2, 0x101, 0x10, 0xcc, 0x1, 0x8, 0x2, 0x3, 0x7fff, 0x2, 0x800, 0x7fff, 0x3, 0x0, 0x8, 0x7, 0x59a, 0xffff0001, 0x8001, 0x1, 0x6]}, ["", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x10) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @private}}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x4, 0x400002, 0x4) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) pipe2(&(0x7f00000005c0), 0x84000) sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000640)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x3}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)="9de511facb9464802a23389cf6829b713db6", 0x12}, {&(0x7f0000000700)="e6c293b8ed18b91603903ccfd9fef7025fe9c33206f9d457b8346ae30e47d5695fc9e11180", 0x25}, {&(0x7f0000000740)="ef6bd9aee93bfa8baddcadb157eeecdb54225fbd4f3c1981088f23ca9677e3b9694af7de08dabe766b0d8a255140397c9cdf50cee318d0238b2c04798637ab2b91eeb6466b21bd004d46c4cfd6d328e1aa", 0x51}, {&(0x7f00000007c0)="65deb0e02d016b87dd4c4cfd5de92602dde6800872fa6cc85c5578c52cfb47b80f66240a7c8aed68a94f2aa001a8e5a17c3a25c0de2d3b06b4a0e6ff91be8a83192f46c2f8846dfdeb71c7daa64a5694d3d54bb9977c40f0b4e04c656f0c119d53297b8b38f203c7bb453999ca09422ce7c606232f95b055e5cf8d72193330ea212cf0814e787b3329fe5a71144196f2a1f21ffed6877247c8fe45f9c9687dd5ed0488d9cc2f072640db2de5263b3595fcd055c136e3a55cd23397862bfd02834126d60049a4e398a8a480674eb1b27a3852738ddb5051d26019f37ecc1aa9c9966f6482", 0xe4}, {&(0x7f00000008c0)="352ac3aed8f918bcb64a7e78db8eb457e2fd9f9923d2601b997e74104122cd10c8547f6d1e64d5c4445b831e9288241143a7841328970b8e71949de18fab727c9bd1679335b8b2cae03623446530b4a842065406b2cefa20bf9f2b6a4b420c712dd21d476f93e8e3e89397c081e67b56abf41e9c694c34eca5390464488714dc6ad537b1c8efabb635a0c8f64e95e444f211715b22956dd58a682fca9c32a47436c75fd70e86642150106d4ea03258db6264d11cf01cd1d23a78e894bf67e4de", 0xc0}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x220}}], 0x1, 0x48000) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:51:20 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, 0x0, 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2629.695109][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2629.717647][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, 0x0, 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2629.731309][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2629.747236][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2629.762088][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, 0x0, 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x0, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2629.806016][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2629.837777][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x0, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x0, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2629.877915][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2629.898082][ T1106] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2629.915078][ T1106] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:23 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000000000", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:23 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x2) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x9) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000200)={0x80, 0x0, 0x2}, &(0x7f0000000100)=[{}, {}]) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:23 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) fcntl$setsig(r3, 0xa, 0x21) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) [ 2632.905824][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2632.933894][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:23 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2632.947953][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2632.965074][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2632.979190][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x0, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2632.995390][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2633.025203][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x0, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x0, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2633.062135][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2633.107812][ T1149] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2633.130963][ T1149] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000000000", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0xa8, 0x0, 0xc0, 0x0, 0x0, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0xf5, r3}, 0x14) sendto$inet6(r1, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket$nl_route(0x10, 0x3, 0x0) lseek(r4, 0x7, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x200fc0) 02:51:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2636.086949][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2636.106690][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) fcntl$setlease(r3, 0x400, 0x2) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2636.121913][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2636.146223][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2636.160077][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2636.176746][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2636.190479][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2636.207038][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2636.223033][ T1185] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2636.239785][ T1185] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000b40)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = dup2(r2, r3) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/2719], 0xa9f) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3}, 0x14) sendto$inet6(r1, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r6], 0x8a) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r9 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x200fc0) 02:51:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0xfff, 0xf8, 0x40, 0x40}, {0x6, 0x4, 0x0, 0x400}, {0x45a, 0x40, 0x7, 0xff}, {0x1, 0x40, 0xe0, 0x7ff}, {0x0, 0xf, 0x88, 0x5}]}) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x88882, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2639.266411][ T358] EXT4-fs warning: 5 callbacks suppressed [ 2639.266437][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.290234][ T358] EXT4-fs error: 5 callbacks suppressed [ 2639.290245][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.309702][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.326039][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.339852][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.355609][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.369731][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.385916][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.408227][ T1236] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.442538][ T1236] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) bind(r2, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x347e) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x478d) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0xa, 0x240000) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) sendfile(r1, r5, 0x0, 0x200fc0) [ 2639.468652][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.484551][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.499326][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.516999][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.530794][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.547178][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2639.561286][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2639.576945][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:33 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x20) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2642.176009][ T1251] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2642.215678][ T1251] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:36 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15da", 0xfd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket(0x1e, 0x4, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xbc) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0xb2, &(0x7f0000000080)=""/216, &(0x7f0000000180)=0xd8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0x0, 0x8001, 0x7}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r7, 0x8004745a, &(0x7f0000000240)) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r8, 0x0, 0x200fc0) 02:51:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) perf_event_open(0x0, 0x0, 0x6, r0, 0x8) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x8, 0x6, 0x404, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60000094}, 0x4a044) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x264, 0x0, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x92}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}]}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe4f3}]}, 0x264}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000200)) 02:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2645.173295][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2645.198183][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000080)=0x7fffffff, 0xfffffffffffffffd) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2645.221019][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2645.263629][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2645.295817][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2645.322207][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2645.337825][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2645.353615][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2645.389342][ T1316] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2645.405338][ T1316] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="b43c07fa8285b4e8b05aab", @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001002300000008000300", @ANYRES32=r6, @ANYBLOB="1400040062726964676530000000000000000000080005000a000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfff, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x376}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x48006) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x200fc0) 02:51:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = dup(r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000001780)={&(0x7f0000001340), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc000) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x1) preadv2(r4, &(0x7f0000001640)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/243, 0xf3}, {&(0x7f0000001480)=""/252, 0xfc}, {&(0x7f0000001580)=""/143, 0x8f}], 0x9, 0x7, 0x5, 0x16) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:39 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2648.382484][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2648.410274][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:51:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2648.432110][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2648.469545][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 02:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) [ 2648.507722][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2648.542277][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) [ 2648.557660][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2648.577605][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/215, 0x1b, 0xd7, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) set_tid_address(&(0x7f00000000c0)) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x0, 0x0) 02:51:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2648.607696][ T1351] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2648.624258][ T1351] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:42 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x0, 0x0) 02:51:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000140)={0xe, {0x8, 0x1, 0x3f, 0xb2, "2a167e5a10864d6e5a0c4c66c4207c3eb568aedee9f32bfe0225d11d99330b00e13d611518aa2fe4964f68340853031ca4c74b753818ae440e4578b7249559ac233e5bc83330190593822e24c7387e4a20310f3600c3e986bfe47e4c41463d7fea7750eddbd67bffc5451841f2ef64dcf7b1840a779767522681eac7c92173bec0eb12ea0379b88e6a3815c9c5e13db8c18ebeda3b02b613d77d0d21b2acf8ec99f6c1342d819e9ae22d1a38dcd244d0059f"}}, 0xbe) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) fsetxattr$security_ima(r3, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04f1ed"], 0x3, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:51:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x298002, 0x107) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4) 02:51:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x0, 0x0) 02:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x16) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000000}, 0x8801) utimes(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)={{r1, r2/1000+10000}, {r3, r4/1000+10000}}) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r8 = open(&(0x7f0000002000)='./bus\x00', 0x20, 0x0) sendfile(r6, r8, 0x0, 0x200fc0) 02:51:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) io_uring_setup(0x3d1f, &(0x7f0000000180)={0x0, 0xc0df, 0x20, 0x3, 0x285, 0x0, r0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000200)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x5, 0x1}, 0x4}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000080)=""/202) 02:51:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x1, 0x81, 0x8, 0x5, 0x0, 0x1, 0x6048, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10001, 0x8, 0x1ff, 0x9, 0x3, 0x7, 0x8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4405c2, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000080)=0x400, 0x4) sendfile(r2, r4, 0x0, 0x200fc0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sync_file_range(r5, 0x7f, 0x400, 0x2) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) [ 2651.650430][ T358] EXT4-fs warning: 5 callbacks suppressed [ 2651.650441][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.677896][ T358] EXT4-fs error: 5 callbacks suppressed [ 2651.677907][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.698954][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.723568][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.740962][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.760269][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.774038][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.790263][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.811191][ T1409] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.826971][ T1409] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.844717][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.860376][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.873354][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.889081][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.901826][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.917575][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2651.930726][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2651.946384][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0xb, 0x4, 0x1) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc2) 02:51:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) fsetxattr$security_ima(r3, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04f1ed"], 0x3, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:51:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3}, 0x14) sendto$inet6(r1, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "e1522b70db269bf6", "8141cf482e80d644fe27e39bf7830f4d0e859f91e6740f5ff8598e45ca16412b", "f4252b51", "bf904d00fd1512b2"}, 0x38) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x200fc0) 02:51:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:45 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x8a) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x111000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4008820}, 0x4000005) r4 = socket$inet6(0xa, 0xa, 0x6) close(r4) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000000200)) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r4, r8, 0x0, 0x200fbb) 02:51:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) perf_event_open(0x0, 0x0, 0x6, r0, 0x8) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x8, 0x6, 0x404, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60000094}, 0x4a044) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x264, 0x0, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x92}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}]}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe4f3}]}, 0x264}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000200)) 02:51:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) [ 2654.515242][ T1426] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2654.536560][ T1426] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:51:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00fbf700f8c4c3d5633ed69dbad97f95687d391501676342a4669152d786c6c36790fb7b1e847c71152c4a267e3f876cf77e4bae5469384bf39f5446646a9474ed4f9f212b5f88e0f517702c91151f2b26f6b388ac75887968c91760b9d60b99062fbb5ae109770c0d20895427e92fd4c0c4e1780d682177cafaab33ecf41baf8d68d5280de1a24f1f113e71e320c28b4b6207518c5ef42628ec0aecb95ddd356138cee77b8c8a78e5376e7040f0fd4b0e53accfa3ec64d2f895789733183c7a43d3bcda06c672c751935230dd2d2ac1fbcd019a904c3d818eb600e8e9b81273fae496b2b2fa95c67321707ad5ecaa35f6000000000000"], 0xf7, 0x1) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) 02:51:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:51:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)="a4abe6847ff51c162576865312322c2a7c04b36fabac5eb963a7f31a7039974504b93801987f1fdf1c53f530ccaa71c923", 0x31) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:45 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) fchdir(r0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:48 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:48 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2657.518233][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2657.547094][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:48 executing program 0: r0 = gettid() ptrace$setopts(0x4200, 0x0, 0x0, 0x10) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x1000, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8000}, r0, 0xfffffffffffffefd, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket(0x1e, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$RTC_VL_CLR(r3, 0x7014) ptrace$cont(0x1f, r0, 0xdc7, 0x3) tkill(0x0, 0x3b) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x4}, 0x4}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:51:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x40) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT=r0], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x40000000c2) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0x14) sendto$inet6(r6, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) setsockopt$sock_void(r6, 0x1, 0x3f, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)=0x10000) [ 2657.592704][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2657.660892][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2657.688884][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x96aa}}, 0x18) sendfile(r1, r3, 0x0, 0x200fc0) [ 2657.712752][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2657.733851][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2657.751259][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2657.769562][ T1500] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2657.785846][ T1500] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:51 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:51 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sendfile(r2, r3, 0x0, 0xfffffffffffff000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 02:51:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0xfff, 0xf8, 0x40, 0x40}, {0x6, 0x4, 0x0, 0x400}, {0x45a, 0x40, 0x7, 0xff}, {0x1, 0x40, 0xe0, 0x7ff}, {0x0, 0xf, 0x88, 0x5}]}) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2660.771438][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2660.801201][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x2, 0x6, 0x107, &(0x7f0000000080)}) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x7, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2660.831562][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2660.860273][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x10801, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000019c0)=[{{&(0x7f0000000080)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="b0148ae67b434aaaeca060baf50313fcde4324b58e791aec4ff85fc5ce7e1abc6628f48ebdd28f9ad199ca27e58dde1dac980ddb0c06488969", 0x39}], 0x1, &(0x7f0000000180)=[{0xe8, 0x102, 0x2, "7cb37dfdc1a45fc507c859643b717a06f5353c9977e32273f5b21460b209b2cdcbc60a2a38bafaeafe11388486d1ef7b676a83621d17fb7d0543678eec51e9e08f0f816f247093d3032b2ec225df595a63a9ed305f0e109a4556307570f482b3d83f2cb4c52cb64db15cbfe1b124e658feca978aefdd64d2f081bcd855a548c3ae494d53585bb914a843ab06d40d1fcb8653736c85f5a0d57dde0e24644166189b1fe8d22c4edefa3efb4f57af1a9274a219933e21bb358f4a1f568047a0e315bce0fdb61c17479e97122d05581bc218aa6058ff"}, {0x28, 0x110, 0x20, "81987dbe45a4c1b14468c9e66d7dccc95ee85f15"}, {0x108, 0x11, 0x8001, "3448f5d66f8d611b6546e22c9269dafa6071bfd40a731d49904943b3242a5a69cd7640345decaa6854651921a32162d3567e9de15233a369d98093b59c50b7f9124f099ac244d295c160ba44e2396cd2f20054f1a54010e5e5e09a99d0ec2dd54d33dbf13a1fd73a09f7804ef7001af3b577d1a56aa19892b906a5e90c5891b090cf0cefb7917ac70c0c48b2a268aa9be42314a0fa694a8b85ff5e0c7fc017cdd7e5288025d91441efd0eae58c7108cd4e8b11e319031bbf619c7a9fcf750ea8e7f669ecdfbe365f5265f503568f8fa33a7778308637c41304c9e634273695f972e38accdf9c9d5b99379216416118f82293fa"}, {0xf0, 0x113, 0x6a08, "3f8db05c88febe36578a1d4f4046daf154c9174e138cbd55165a6d130ead24a44d121f8f007631466e8d6769b2a475551c6ea0f92b6ac525ba8d0eaf60f3f16e2818680938c082878519a090a856ff837bf44196ee0ae152413d5af0250de9866ffd1696050617ae3e44d60a4af2230a8acc52d55d92ccec1e583258a9cde5b9c0a2095f658c97a3f18a2cbbfbd3f81b13322a07b30f800b739b35048b483aaa669238108e3c4db7b3c183ebd81a7b76c515888f35745a9820465bda0f25e10d7a3fd70fcf51cd1c207d2bc3b5ce0c737e8059ca449027e00e3d4ba89f53"}], 0x308}}, {{&(0x7f00000004c0)=@generic={0x32, "500fc17f721a39a85bf658a879b4170b662610b8e13f39bcf38f854790d0d9717daf6c921848de8dd8d2be325503baef0ae52f96b224d0821bb388d5275785fd4c6fd8dbb1f314d5e9eb4109c7260ed3dbb445bbddaf2defa0fb8c7b2951dacd3ee5ce9801787b18b08872969c8b48795263cff70a6f28356dd0c4ca1f6e"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="b44e9661f1f2680165b4bf994bbe293e7fc6e632063ffb53ba7d246357a2f43d03ce651837a7267c72f5e64825aef46ed948d1e0c5b87e6e715e3b3bff5838792073212d524d927019ae68ae52b750a766707e52186f3d5cf402da58de20aa79a8610ad3c10a898454665edc7f6e38ea440c9d3329c1e0b3533a38610128c539d6ccd16cb4bc4f7b5a", 0x89}, {&(0x7f0000000600)='u', 0x1}, {&(0x7f0000000640)="d6c162ea248ee8686175c73f29ee7f2a2c7743dbb35bc20593f077c6425e5d6da2f26aadd4902f614dd6907b321f911df3a9b6eeb7b742e91ecf993a0fc92c0b75364a2aa6ec2b4c5a02eaba0895b59a46f94a4b0e595617ba3b0890677e9b6dcc5737cf0635ffc8b8718de01191a1775cb5608582a281df71eec4bb6c65d40800e59505ee595b1ba6da0adc07ecb855a945eba1bf15ef5c47abeb4d7bbfab2dfe8656ea31d837cfd37279613d6744e378bb9a121e20a8a37c5ae5aa3816ef3d7f382160712857dd623cb8f27aa58cae39335d9caa4bc7e629d9bc9bfae77f0f054005fc5eedc58557", 0xe9}, {&(0x7f0000000740)="0ea975ebfac51810ce5ec66bfc8de59ef33a3853752383852e38a82896d58a9e17fdf5ab5d305982307f68f78d4283427f01fd4f7cfa946459de1f78d3a063f6479b28a2fec9d379eb1f38ceb58bc3184603acd26a61ff66be72fa89eb3a1c7f8b1e8aab7e906ff3869c44d3c60e1af5202e", 0x72}, {&(0x7f00000007c0)="8632073e9dde9ea78a147a0e17ea2d851436c5a8d8f3321dbc2c7cebf7c037298185e2a1362b5706c973c207dc3eafbaf3fa6aeed99b65e2cce8ddb8bc3273335873da42bba26b859985b98b618d432e76016e9bb94ace6b5ebaf2b3a0363ceee8e3cf80eee473c3eab42bef40a0a38c16991352d92abc9122d504b1", 0x7c}], 0x5, &(0x7f00000008c0)=[{0x28, 0x101, 0x81, "3def2483de6a593da3846a387b3e96a6200317"}, {0xf8, 0x109, 0xa09, "f72cb359c69651d6d2c1a8c2d6fe83dd5668a45b1cdc8372f16edc5df9689b61622a7aa6b187ce556ee26274de317de26480866daf9bfdfc3bccd38b08edecc5400b3c829e3bceb4230ded549cc53c91e50007606de07b93816e04a5498e4d44e39f59d3e5bf62e66301a3728e1f5157d86c858d20f0c20a55d73a4109ae375e9c7c15b4e0e06f3c9ae32049269f04828b33e8b4e5051ea0561926f567cc86f0736d57786d7da3813499d25ca68e29ed3726ce599a664608a49b82033ff93ecc83541892f14e6e667201cd566188a62191c349a088211b886caef4d0979bffddf169f98d51"}, {0xe8, 0x10a, 0x7fff, "e81c230934558a15db543daaf49fd30e65e78f09cedec3fe71f04a91afe201fbe6693391e7f7c2fe2a9e0bfe8ff1fe82e216de8f79782dbdb9550536b5039649e23980e7b6832c433467bac160a38c8bd96c8132c7accc5b0138d019ed8ce0ff795eb2a622c1fcedcb35832a2764538edaac6591c763ac13ea6592e8ccd0cd45e1efd5cd7923bbc582797613f21599f3010e8356f369ae2a8da5efcccdc67d62494f7f15e0472eae956c0c84421e8fa116df664554f8a43d9beded0381c2a71f1adbd3ffa085e11f133779e7bb083805215453"}, {0x80, 0x10a, 0x4, "7629c3438c421376310f9c9d58d31fd54aadfed0730494828c0a620813d79d7f79b79a23dc2de5c43a05e01b37877fb208271a612c4a990ba3f04460a9bf9b64e6537444a1d578ec9d5eb2e3e5b43546dbd2429c89f6492bfb499c29e7302ed493a2a266ef8bfff4dd54d3"}, {0x100, 0x10c, 0x40, "40f327b1ad6ce2f95806c38fa228a04dd8a5751928380208e2d2830cb2d22548f7f893bd958e0b82ad04babc3336c9411439541aef475ffa832e33f7c088a05c9bcf929e28f658a790d47a1a7a6ebe1f54efa57afe19adddb99206889ecbeebbe3956a3c9ce909d1c0d40490a9774c46c0e879134240367b51c5a54778edc0926286e8e3c285c6993913e1a48aaf754431db80c51bd9d74ef6ca13a6d8f86c2283b3cbf3bde77e732458d5e1e6845809b223e22488fd7aa4236fed25f19c49ab88466f9eb278de16a9a0404ee8bbc7b0df13478bc664e9b9da306aa88cd79223e652105f7f3a463cdb68"}], 0x388}}, {{&(0x7f0000000c80)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e23, 0x6d8d, @rand_addr=' \x01\x00'}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)="1a5720d5436708ef2d9d29a1916f4d40cb090205eb16d7982b14297632326e2b9ba4e70a73cab2eae3ce6976e5640d40baf7be5ca18c9b74ab869cd211c542ba42f70e6ff57e15fe19771631416f56e0c713c706e3b8b84a1d605486fca185cb204ba6b2ce329b6999917fe75072117ce0823671201430351363de3c0e0813a96cfb6478d429024c1f0b87364eba39b61d4c6b5d3899b8aed307e3b30e0668aedf060d6b0ba6a514742c5cf6580d4d69b162605fc96cc192b3f9ecc14cc9ad0157", 0xc1}, {&(0x7f0000000e00)="7601fc66cb8f0700ecffffff6a6582d52c", 0x11}], 0x2, &(0x7f0000000e80)=[{0x48, 0x100, 0x0, "ceea0954f5efadb8535a1c8689663c0990d195a46f16700a6996fd45e54ca8e8c9d90626c6fa73585dc21a111748fe55ec2b7af0"}], 0x48}}, {{&(0x7f0000000f00)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)="0c8a4d87ccbea8108dbc266af36c2f8f08895721a58ccf612f164eed8c5e10", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)="49f2df3f9fe67b492baf4a0878c133e9dc11bf0eac037c274a792a413973deb5d6146eeda644520c", 0x28}, {&(0x7f0000001040)="109e18c47da2c135efd0", 0xa}, {&(0x7f0000001080)="501d4dfe86", 0x5}, {&(0x7f00000010c0)="cfac317f16cc0fd6ab550949bc7461b5e02a8d28ed8152712e5a58535a042719e85f371bfccb28e413f1e2d4edfe4a699a2c959643a3630d938a957b6aa3bf48f153c10c1207f4c157fe70184e28089bc599ad0087301117815b735c9310b931b41b1e43abcca6a1f16ebd20e8ac9537c77e745c6a4dc1629a84b987939e6e850dba6d330b3e453274614c9665adeb36736cba516531b91c9d0a8d37bcd6ce957e61ab28952c305d6f90721ce9cdc213fb8378fa52b3a7068494437080e91a2458fd14b422eae1cd49d2d4782feb97b03039207c684077ea", 0xd8}], 0x4, &(0x7f0000004240)=[{0xe8, 0x113, 0x6, "ebd4d0e8ee33ec11d2ad74fabc153e233f2fcc9a8c954d18e88898679438e560608971f8563e77c8a9d549ab3bfccebbeae508aeaa3d034f79c9d57e2399a759b4597c8fc9739409ecdc9ce0bc0bdf87cfca020b2e253c6f65b6a4f1fbf0c229253aaa935b04635030dd1b65739b8db6972b46ba409643d7703448b670a6e7cb4c7941a231fd05f2af9d83efe78f7c89ad55228d846d22b810320e938b14ca624fd9902d0a12e31b7db3b0deb1d597f27bfbff54eeb36d2de7975b2cf7e5ad759aef786cf529879fc2b0376c8d5fe1776f"}, {0x78, 0xff, 0xffff, "c1f83c561c2ab619d92401cefab95118166dbc8ca2a8db480a5f450cf6df2aedcec6a896480d7e2d8b1d1c10c2571a6d2a47ed7c747ef3f7f97aa3f90dd259b451f9c99be41b9af590d2650b5f1e5f9ad040f97580b26c213cf691dfe378e84a3e72cd934856affb"}, {0x1010, 0x109, 0x1, "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"}, {0x98, 0x110, 0x80000000, "7e0317d23f4204caed2141fdd62058b14c2a23906192e5855178209ba356159ad63ee573058b3bffe7ed5b64585b4f0c91a4648173f9df92bf9608718fda77e108e23ca7d2fb34a84d4cdcf67130f6836ee73bb2f29c634e40e39bdd8e5863a05cb418b916e93bc666a0ce31b4d52b0af7938a458776c974af09a9bbc4c8979927776b7962"}, {0xa0, 0x107, 0x80, "c7ca206e7c5a5b4f112fe1cfb6ecbed472bc824a028ae108e50382a63a5ac87e6bf944f2fbe6766fa7b9f35d160e5e4c54863f81d868375b11900879e0c1ddeaa4520f1a06cc56decb080000e26662ea687642ad94c4b7d83cc68cdaa07254ec05bf386f2e619a00d0d207d725ea3ca8ee7731dda2e20e749590da387ccd35f0e9e7a1cd1ffe5b7bced6914a81ba61"}], 0x12a8}}, {{&(0x7f0000001200)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001280)="fad43c2e73a02567bf03ba6fce96fe593d9938b85462a14fccd5a061cce28f1b01866437e8863dad9b00859f35ae54b073006b65a79ac88dfa4370ebfbc3fb826f2bd63f4e8a7c83d7d80b2d735af57d4d701e82befaac97862cd4c9", 0x5c}, {&(0x7f0000001300)="002b8de9a19ae1a7656fad2b5726a65e95c6950c29f18185e75b775dda53670a25223c48d67512c899c8c5b5fbc1c94a782d634a1dddb30b37ed585031328c4866845f4c3a8d47edebaa10274e47d00c7808aa3de7597e2625aab52fefaca3b9d084a96b1daa67e8e2090a7dea21c68c12d6c6befb35861bbb161bfba4c119f105903a7e661ca999f6555795bfa4baba0329eed0da3f30c93e379c1dd4f2adbe6a0532bb", 0xa4}, {&(0x7f00000013c0)="98d1096d007def50e4d5f17708f3e448fa229d48d07f23aac09c02f8525693085e9551a6b97104ac30c1a07f8a7b0a28c942778822c69c0bcfac62bf2a8ef6082dae124cbc91869e19111d4569bcb25316b882bec56792cbb5458adf15820432f48c2945c3dc3b57ed1ce1337025496cdcdc0dbdfa074e98d65518347c47dbe41ee9359b5af9b8e1c06ec67ff161908cfc045f2e65842c769f758324f7d462642ad4ac9c62faecf655df00abd6b8b4ef82e03cc6fce569f86eb5e598720708bffb8080f9c65fd07b59a68e59", 0xcc}, {&(0x7f00000014c0)="f56973c412f0816dc701e7db5431b83f2881013185c3b4981f300063dc8e05a59e81022eb16926c81e9b7be0139222ea5937959416fa00683c9024ccef9b31eee2605c88e1a9c70ac9f15629dd7dc82c53775bbd9e19a386fbd0dfa8abe6ca8870aa40a3c63b4a4b3c29fef79169711cd748c89ef257f857e78d890e08d911ac02375d9b69db6e0307fb14e55974dc5cd8bad5bc3c2e94fd9124f2dec29869e5", 0xa0}, {&(0x7f0000001580)="62caa78fbfca72eea3456a58ac861978dc935d30b5a2484955839924e2a472182ca68755bcb464309a9cbe3feb0d0fd3dd6a5cd8de21f3ede6a1a7b5cf0ffcb00181652a0d91f7806de94d71995c55f28e671d238cc88d344bf2c163898da656f7ded41ac6dba17ce3d730913a688e32387a0db14bb7402e4b25720f6b4a5f6f5a82b7f541e085b45faf171c4c92892b1356ffb0f6d496a3261dfaeca1107fe14bc405a6a3220d15cd370d4599d7c56a6706cbcb8d97dcc71ce8d8b24e480e8e", 0xc0}, {&(0x7f0000001640)="dabc9dcd511727110373226700983885e005053f52ecc76ba8a2e6167f65bcc749a5155192bcc9b50ede44d340cb9ce7cbbfe8dcec8cee4d582556fb581e8dbb523fbe", 0x43}, {&(0x7f0000003240)="30192b71433bd3671b3bac3bef8c136d2dc1758175c99100fe59fa3b844fab098011902d0f538464e9370df4d6c581750359719302c59192a3d2eea393667dcdfb24abe8c49c25f6c45da081faadd8b3dd0e96dd763862b0896e6bbb621da668c83a9c48a777dcf151d78dfb874967fbd538c01e366ded619dfe3a27ea2dc45242fad473951f0c0cbc7da4ec96bf85603668cb0ccf73c5f2103c69a9648a7c3b982502ab9c9000db1123d521fdc99c6ee95fad3a034a8a7c578739928e7fb71c4ea017dbd04940143a6cdbfaed78633ca92cb7a1f52595b1025e4dffa08120657ee95602d97caa965fbc3086363a1e8158fba4f13ea15b217463f294b03e06c909b679ac9db1b8f63730424d0f9dd6d2d1fba29b1b84de99a36687e865ee83a4d79fde4cc93e688457f7b1e1c80e5db3e291be92646deeee40583b15efebaadae9e0b64a4dd782cec137d07fc886454065650a516985fef09e531d6bf3e9501e1e36bb1df7ee15f50db9230e03ab732902ec1c40bac0a48279a794415fb7e404ba1524cd2d0a4a58bd75dd5c1bd81366faf8c9e46f46218d72e78a35e3162d6eaea7022861c1012c0f33c8323798d56efdfcae9052f288dfb02ceab0c379ad739e7b9a16c83582048a09d3f0d3bccadc8e5d0b623a3fa4c3cb2fadbb7fa1d81354c6794a2b2138ecb1b254229543a83e606a8a6782bac76f9b066053934b08568f9d957bb7a90862ed3ff18971785beea2bc04c1bb2b28703912edbb4e6fb8fde4d46ec5021b1c171e846b8d28b7da4a107f41c46249a3244ba19dc7335acb2769f1700365a5388ad60b1723f2db77982742060d45a6f60f8a13768eadef71765990d74e8c3cec1a2b4a8f0df806577edf93b731e789ef144f07f4a85dafb5f43b92192c933f258dba869b6b06e02de75d2ca82693bf9ded2aac1971c299a50e8aa5e08e80953de5eb136885e3bcca0a7d45857960c4718a9a7bee2b50dd009ea8994455072ee4dab63d2872fa2a7582ac5f99d183b6962003c531be1d970f0cd763d1a182474c6140701c437b05020e7c1fd248bdf01348281a5cb9ac127f4063631627f88296d99371285d1c2fb9f1b63cd899c6412660e926d27f082894aa8eba97d50bfc3f63dd150cda34b2ac612a9b7663ea98cd1e756c830c0f491d593466821a400ddf03e17c27d30151dc23220de2afa4c1c7adeec8a0c862f8a5814fa0efa3bffd9c2d40cd61862c84c14371fc2cf3d26bd68f80b333f5fb7bab2e1dbde0806f4f0d470b01e8bdb7ba639786f9257e99822e65e6f59b8a57b0bb16c81476f6fe158d5e24fa2be1f708d90a7495f649137f85dc39087e5c6e33dbe94038627d6775ba7e43be89f2d7c306038ac5daff15acb15d814b7e8729de2f2f97d12dc6dbcd0e5495e0214c9630fd0905a14841e8a3d4be48cba6005aa874b0b67e483409bf1d237bf14c935182807c3d11f46819806146057e22ebd7c9a3586c5052a1cf4945b16abd17a63cd30522089a1cd114afbf0b938ad08b7c0cc60027a3e5a18422847ed1ca8e1950b7877dc4becd04d5077d7a0942cfbb1f0aa76cc1b8899a58ad23b5eddf511240bee7473d5362aacfe76ed63f2d88aff6e482a618dfc12f0fef82f514ec405bacd5c6bbad5f8242c9127458e8a9c81b1883e1cc88f6fc8b23d20d0471fe198d66ce49e259cf21bb9cf42418719b89d9d0697e339b4be38386ff99b126c9167663c5b1ba7cf7694a06578909853867e6a18cb84195a4f16e3f3a396be41cb6846857c68d5b3ff8c08678bb3900ae51e4e53c3f88afe52fc9d62588c0d1b05089bc25b2f1f53bf7a8f87a49b89e691c9c70522129168267fc96fe5a18842df01c164c4c50b80621d658666948769b7b343e4bdfdd86da3b9f196010007bafce4b907f1b4220faeba392986aad982e843b2bcff8ebe0dae5c6876ce010eb319febebd8fc5da89a514fdb7f0d0ddcc05f5a3bd5697502d4296da70f4b4beb4b08bc61a245ac418e43acc8dc0ef76197f84fa5ca2ffa223079c250a91655d5107dca6df4a604d96ba5a14cea7ffbcc12c67b860b5099834873e0b8392264e5d322b55e92acef2fc83eb6ee5d8f1a645abe11f20ef4cf785d78d999139e950a6ef51fa104233e3bbb228bf06da0206180a70d35236e8fa1d136f7d513d7e0332c9049ecbf47b31ea62f42485c01c2c9500dbfbc970ef32a58b85f1eb2f88d77285cf3607755abeef0827ca8475cdb6302b51afb457ce321e5ccfda466baff2898e812653c55e57ece1b2342ee1f59cb21b029f30530d1c1682ef462afbbe69fe5c1d5beab4c35fdd443ff46e8b3e58e0d1c77b58f3169aefb3c2099213078caf3669b2d40f871101fa63d1d671aded6bcd785c928a26c502730c8ce4d5ae0c2f0b049072c47f3b8f0344fcacd231f97a4cb9cd4156068bd6305fe4e70a06cdb1e24073a6d538dede6f342c8270f62926e821899e038c5cef1f74da57052a307a5b66be7b8c9a22efba042eb0d6c873ed38a0da283d1ac343846465dfd71111e7a0e0ddc7f06c75fc28dd2ebfa2c497bbd0661b26af2e2ff0129b642e20d288cdfc770856e528beb94a2beb6a7bc7ec6de0ffd7f19b9eb4fdf5fc1b7e1b341f81a871d71c2d3d8231aa552765f9fbbae7a7cce4ea5c504caad97f149cbaef00a1cab6c4ea6f6260db811276fac685a4fbb823128dfd462b764d0dafea10137137f2a33c402dfea6fcfd294860269a7134628a4e70d1d7e4b4bbebf9e2e67968da5076805e46ac3663bcbc26139faf30e462cdb19ff1728cd9eb6bbbbaadd0f503790b775d07209030eb2e17d5c7d7c2c3b795fdca3e3556116539b511373fbad9b2ae4bade8d7a54129ec029b468b33b00f55b3516b2ecd2a8bdf0eb01634197bb9df7024988ab18dad99330ddf93e24e5f694192d188a10d2a2460b0e5f111c9d7264f35f5a22ab3eb71813d2fc72824af0b97e793dcbe8636d3cd1553dc6edbcfdb002a357f4a7726b4f2e570214c1a028bd41df5274aa5a117b664d3fd3e73ec3698d9559e3aafaf0e04e4b8d774017db67045d9a217ec5182fda673adf83acaee3a97e8bc3533ae179225b7c643ac899267840e601cf3ccc76fb4102923ffc598de13df29c4c676f00adbe8733b83dcffb6d35b62b2b95302e721c1f99d8cf1cea87653514fd119efca46f906c1d6dae4646a6392105402f4c02add4487093d6a6a0d415f374075371026cf14ab78521f30c5d4bdda284da6d0d84952ba4ec49fc877d096bdc06f887be0e21fae56357710d63b1450e1ed82803d149d55d48ec30016cba057004146b6d1b70f27f9eb60b442c242914a38c5d896576031838b6d871481b6cc688a659493edc7b9977c99f34d3508c2cedb8c84da069208ecfad053d48a7b137372cfd769396bb90ed9f76d4807858e4d4b033c25c741956078760d657e886b62184ced796e600be92a92efc626adba2b2fb985ad59c757fc1e60be94b18091b758e43d69afcb00dbbcaa732a642bd49e459b9cb5cae925063aa1da2645bc3e43cbc9fdada776f555b0145ca5cc8ed79ceeb9c9da5a6a3eb48a073482591a8f0d7d4b54e6c54e88f9838beb3be52603f32c7f2a06a037fefbfed26d87720b2186e463ba60877a372d0c762fc9fa5d70a92c2b3329c1e7232761acc427f6db554c1005585814d7610d6a8c8d4e5c11b1bc49f667ee1161e8eaa8370ead1a7783bb263b612f219b2030d93ebee2434ee148479915bad7f7337376fcce9bc7f69660680e9a547df8d058563c63256d2b883da7d380bd6a5b259025193d52ea224969cedc306becff76447c106da1422d0ea235d5623145dd3bcbc43acd25357114d0d0229f05de95d15a77f27eb3bc0c2642cf1f590166de3eed025583d8b89edb73ac4a70559d3efa92bcbaf7a3c85da89fc6c960715b9fb1b043eaac3551f1c275a470df71a0ae06b856e19b32e2660e4bd4ecff650ff93e4e82619fba65a9fc8af3375b0289ebcbdbfba5b5b8ea34c47499cb858c6a150738ebb4fc731b4a2e8a88f6623c3083be0e1bc60737ca072f5830d020359cabd09e77d499de9d836236f35a1d26f2bcea3af9e90ce35af4afd161f703aa71dbe9e4d0a1b69f88f11f50c0c37a07ca865d68fa97c309a018d883f2e84baef1c3dd6f1b66533ec5b42bc9845eb547bc824510f0e96bffa57b7c723fa76297cc2e72f1a1f334ff680e959907da794ff8ff64b865c778023e083fe05d64fca597d782cc3acbc7092edf8fa9029678826d1fed18e46f9d8b6e46ec1676d870379732af6318ca10763c23cfb0dcb432dee15788dc5333b0d2d30c2ce22f2a2e2939089a251905765cc3842d67300246af2010c4fae9059bf3e63a4842168fed15fbaee1f67dc5dbfb652888904e87792d036f7ab75d385ab901f2d71d3452c0cc967f483805404850425914aca385b6f58425a5642a53107f04a1869ea62d50cd6ef1b8d91d57607efe7c7b84352c678b24b908e66af07bb0ecf99a3b7c03ed3beefdadbf15bebfc9d50554e8895b30607662d137fba8a4bf50877075cfec4cc6a9a56cfd47ff868677393692ad90d68432fc6f5c3060e5784e4956dd221d8541373c72ebb534534ff8c468a7fee7c97aae783fd908ade12434b70d278c9353e2dd92a0122211c287bda7b0bae2b7445d270d771b73866b62933ac5f5963ef578ac1d234d171058f643e7dcfd14ce2ffccf1a63021797c93268f9c6fc769913ad8d6f0dd7507cee5492b1ade49c86d58a44e631aeb1757994590db84f59af08c4ccb51fbea2097dbcaac4688b8e03d4716aad379f29a0833ac65094f98992fac6fec26427c5ba1d7629012c79c6013feaa92acda48ec3105aa3b2f1155fcab8c1a02bf1e4ab577386fb1b842321ee302dcfacfbc9751cf689d1045d95b8b980dd1c5701490c85873232b2be73cfed134f7393d066d644e2d17b170a9899a13b58601cd13ffdf7006e795d9a2790ac155fc794a56d73884e0368c1485b904a96bb4e7be75b3f6bdca6e85080818631db106522a3a0fb9e1167f32a29e052555f108baa0f291ea875c36138c3ddd01f7eee7810d599049f1286fe83d83a621163c7d441e69dddeea0f801e892d992ff2b70bd6a77e236edf84c9b7ec824cd0cce7cbcf4595a68d1eba5c818ce85038c8dea2c459172e262dc50b8c7b687a5ac3d1d8a04c250a4affd46bee3b7d50bc0322ae7b3bd5d3d51bdf3b0614332f9b3172b898b214b7a5abe75832c533f9cc8f7bc211ae34f2cf6007579d238b875f2aad69d07e50109cd7d48d2f5a0f11b7faf1502b1bb2bac1cf48bd3b94164a120aa72312c6cedbe46c3d15df6ab3fc4f13c500169033c3069a7fd581389063b8dd8045d7543bb2c33521308cda9d1b6d0bb1d2e1fa3d303d41b2d2e68d6407dc30884b5d22ffb907214889139bcc77138d9820cfaf63f99f420c40cc815f5eb5550b62aeafc8acd57df1b5b672bd7222b8c0230042aef3bbf12d5af1f101f6ce6d209036d7caa03f975a5f45c29baec0169f57a341fdcd0d4348ee09e1e64c3f90529f74f92a8934b59104895c4cb55d598fc27ed16e9e86de2663075d02e7e1f7dbf89e58b1dca1bb640a56e55dfc9df3d6c11cb29d2b0e3ff07834b7bacee959dc47140d99548aaa2bb49e25db6cc4a741573c4a70ea18cf8439977ef3a9416469dd766d980d5b9932d8d00331765e10b539cfec0fba0dea177944f0bfb0a7db2dc8bf35dae93a3f0a308dc36bae47bbb97a1493ec8c822bd2327665", 0x1000}, {&(0x7f00000016c0)="7adc7642f58b0588b165ddfecec962d81027c189649064083438faf9bc25678bc81499ede2af4369a529a11a6efb69200b5284ac05860030b5b37dc93c2bc21b8e6ca8e275f5a5b0865fb362fa0a6513807473bb70e6838256168c01e3c8c003b11e59f795d2e755697a5b7b46bee7432d77d3adce89737a5c2579410d036dcc9ad7d4e0e7ae4d89955e44ed34f731d99903b2a01d7c20bc26841cf7d8312ec884bea506b1592a49c99c72051d07f396c8fba0a0", 0xb4}], 0x8, &(0x7f0000001800)=[{0xa8, 0x10d, 0x1, "7fe1a46154bbeaed3a737414cfb0ad6312e5194c406d293bd438ed0333cca8d1c94debe3a3b466f4434a3e77ea8b3f239e3f76f428a94a4297a854194acad9f4248af964a4886456b8028d8676ee23a5ca0791f4af4dd5d06fa1721518dc6d80343a88583f75d045491864adb8747a50c82a2921a6b6dde87baadaabd2b447a0502ad9e7b7493552e63f58675798cdcd604da21fa5"}, {0xe8, 0x3a, 0xffffffea, "95ba2aeda4cae02a28ce5bdb4e9bd1ee095b8f722a61aa46dddaa5743d4f902683757a5ff06c11dbebff8026258dbed7168fdb693eb6ef5036ee2bc59ef92a3a896abdbcb71685cadf9287f24468dc61e6037f666e92b8a553eb694683e8677099cbb46f75135340157bbcfe90c057fdb21200db99115042d177fbb0a7895cb13eca29e2298e452a1d4b00d0c07e92e500890fb2f3576d7701f945d4e51b6ab34c1048b25476f635ce2f860f721a4c61d4694fbd58e88f4f81802fb8528d82417529020be608a93fa4a48c77ed22ba0327"}], 0x190}}], 0x6, 0x815) [ 2660.875548][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2660.905647][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2660.932002][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2660.967685][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2661.003776][ T1547] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2661.019836][ T1547] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:55 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket(0x2, 0x4, 0x7) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:51:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) fcntl$setsig(r0, 0xa, 0x1d) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x38}}, 0x8000) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x200fc0) 02:51:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2663.999050][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2664.027308][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2664.041586][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2664.057963][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2664.098914][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2664.142905][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2664.171494][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2664.194554][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2664.234305][ T1570] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:51:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(r0, 0xfffffffffffffffe, 0xc09c0, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000240)=0x4) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) io_setup(0x5, &(0x7f0000000040)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r4, 0x2, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x38ed3bb4c736c0ba}, 0x4000010) io_pgetevents(r4, 0xda3c, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x40) sendfile(r2, r7, 0x0, 0x200fc0) [ 2664.267872][ T1570] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb7c204f0ce934c72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @broadcast}, &(0x7f0000000180)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x9c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x9c}}, 0x24000800) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="23212424200a0c0bc76414ad67ae88127f3af1c4"], 0x1e) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x800002, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0x8a) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r9 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x200fc0) 02:51:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000140)) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:51:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fcntl$setstatus(r0, 0x4, 0x2600) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x3) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000080)='tunl0\x00') sendfile(r2, r4, 0x0, 0x200fc0) 02:51:58 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') sendfile(r3, r4, 0x0, 0x200fbf) 02:51:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa481, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0xa4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000200000000000007000000080001002305000008000300", @ANYRES32=r4, @ANYBLOB="1400040062726964676530000000000000000000080005000a000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5bf99a651c2b479c}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80092e0", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf253700000008000300", @ANYRES32=r5, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r6 = socket$inet6(0xa, 0x400000000001, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000000c0)='&]{\x00', 0x4, 0x0) close(r6) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x200fc0) 02:51:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2667.236092][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2667.255679][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2667.271242][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2667.287204][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2667.301754][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2667.317514][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x20, 0xc0, 0xeb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x4, 0x81, {0x7, 0x25, 0x1, 0xc2, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x9, 0x5, {0x7, 0x25, 0x1, 0x0, 0x1, 0x4}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x80, 0x0, 0x40, 0x40}, 0x21, &(0x7f0000000140)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x93, 0x4, 0x2, 0xf, 0x4f5b, [0x100bfc0, 0xff00, 0xff0000, 0xff3fc0]}]}, 0x2, [{0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "93a34e876137cf2b7b627c140098e3f363876926e2817e73e3ab914a1a004d082fd36070a07b8dc0a3cdb18125873ddaf6a963d5653e3e5586f1aa7d5853e0252d98d9fa46af29416ad22fb18cf21e77b9cccf9516038cc383c9626cb74ef22aca0bed3ed896c6328aa9e349bf2fb4ed2eb007742c9790e74845664dc56fa34a42da2825eb4b95f1ccc0519777608b945e56d16e09f40373c4933d36a7277632995e"}}, {0xf, &(0x7f0000000240)=@string={0xf, 0x3, "e1280d18f14b0e3a4020d1ec87"}}]}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:51:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:51:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x3, 0x200, 0xffffffff, 0xbe3, 0x80000000, 0xba8}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x400402, 0x68) sendfile(r1, r3, 0x0, 0x200fc0) [ 2667.340049][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2667.356559][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000080)={0x18, 0x1, 0x0, {0xa29}}, 0x18) sendfile(r1, r3, 0x0, 0x200fc0) [ 2667.396334][ T1621] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2667.412627][ T1621] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:51:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) 02:51:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40e100, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000300)={0x6, {0x0, 0x0, 0x0, 0x0, 0x1f}}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = fsmount(r0, 0x0, 0x1) ioctl$CHAR_RAW_BSZSET(r4, 0x40081271, &(0x7f0000000280)=0x8) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xa4, 0x95, 0x1, 0x80000001, 0x8, 0x1, "14020bf2c386f712ac4eb44e6c2204af93eaf7411160fab3b43e1f42567033a83a74359d6789ed0814d1f02342257f1c5f15f083ad22a92f821e337e49a8789c38e8bb01cf7cda548662373d435abcae604eadcf887e7686f7412f296f8b1eb0512c8230010f5a21a312b3dfb11ef952a4516d5e58999e3d9df65707dc06bccb2242978415fb56a17adbbf4404ba244d54b3686ca993fa122acdd97907f55299ae41e123"}}, 0x1bc) sendfile(r2, r5, 0x0, 0x200fc0) 02:51:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@ipv4={[], [], @empty}, 0x0, 0x3c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x50) close(r1) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000100)="ad617f53ea68761fbe9ec101f53c0b71a1f5feb2b35a5298388cb2e4f064886e1784af0b8a288aff5a5597bda49d5d57e5cf522ea238bdba45dc7123a2f861972fa66c8024beec1315d88208d4cd3c461a4ff042536d39b38f3c5e8c48e6f4e9f6c7c9f4fc27eb8b0a9936ad3e373c39ade9f6d7406c76f6f24658ab11d3eeb54c71e08e9fef32f5", 0x88) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2670.395876][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2670.434369][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2670.462250][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2670.495357][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2670.521096][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2670.538964][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2670.552174][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2670.568060][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2670.584353][ T1657] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2670.600006][ T1657] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'veth1_vlan\x00', {}, 0x7fff}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd2}, 0x0, 0x8, 0x5, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/hwrng\x00', 0x107000, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001e80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4d044) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x120, 0x100004) 02:52:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_getneigh={0x20}, 0x20}}, 0x0) 02:52:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) close(0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xee62, 0xb798ceec890b6eb7) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) 02:52:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0xb2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x40900, 0x1a2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x20000000, r0, 0x3) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x8a) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000000c0)={0xffffffe0, 0x1c, "dc7ff64bc5d84c46c130b224a3e3d5244f8e105d6152e9756700e89b"}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0xa, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_open_pts(r8, 0x1734677933b65c50) r9 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x200fc0) 02:52:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:04 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x260, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x37) lseek(r1, 0x800002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x6}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x5, 0x4) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x1}}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4) shutdown(r2, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r8 = signalfd4(r0, &(0x7f0000000140)={[0x9]}, 0x8, 0x81800) ioctl$TIOCSBRK(r8, 0x5427) sendfile(r4, r7, 0x0, 0x200fc0) [ 2673.586211][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2673.602323][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2673.620712][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2673.636786][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2673.656962][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2673.673179][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) epoll_create1(0x80000) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fc0) [ 2673.687395][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2673.704687][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2673.722018][ T1710] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x20) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0xa4) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x7, 0x1b, 0x1f, 0x0, 0x0, 0x7, 0x800a, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5f, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x80, 0x5, 0x1e39, 0x2, 0x6, 0x5, 0x7e}, 0xffffffffffffffff, 0x7, r4, 0xb) [ 2673.738576][ T1710] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x2c, 0x5, 0x75f97470) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) getsockname$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/65, 0x41}], 0x2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x7e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0xfffffcc7) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) 02:52:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) close(0xffffffffffffffff) r1 = fsopen(&(0x7f0000000080)='ceph\x00', 0x1) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) io_submit(0x0, 0x8, &(0x7f0000000940)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000100)="67adae570f41f4e9ec64162b66460bccad3a7991498adad0901dd160e62ae937112f1fa209fd137d2ff932499597e8eb4cee6cfc8a885600de792921002746cf7a673604ace5cddc4dff57d8c31603184b95268a93dae486a3a3280b71db3e64a2842122e9e22b2118f9368c11b1ce9c310c2f45b8d18443ea760ac4e41e2cbb5ff74d5287d67205fc9f3b250a3552dabd796374057a332c038b2d4e7648643df769fb66b9d340e9b0b1a5834e0cefe3d72f515f4b5a8abfce3087aab2ba38833c74dec978171414ba402c9276e201b6b1171a014be57861459cc88ec80700c240fa0b4923120e288b500368cba5487faf21355b", 0xf4, 0x2, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xff, 0xffffffffffffffff, &(0x7f0000000240)="2fa8f3b2a9e32511e8eaee72fe408cb8dbbf72af61d025b67b6a07a10dab21be5cd4edbb3d7b42ea71862501da5c5aa606ce18fea1b9200d9be636822774f44a8e983260", 0x44, 0x0, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="24a8c67f30d249beef22c451f62e6e3baf2b3ecce3268723edee7a47862a70dfaf82549095c0abfbf53e16bf43901084e8f9896f9d9dcb614da3e70a54bbf226756737769758a3181ef433c765b66cb7849b70edb6a13141fb8ba2a4aaeddf52cc6f1f8a14ae26ee0c4c0329510bf88fbb2587bca1fa2b0da76b8600fc057c3171034a13b86d694be8d5016e87b2cf1804fabfb11e6edadd3d4e5387eccb892030a0e5", 0xa3, 0x9, 0x0, 0x5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000480)="96866777a6269bc344d02035321dd227092097f4cf6d8a03e390ad2470af010b22b819378628d5d0edd7e885006b5564d6f0851fa2b8918b787be81832f5b2dd669b6f5411144a1850a2592b79", 0x4d, 0x6, 0x0, 0x3, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8000, 0xffffffffffffffff, &(0x7f0000000540)="9882ff1561a738f0435f0b080cb66c1d61d1a86878e618f3c508d5ef85bf9c63522e296613475989f181bf89feb8fbdb59389d0ae77d", 0x36, 0x101, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3f, r0, &(0x7f00000005c0)="2d71cb7eec1a2e7f7a97481231d183ff88d67dbdc0be9c3464dd7e17ebbe27ce7ce2b99e1bf4d09cdc93350f04c6217947b606eafcce98e6e17209c1d2c2bcced5384f82d6602f425aa709b204963567ccf7bdea8d219694902142583852ccf2fd62d73679339445a1f4962d67a337e32a3169d45ff6361a5a1740a743b36d25f39c6f1f2f9bd8a24c2ece581abc1175ae0ed693142ed4a4ad046eb5ff8e664f7527f40b175e3ad0ee7843957808699424cde32041b2fb83bac9aedc42b4890f190388b27270be930c5d15ed5c881441db475cb1adb597931c597469ecd22aecb381883d0e53ee0e6676774b57d259e49ac13185438133", 0xf7, 0x80000001, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r3, &(0x7f0000000980)="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", 0x18e, 0x6, 0x0, 0x1, r2}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0xfffa, 0xffffffffffffffff, &(0x7f0000000880)="f8c774815bd17a27247240e3f0bd033b3d6161524018a57f0c1b9b8857734f126643b51815aa4985701cb913d8af3672aabaa2b535e510cbaa36ac2078f2da6d4d10", 0x42, 0x3, 0x0, 0x3, r0}]) r6 = socket(0xb, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x200fc0) 02:52:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2676.724428][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2676.745010][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2676.763676][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2676.780028][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2676.795623][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0x130, 0x19, 0x1f}) r1 = socket$inet(0x2, 0x1, 0x80000001) setsockopt(r1, 0xfffffffc, 0x9, &(0x7f0000000100)="077ddd5590a5643aa02aaa8cd0bd57426b55c936fa41bc82b7e4b5f045539d8bbd39dfc25955395b4ee50888347018eb15ece3acea0eae7125cc9d150653c87af958b71ce6919e1e86c6654bbbbfe60cdab35ed1695b990df49949bdd7f8bda929f66801c8a9c0da3b5f7acc4832f2318c9213ec588a8f50883c98c586d04f0cbfe66377ba69f12d7e814c926ac70de33217e0cf364e0917847b0b70c95606a3506dcdce9aa29c051f2c0e65dda404b269f105382fc98a0582c2c1ff10c48a7581ed50a06954d51b69017b40bacc", 0xce) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$P9_RSTATFS(r0, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x0, 0xbe5f, 0x5, 0x2, 0x9, 0x3, 0x1, 0x3, 0x800}}, 0x43) [ 2676.812820][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2676.826808][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2676.843165][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x103, 0x6}}, 0x14) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) [ 2676.861765][ T1761] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2676.877514][ T1761] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:08 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="13", 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000100)={{0x2, 0x0, @reserved="f9ea963abcd25f783312af499a2faacda7e40d72500b6eb6039523ad2ee2a24d"}}) close(r1) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}}], 0x1, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0xa4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000080)=""/55) close(r1) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:10 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendto$inet6(r4, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) 02:52:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000003c0)={0x7, 0x8000, 0x10000, 0x0, 0x11}) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4000012}, 0x8015) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x84, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, 'batadv_slave_0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x4c802) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2679.864885][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2679.894904][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2679.925838][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2679.959113][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2679.974043][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2679.992162][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2680.005368][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2680.021122][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2680.037556][ T1802] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2680.053245][ T1802] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffff0000}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0xe861, 0x4, &(0x7f0000000140)=""/4, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x9, 0x4}, 0x10, 0x8a4e, r0}, 0x78) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000002c0)=0x7f) 02:52:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000002c0)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000240)={0x6, 0x25, 0x0, 0xc1c, 0x10, "3a757b721653a073a4d5baa7880f00"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x1}) socketpair(0x4, 0x2, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_mtu}}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r4 = socket$inet6(0xa, 0x400000000001, 0x4000200) close(r4) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000280)=""/38) fgetxattr(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792a76657468305f746f5f626f6e640018ee6983bbc25aa6cba3d4a4f68e8fdc9e35307e5c15b849dcaf22a4659593000000000000000000"], &(0x7f0000000200)=""/2, 0x2) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x200fc0) 02:52:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:13 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:13 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x50) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0xa4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, 0x0, 0x204, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x891) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x3ff, 0x1}) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) 02:52:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x2}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0xa4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', r5, 0x29, 0x2b, 0xff, 0x2, 0x40, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x10, 0x10, 0x3, 0x1}}) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x200fc0) 02:52:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4a6703d6cfe66835}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x34, 0x25, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x2, 0x2}, {0xb, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x800) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2683.130559][ T358] EXT4-fs warning: 30 callbacks suppressed [ 2683.130570][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2683.152164][ T358] EXT4-fs error: 30 callbacks suppressed [ 2683.152174][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x4c, {0x4c, 0x30, "21645807d47a1700cec83d56f38d248549275ff6d81319bf9d26fbb3f722453effe42723e221f8b912c387d0d91a2cb2632099de21ae20daaf3cb51e47cefdae5d401382a218919a1471"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x6e, "f45cc579be186fd5889d73455922f111b8e788649ae162263adf2dc4b9ae9c18dc9d627687eaa6c786a74e100f498ea4d6fd619145c057e092a06e07314947024fa78a39c2eede7257ac4bd073ddd00ada2a2ad92510e582f5c3ad43568631e2eef203df445f73bbe3345f8da0e3"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000280)={0x20, 0x81, 0x1, "ff"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "46c8"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "94"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "1a33c9"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "be6695"}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000000c0)={0x9, 0x18, [0x32948000, 0x2, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0]}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) r5 = accept4$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80000) fsetxattr$security_ima(r5, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x5, 0x1, 0xd, 0xffff0000, 0x99, "4a910dcf080a84273a1520f38d345954d60581a5cbc9ea784df79b899f94f8e05fda14a795c7fcb8cf36dfd3f5347af436e1850535b61054a7bf54a433bdb9ec069f0c7eb036c7ffd560f2e590ca83301f59d68e7a0c2f2111b15c048e99e1e9ac5a01fccd54c406646bb2cfbc9757affc519be85cb0a496f9507e609134388138e1eea3d150aaf39e14c6cce09ea79ccdc7ec203563896586"}, 0xa2, 0x0) [ 2683.171196][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2683.186842][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2683.199548][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2683.215338][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2683.234738][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2683.253024][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2683.271850][ T1873] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2683.287672][ T1873] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x800) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000140)) sendfile(r3, r5, 0x0, 0x200fc0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000100)=""/51) 02:52:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x19}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='dirsync\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:16 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:16 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x24}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x20000804) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x8a) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) pwritev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) 02:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x30c, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}}, 0x4080) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00'}) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0xa4) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80811}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x26) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000080)={0x1}) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:52:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x34d, &(0x7f0000000080)={{0x12, 0x1, 0x238, 0x65, 0xd1, 0x61, 0x0, 0x2040, 0x7200, 0x3593, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33b, 0x3, 0x4, 0x5, 0x0, 0xf7, [{{0x9, 0x4, 0x21, 0x7, 0x9, 0x1, 0x1, 0x14, 0x4, [@generic={0xb7, 0xd, "fd1284f39139413da472091bee25c0e7fd4942ccec4971ad29a399cd476698f1d7f9b663fa387c3f509158df099178ed83c796c79e54c2b3f9ce5dd1f2bb496b8ec5c2b6b38ee37baff74e6632d16b0d77ce63c6a68a63da507dfe60b850a48256e3644ae7a808c08a95300ff7f12669b0363954b33bf4f9348268c25308b83a22e9585629b2c62c19ce84a263673d44fc81e633c414b19511f8f567680191f1286d0888b2a1a7386ae0b6f635d771a6ac6e8fe9fa"}], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x3, 0x8, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x28}, @generic={0xb5, 0xf, "71977d2a2d2b473dbe4ed1f05f76f8ee23d14671bb5b1f61cd8d9a137ee3438ca56c17dab6033253301ef53517f5bc580e8e682a6eec80ac87e17c744b35e5fd6d7e2f28cf1adc5be3cb105fc4f5899aa339d2a4cec5607ce05a12d542cdf934fef24cc5020b97aafbe8aea3f6ed0dc80949ee702fbfd94b2e100480fd9c00171a88af4836246a7a05f76b7c0e93961033c0409da933dd6671c652c32d3ecac2ecfc7fe0aaa648b7dbe75e54b40a1c8dd6ab96"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x208, 0x7, 0x0, 0x42}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x9, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xca}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x4, 0x2}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1f}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x40, 0x8}}]}}, {{0x9, 0x4, 0x87, 0x4, 0x4, 0xff, 0x5, 0x62, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x381}}], [{{0x9, 0x5, 0xc, 0x10, 0x3b7, 0x9f, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}, @generic={0xcc, 0x7, "86bbf4eb2877cc885211b00abde2c43e1d1623b3e973cc91a9c1a9c5d4ce852257743893c159bf349d7749cfd89b37d4b609f5ba52fa83ff5a6bebc9b13460f8b96e7fc63e09bfd34b45b86c060164bd49c0afa735e2a5f2eddfeeb7f9453b0eea9cd87b5b265231b1be830a13e5933a3f1e650483a66169332fe2c4c6c93b5fa75a6d31fc5f92299117d7b8508b0ef5936525e7b44da37a51909fd8aeae06670d4ee0e6c6e7197873efba2e5321f8bb1e0c510050f0f05b750a91f1617a7fd1438c41224e561fd6ee61"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x7ff, 0x0, 0x4, 0x1}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x20, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x6, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x401}]}}]}}, {{0x9, 0x4, 0x53, 0x6, 0x1, 0xda, 0x3e, 0x42, 0xb8, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x8, "24a953"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x7, 0x40, "98c0e0"}]}, @hid_hid={0x9, 0x21, 0x7, 0xc9, 0x1, {0x22, 0x37e}}], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0xff, 0xff, 0x2}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x7, 0x4, 0x4, 0x10, 0x2d}, 0x1a, &(0x7f0000000440)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x3, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x0, 0xff, 0x8, 0x1a}]}, 0x7, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0xbb, &(0x7f00000004c0)=@string={0xbb, 0x3, "a23e7f093ed3919d60276178cf37e9205f54527377f72fa317af907c4357d23f92aaa1754c42e7b3fb468cd19e9c8dbea8b6f1dc9d7fd9c4aa6ed6fce89d78d7147fbe86e458fa20473cac199b4d7695b91f0baaf4e8f501ad8d8c4a7f6300663c1fa436bb822fa823b38fc03eed3d5687c0edeccd3be1333d1964af8b996282c595811086a9d3a50bec248906cd002672b28e721f42fbe77bd55ac9705cb65485faa4f84b9353f8409c536238fc61503071b3eb6e8d67beea"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2401}}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000740)={0x187, {{0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00', 0x3}}}, 0x88) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2686.273241][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2686.291621][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2686.304732][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2686.321043][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2686.334060][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2686.349931][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2686.364103][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2686.380040][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2686.407777][ T1924] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2686.423769][ T1924] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x8, @multicast1, 0x4e22, 0x2, 'lc\x00', 0xa68d75a32e222b20, 0x76, 0x8}, 0x2c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) syncfs(r4) 02:52:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:19 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x198, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff642}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @private0, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7ff, @mcast2, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x36}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8090}, 0x4004040) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0xa4) removexattr(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)=@known='trusted.overlay.impure\x00') r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x4c801) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf250200000008000800ac141422080002000700000006000b000b00000008000800e0000001"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x200fc0) 02:52:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') statfs(&(0x7f0000000100)='.\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000001, 0x0, 0x2811ffff) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x8040) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000080)={0xfcbf, 0x2, [{0x0, 0x1}, {0x4, 0x1}]}) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) 02:52:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$hiddev(r5, &(0x7f0000000080)=""/172, 0xac) 02:52:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat(r0, &(0x7f0000000080)='./bus\x00', 0x24000, 0x49) socket(0x1e, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0xa4) connect$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2689.399801][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.415626][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.431716][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.457825][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.473953][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.490287][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.504457][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.520439][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.539313][ T1978] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.555296][ T1978] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.572273][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.587918][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.600759][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.616414][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.629056][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.644683][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2689.657854][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2689.673546][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:22 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000080)) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) 02:52:22 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:22 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x3, 0x40, 0x7fff, 0x15, 0x40, 0x100000000, 0x6, 0x38, 0x6ccd5d2a}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) execve(&(0x7f0000000340)='./bus\x00', &(0x7f0000000400)=[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='fd/3\x00'], &(0x7f00000005c0)=[&(0x7f0000000440)='fd/3\x00', &(0x7f0000000480)='fd/3\x00', &(0x7f00000004c0)='fd/3\x00', &(0x7f0000000500)='fd/3\x00', &(0x7f0000000540)='%\xac#%{\x00', &(0x7f0000000580)='fd/3\x00']) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0xa4) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, 0xd, r4, 0x1d}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="8c180af40f46016e2144d983b195ed33b0ea9e6c3582a5c00722c949230e4ff53c63dcacf233a44ffb234a025228b57e9b2f9409cb8553f43d4405bded3331a341d53a4fc68d6565944922556dbe23f2dcb962f0b2cd08ae2cadc1073e3d5d64bfd270e066e3786eae0f065d97755e9aab6fe659ce3d9cc066e3aa36d6959426b5b20a770b5e193569764da7cef4f19e05ca1c16d34238", 0x97}, {&(0x7f0000000200)="ed99ac4c957114e2a9c1ab6e99b1c670d3c9531bdf38c7adb26904241bdf0a6285728d70c2b01596693719bd34d96b057e1df80850d21d547da87ee8a7fe2246291f7f017fab4c8640b95c40f1ef98786d1a581326a365243ae53c044a36151ec00ab75cf3a50f9acd77cb78f988f9b50102c7a56037d8faa25ae5499a4dcc192cfe0f291402f74f6ba4a25d2f6fde9eff0f3b2e6438", 0x96}], 0x2, 0x0, 0x0, 0x94}, 0x91) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) 02:52:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b2", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2691.968630][ T1988] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2691.985357][ T1988] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x2, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="bd9af8fa088b207ab163daee4d0c61560aad06ad47e987b927915f238d3ce6fb5dbcc86556388cb086b27a002464f9f53fba9e413caaca113e697f3224b042b96219b75968895c7039127a72acdcf3df78c46a39787ac86c091b5e7111a3c6ef40bf7b5f84f2bde1bec7fdaa6b9c14bef3ec8ae78095ab69", 0x78, 0x2}]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0xe5292fac89f0d38f, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:52:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x1}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240000c4}, 0x49041) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x300fc0) 02:52:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) r4 = getegid() fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x6, r2}, {0x2, 0x5, r3}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x3, 0xee01}], {0x4, 0x2}, [{0x8, 0x4, 0xee01}, {0x8, 0x4}, {0x8, 0x4, r4}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, r5}, {0x8, 0x0, 0xee01}, {0x8, 0x3}, {0x8, 0x7, r6}], {0x10, 0x1}, {0x20, 0x1}}, 0x8c, 0x2) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r9 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x200fc0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r10, &(0x7f0000000100)=""/164, 0xa4) ioctl$CHAR_RAW_GETSIZE(r10, 0x1260, &(0x7f0000000080)) 02:52:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:26 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2090, 0x200000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2694.962602][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2694.978262][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b2", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2694.998489][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.015209][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b2", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2695.052552][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.074201][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c", 0xfb}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) prctl$PR_GET_FP_MODE(0x2e) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2695.100058][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.119804][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2695.152757][ T2060] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.169268][ T2060] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2695.196928][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.216018][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2695.229651][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.248098][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2695.261396][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.277609][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2695.296897][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2695.312833][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x2, 0x2) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = fcntl$getown(r3, 0x9) pidfd_open(r4, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:29 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:29 executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9c8c, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1000) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x3}, &(0x7f0000000240)=0x28) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0x7a) splice(r2, &(0x7f0000000080)=0x5, r2, &(0x7f00000000c0)=0x4, 0xec, 0x2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x200fc0) 02:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800882c200"/16, @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250c000000b800038008000200faffffffa90004008805a50d4e87abc3618de74e9eecfa746e42946860141196c8af0e75e3fe7acb4fb8b96755388b7fcb9e08ecce398f00e9dbcf93e8f910677f600fe66e15acaa5a27652a81dd134f807e9785a4b31df31573f20d756e5ad46ff1af312aa4f71511f897880ab7fbc6eda6a2e49b4d6419840c6b8deb63d5f05e32afed89ae7b9b058e4b986a86b67d762bd639aaf4655ca0b7c126692c12b6b59e2ff39e669493ab1b449b980000003c000180140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e0000000000000800030000000000"], 0x108}, 0x1, 0x0, 0x0, 0x44040880}, 0x4040080) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x11, 0x40, 0x80000001) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:29 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2697.998464][ T2075] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2698.015505][ T2075] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x199) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000080)=0x80000001) close(r1) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x2}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) close(r3) 02:52:29 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) inotify_init1(0x80800) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x0, 0x10, [], 0x0, &(0x7f0000000080)=[0x0, 0x0]}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {0x2, 0x1, 0x8e2, 0x6}, 0x51, [0x4, 0x2, 0xfffffffe, 0x9, 0x3, 0x2, 0x64, 0x7e4, 0x7, 0x3ff, 0x7f, 0x0, 0x2, 0x1, 0x9, 0x1, 0x10000, 0xfb40, 0x7, 0x0, 0x24a, 0x3, 0x4f00, 0x62, 0x6, 0x1, 0x1, 0x80, 0x5, 0x6, 0x81, 0x8000, 0xffffffff, 0x2, 0x8cd, 0x3, 0x48, 0x3, 0x1, 0x9, 0x7a3, 0x3, 0x4, 0x1, 0x9, 0x8, 0x7, 0x1, 0x1, 0x9, 0x2, 0x4, 0x6, 0x7, 0x7, 0x0, 0xd2c, 0x9, 0x9, 0x80000001, 0x0, 0x6, 0x7aaf, 0x2], [0x101, 0x4, 0x27f0, 0x100, 0xffffffff, 0x5, 0x5, 0x400, 0x6, 0xf4f, 0x1, 0x1, 0xe2bb, 0x3, 0x2, 0x4, 0x1ff, 0x865, 0x3f, 0x100, 0xb8a4, 0x401, 0xd1c, 0x7, 0x9, 0x0, 0x336f, 0x5, 0x200, 0x9, 0x1, 0x3, 0x1000, 0x20, 0x4, 0x3, 0x6, 0x7, 0x90, 0xfffffff8, 0x3, 0x7fffffff, 0xb5, 0x4, 0x0, 0x1, 0x0, 0x8, 0xe8, 0x70, 0x6, 0x5, 0x800, 0x5, 0x6, 0xe8c0, 0xed, 0x11b26000, 0x81, 0x319, 0x5, 0xfffffffb, 0x2, 0x10000], [0x0, 0x9c, 0x4344, 0x8000, 0x240, 0x80000001, 0x84000000, 0x8, 0x8, 0x1, 0xf755, 0x7, 0x3, 0xfffffeff, 0x9b38, 0x3, 0x3, 0x4, 0x0, 0x7, 0x81, 0x0, 0x8, 0x5a, 0x7cb8, 0xdd09, 0x5, 0x80000001, 0x8, 0x9, 0x1f, 0x8dd, 0x7, 0x5f, 0x7, 0x2, 0x9, 0x1f41, 0x3ff, 0x78a, 0x2, 0x6, 0x800, 0x5, 0x5, 0xffffffff, 0x2, 0x19, 0x72c, 0x0, 0xfff, 0x3ff, 0x4, 0x6, 0x1, 0x401, 0x7, 0x6, 0x9, 0x6, 0xf9, 0x2c, 0x563, 0x4c5], [0x80000000, 0xd012, 0x7, 0x0, 0x1, 0xfffffe00, 0xd4, 0x8c, 0x100, 0x101, 0x20, 0x0, 0x80, 0x0, 0x422, 0x1, 0x66b, 0x5, 0x7fffffff, 0x1, 0x1f, 0x8000, 0x4, 0xff, 0xfffffffc, 0x3ff, 0x4, 0x3, 0x4, 0x80000000, 0x4, 0x10001, 0x1ff, 0xffff, 0x4, 0x3, 0x100, 0x2, 0x2, 0x1, 0x3, 0x81, 0x8000, 0x4, 0x8, 0xff, 0x8000, 0x4c2b, 0x3ff, 0x5, 0x9, 0x4, 0x3a4, 0x7, 0x3, 0x400, 0x0, 0x6882, 0xd46, 0x1, 0xfffffff9, 0x401, 0x8001, 0x7]}, 0x45c) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x37f87) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:52:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) finit_module(r2, &(0x7f0000000080)='\a\x00', 0x3) close(r1) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2700.998573][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2701.018142][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:52:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2701.051454][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2701.090660][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:52:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) [ 2701.131369][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2701.155254][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') statfs(&(0x7f0000000100)='.\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000001, 0x0, 0x2811ffff) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:52:32 executing program 3: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x400, 0x97) prctl$PR_GET_SECCOMP(0x15) sendfile(r1, r3, 0x0, 0x200fc0) [ 2701.174483][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2701.194829][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2701.231900][ T2155] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2701.251066][ T2155] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:35 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') statfs(&(0x7f0000000100)='.\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000001, 0x0, 0x2811ffff) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:35 executing program 3: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffcb0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000080)=0x30) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x200fc0) 02:52:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:52:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:35 executing program 3: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2704.234158][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2704.251428][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x3ff, 0x1}) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2704.280246][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2704.305197][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2704.322149][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2704.337828][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2704.351602][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x200fc0) [ 2704.376794][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2704.393865][ T2188] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2704.412246][ T2188] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x103, 0x6}}, 0x14) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) 02:52:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0xf7, 0x2) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x1900) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4f22, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x1}, 0x1c) fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) quotactl(0x1000, &(0x7f0000000080)='./bus\x00', r4, &(0x7f00000000c0)="bf58229e0ac72c23e2c64f6b5c315e16494de41b402e565bf44c20871b0a9033460359d636be33b772643b6b04510eae6abe2eff09a6ec1c447d793bebfaeb3f2d4f625237619955bfef7dc3fa294b8ae370c339e302a2c9f6b20e4907b77dc349276c6a5980f2c9ed57dfc4d70d61baae925362b1e299f5c059a2e0f15825b76447639d997282e058c4faf2cef48f13481a54fa43b4b6985a8a5b") r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) 02:52:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:52:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023", 0xd0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2707.396771][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2707.418813][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x29, 0x1, 0x24, 0x5, 0x1f, @private0, @remote, 0x7, 0x8, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r6, 0x29, 0x1, 0x0, 0x40, 0x27, @empty, @ipv4={[], [], @empty}, 0x7, 0x7800, 0x4, 0x80000001}}) [ 2707.437929][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2707.455033][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2707.479231][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2707.495613][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2707.515551][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2707.532049][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x200fc0) [ 2707.556307][ T2234] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2707.577173][ T2234] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf3e}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) 02:52:41 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x5, 0x9, 0x9, 0xff87, 0x5, 0x8, 0x4, 0x1, 0x9cd, 0x96f3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x88a0}, 0x8) close(r1) r9 = socket(0x1e, 0x4, 0x0) connect$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r10 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x200fc0) 02:52:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x200fc0) 02:52:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:52:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023", 0xd0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:41 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2710.553392][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2710.585350][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2710.612266][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2710.641052][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) get_robust_list(r1, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) [ 2710.654734][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2710.670931][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2710.685334][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2710.703249][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2710.720066][ T2265] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2710.736363][ T2265] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000400030d8e098c59fa7d637272af1be760370b6ecd6b67986eb005805aec2c676eb9e61ecbc988cf71450c1105cf39521e7f6504d74efafc8ae380112cd2532a280f18", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYBLOB="00012dbd7000f1dbdf2501000000200001801400020069703665727370616e3000000000000008000100", @ANYRES32=r8, @ANYBLOB="980002800c00018008000100000000002400018008000100010000000800010003000000080001000300000008000100080000000c00018008000100030000004c0001800800010006000000080001000500000008000100080000000800010006000000080001000000000008000100020000000800010004000000080001000500000008000100030000000c0001800800010002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24040081}, 0x20004081) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x2c0, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_MODES={0x2a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "ecb425a0ffadfcdeaad6aee593a87f7db7adde5273f9be1ff9575dd60555a930d32e81437185e4d6474dfa113f06195f1be63b2f3f8fbcfc34cd7014d0a062401c9b79d1b29b92d819a366455dc52d67e2c0fc58b52191a439047d7507c7d1784ddb711f00d3c46046c5cff0b1fd2d8d1f3fdbd686fd1c41"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "cb3246ebea1e7ba2d4554cc0bdfdf38169d5a191c791111ba5e50a9be395eeeb854d1d41c00f4901d6a6d0d5e358e819e30a76e4290e3517da1fd957b8cf5311001ebe7cb1f8037ff9e0583e4f596e504a4d2eaed6ee22498217196dfb996bdae044e65881937c3f3a83117cf063479ea4d74d4945df6b4e54807fd5ec"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ';\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\{\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '){\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+^$@@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}:!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "51cc71606bf8cdb1f625e5056e37ece2dbf38023f839c608ff26e2c482"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x648000}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xe5)&-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^}{&,{)[[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xe5)&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffa5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x4}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x805}, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fd81000000b70600000002"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x140008c1) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7e, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) socket$unix(0x1, 0x6, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x5) 02:52:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000002c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x3) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendto$inet6(r4, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{r4}, 0x3, &(0x7f0000000080)=[0xef800000002, 0x1, 0xffffffffffffbb61], 0xff, 0x0, [0x401, 0x3, 0x81, 0x1]}) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a31d787990bf1a5ac53a938c50f182b77c27f96f692e697128755f2d0e1f647b47c86c01623ba1cb7375038aa5f4a20413655374ff015aedae20d04876361379e9801e88e6d692427c4a9134a9b54579116dd92f61b63292f3d78cba69cd84c3b22dd50d53fc42215652a46de3cdae78b19c272cf096b74d8a0b76f2f3c0b90e0b4c2b1e237a9ae1a8af04d41750394c1feab6ded020419ef26cc45b2d36d6b14d103f382c21b6c911a3acf120cdd3cbf7eec7d4189ec809b603ea91ec9f01fa6c2a3328af65e675c6997548933632391b9712e52fa15812000e2b0875059c98f460712eeeb84cf8ceed9"], 0xed) sendfile(r3, r8, 0x0, 0x200fc0) 02:52:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x80800) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) fsmount(r3, 0x1, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf2501000000086141a74ab89b21ac000181b671f10006000b002300000008000800e000000108000400ffffffff08000700ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) r6 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000c0}, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_NEWNSID={0x54, 0x58, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040}, 0x4040840) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ppoll(&(0x7f0000000180)=[{r7, 0x1002}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0xa8ae]}, 0x8) 02:52:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x200fc0) 02:52:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023", 0xd0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:44 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd2}, 0x0, 0x8, 0x5, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2713.722646][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2713.748688][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:44 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2713.762471][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2713.778312][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2713.822613][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2713.864557][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2713.878198][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2713.894156][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2713.913230][ T2309] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2713.928993][ T2309] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) 02:52:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fcntl$setstatus(r0, 0x4, 0x2600) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x3) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000080)='tunl0\x00') sendfile(r2, r4, 0x0, 0x200fc0) 02:52:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(r0, 0xfffffffffffffffe, 0xc09c0, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000240)=0x4) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) io_setup(0x5, &(0x7f0000000040)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r4, 0x2, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x38ed3bb4c736c0ba}, 0x4000010) io_pgetevents(r4, 0xda3c, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x40) sendfile(r2, r7, 0x0, 0x200fc0) 02:52:47 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, 0x0, 0x60) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:52:47 executing program 0 (fault-call:8 fault-nth:0): clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x4}}, 0x10) 02:52:47 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:47 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2716.916009][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2716.943574][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2716.957878][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:52:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x26}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10) r4 = dup3(r3, r2, 0x0) pause() sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_open_pts(r2, 0xd80) write(r3, &(0x7f0000000240)="2400000052001f0014f9f44c652c7607000904000a00071010000800feffffff08000000000000002371bea2137355af6cf88e160f1c5c0548284375845d5c6cc4ee36f8f888d316e29a3f84d877f69a2acea8dbf782409b67199e3369a896c07c86a14f8d57a9b6a81563b61a0d4b982027b3eb95737e0f08aff914", 0x7c) tkill(0x0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/90, 0x231000, 0x1800, 0x4}, 0x20) [ 2717.013281][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:48 executing program 5 (fault-call:11 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2717.056781][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2717.088939][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2717.100864][ T2350] FAULT_INJECTION: forcing a failure. [ 2717.100864][ T2350] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.112002][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2717.114055][ T2350] CPU: 1 PID: 2350 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2717.132180][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x40000000) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000280)=""/1, &(0x7f0000000000)=0x1) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) [ 2717.139497][ T2350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.139500][ T2350] Call Trace: [ 2717.139516][ T2350] dump_stack+0x1b0/0x21e [ 2717.139530][ T2350] ? devkmsg_release+0x11c/0x11c [ 2717.157872][ T2351] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2717.161849][ T2350] ? show_regs_print_info+0x12/0x12 [ 2717.161860][ T2350] ? avc_denied+0x1c0/0x1c0 [ 2717.161871][ T2350] should_fail+0x6fb/0x860 [ 2717.161884][ T2350] ? setup_fault_attr+0x2b0/0x2b0 [ 2717.166364][ T2351] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2717.169471][ T2350] ? avc_has_perm+0xbd/0x260 [ 2717.169484][ T2350] ? avc_has_perm+0x15f/0x260 [ 2717.169500][ T2350] ? alloc_pipe_info+0xa1/0x3a0 [ 2717.235325][ T2350] should_failslab+0x5/0x20 [ 2717.239807][ T2350] kmem_cache_alloc_trace+0x39/0x270 [ 2717.245070][ T2350] alloc_pipe_info+0xa1/0x3a0 [ 2717.249723][ T2350] splice_direct_to_actor+0x94e/0xb00 [ 2717.255071][ T2350] ? avc_has_perm+0xbd/0x260 [ 2717.259635][ T2350] ? match_file+0x120/0x120 [ 2717.264113][ T2350] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2717.269457][ T2350] ? do_splice_direct+0x3d0/0x3d0 [ 2717.274457][ T2350] ? pipe_to_sendpage+0x300/0x300 [ 2717.279460][ T2350] ? security_file_permission+0x128/0x300 [ 2717.285155][ T2350] do_splice_direct+0x279/0x3d0 [ 2717.289978][ T2350] ? splice_direct_to_actor+0xb00/0xb00 [ 2717.295503][ T2350] ? security_file_permission+0x128/0x300 [ 2717.301196][ T2350] do_sendfile+0x89d/0x1110 [ 2717.305676][ T2350] ? compat_writev+0x390/0x390 [ 2717.310412][ T2350] ? security_file_permission+0x128/0x300 [ 2717.316106][ T2350] ? vfs_write+0x427/0x4f0 [ 2717.320497][ T2350] ? fput_many+0x42/0x1a0 [ 2717.324802][ T2350] __x64_sys_sendfile64+0x1ae/0x220 [ 2717.329976][ T2350] ? __ia32_sys_sendfile+0x240/0x240 [ 2717.335239][ T2350] do_syscall_64+0xcb/0x150 [ 2717.339718][ T2350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2717.345582][ T2350] RIP: 0033:0x45de29 [ 2717.349452][ T2350] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2717.369029][ T2350] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2717.377431][ T2350] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2717.385375][ T2350] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2717.393320][ T2350] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 02:52:48 executing program 5 (fault-call:11 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2717.401265][ T2350] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000000 [ 2717.409210][ T2350] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c [ 2717.445148][ T2361] FAULT_INJECTION: forcing a failure. [ 2717.445148][ T2361] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.457847][ T2361] CPU: 1 PID: 2361 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2717.467873][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.477912][ T2361] Call Trace: [ 2717.481181][ T2361] dump_stack+0x1b0/0x21e [ 2717.485487][ T2361] ? devkmsg_release+0x11c/0x11c [ 2717.490404][ T2361] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2717.495758][ T2361] ? show_regs_print_info+0x12/0x12 [ 2717.500932][ T2361] ? avc_denied+0x1c0/0x1c0 [ 2717.505413][ T2361] should_fail+0x6fb/0x860 [ 2717.509806][ T2361] ? setup_fault_attr+0x2b0/0x2b0 [ 2717.514808][ T2361] ? setup_fault_attr+0x2b0/0x2b0 [ 2717.519807][ T2361] ? avc_has_perm+0xbd/0x260 [ 2717.524373][ T2361] ? avc_has_perm+0x15f/0x260 [ 2717.529025][ T2361] ? kcalloc+0x32/0x60 [ 2717.533072][ T2361] should_failslab+0x5/0x20 [ 2717.537553][ T2361] __kmalloc+0x5f/0x2c0 [ 2717.541685][ T2361] ? kmem_cache_alloc_trace+0xc3/0x270 [ 2717.547120][ T2361] kcalloc+0x32/0x60 [ 2717.550993][ T2361] alloc_pipe_info+0x1b9/0x3a0 [ 2717.555733][ T2361] splice_direct_to_actor+0x94e/0xb00 [ 2717.561077][ T2361] ? avc_has_perm+0xbd/0x260 [ 2717.565643][ T2361] ? match_file+0x120/0x120 [ 2717.570120][ T2361] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2717.575468][ T2361] ? do_splice_direct+0x3d0/0x3d0 [ 2717.580470][ T2361] ? pipe_to_sendpage+0x300/0x300 [ 2717.585475][ T2361] ? security_file_permission+0x128/0x300 [ 2717.591175][ T2361] do_splice_direct+0x279/0x3d0 [ 2717.596015][ T2361] ? splice_direct_to_actor+0xb00/0xb00 [ 2717.601540][ T2361] ? security_file_permission+0x128/0x300 [ 2717.607235][ T2361] do_sendfile+0x89d/0x1110 [ 2717.611718][ T2361] ? compat_writev+0x390/0x390 [ 2717.616458][ T2361] ? security_file_permission+0x128/0x300 [ 2717.622155][ T2361] ? vfs_write+0x427/0x4f0 [ 2717.626546][ T2361] ? fput_many+0x42/0x1a0 [ 2717.630854][ T2361] __x64_sys_sendfile64+0x1ae/0x220 [ 2717.636030][ T2361] ? __ia32_sys_sendfile+0x240/0x240 [ 2717.641306][ T2361] do_syscall_64+0xcb/0x150 [ 2717.645788][ T2361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2717.651656][ T2361] RIP: 0033:0x45de29 [ 2717.655885][ T2361] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2717.675476][ T2361] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2717.683868][ T2361] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2717.691817][ T2361] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2717.699776][ T2361] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2717.707725][ T2361] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000001 [ 2717.718104][ T2361] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:52:51 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:51 executing program 5 (fault-call:11 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:52:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2720.159088][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2720.174563][ T2373] FAULT_INJECTION: forcing a failure. [ 2720.174563][ T2373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2720.190561][ T2373] CPU: 1 PID: 2373 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2720.192099][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2720.200610][ T2373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.200613][ T2373] Call Trace: [ 2720.200639][ T2373] dump_stack+0x1b0/0x21e [ 2720.230529][ T2373] ? devkmsg_release+0x11c/0x11c [ 2720.235457][ T2373] ? show_regs_print_info+0x12/0x12 [ 2720.236201][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2720.240646][ T2373] ? unwind_get_return_address_ptr+0x130/0x130 [ 2720.240662][ T2373] should_fail+0x6fb/0x860 [ 2720.266777][ T2373] ? setup_fault_attr+0x2b0/0x2b0 [ 2720.271792][ T2373] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2720.277155][ T2373] ? xas_load+0x46f/0x4c0 [ 2720.278119][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2720.281476][ T2373] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2720.281486][ T2373] ? find_get_entry+0x5da/0x670 [ 2720.281499][ T2373] ? xa_load+0x323/0x340 [ 2720.308381][ T2373] __do_page_cache_readahead+0x244/0x510 [ 2720.312029][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2720.314019][ T2373] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2720.314035][ T2373] ? unwind_next_frame+0x1c07/0x22b0 [ 2720.339314][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2720.341280][ T2373] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2720.341291][ T2373] generic_file_read_iter+0x626/0x20a0 [ 2720.341306][ T2373] ? find_get_pages_range_tag+0xae0/0xae0 [ 2720.365006][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2720.370409][ T2373] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2720.370424][ T2373] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2720.386769][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x10, [], "199d8781f233efb21fc978c61d44d0ff"}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2720.391384][ T2373] ? avc_denied+0x1c0/0x1c0 [ 2720.391397][ T2373] generic_file_splice_read+0x491/0x780 [ 2720.391410][ T2373] ? splice_shrink_spd+0xb0/0xb0 [ 2720.403053][ T2381] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2720.409744][ T2373] ? security_file_permission+0x1e9/0x300 [ 2720.409760][ T2373] ? splice_shrink_spd+0xb0/0xb0 [ 2720.414297][ T2381] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2720.419761][ T2373] splice_direct_to_actor+0x3cf/0xb00 [ 2720.419777][ T2373] ? do_splice_direct+0x3d0/0x3d0 [ 2720.473517][ T2373] ? pipe_to_sendpage+0x300/0x300 [ 2720.478550][ T2373] ? security_file_permission+0x128/0x300 [ 2720.484235][ T2373] do_splice_direct+0x279/0x3d0 [ 2720.489053][ T2373] ? splice_direct_to_actor+0xb00/0xb00 [ 2720.494566][ T2373] ? security_file_permission+0x128/0x300 [ 2720.500250][ T2373] do_sendfile+0x89d/0x1110 [ 2720.504720][ T2373] ? compat_writev+0x390/0x390 [ 2720.509451][ T2373] ? security_file_permission+0x128/0x300 [ 2720.515153][ T2373] ? vfs_write+0x427/0x4f0 [ 2720.519535][ T2373] ? fput_many+0x42/0x1a0 [ 2720.523846][ T2373] __x64_sys_sendfile64+0x1ae/0x220 [ 2720.529027][ T2373] ? __ia32_sys_sendfile+0x240/0x240 [ 2720.534278][ T2373] do_syscall_64+0xcb/0x150 [ 2720.538748][ T2373] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2720.544621][ T2373] RIP: 0033:0x45de29 [ 2720.548486][ T2373] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2720.568057][ T2373] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2720.576454][ T2373] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2720.584416][ T2373] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2720.592355][ T2373] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.600306][ T2373] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000002 02:52:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x29, 0x1, 0x4) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:52:51 executing program 0: r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x1b0, r2, 0x50b, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x128, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x294}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x547bfa67c9510953, 0x24, 0x6, 0x36, 0x5, 0x18, 0xc, 0x60, 0x18, 0xc, 0x12, 0x48, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ca1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4200, 0x0, 0x1f, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:52:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000040)=0x1) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x5, 0xa34) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2720.608246][ T2373] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:52:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0xa4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0xc095) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0x8a) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x200fc0) 02:52:54 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:54 executing program 5 (fault-call:11 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:52:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ptrace$setopts(0x4206, r0, 0x5, 0x0) tkill(r0, 0x3c) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x8000000001, 0x2) iopl(0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="f617d4fd3d460846a1d5220ff9053528bc829942ffb83255452e9ddfe12755c184") ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:54 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000a40)='syz1\x00') lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000100)="527f9b490879f4a3c6555da75826491bfcae8e2cf3a19c9e4f2874e871824f1d4e7c723cba429eaccc47d239a25220d280741052f213c5b38d3551bfa4aecedebfe9810cea3a034828c46918c1880f4001e3ea7f7f3765d98a25c7b81a128d04889f0333a18f51", 0x67}, {&(0x7f0000000180)="24ae32ab438e6e6b60d1e663ecd7d6591de07a894d0ec45fbd9c7d93be15eb3dd99c8696d38c20a5f4e2822566512b3d7d8039e2de3ff4831ca19fb48918c9ba6a1b186310f0ff9f2339d7692d46af6ddf", 0x51}, {&(0x7f0000000200)="f0d16ea00e501ac625b430b405921470160910aaa3e93216532670e43131435da9a17f9c555fb84086710aedd90586c6ec42537f63d6a8711b06782e6dd250bdd5a647bfe6e986e17c00e24f00a1cffb51d8d23919d101d77c03370d2336f3914b2dc148199135818626c6f80d2270ff79eaffa0f163b39ff98b0cc7e24c1152fe3fe2a2767d3f300f34889214de48a24bb8e35fea056fcbcaf3520f6f41fdc373729f8770d369d2a67cc54987aa32764d248d8732bdbaf90f3e3180ec51cabf18bf9242fadbf41bba", 0xc9}, {&(0x7f0000000300)="1dcc181aed004a262862d6b997d3bcb6f55498ac39", 0x15}, {&(0x7f0000000340)="e6e53bbc68d4c3939afab4e92e5c78d1900f19d3c10b5475ac4ccf7194dde08f31157bc89d39ea7e857ae53ed1181a8719ca72fe1873ef18a0a58a9d1b0c9659a35a120d781c760a4daec44104ddc406f2e123a5c838945b8906b2e6cb695af14611572ee21f34a6a7329ebca043726f3006c2f6e98f6aa79de36e6629bde43089dfb34437e7e50be192ec9e16ca753f19054858737b1fb65a37df16937bcf68e875be5d5c071532519d1b17af4174d17c36accb9f6060a3ee556e96", 0xbc}, {&(0x7f0000000400)="7fa9f37e636f9048b0b7c76846de70202eb363750670f6a43932f82d81949ca0ffc4edff59a5dc8503b98ea4eb929934a295edeebace47", 0x37}, {&(0x7f0000000440)="c17be6f8adeacb32129dda01bf9726ceb7dca7ed3b79263c651ca096f3fa8b4bb40c41eeb7fc7c05329f6a77635c7823dff7120003494060187868a07392075fff03334c9578d823975e311304b1c8b4273c5e2a3bb18b3b267f785fa35af48b8791a280f861e1a89295adbd91f3fe76a269c2d7ca087d2a1e7a8475918d139658fb8e8e0ee381c04bcce7aa19446f39b25385703a678719bbf6076ba7cb163d25f095409567ca9fd245cfc97e68f9bce0fecb58e7fa333f91e6da64d4358305a15bf0bdf6015abb031829cb81b06144bd51c06f", 0xd4}, {&(0x7f0000000540)="51aacafb66a79e6ce6aa58b373a0b83ac0e8e5fb2c37eeb25ba3f8a76c933d9263788df9e4b1a36850cbe0a22b753baa20d41dfdee56da45ce1c63c79fdc0cd5d1a2de67cd54cf0768cc7a501a8dc2e9fa", 0x51}], 0x8, 0x0, 0x0, 0x4080}, 0x1) r3 = socket$inet6(0xa, 0x6, 0x3) close(r3) r4 = socket(0x1e, 0x4, 0x0) r5 = accept$unix(r4, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000840)={0x1, 0x3, 0x2e}) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x2, 0x84) sendfile(r3, r6, 0x0, 0x200fc0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="00032b070000fddbdf250e00000008000500ff07000008000600ff0700000800d400e1ecffff0c000380060007004e2092000c0003800800031c0002800800070009000000080406000000000006000f00010000000800050080ffffffcc6e362ad38414000280080009007e0000000800080fd38523370d91a1800800080008000000060004004e240000080006007367640008000b007369704c08000b0073697000"/182], 0xbc}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 02:52:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:54 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2723.405605][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2723.414350][ T2417] FAULT_INJECTION: forcing a failure. [ 2723.414350][ T2417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2723.424543][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2723.440481][ T2417] CPU: 1 PID: 2417 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2723.455093][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2723.456830][ T2417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2723.473763][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2723.482455][ T2417] Call Trace: [ 2723.482472][ T2417] dump_stack+0x1b0/0x21e [ 2723.482481][ T2417] ? devkmsg_release+0x11c/0x11c [ 2723.482502][ T2417] ? show_regs_print_info+0x12/0x12 [ 2723.499153][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2723.502363][ T2417] ? kasan_alloc_pages+0x4a/0x60 [ 2723.502375][ T2417] should_fail+0x6fb/0x860 [ 2723.502388][ T2417] ? setup_fault_attr+0x2b0/0x2b0 [ 2723.508499][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2723.512517][ T2417] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2723.512529][ T2417] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2723.512543][ T2417] ? find_get_entry+0x5da/0x670 [ 2723.530686][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2723.533750][ T2417] ? xa_load+0x323/0x340 [ 2723.533762][ T2417] __do_page_cache_readahead+0x244/0x510 [ 2723.533776][ T2417] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2723.539340][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2723.543161][ T2417] ? unwind_next_frame+0x1c07/0x22b0 [ 2723.543170][ T2417] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2723.543180][ T2417] generic_file_read_iter+0x626/0x20a0 [ 2723.543193][ T2417] ? find_get_pages_range_tag+0xae0/0xae0 [ 2723.565848][ T2432] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2723.566367][ T2417] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2723.566383][ T2417] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2723.571247][ T2432] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2723.586793][ T2417] ? avc_denied+0x1c0/0x1c0 [ 2723.586806][ T2417] generic_file_splice_read+0x491/0x780 [ 2723.586816][ T2417] ? splice_shrink_spd+0xb0/0xb0 [ 2723.586831][ T2417] ? security_file_permission+0x1e9/0x300 [ 2723.697227][ T2417] ? splice_shrink_spd+0xb0/0xb0 [ 2723.702133][ T2417] splice_direct_to_actor+0x3cf/0xb00 [ 2723.707473][ T2417] ? do_splice_direct+0x3d0/0x3d0 [ 2723.712465][ T2417] ? pipe_to_sendpage+0x300/0x300 [ 2723.717458][ T2417] ? security_file_permission+0x128/0x300 [ 2723.723145][ T2417] do_splice_direct+0x279/0x3d0 [ 2723.727969][ T2417] ? splice_direct_to_actor+0xb00/0xb00 [ 2723.733500][ T2417] ? security_file_permission+0x128/0x300 [ 2723.739223][ T2417] do_sendfile+0x89d/0x1110 [ 2723.743713][ T2417] ? compat_writev+0x390/0x390 [ 2723.748446][ T2417] ? security_file_permission+0x128/0x300 [ 2723.754136][ T2417] ? vfs_write+0x427/0x4f0 [ 2723.758530][ T2417] ? fput_many+0x42/0x1a0 [ 2723.762873][ T2417] __x64_sys_sendfile64+0x1ae/0x220 [ 2723.768085][ T2417] ? __ia32_sys_sendfile+0x240/0x240 [ 2723.773342][ T2417] do_syscall_64+0xcb/0x150 [ 2723.777813][ T2417] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2723.783683][ T2417] RIP: 0033:0x45de29 [ 2723.787545][ T2417] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:52:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0xa4) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xf0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf656, 0x60}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x312}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x0, 0x5, 0x0, {0x401, 0x3f0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x8001, 0xff}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x2, 0x4, 0x0, {0x7fffffff, 0x400, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x3ff, 0x3f}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x0, 0xfffc, 0x1ff, 0x6}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x400, 0x3f, 0x5, 0x42}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8, 0x2, 0x9, 0x1f, 0x1000, 0x800, 0x1, 0x8, 0x9, 0x0, 0x3, 0x2, 0x81, 0x2, 0xfff9, 0x7]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100000, {0x31, 0x6, 0x1, 0x1}}}]}, 0xf0}}, 0x400c001) [ 2723.807123][ T2417] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2723.815502][ T2417] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2723.823453][ T2417] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2723.831391][ T2417] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.839333][ T2417] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000003 [ 2723.847307][ T2417] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:52:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = accept4(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x80, 0x800) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'syzkaller1\x00', 0x5}) lseek(r0, 0x800002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) r4 = fsmount(r0, 0x1, 0xf4) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) write$P9_RUNLINKAT(r5, &(0x7f00000001c0)={0x7, 0x4d, 0x1}, 0x7) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x200fc0) 02:52:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x0, 0x1, 0x9, 0xcf, 0x3f, 0x800}) 02:52:55 executing program 5 (fault-call:11 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2724.012625][ T2458] FAULT_INJECTION: forcing a failure. [ 2724.012625][ T2458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2724.026264][ T2458] CPU: 1 PID: 2458 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2724.036351][ T2458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2724.046389][ T2458] Call Trace: [ 2724.049672][ T2458] dump_stack+0x1b0/0x21e [ 2724.053990][ T2458] ? devkmsg_release+0x11c/0x11c 02:52:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) link(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./bus\x00') connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@mpls_getroute={0xc8, 0x1a, 0x2, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0xff, 0xfd, 0x0, 0xfe, 0x8, 0x400}, [@RTA_VIA={0x14, 0x12, {0x5, "6e354bef66c0f3fdd3dfccf36aed"}}, @RTA_MULTIPATH={0xc, 0x9, {0x5e, 0x6, 0x6}}, @RTA_NEWDST={0x84, 0x13, [{0x100, 0x0, 0x1}, {0x6}, {0x3}, {0x8, 0x0, 0x1}, {0x5}, {0x8, 0x0, 0x1}, {0x74}, {0xa9b2, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0xe72}, {0x80, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0x2}, {0xffffc}, {0x1}, {0x1f, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x80}, {0xffff}, {0x6d5b, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0xd3f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xa0, 0x0, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000040) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="84d898ff39d6a9d00c8238f9d415fcb27294ea7f611d7a7e8c5a0bd5a18ce5e8587f85a625894d5cb483e57832a9b67c22a37f886256d6d9e83494a3375932febfaee5781cc852361a93be8a168a9ed8858d9bcba7b1951b6120495c6293838be788f934845184a6943cc10ffa1db222a03664837dcdc36e6978c2fe32c75d4ad943658d74e2e3cf1b9d6b86c1b15756ea84ea5c62c61be9d00cbc4b11f4ce07241b36dc2b3036c61aa22fb0bc5e0eed63b015e2782e3242edfddb2aeeaf22403867af", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b002b1fc817"], 0x84}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1000a040}, 0x10) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) [ 2724.058919][ T2458] ? show_regs_print_info+0x12/0x12 [ 2724.064105][ T2458] ? kasan_alloc_pages+0x4a/0x60 [ 2724.069050][ T2458] should_fail+0x6fb/0x860 [ 2724.073454][ T2458] ? setup_fault_attr+0x2b0/0x2b0 [ 2724.078502][ T2458] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2724.083867][ T2458] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2724.089402][ T2458] ? find_get_entry+0x5da/0x670 [ 2724.094244][ T2458] ? xa_load+0x323/0x340 [ 2724.098482][ T2458] __do_page_cache_readahead+0x244/0x510 [ 2724.104106][ T2458] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2724.110534][ T2458] ? unwind_next_frame+0x1c07/0x22b0 [ 2724.115790][ T2458] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2724.121482][ T2458] generic_file_read_iter+0x626/0x20a0 [ 2724.126948][ T2458] ? find_get_pages_range_tag+0xae0/0xae0 [ 2724.132669][ T2458] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2724.138008][ T2458] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2724.144043][ T2458] ? avc_denied+0x1c0/0x1c0 [ 2724.148516][ T2458] generic_file_splice_read+0x491/0x780 [ 2724.154044][ T2458] ? splice_shrink_spd+0xb0/0xb0 [ 2724.158964][ T2458] ? security_file_permission+0x1e9/0x300 [ 2724.164653][ T2458] ? splice_shrink_spd+0xb0/0xb0 [ 2724.169556][ T2458] splice_direct_to_actor+0x3cf/0xb00 [ 2724.174904][ T2458] ? do_splice_direct+0x3d0/0x3d0 [ 2724.179900][ T2458] ? pipe_to_sendpage+0x300/0x300 [ 2724.184929][ T2458] ? security_file_permission+0x128/0x300 [ 2724.190625][ T2458] do_splice_direct+0x279/0x3d0 [ 2724.195457][ T2458] ? splice_direct_to_actor+0xb00/0xb00 [ 2724.200970][ T2458] ? security_file_permission+0x128/0x300 [ 2724.206670][ T2458] do_sendfile+0x89d/0x1110 [ 2724.211155][ T2458] ? compat_writev+0x390/0x390 [ 2724.215885][ T2458] ? security_file_permission+0x128/0x300 [ 2724.221579][ T2458] ? vfs_write+0x427/0x4f0 [ 2724.225961][ T2458] ? fput_many+0x42/0x1a0 [ 2724.230259][ T2458] __x64_sys_sendfile64+0x1ae/0x220 [ 2724.235438][ T2458] ? __ia32_sys_sendfile+0x240/0x240 [ 2724.240696][ T2458] do_syscall_64+0xcb/0x150 [ 2724.245179][ T2458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2724.251040][ T2458] RIP: 0033:0x45de29 [ 2724.255346][ T2458] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2724.277018][ T2458] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2724.285399][ T2458] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2724.293427][ T2458] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2724.301367][ T2458] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.309305][ T2458] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000004 [ 2724.317263][ T2458] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:52:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664cc4878a29c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000000000aedd3ca646dbfd3f9b1b9300e2e08c15", 0x104}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:57 executing program 5 (fault-call:11 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:52:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0xfb, 0x0, 0x0, 0x0, 0x3, 0x12008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x288400, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0xfffffffd) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 02:52:57 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:52:57 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@l2tp={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x14000) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7e, 0x0, 0xff, 0x0, 0x0, 0x0, 0x840, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0x8a) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) statx(r7, &(0x7f0000000080)='./bus/file0\x00', 0x2000, 0x800, &(0x7f00000000c0)) sendfile(r5, r7, 0x0, 0x200fc0) [ 2726.567900][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2726.593013][ T2482] FAULT_INJECTION: forcing a failure. [ 2726.593013][ T2482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2726.594499][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2726.616008][ T2482] CPU: 1 PID: 2482 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2726.627796][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2726.628595][ T2482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2726.628598][ T2482] Call Trace: [ 2726.628624][ T2482] dump_stack+0x1b0/0x21e [ 2726.661810][ T2482] ? devkmsg_release+0x11c/0x11c [ 2726.662675][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2726.666734][ T2482] ? show_regs_print_info+0x12/0x12 [ 2726.666747][ T2482] ? kasan_alloc_pages+0x4a/0x60 [ 2726.689149][ T2482] should_fail+0x6fb/0x860 [ 2726.693555][ T2482] ? setup_fault_attr+0x2b0/0x2b0 [ 2726.697861][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2726.698568][ T2482] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2726.698583][ T2482] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2726.725052][ T2482] ? find_get_entry+0x5da/0x670 [ 2726.729895][ T2482] ? xa_load+0x323/0x340 [ 2726.731898][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2726.734123][ T2482] __do_page_cache_readahead+0x244/0x510 [ 2726.734137][ T2482] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2726.758440][ T2482] ? unwind_next_frame+0x1c07/0x22b0 [ 2726.763719][ T2482] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2726.763859][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2726.769419][ T2482] generic_file_read_iter+0x626/0x20a0 [ 2726.769433][ T2482] ? find_get_pages_range_tag+0xae0/0xae0 [ 2726.769448][ T2482] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2726.793420][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:52:57 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2726.796184][ T2482] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2726.796199][ T2482] ? avc_denied+0x1c0/0x1c0 [ 2726.810367][ T2491] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2726.813837][ T2482] generic_file_splice_read+0x491/0x780 [ 2726.813848][ T2482] ? splice_shrink_spd+0xb0/0xb0 [ 2726.813860][ T2482] ? security_file_permission+0x1e9/0x300 [ 2726.813874][ T2482] ? splice_shrink_spd+0xb0/0xb0 [ 2726.821200][ T2491] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2726.824388][ T2482] splice_direct_to_actor+0x3cf/0xb00 [ 2726.824401][ T2482] ? do_splice_direct+0x3d0/0x3d0 [ 2726.883662][ T2482] ? pipe_to_sendpage+0x300/0x300 [ 2726.888679][ T2482] ? security_file_permission+0x128/0x300 [ 2726.894384][ T2482] do_splice_direct+0x279/0x3d0 [ 2726.899221][ T2482] ? splice_direct_to_actor+0xb00/0xb00 [ 2726.904770][ T2482] ? security_file_permission+0x128/0x300 [ 2726.910680][ T2482] do_sendfile+0x89d/0x1110 [ 2726.915159][ T2482] ? compat_writev+0x390/0x390 [ 2726.919891][ T2482] ? security_file_permission+0x128/0x300 [ 2726.925577][ T2482] ? vfs_write+0x427/0x4f0 [ 2726.929992][ T2482] ? fput_many+0x42/0x1a0 [ 2726.934307][ T2482] __x64_sys_sendfile64+0x1ae/0x220 [ 2726.939475][ T2482] ? __ia32_sys_sendfile+0x240/0x240 [ 2726.944742][ T2482] do_syscall_64+0xcb/0x150 [ 2726.949214][ T2482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2726.955072][ T2482] RIP: 0033:0x45de29 [ 2726.958936][ T2482] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2726.978523][ T2482] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2726.986903][ T2482] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2726.994843][ T2482] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2727.002785][ T2482] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.010725][ T2482] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000005 02:52:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x1, 0x100067) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8000}, {0x8, 0x0, 0xa8ce6fb}, {0x8, 0x0, 0x1ff}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x8000}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_IE={0x2f, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0xf7, 0x1, @broadcast, 0x6, 0x8000, 0x200}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_MAC={0xa}]}, 0xc4}}, 0x40000) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2727.018662][ T2482] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:52:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0xa4) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x7) wait4(r0, &(0x7f0000000080), 0x1, 0x0) ptrace$setregs(0xf, 0x0, 0x8, &(0x7f00000001c0)="b3c61eb951355facc34795") ptrace$cont(0x9, r0, 0xffffffffffffffff, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 02:52:58 executing program 1: sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x403, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x15c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x959}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49f8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8127}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x15c}}, 0x40004) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) 02:52:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x1, 0x0, 0x1}}, 0x14) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfffffffffffffc58}], 0x4, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) tkill(r0, 0x3c) prctl$PR_SET_TSC(0x1a, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) ptrace$setregs(0xf, r0, 0x1, &(0x7f0000000040)="b031f1fa2f6bd946e040dea9808cb03a89f23af0b1b976460db96d9c57c23d93068c73220025a4b99be14a6d9abf40f61b49f0a33d6e5176ff9e5d601d127e05cd385bdf531ba642674d7b6deba26998132875a1c2823abc68534e799924b95dd681d9791c30d5012a461c1bc9e6a8a605a32f") ptrace$cont(0x1f, r0, 0xfffffffffffffffe, 0x0) [ 2727.117888][ T2509] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:53:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:00 executing program 0: clone(0x60808b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x4000000000000003, 0x100000) tkill(r0, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0xa4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:00 executing program 5 (fault-call:11 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)="6db4f0484d9c6d11bc2dcc70ce36199f19d9e893b24acae1829b534da532622c2a8be571627cb42cb802c35a", 0x2c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:53:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2729.812415][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2729.837556][ T2524] FAULT_INJECTION: forcing a failure. [ 2729.837556][ T2524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:53:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2729.851937][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2729.879051][ T2524] CPU: 0 PID: 2524 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2729.889122][ T2524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2729.899170][ T2524] Call Trace: [ 2729.902452][ T2524] dump_stack+0x1b0/0x21e [ 2729.906769][ T2524] ? devkmsg_release+0x11c/0x11c [ 2729.911708][ T2524] ? show_regs_print_info+0x12/0x12 [ 2729.916895][ T2524] ? kasan_alloc_pages+0x4a/0x60 [ 2729.920106][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2729.921820][ T2524] should_fail+0x6fb/0x860 [ 2729.921832][ T2524] ? setup_fault_attr+0x2b0/0x2b0 [ 2729.921846][ T2524] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2729.921858][ T2524] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2729.921869][ T2524] ? find_get_entry+0x5da/0x670 [ 2729.921884][ T2524] ? xa_load+0x323/0x340 [ 2729.966301][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2729.966809][ T2524] __do_page_cache_readahead+0x244/0x510 [ 2729.984713][ T2524] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2729.991118][ T2524] ? unwind_next_frame+0x1c07/0x22b0 [ 2729.994801][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:53:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2729.996389][ T2524] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2729.996399][ T2524] generic_file_read_iter+0x626/0x20a0 [ 2729.996413][ T2524] ? find_get_pages_range_tag+0xae0/0xae0 [ 2730.014473][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2730.017712][ T2524] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2730.017723][ T2524] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2730.017736][ T2524] ? avc_denied+0x1c0/0x1c0 02:53:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2730.033284][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2730.041184][ T2524] generic_file_splice_read+0x491/0x780 [ 2730.041195][ T2524] ? splice_shrink_spd+0xb0/0xb0 [ 2730.041209][ T2524] ? security_file_permission+0x1e9/0x300 [ 2730.041216][ T2524] ? splice_shrink_spd+0xb0/0xb0 [ 2730.041229][ T2524] splice_direct_to_actor+0x3cf/0xb00 [ 2730.054830][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2730.057098][ T2524] ? do_splice_direct+0x3d0/0x3d0 [ 2730.057111][ T2524] ? pipe_to_sendpage+0x300/0x300 [ 2730.110911][ T2539] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2730.111390][ T2524] ? security_file_permission+0x128/0x300 [ 2730.111400][ T2524] do_splice_direct+0x279/0x3d0 [ 2730.111409][ T2524] ? splice_direct_to_actor+0xb00/0xb00 [ 2730.111423][ T2524] ? security_file_permission+0x128/0x300 [ 2730.123107][ T2539] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2730.137013][ T2524] do_sendfile+0x89d/0x1110 [ 2730.137024][ T2524] ? compat_writev+0x390/0x390 [ 2730.137034][ T2524] ? security_file_permission+0x128/0x300 [ 2730.137042][ T2524] ? vfs_write+0x427/0x4f0 [ 2730.137048][ T2524] ? fput_many+0x42/0x1a0 [ 2730.137056][ T2524] __x64_sys_sendfile64+0x1ae/0x220 [ 2730.137063][ T2524] ? __ia32_sys_sendfile+0x240/0x240 [ 2730.137073][ T2524] do_syscall_64+0xcb/0x150 [ 2730.137082][ T2524] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2730.137089][ T2524] RIP: 0033:0x45de29 [ 2730.137097][ T2524] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2730.137101][ T2524] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2730.137109][ T2524] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2730.137113][ T2524] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 02:53:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x1000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x6b, 0x40, 0x80, 0x7, 0x0, 0x101, 0x100000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x800}, 0x10000, 0x3ff, 0x80000000, 0x7, 0x200, 0x9, 0xfa2f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xf0000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x5}) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 02:53:01 executing program 5 (fault-call:11 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prlimit64(r0, 0x6, &(0x7f0000000000)={0x360, 0x2}, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2730.137118][ T2524] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2730.137123][ T2524] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000006 [ 2730.137127][ T2524] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c [ 2730.294751][ T2547] FAULT_INJECTION: forcing a failure. [ 2730.294751][ T2547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2730.316275][ T2547] CPU: 0 PID: 2547 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2730.326330][ T2547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2730.336370][ T2547] Call Trace: [ 2730.339651][ T2547] dump_stack+0x1b0/0x21e [ 2730.343967][ T2547] ? devkmsg_release+0x11c/0x11c [ 2730.348894][ T2547] ? show_regs_print_info+0x12/0x12 [ 2730.354083][ T2547] ? kasan_alloc_pages+0x4a/0x60 [ 2730.359011][ T2547] should_fail+0x6fb/0x860 [ 2730.363420][ T2547] ? setup_fault_attr+0x2b0/0x2b0 [ 2730.368442][ T2547] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2730.373807][ T2547] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2730.379367][ T2547] ? find_get_entry+0x5da/0x670 [ 2730.384209][ T2547] ? xa_load+0x323/0x340 [ 2730.388440][ T2547] __do_page_cache_readahead+0x244/0x510 [ 2730.394062][ T2547] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2730.400464][ T2547] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2730.406172][ T2547] generic_file_read_iter+0x626/0x20a0 [ 2730.411623][ T2547] ? find_get_pages_range_tag+0xae0/0xae0 [ 2730.417333][ T2547] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2730.422694][ T2547] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2730.428753][ T2547] ? avc_denied+0x1c0/0x1c0 [ 2730.433249][ T2547] generic_file_splice_read+0x491/0x780 [ 2730.438786][ T2547] ? splice_shrink_spd+0xb0/0xb0 [ 2730.443723][ T2547] ? security_file_permission+0x1e9/0x300 [ 2730.449432][ T2547] ? splice_shrink_spd+0xb0/0xb0 [ 2730.454354][ T2547] splice_direct_to_actor+0x3cf/0xb00 [ 2730.459716][ T2547] ? do_splice_direct+0x3d0/0x3d0 02:53:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) [ 2730.464731][ T2547] ? pipe_to_sendpage+0x300/0x300 [ 2730.469748][ T2547] ? security_file_permission+0x128/0x300 [ 2730.475456][ T2547] do_splice_direct+0x279/0x3d0 [ 2730.480293][ T2547] ? splice_direct_to_actor+0xb00/0xb00 [ 2730.485833][ T2547] ? security_file_permission+0x128/0x300 [ 2730.491547][ T2547] do_sendfile+0x89d/0x1110 [ 2730.496044][ T2547] ? compat_writev+0x390/0x390 [ 2730.500819][ T2547] ? security_file_permission+0x128/0x300 [ 2730.506517][ T2547] ? vfs_write+0x427/0x4f0 [ 2730.510924][ T2547] ? fput_many+0x42/0x1a0 [ 2730.515229][ T2547] __x64_sys_sendfile64+0x1ae/0x220 [ 2730.520401][ T2547] ? __ia32_sys_sendfile+0x240/0x240 [ 2730.525699][ T2547] do_syscall_64+0xcb/0x150 [ 2730.530184][ T2547] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2730.536047][ T2547] RIP: 0033:0x45de29 [ 2730.540027][ T2547] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2730.559603][ T2547] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2730.567979][ T2547] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2730.575918][ T2547] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2730.583856][ T2547] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2730.591808][ T2547] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000007 [ 2730.599746][ T2547] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000002180)=0x4, 0x17) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0x14) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fddbdf2502000000060200000100000008000900030000000800080001fffffff5000100", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4c840}, 0x48000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r6, 0x29, 0x4, 0x7, 0x2, 0x20, @loopback, @private1, 0x700, 0x20, 0x8, 0x5}}) tkill(0x0, 0x200001a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x2e, r0, 0x0, 0x0) 02:53:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) getpgid(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:53:04 executing program 5 (fault-call:11 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:04 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd561", 0x7e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2733.108590][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2733.136871][ T2572] FAULT_INJECTION: forcing a failure. [ 2733.136871][ T2572] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2733.153594][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2733.166609][ T2572] CPU: 0 PID: 2572 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2733.176662][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.186709][ T2572] Call Trace: [ 2733.190018][ T2572] dump_stack+0x1b0/0x21e [ 2733.194338][ T2572] ? devkmsg_release+0x11c/0x11c [ 2733.199263][ T2572] ? show_regs_print_info+0x12/0x12 [ 2733.204467][ T2572] ? kasan_alloc_pages+0x4a/0x60 [ 2733.206574][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2733.209394][ T2572] should_fail+0x6fb/0x860 [ 2733.209407][ T2572] ? setup_fault_attr+0x2b0/0x2b0 [ 2733.209425][ T2572] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2733.239776][ T2572] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2733.245313][ T2572] ? find_get_entry+0x5da/0x670 [ 2733.246048][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2733.250148][ T2572] ? xa_load+0x323/0x340 [ 2733.250159][ T2572] __do_page_cache_readahead+0x244/0x510 [ 2733.250172][ T2572] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2733.278680][ T2572] ? unwind_next_frame+0x1c07/0x22b0 [ 2733.282523][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2733.283952][ T2572] ? page_cache_sync_readahead+0xa3/0x3c0 02:53:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0xcc, 0x0, 0x4, 0x6, 0x0, 0x5, 0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x810, 0x4, 0x2, 0x3, 0x20, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) [ 2733.283963][ T2572] generic_file_read_iter+0x626/0x20a0 [ 2733.283982][ T2572] ? find_get_pages_range_tag+0xae0/0xae0 [ 2733.302640][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2733.305264][ T2572] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2733.305275][ T2572] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2733.305287][ T2572] ? avc_denied+0x1c0/0x1c0 [ 2733.315212][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2733.316415][ T2572] generic_file_splice_read+0x491/0x780 [ 2733.316427][ T2572] ? splice_shrink_spd+0xb0/0xb0 [ 2733.316442][ T2572] ? security_file_permission+0x1e9/0x300 [ 2733.329799][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2733.334077][ T2572] ? splice_shrink_spd+0xb0/0xb0 [ 2733.334086][ T2572] splice_direct_to_actor+0x3cf/0xb00 [ 2733.334096][ T2572] ? do_splice_direct+0x3d0/0x3d0 [ 2733.334102][ T2572] ? pipe_to_sendpage+0x300/0x300 [ 2733.334117][ T2572] ? security_file_permission+0x128/0x300 [ 2733.350239][ T2583] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2733.360219][ T2572] do_splice_direct+0x279/0x3d0 [ 2733.360229][ T2572] ? splice_direct_to_actor+0xb00/0xb00 [ 2733.360241][ T2572] ? security_file_permission+0x128/0x300 [ 2733.360248][ T2572] do_sendfile+0x89d/0x1110 [ 2733.360263][ T2572] ? compat_writev+0x390/0x390 [ 2733.367384][ T2583] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2733.370691][ T2572] ? security_file_permission+0x128/0x300 [ 2733.370701][ T2572] ? vfs_write+0x427/0x4f0 [ 2733.370713][ T2572] ? fput_many+0x42/0x1a0 [ 2733.482175][ T2572] __x64_sys_sendfile64+0x1ae/0x220 [ 2733.487368][ T2572] ? __ia32_sys_sendfile+0x240/0x240 [ 2733.492640][ T2572] do_syscall_64+0xcb/0x150 [ 2733.497129][ T2572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2733.503003][ T2572] RIP: 0033:0x45de29 02:53:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101000, 0x0) sendfile(r4, r3, 0x0, 0x0) 02:53:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x80, 0x1) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x280, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) [ 2733.506884][ T2572] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2733.526474][ T2572] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2733.534892][ T2572] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2733.542844][ T2572] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2733.550790][ T2572] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 02:53:04 executing program 1 (fault-call:8 fault-nth:0): clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2733.558747][ T2572] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000008 [ 2733.566707][ T2572] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:04 executing program 5 (fault-call:11 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) [ 2733.630926][ T2602] FAULT_INJECTION: forcing a failure. [ 2733.630926][ T2602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2733.645633][ T2602] CPU: 1 PID: 2602 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2733.655685][ T2602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.665726][ T2602] Call Trace: [ 2733.669013][ T2602] dump_stack+0x1b0/0x21e [ 2733.673326][ T2602] ? devkmsg_release+0x11c/0x11c [ 2733.678243][ T2602] ? show_regs_print_info+0x12/0x12 [ 2733.683419][ T2602] ? kasan_alloc_pages+0x4a/0x60 [ 2733.688358][ T2602] should_fail+0x6fb/0x860 [ 2733.692755][ T2602] ? setup_fault_attr+0x2b0/0x2b0 [ 2733.697772][ T2602] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2733.703134][ T2602] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2733.708658][ T2602] ? find_get_entry+0x5da/0x670 [ 2733.713487][ T2602] ? xa_load+0x323/0x340 [ 2733.717713][ T2602] __do_page_cache_readahead+0x244/0x510 [ 2733.723350][ T2602] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2733.729742][ T2602] ? unwind_next_frame+0x1c07/0x22b0 [ 2733.735001][ T2602] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2733.740695][ T2602] generic_file_read_iter+0x626/0x20a0 [ 2733.746149][ T2602] ? find_get_pages_range_tag+0xae0/0xae0 [ 2733.751851][ T2602] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2733.757202][ T2602] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2733.763244][ T2602] ? avc_denied+0x1c0/0x1c0 [ 2733.767726][ T2602] generic_file_splice_read+0x491/0x780 [ 2733.773254][ T2602] ? splice_shrink_spd+0xb0/0xb0 [ 2733.778173][ T2602] ? security_file_permission+0x1e9/0x300 [ 2733.783871][ T2602] ? splice_shrink_spd+0xb0/0xb0 [ 2733.788782][ T2602] splice_direct_to_actor+0x3cf/0xb00 [ 2733.794132][ T2602] ? do_splice_direct+0x3d0/0x3d0 [ 2733.799129][ T2602] ? pipe_to_sendpage+0x300/0x300 [ 2733.804152][ T2602] ? security_file_permission+0x128/0x300 [ 2733.809846][ T2602] do_splice_direct+0x279/0x3d0 [ 2733.814672][ T2602] ? splice_direct_to_actor+0xb00/0xb00 [ 2733.820197][ T2602] ? security_file_permission+0x128/0x300 [ 2733.825891][ T2602] do_sendfile+0x89d/0x1110 [ 2733.830372][ T2602] ? compat_writev+0x390/0x390 [ 2733.835112][ T2602] ? security_file_permission+0x128/0x300 [ 2733.840808][ T2602] ? vfs_write+0x427/0x4f0 [ 2733.845198][ T2602] ? fput_many+0x42/0x1a0 [ 2733.849509][ T2602] __x64_sys_sendfile64+0x1ae/0x220 [ 2733.854703][ T2602] ? __ia32_sys_sendfile+0x240/0x240 [ 2733.859965][ T2602] do_syscall_64+0xcb/0x150 [ 2733.864467][ T2602] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2733.870337][ T2602] RIP: 0033:0x45de29 [ 2733.874211][ T2602] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2733.893797][ T2602] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2733.902189][ T2602] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2733.910154][ T2602] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2733.918104][ T2602] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.926066][ T2602] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000009 [ 2733.934015][ T2602] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:07 executing program 5 (fault-call:11 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd561", 0x7e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:07 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040000000000000000000b00000008000b0006000000060028000300000008000600", @ANYRES32=0x0, @ANYBLOB="74661600e4f725130da84ce4fcbb5955b7fdb77da1a873e2442cd30f3d0e3cf0677100f226dcbb59bcf57d78252f47ac4f7f658e957cc9145ef4a2985e0a8b71947b342a"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4004010) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x55002101}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000a", @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55083e"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000280)=""/73, &(0x7f0000000300)=0x49) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4}, 0x14) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40814) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x8, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x2c000004}, 0x4000000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2736.357457][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2736.366122][ T2620] FAULT_INJECTION: forcing a failure. [ 2736.366122][ T2620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2736.375871][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2736.386717][ T2620] CPU: 0 PID: 2620 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2736.400575][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2736.408647][ T2620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.408651][ T2620] Call Trace: [ 2736.408667][ T2620] dump_stack+0x1b0/0x21e [ 2736.408676][ T2620] ? devkmsg_release+0x11c/0x11c [ 2736.408685][ T2620] ? show_regs_print_info+0x12/0x12 [ 2736.408698][ T2620] ? kasan_alloc_pages+0x4a/0x60 [ 2736.425920][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2736.434335][ T2620] should_fail+0x6fb/0x860 [ 2736.434346][ T2620] ? setup_fault_attr+0x2b0/0x2b0 [ 2736.434359][ T2620] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2736.434372][ T2620] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2736.439319][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2736.441938][ T2620] ? find_get_entry+0x5da/0x670 [ 2736.441948][ T2620] ? xa_load+0x323/0x340 [ 2736.441957][ T2620] __do_page_cache_readahead+0x244/0x510 [ 2736.441977][ T2620] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2736.448683][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2736.452078][ T2620] ? unwind_next_frame+0x1c07/0x22b0 [ 2736.452087][ T2620] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2736.452097][ T2620] generic_file_read_iter+0x626/0x20a0 02:53:07 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2736.452116][ T2620] ? find_get_pages_range_tag+0xae0/0xae0 [ 2736.459254][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2736.469322][ T2620] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2736.469333][ T2620] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2736.469341][ T2620] ? avc_denied+0x1c0/0x1c0 [ 2736.469352][ T2620] generic_file_splice_read+0x491/0x780 [ 2736.469362][ T2620] ? splice_shrink_spd+0xb0/0xb0 [ 2736.469377][ T2620] ? security_file_permission+0x1e9/0x300 [ 2736.475547][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2736.478774][ T2620] ? splice_shrink_spd+0xb0/0xb0 [ 2736.478783][ T2620] splice_direct_to_actor+0x3cf/0xb00 [ 2736.478795][ T2620] ? do_splice_direct+0x3d0/0x3d0 [ 2736.490454][ T2625] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2736.505292][ T2620] ? pipe_to_sendpage+0x300/0x300 [ 2736.505314][ T2620] ? security_file_permission+0x128/0x300 [ 2736.505327][ T2620] do_splice_direct+0x279/0x3d0 [ 2736.511390][ T2625] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2736.514368][ T2620] ? splice_direct_to_actor+0xb00/0xb00 [ 2736.514379][ T2620] ? security_file_permission+0x128/0x300 [ 2736.514392][ T2620] do_sendfile+0x89d/0x1110 [ 2736.694799][ T2620] ? compat_writev+0x390/0x390 [ 2736.699531][ T2620] ? security_file_permission+0x128/0x300 [ 2736.705227][ T2620] ? vfs_write+0x427/0x4f0 [ 2736.709619][ T2620] ? fput_many+0x42/0x1a0 [ 2736.713915][ T2620] __x64_sys_sendfile64+0x1ae/0x220 [ 2736.719080][ T2620] ? __ia32_sys_sendfile+0x240/0x240 [ 2736.724349][ T2620] do_syscall_64+0xcb/0x150 [ 2736.728821][ T2620] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2736.734679][ T2620] RIP: 0033:0x45de29 [ 2736.738553][ T2620] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:53:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2736.758215][ T2620] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2736.766595][ T2620] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2736.774546][ T2620] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2736.782507][ T2620] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.790487][ T2620] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000a [ 2736.798436][ T2620] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:07 executing program 5 (fault-call:11 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2736.871275][ T2638] FAULT_INJECTION: forcing a failure. [ 2736.871275][ T2638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2736.884602][ T2638] CPU: 0 PID: 2638 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2736.894642][ T2638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.904698][ T2638] Call Trace: [ 2736.907960][ T2638] dump_stack+0x1b0/0x21e [ 2736.912273][ T2638] ? devkmsg_release+0x11c/0x11c [ 2736.917189][ T2638] ? show_regs_print_info+0x12/0x12 [ 2736.922365][ T2638] ? kasan_alloc_pages+0x4a/0x60 [ 2736.927299][ T2638] should_fail+0x6fb/0x860 [ 2736.931706][ T2638] ? setup_fault_attr+0x2b0/0x2b0 [ 2736.936719][ T2638] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2736.942071][ T2638] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2736.947594][ T2638] ? find_get_entry+0x5da/0x670 [ 2736.952421][ T2638] ? xa_load+0x323/0x340 [ 2736.956644][ T2638] __do_page_cache_readahead+0x244/0x510 [ 2736.962257][ T2638] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2736.968650][ T2638] ? unwind_next_frame+0x1c07/0x22b0 [ 2736.973913][ T2638] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2736.981518][ T2638] generic_file_read_iter+0x626/0x20a0 [ 2736.986960][ T2638] ? find_get_pages_range_tag+0xae0/0xae0 [ 2736.992660][ T2638] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2736.998022][ T2638] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2737.004067][ T2638] ? avc_denied+0x1c0/0x1c0 [ 2737.008556][ T2638] generic_file_splice_read+0x491/0x780 [ 2737.014084][ T2638] ? splice_shrink_spd+0xb0/0xb0 [ 2737.019003][ T2638] ? security_file_permission+0x1e9/0x300 [ 2737.024699][ T2638] ? splice_shrink_spd+0xb0/0xb0 [ 2737.029613][ T2638] splice_direct_to_actor+0x3cf/0xb00 [ 2737.034963][ T2638] ? do_splice_direct+0x3d0/0x3d0 [ 2737.039961][ T2638] ? pipe_to_sendpage+0x300/0x300 [ 2737.044965][ T2638] ? security_file_permission+0x128/0x300 [ 2737.050662][ T2638] do_splice_direct+0x279/0x3d0 [ 2737.055490][ T2638] ? splice_direct_to_actor+0xb00/0xb00 [ 2737.061028][ T2638] ? security_file_permission+0x128/0x300 [ 2737.066736][ T2638] do_sendfile+0x89d/0x1110 [ 2737.071234][ T2638] ? compat_writev+0x390/0x390 [ 2737.075981][ T2638] ? security_file_permission+0x128/0x300 [ 2737.081677][ T2638] ? vfs_write+0x427/0x4f0 [ 2737.086594][ T2638] ? fput_many+0x42/0x1a0 [ 2737.090898][ T2638] __x64_sys_sendfile64+0x1ae/0x220 [ 2737.096076][ T2638] ? __ia32_sys_sendfile+0x240/0x240 [ 2737.101340][ T2638] do_syscall_64+0xcb/0x150 [ 2737.105823][ T2638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2737.111697][ T2638] RIP: 0033:0x45de29 [ 2737.115570][ T2638] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2737.135151][ T2638] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2737.143539][ T2638] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2737.151489][ T2638] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2737.159440][ T2638] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 02:53:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) tkill(r1, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r2, 0x1, 0x25) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x1, 0x48, 0x3, 0x0, 0x1, 0x40249, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0xc040, 0x2, 0x4, 0x0, 0x200, 0x4, 0x800}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)="4a4622e3113770ba0b7fe152c5a7fec369c209c195eae1297c1ac81826db6cf56eecd08f", 0x24, r3}, 0x68) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000080)={0x101, 0x38f8508c, 0x5000000, 0xa00000}) 02:53:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x63d) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x49) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2737.167386][ T2638] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000b [ 2737.175336][ T2638] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:08 executing program 5 (fault-call:11 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0xa4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x180, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9d14bf3c2932eee5df1155bd1fe7bc3fdf12914aa4d2728d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "daafc5f89d981f7c11c0af6ab7146de74cc2faf798eb50cc"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x24000085) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$setregs(0x2, r0, 0x7, &(0x7f0000000100)="60709a5316637644c28457b2db599b215d2fccdd41b2d61763669988e62d54ac6f62cef7029557fa1ec83b7d5ead12cbcc8f3f9d87a3bd6d39dcd0c67eb0eff080a14d3e760dd62630ebaa136c2e456cc5db9ac15cfaf66f98cda2c23fd8db33473618dbe976082e3c36aa0b741c3f07381a482ba9dbb1b43408bbd3252df573f6c24c5f8bc1b3f9ab7d305b15743d6f1cd3bf257241ab5c5bf11bde8c9ebf597b0068144021b5fd16") sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="27980874f3f1e08cfeeb3115ca9714d0efe5ea5421e2281e872dd76bbb3e34c890d251e4aab4a6abb0c75a602eec8d9671292d1ee5e81710f2242aa11cea7d3d4d4e87673fadf88a4e9a2400640419f6f7cc5e6de29af9358d78ddb0a44233b254fa595741bdb29a6ba18ac355780d4fc8e6478498d0a0384dfc8975410086843e03f0b406336fae671ec58fee0f215518e758ed4c02b38789b81857d47c5848291e09334dd5e3174d443f26f6c239d7817faa49e07fe5a2b7296b17323a45bfd3158cd8ba74e35ec81edcd87a9b3e46c294bf78", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0d003400866cd16cfebda384da00000014005500696776135b7710e556327d09a0e032d1"], 0x40}, 0x1, 0x0, 0x0, 0x200448c0}, 0x24000094) ptrace$cont(0x18, 0x0, 0x0, 0x0) [ 2737.274051][ T2653] FAULT_INJECTION: forcing a failure. [ 2737.274051][ T2653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2737.289331][ T2653] CPU: 0 PID: 2653 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2737.299377][ T2653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2737.309429][ T2653] Call Trace: [ 2737.312710][ T2653] dump_stack+0x1b0/0x21e [ 2737.317034][ T2653] ? devkmsg_release+0x11c/0x11c [ 2737.321974][ T2653] ? show_regs_print_info+0x12/0x12 [ 2737.327150][ T2653] ? kasan_alloc_pages+0x4a/0x60 [ 2737.332084][ T2653] should_fail+0x6fb/0x860 [ 2737.336482][ T2653] ? setup_fault_attr+0x2b0/0x2b0 [ 2737.341505][ T2653] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2737.346869][ T2653] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2737.352410][ T2653] ? find_get_entry+0x5da/0x670 [ 2737.357240][ T2653] ? xa_load+0x323/0x340 [ 2737.361461][ T2653] __do_page_cache_readahead+0x244/0x510 [ 2737.367081][ T2653] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2737.373475][ T2653] ? unwind_next_frame+0x1c07/0x22b0 [ 2737.378735][ T2653] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2737.384433][ T2653] generic_file_read_iter+0x626/0x20a0 [ 2737.389878][ T2653] ? find_get_pages_range_tag+0xae0/0xae0 [ 2737.395572][ T2653] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2737.401018][ T2653] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2737.407064][ T2653] ? avc_denied+0x1c0/0x1c0 [ 2737.411559][ T2653] generic_file_splice_read+0x491/0x780 [ 2737.417097][ T2653] ? splice_shrink_spd+0xb0/0xb0 [ 2737.422020][ T2653] ? security_file_permission+0x1e9/0x300 [ 2737.427732][ T2653] ? splice_shrink_spd+0xb0/0xb0 [ 2737.432647][ T2653] splice_direct_to_actor+0x3cf/0xb00 [ 2737.437995][ T2653] ? do_splice_direct+0x3d0/0x3d0 [ 2737.442993][ T2653] ? pipe_to_sendpage+0x300/0x300 [ 2737.448008][ T2653] ? security_file_permission+0x128/0x300 [ 2737.453721][ T2653] do_splice_direct+0x279/0x3d0 [ 2737.458547][ T2653] ? splice_direct_to_actor+0xb00/0xb00 [ 2737.464073][ T2653] ? security_file_permission+0x128/0x300 [ 2737.469768][ T2653] do_sendfile+0x89d/0x1110 [ 2737.474251][ T2653] ? compat_writev+0x390/0x390 [ 2737.478989][ T2653] ? security_file_permission+0x128/0x300 [ 2737.484684][ T2653] ? vfs_write+0x427/0x4f0 [ 2737.489081][ T2653] ? fput_many+0x42/0x1a0 [ 2737.493386][ T2653] __x64_sys_sendfile64+0x1ae/0x220 [ 2737.498561][ T2653] ? __ia32_sys_sendfile+0x240/0x240 [ 2737.503843][ T2653] do_syscall_64+0xcb/0x150 [ 2737.508331][ T2653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2737.514199][ T2653] RIP: 0033:0x45de29 [ 2737.518073][ T2653] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2737.537663][ T2653] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2737.546068][ T2653] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2737.554034][ T2653] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2737.561994][ T2653] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.569943][ T2653] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000c [ 2737.577894][ T2653] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0xc, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) wait4(r0, &(0x7f0000000000), 0x4, &(0x7f0000000100)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd561", 0x7e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:10 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:10 executing program 5 (fault-call:11 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2739.495765][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2739.504769][ T2671] FAULT_INJECTION: forcing a failure. [ 2739.504769][ T2671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2739.511533][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:53:10 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x10, 0x0) [ 2739.524701][ T2671] CPU: 0 PID: 2671 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2739.538885][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2739.546978][ T2671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2739.546982][ T2671] Call Trace: [ 2739.547000][ T2671] dump_stack+0x1b0/0x21e [ 2739.547009][ T2671] ? devkmsg_release+0x11c/0x11c [ 2739.547017][ T2671] ? show_regs_print_info+0x12/0x12 [ 2739.547031][ T2671] ? kasan_alloc_pages+0x4a/0x60 [ 2739.564519][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2739.572681][ T2671] should_fail+0x6fb/0x860 [ 2739.572692][ T2671] ? setup_fault_attr+0x2b0/0x2b0 [ 2739.572704][ T2671] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2739.572718][ T2671] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2739.581936][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2739.585205][ T2671] ? find_get_entry+0x5da/0x670 [ 2739.585214][ T2671] ? xa_load+0x323/0x340 [ 2739.585228][ T2671] __do_page_cache_readahead+0x244/0x510 [ 2739.596206][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2739.607621][ T2671] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2739.607632][ T2671] ? unwind_next_frame+0x1c07/0x22b0 [ 2739.607640][ T2671] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2739.607649][ T2671] generic_file_read_iter+0x626/0x20a0 [ 2739.607663][ T2671] ? find_get_pages_range_tag+0xae0/0xae0 [ 2739.614278][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2739.617066][ T2671] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2739.617077][ T2671] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2739.617090][ T2671] ? avc_denied+0x1c0/0x1c0 [ 2739.623543][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2739.627973][ T2671] generic_file_splice_read+0x491/0x780 [ 2739.648394][ T2679] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2739.652591][ T2671] ? splice_shrink_spd+0xb0/0xb0 [ 2739.652605][ T2671] ? security_file_permission+0x1e9/0x300 [ 2739.652613][ T2671] ? splice_shrink_spd+0xb0/0xb0 [ 2739.652621][ T2671] splice_direct_to_actor+0x3cf/0xb00 [ 2739.652633][ T2671] ? do_splice_direct+0x3d0/0x3d0 02:53:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8", 0xec}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:10 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x2000, 0x0) [ 2739.659739][ T2679] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2739.670524][ T2671] ? pipe_to_sendpage+0x300/0x300 [ 2739.670535][ T2671] ? security_file_permission+0x128/0x300 [ 2739.670543][ T2671] do_splice_direct+0x279/0x3d0 [ 2739.670552][ T2671] ? splice_direct_to_actor+0xb00/0xb00 [ 2739.670565][ T2671] ? security_file_permission+0x128/0x300 [ 2739.828695][ T2671] do_sendfile+0x89d/0x1110 [ 2739.833182][ T2671] ? compat_writev+0x390/0x390 [ 2739.837938][ T2671] ? security_file_permission+0x128/0x300 02:53:10 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x200000, 0x0) [ 2739.843633][ T2671] ? vfs_write+0x427/0x4f0 [ 2739.848037][ T2671] ? fput_many+0x42/0x1a0 [ 2739.852345][ T2671] __x64_sys_sendfile64+0x1ae/0x220 [ 2739.857525][ T2671] ? __ia32_sys_sendfile+0x240/0x240 [ 2739.862805][ T2671] do_syscall_64+0xcb/0x150 [ 2739.867277][ T2671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2739.873141][ T2671] RIP: 0033:0x45de29 [ 2739.877023][ T2671] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:53:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7fffffff, 0x1, 0x4, 0x7fff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x100) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2739.896607][ T2671] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2739.904993][ T2671] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2739.912947][ T2671] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2739.920917][ T2671] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.928884][ T2671] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000d [ 2739.936841][ T2671] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000002180)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) clone(0x41900100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000480)={{r0}, "34ca06ef3860cefae2ea787247c4da05c7c0bdcc733a2659c79617e38f941d023fbc48c89ecdd14886fe891e357f423d74ab95962be148985717bf2c7ec5ca097860ea261ccfcf496ffd7aac919bfb9bcba8f32a768e817c2ce1818d19501811360e175279b17335055b4c2bc4cfe9affce242cdd6e792517700661073df3dba244504f8afa5695b441ee85ab37ffb400c0d347c8fa76f472cfe406575303a4f2afa7997bff4d97220839996c6910208c41e932afa389535b972eeea418c4eec508353b7724dd0a280dc85068e54c051822c906ab03cf145425b04fbc28db29cd7a8c6bda98077024b7a2ea3c48cf05ae481d59db11af1297d17e3a92c52a865d71384b41b69fb29add51f4e8c382982a419a084604d65f146d6a3dbb20601f5a46223dc1ed226980771f8b3c739cf23425e7b9ed154f4462f806d5c676040fd7ebb86d9a9256232db764f323f71741c9feb4256f5fb580a3ac578f3e6d6b7cbb2f41216d0bf550699a87e2efb0001f06f83eca495da3b731d07227f5b9e8b3e7e983ef4d43d54cd6f90df804b21d3e45aa88c9eeebc1e6470296705d4043402007292de21f9c122d0561cf90661338666d7772efa60e95265c5adad1ac87438fcc7e2fd099924497724b2a514a10aa48fc3b14a84754b87e612a8e05a6613dda8d26f89267d017366ce33d8d85bf13982aae0210263a47a53de180aef69a34096661b474436c6c825ee89ac6f4e0f2bbe2029da7f6f52be9b9da0eef6d745e1d08cfd7b1482f563aeb1f38d592b59a025324dbee7a9abc74c260fd2b8bf5e80b23ed977bf605d877e953859ce440a1d062ce1a25cf422906e15c241e8bb23a9e6a5db7bb6c4f53bf5b337bfb7c1db7e8b6fc18651f6181c9cb08c0ec3180340adb74c8b716722c272a72558fe9edbffe9132e6ad51cd6ace52fbc5e46162b4b4445cfa86ebd068e62ead6f9a1d0a000abf39d086da275ed0352e3354a1f736a947e29f1e06d96eeadb2f1717c0478701b3e94b9e59beb9c4ade352685515c2fe993bc60efedd090a6cf6d5c5f55a71febdd4fff3096c52e71a633a90812ab1b33fb41a015dbd6c5fdec74df9cf272675f2a901580d96b803b14d8cb38bd3b5fae12d79c285012d29b20a32f43b729c80e61f6adb706c838beb2acb61b0bc73049ebeff63f5fabf7427bcad45fa819430188dc8a91b08ada9f623f65ab77a9e2318ae1fd0c581dd0658e634f79113ec8c2872a3bc81cb63c11988ee9c6b9b77fe0ae4bdf58788e1f8e95645347923c469f28561ddf66ad5143e0038db83f9b5abb70edd890374fb1223461fcd0bb32ca37869bc4a4c6c84053dbdebdcf589c52f5bd0a6dc7c2a80f968281de354b10e2ee8122bfcb1ce1b4f5d0324c100842f7085a3269f739685b2d295f80485836b7d77632aa1d0e5241ba0ed541609457a7927dbb70f8f2b896848da03a0b3c9912f3ab2a3c00fe2d3c8bab9a8fa8102b6e2f41289aafa523e3a4eebaec6d4261ca235f5c5b1174d7f9e54301fe955695d29a7eeb1c2bb9792e06f28a85110c4549db2a0cf25ae3d9ffd55a85ba3e03e9b0a91dd021c15879afc9290eaeb3baa368035b65606d5f17b86d057c5a26bff30f54c0023ebebd7f64ed0426e8141f59dcb12e6d3388043fda469e681d13a612ef8578a0167e3cee2ce77b39d2d1c35da1879c1349ccb2c7bec7e5754ab8f3651970120252889a01bdf48a9b957faad727c1b6435b64e0df45bf239044f7398cbd9a3b0c9426eedf535b1b2831ebeb072c0a37c40785cde64d8ae988a69673a47afca71fa068239cb42c900776120094029a2f8528136ee0bbe967c2ea597fa62d901d9c0aa997eddbee7c1c1693208147acc3fa0d359a416dc2da153f3ec9724b5ee0c04c49e2047dc9529f60533c7680afe97d1cb2f1e7ead53a9c9397bd2779441dca22cd30a9d7eb4a3a22acb06a49db3a3350fa2cd8b4c4a1f4466cee1a527adbf78db17f31b2d91134bf11508701704a6db94586f53d179aba41f4db50a3c8a124ac9234fb81551073c7c62dea1477620331c608178d8f27e0e5497ba58e2c689a1fa2ea822c4c2b34ef5bf6bc28a09a4eca6e3ed612568273624e362ab7d60d969cd3f3006ddb2476d8d6347f2be6f159ebfbd44022335ea8e0718646c29cf70f543fd57f0882ece65861c93ddb01986bc3673064f08f0a4ed6cfae528ac0a59d4debbc7d763e6a46f835696195afb3dc67278a4be2ab21c92c1ed6178aa1df2cf1479df56e97225a5d9874814ac1908add5a9b23be8b9e9400f5abe308fd6a5a750e6b886b787575a8d030cf1b246f5acb20fb6d348286d9e233d81f9a8a03d4e2f61e107da37e8e6189ceb93eb2d7360801887917f6db0fc916a722227f5c679972beb5fc30a21fcb4d39252ccdd5937f906c33d1dcdbcab2cab0dd94314783c48940b8e0b69dd594a0ede4a9ea91c9077eb9a3f031c9855aae4e0510e8a2d90d88eda3c4167c6b8881a813dce644401fa113cd460c43428a7fe92304a48607d728e900279d6d307aa4ce28cd5faf41dc07069347edf7369e4cc6e3aeee03eaf45d68ed587a2b9fcd81a6d614410400022eca013d99cfae3e31c227fbd0bc47025506dea6fed352b418260222c265e6b2bf2deb805820c8f1d13cef7df1e131f201f7504f4f9315a6008aae7e3883936de4ee2771d33a60ce27765e6038c07a03620dd75cb19f9c6d03b41fcc5d85110a7d378cd357b8bdcd2bfb1a171e722380eb06064269963c62068c27d10bfc781a8a5aa88a36cc35b78975b26a4a97f761af3a431f1b17fe776235f9b9cf64987df162f47c82abe44283ba3f5f84e11f7a86b06c7d01668997ab364f765b565c1e937d2bba5ed0be5f63d24bdc7d0bf1d3549c9523577f0b09b769fd9a66a7b7cee040778f4e7e537af5495d5435f9cfe4c78a33df7221e6929408ee83493dcd5832347b43dbee8dee04ab5ead21d7a1d4f52e38dc6210a78573b0ed0dec29a842d795281204a6b4c33b5ee89f1ad1ba26873f366d6d3f782abb0f18f0155ca4982365e7df599d69e45553146f23d6d17e29626565db1a339638880b0e131527a18eadf0827d7bccbb431b3fc0ab8a7759a773a623f5b2155642ac45dba7a9507e1b0ec492e1fd96310ee995253c6672878513c52000ab7405e85991d7d9a463185d1d6ec6a6f5f9314f82d084bda3478e9c01df98fa110c6d113cf9f236baea2003ffc7625811309f3ece58cfd2c2efcfdd487a5c5c7e9c0b9889ff19b2118a823f886e72ff2131d6b995fe2ee2e96b410e98212d2d2413f368d9f247e6fe004d9e6a7a65a9f77c95e19a19d726234a5546d6f891bf46770e96178744f162f742e8c3754420a59a276e96b59294f300d02bd7bdc67f35205892642b484e5caec12c1a862365a4ddc4f09ebd06f30050020110be620af96aea8a2b67557424d9ff492aa0ff348a5964586083dcca5a177da76c53ee56d030e4e2453e0126923c378693f3ff43bda4e692312936bcd99c51756b5d1325f6a496bbbc68cea8d0d35775ac84995b607a9b7c47b9c99753a8c526347920664363fde56f4e2e09ceadc4c628d43750b8de38692b5418655a3bd527094131f89474362b66a064cb4add7a2985d3b028923626814bf349b0aa723abc83a88a89fd99940cb34ecd937b675ca30215a3d8116796aea8387729057987fe0ae77ccb328e28cc3110742d8242ded3729057627da5dae1e2f4054fe3354bdf7de6ccc42bae52916b311c394cc1e011a2670c44d3b016a2efb961411e40764c60faf8454c3671ccdf220644c05983367c549a5197e76e96e8d8882d15f8ce2e8107020fdc0fcc15466d7005729dee12cf7e58950a936b43cae459d3e0b8c476bd00613ebce760f6ab213f936172bfb75d4bb6b18fdbf9e9d02c8ba57a4ffcb9db1260b38ef6b3248856cddebff4367316b7f69b32fea6192430f9b8812855376d4bcaea660e21e4af07fcc2b5d956e3eb9b222f8ec58220c18bdccb3dd1638defa6d35c9d981e7f1322cded14c2d0572b4a4e80832ee917dc370c70da0a045e839a10b5e57f78d3a79a6f3113267c86c56d408efcd1ccf62500e2371c521f264eceedd5ff893e64e0fba617d96575d44eefe6eef60267e88f9a1406a48dcf7932d0953057c618f095369f5f426cdfe0c7c6a4efc2e1170ce5b648298e169f592e0e14e0c8a67e861e2dcaea2558e191a3c627a7aa037d62cad802630543c9c6d095fe8eb66325d06f1333b581a2e5dffce166051b80d8feb3b1143fe36373d076c056af1c7965255126a0af7e79982759da46ea0cf34f13a8642028f63c9ba3c6050ec6cb17e0ec5725568bf5b8afe82b6d8f888f4da1520ee5c3d55e074ec241ffc119d325813f888f34ac9e94470f11880233d639156639dcba2096d9e804d04bb091e3801458650a41da1e9fd02c33bbebc8931de9a327c000c96ce94d85c8f665d40232fd32968acb2c14967ba5f9fef7800b250b8a572aac50891422f87cd878e3878b0e1b375c2e8f6e0031d28ed5a9a798ee74c0290c5fa5d9c96ae9c84492d67eeaae481c5ae3cb6b6cea12e985719286a388607a237dad2071375e786f8b5355fd95e993e6114e25e6546c2edcdad13ecd051589d05552f6f7ef45d9f526b23b8d4db821b9f5d5986799ef241011ee978a0f4efdd953b6a84ca71a2f5cea23f9d8089581186993c5e54f6b221f9b195a375aabd1b1f83743b92f6ce98cab4c6fef434c744d7925471ebfac0df8b050f4cd0f516b1435aefb9b4e2222713c912a8a5d9dbc06bb7915cc4cffbcc6e7e2908a9a38885fc3c30374d63e78fda551d7b50298aa2482b6a2c3cd3921eb26f49a8552bfbe735509fe78246a4bcd5a94182aa51eac2418c0125a6b4d42ca59fb1170a2eb5343cd0999725eb56d9e8a8f2610c21c5b983e73cb5550305608d28ea84be1d349fe91001d8a9338e1d75b711bc507695c203a56139545864e5e5d8255bde52484a8ecb6dbf560863cc40d319856bd9b4c293097bed5d8b60b7de5e9945399336e69e384ec38c0c8fe38f1da9415112e7cc8c4790e89de4ae157039527773bd26d837c6fd78eac1f0020ad517c8008c9bf05667ada28982b4d4f91c7cc48eef6fe898d5d88baee356c63a8cdca5af260770cc3b32894c3a7fd695c4984799e0502dd2eb2b5b16f1305ca8db3f97176f25edfebb87bb25d01ab0885349f7908107e6ef9e1bdf1850e39e205f91a1bc4db4ef21ff49e468835f34e0131cd2d91defb6745ae9afb5e3b98f35c3c7c25c908f6951eeca86a9e917059671ead0fb4eadc5b62ab5c19da1827bcddd4c0a67e775e142ba69798308d37d8576796274f5f930971c46a358ec15ec742e40d64d91c81b2375ab60dc8ee5ce66ba5200c17e7a7abce096029bfa1fa9d5463d3429cb68d52344ff0d74baa4e6fca787d1d768b51f975e5ea46e857ba6caa5992bc60cfb97fd2a2562cfadbfcdaf2eb1f8295919a14575d72c96e72217401cc551a000fb0f45f25c422aa13457d513f57daa9ef3acbc26c00d0aef203e78c55228c0f1f1d6c71f498051c9132a0e3e8ea541d48a357172f72aa1e468d5754f524e2c57c5df79341007d9e9306ea33f9c62a6d30ef83a11b8fec69aaa730df2bbc2acb4de4b7e05a7ae6fb1b0280d5ecc6165e5167b95821607ea9168f16ab3fd4afa85f0e5f11056e2952fc044db1775913653cebb31e2a1ebb037c5a926c70923c46fc83acc9831ed683d18cb7c3"}) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="05c7511c97754127b7049444f4f11f0d96dc5b9e672307b6cae69c1998ccab15d2a015fdf7c7274baccac6512457b2", 0x2f}, {&(0x7f0000000040)="01bd3676684965222c9706cc0b336a0edb8d734efc36b7c0e6bca7f407a61fa0fe20db2ad3186a92ed75c54990bf9ae13b67196520ab812dfa826fa5c02d05a495c0c0c86a3e9b55ce72254fe3441bff25d97c5268db443d235e49b18d52e6b3b33303065e568e4f45cab4ae796575c691f8037e6d0762adcd18072527e52378a5ddc9320a65b01340d7c399f62c4c77c3d280f2", 0x94}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) tkill(r3, 0x29) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x9d, &(0x7f0000000180)) 02:53:11 executing program 5 (fault-call:11 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:11 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0xa4) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x122a160, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2740.030089][ T2713] FAULT_INJECTION: forcing a failure. [ 2740.030089][ T2713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2740.043583][ T2713] CPU: 1 PID: 2713 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2740.053615][ T2713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2740.063643][ T2713] Call Trace: [ 2740.066927][ T2713] dump_stack+0x1b0/0x21e [ 2740.071247][ T2713] ? devkmsg_release+0x11c/0x11c [ 2740.076172][ T2713] ? show_regs_print_info+0x12/0x12 [ 2740.081345][ T2713] ? kasan_alloc_pages+0x4a/0x60 [ 2740.086283][ T2713] should_fail+0x6fb/0x860 [ 2740.090694][ T2713] ? setup_fault_attr+0x2b0/0x2b0 [ 2740.095688][ T2713] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2740.101044][ T2713] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2740.106574][ T2713] ? find_get_entry+0x5da/0x670 [ 2740.111404][ T2713] ? xa_load+0x323/0x340 [ 2740.115615][ T2713] __do_page_cache_readahead+0x244/0x510 [ 2740.121219][ T2713] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2740.127602][ T2713] ? unwind_next_frame+0x1c07/0x22b0 [ 2740.132856][ T2713] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2740.138543][ T2713] generic_file_read_iter+0x626/0x20a0 [ 2740.143989][ T2713] ? find_get_pages_range_tag+0xae0/0xae0 [ 2740.149816][ T2713] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2740.155161][ T2713] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2740.161206][ T2713] ? avc_denied+0x1c0/0x1c0 [ 2740.165697][ T2713] generic_file_splice_read+0x491/0x780 [ 2740.171234][ T2713] ? splice_shrink_spd+0xb0/0xb0 [ 2740.176146][ T2713] ? security_file_permission+0x1e9/0x300 [ 2740.181848][ T2713] ? splice_shrink_spd+0xb0/0xb0 [ 2740.186757][ T2713] splice_direct_to_actor+0x3cf/0xb00 [ 2740.192107][ T2713] ? do_splice_direct+0x3d0/0x3d0 [ 2740.197119][ T2713] ? pipe_to_sendpage+0x300/0x300 [ 2740.202140][ T2713] ? security_file_permission+0x128/0x300 [ 2740.207862][ T2713] do_splice_direct+0x279/0x3d0 [ 2740.212684][ T2713] ? splice_direct_to_actor+0xb00/0xb00 [ 2740.218200][ T2713] ? security_file_permission+0x128/0x300 [ 2740.223901][ T2713] do_sendfile+0x89d/0x1110 [ 2740.228374][ T2713] ? compat_writev+0x390/0x390 [ 2740.233106][ T2713] ? security_file_permission+0x128/0x300 [ 2740.238794][ T2713] ? vfs_write+0x427/0x4f0 [ 2740.243176][ T2713] ? fput_many+0x42/0x1a0 [ 2740.247474][ T2713] __x64_sys_sendfile64+0x1ae/0x220 [ 2740.252665][ T2713] ? __ia32_sys_sendfile+0x240/0x240 [ 2740.257945][ T2713] do_syscall_64+0xcb/0x150 [ 2740.262416][ T2713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2740.268274][ T2713] RIP: 0033:0x45de29 [ 2740.272136][ T2713] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2740.291722][ T2713] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2740.300098][ T2713] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2740.308038][ T2713] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2740.315976][ T2713] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.323915][ T2713] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000e [ 2740.331864][ T2713] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:11 executing program 5 (fault-call:11 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2740.400135][ T2724] FAULT_INJECTION: forcing a failure. [ 2740.400135][ T2724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2740.413421][ T2724] CPU: 1 PID: 2724 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2740.423458][ T2724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2740.433494][ T2724] Call Trace: [ 2740.436757][ T2724] dump_stack+0x1b0/0x21e [ 2740.441068][ T2724] ? devkmsg_release+0x11c/0x11c [ 2740.445982][ T2724] ? show_regs_print_info+0x12/0x12 [ 2740.451161][ T2724] ? kasan_alloc_pages+0x4a/0x60 [ 2740.456080][ T2724] should_fail+0x6fb/0x860 [ 2740.460478][ T2724] ? setup_fault_attr+0x2b0/0x2b0 [ 2740.465510][ T2724] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2740.470861][ T2724] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2740.476383][ T2724] ? find_get_entry+0x5da/0x670 [ 2740.481210][ T2724] ? xa_load+0x323/0x340 [ 2740.485432][ T2724] __do_page_cache_readahead+0x244/0x510 [ 2740.491041][ T2724] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2740.497433][ T2724] ? unwind_next_frame+0x1c07/0x22b0 [ 2740.502695][ T2724] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2740.508391][ T2724] generic_file_read_iter+0x626/0x20a0 [ 2740.513832][ T2724] ? find_get_pages_range_tag+0xae0/0xae0 [ 2740.519545][ T2724] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2740.524894][ T2724] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2740.530955][ T2724] ? avc_denied+0x1c0/0x1c0 [ 2740.535438][ T2724] generic_file_splice_read+0x491/0x780 [ 2740.540966][ T2724] ? splice_shrink_spd+0xb0/0xb0 [ 2740.545887][ T2724] ? security_file_permission+0x1e9/0x300 [ 2740.551580][ T2724] ? splice_shrink_spd+0xb0/0xb0 [ 2740.556492][ T2724] splice_direct_to_actor+0x3cf/0xb00 [ 2740.561840][ T2724] ? do_splice_direct+0x3d0/0x3d0 [ 2740.566837][ T2724] ? pipe_to_sendpage+0x300/0x300 [ 2740.571841][ T2724] ? security_file_permission+0x128/0x300 [ 2740.577534][ T2724] do_splice_direct+0x279/0x3d0 [ 2740.582364][ T2724] ? splice_direct_to_actor+0xb00/0xb00 [ 2740.587891][ T2724] ? security_file_permission+0x128/0x300 [ 2740.593586][ T2724] do_sendfile+0x89d/0x1110 [ 2740.598069][ T2724] ? compat_writev+0x390/0x390 [ 2740.602809][ T2724] ? security_file_permission+0x128/0x300 [ 2740.608506][ T2724] ? vfs_write+0x427/0x4f0 [ 2740.612895][ T2724] ? fput_many+0x42/0x1a0 [ 2740.617205][ T2724] __x64_sys_sendfile64+0x1ae/0x220 [ 2740.622397][ T2724] ? __ia32_sys_sendfile+0x240/0x240 [ 2740.627662][ T2724] do_syscall_64+0xcb/0x150 [ 2740.632156][ T2724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2740.638024][ T2724] RIP: 0033:0x45de29 [ 2740.641896][ T2724] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2740.661476][ T2724] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2740.669861][ T2724] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2740.677809][ T2724] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2740.685759][ T2724] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.693704][ T2724] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000f [ 2740.701653][ T2724] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:13 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:13 executing program 5 (fault-call:11 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:13 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff1", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2742.650627][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2742.658815][ T2728] FAULT_INJECTION: forcing a failure. [ 2742.658815][ T2728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2742.668635][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2742.679542][ T2728] CPU: 0 PID: 2728 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2742.693411][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2742.701850][ T2728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2742.701854][ T2728] Call Trace: [ 2742.701870][ T2728] dump_stack+0x1b0/0x21e [ 2742.701879][ T2728] ? devkmsg_release+0x11c/0x11c [ 2742.701887][ T2728] ? show_regs_print_info+0x12/0x12 [ 2742.701901][ T2728] ? kasan_alloc_pages+0x4a/0x60 [ 2742.719207][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2742.727527][ T2728] should_fail+0x6fb/0x860 [ 2742.727537][ T2728] ? setup_fault_attr+0x2b0/0x2b0 [ 2742.727550][ T2728] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2742.727563][ T2728] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2742.732508][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:53:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8", 0xec}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2742.735155][ T2728] ? find_get_entry+0x5da/0x670 [ 2742.735164][ T2728] ? xa_load+0x323/0x340 [ 2742.735177][ T2728] __do_page_cache_readahead+0x244/0x510 [ 2742.740173][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2742.745280][ T2728] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2742.745290][ T2728] ? unwind_next_frame+0x1c07/0x22b0 [ 2742.745298][ T2728] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2742.745307][ T2728] generic_file_read_iter+0x626/0x20a0 02:53:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x800000, 0x0) [ 2742.745320][ T2728] ? find_get_pages_range_tag+0xae0/0xae0 [ 2742.753145][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2742.762513][ T2728] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2742.762524][ T2728] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2742.762532][ T2728] ? avc_denied+0x1c0/0x1c0 [ 2742.762544][ T2728] generic_file_splice_read+0x491/0x780 [ 2742.762557][ T2728] ? splice_shrink_spd+0xb0/0xb0 02:53:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x1000000, 0x0) [ 2742.768382][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2742.771945][ T2728] ? security_file_permission+0x1e9/0x300 [ 2742.771954][ T2728] ? splice_shrink_spd+0xb0/0xb0 [ 2742.771961][ T2728] splice_direct_to_actor+0x3cf/0xb00 [ 2742.771974][ T2728] ? do_splice_direct+0x3d0/0x3d0 [ 2742.782925][ T2731] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2742.798448][ T2728] ? pipe_to_sendpage+0x300/0x300 [ 2742.798460][ T2728] ? security_file_permission+0x128/0x300 [ 2742.798467][ T2728] do_splice_direct+0x279/0x3d0 [ 2742.798485][ T2728] ? splice_direct_to_actor+0xb00/0xb00 [ 2742.803402][ T2731] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2742.807518][ T2728] ? security_file_permission+0x128/0x300 [ 2742.807526][ T2728] do_sendfile+0x89d/0x1110 [ 2742.807538][ T2728] ? compat_writev+0x390/0x390 [ 2742.992963][ T2728] ? security_file_permission+0x128/0x300 02:53:14 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x10000000, 0x0) [ 2742.998668][ T2728] ? vfs_write+0x427/0x4f0 [ 2743.003156][ T2728] ? fput_many+0x42/0x1a0 [ 2743.007453][ T2728] __x64_sys_sendfile64+0x1ae/0x220 [ 2743.012631][ T2728] ? __ia32_sys_sendfile+0x240/0x240 [ 2743.017930][ T2728] do_syscall_64+0xcb/0x150 [ 2743.022421][ T2728] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2743.028292][ T2728] RIP: 0033:0x45de29 [ 2743.032154][ T2728] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:53:14 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xfeffffff, 0x0) 02:53:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x4) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:14 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xfffffffe, 0x0) [ 2743.051724][ T2728] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2743.060101][ T2728] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2743.068046][ T2728] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2743.076002][ T2728] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.083954][ T2728] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000010 [ 2743.091901][ T2728] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:14 executing program 5 (fault-call:11 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:14 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x200000000000, 0x0) [ 2743.173292][ T2774] FAULT_INJECTION: forcing a failure. [ 2743.173292][ T2774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2743.188659][ T2774] CPU: 0 PID: 2774 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2743.198712][ T2774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2743.208752][ T2774] Call Trace: [ 2743.212036][ T2774] dump_stack+0x1b0/0x21e [ 2743.216339][ T2774] ? devkmsg_release+0x11c/0x11c [ 2743.221249][ T2774] ? show_regs_print_info+0x12/0x12 [ 2743.226416][ T2774] ? kasan_alloc_pages+0x4a/0x60 [ 2743.231328][ T2774] should_fail+0x6fb/0x860 [ 2743.235718][ T2774] ? setup_fault_attr+0x2b0/0x2b0 [ 2743.240716][ T2774] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2743.246075][ T2774] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2743.251596][ T2774] ? find_get_entry+0x5da/0x670 [ 2743.256425][ T2774] ? xa_load+0x323/0x340 [ 2743.260647][ T2774] __do_page_cache_readahead+0x244/0x510 [ 2743.266274][ T2774] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2743.272673][ T2774] ? unwind_next_frame+0x1c07/0x22b0 [ 2743.277926][ T2774] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2743.283614][ T2774] generic_file_read_iter+0x626/0x20a0 [ 2743.289045][ T2774] ? find_get_pages_range_tag+0xae0/0xae0 [ 2743.294791][ T2774] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2743.300174][ T2774] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2743.306213][ T2774] ? avc_denied+0x1c0/0x1c0 [ 2743.310690][ T2774] generic_file_splice_read+0x491/0x780 [ 2743.316208][ T2774] ? splice_shrink_spd+0xb0/0xb0 [ 2743.321125][ T2774] ? security_file_permission+0x1e9/0x300 [ 2743.326818][ T2774] ? splice_shrink_spd+0xb0/0xb0 [ 2743.331723][ T2774] splice_direct_to_actor+0x3cf/0xb00 [ 2743.337064][ T2774] ? do_splice_direct+0x3d0/0x3d0 [ 2743.342065][ T2774] ? pipe_to_sendpage+0x300/0x300 [ 2743.347091][ T2774] ? security_file_permission+0x128/0x300 [ 2743.352776][ T2774] do_splice_direct+0x279/0x3d0 [ 2743.357597][ T2774] ? splice_direct_to_actor+0xb00/0xb00 [ 2743.363115][ T2774] ? security_file_permission+0x128/0x300 [ 2743.368809][ T2774] do_sendfile+0x89d/0x1110 [ 2743.373321][ T2774] ? compat_writev+0x390/0x390 [ 2743.378055][ T2774] ? security_file_permission+0x128/0x300 [ 2743.383750][ T2774] ? vfs_write+0x427/0x4f0 [ 2743.388152][ T2774] ? fput_many+0x42/0x1a0 [ 2743.392473][ T2774] __x64_sys_sendfile64+0x1ae/0x220 [ 2743.397641][ T2774] ? __ia32_sys_sendfile+0x240/0x240 [ 2743.402892][ T2774] do_syscall_64+0xcb/0x150 [ 2743.407376][ T2774] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2743.413234][ T2774] RIP: 0033:0x45de29 [ 2743.417097][ T2774] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2743.436665][ T2774] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2743.445042][ T2774] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2743.452980][ T2774] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2743.460924][ T2774] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.468877][ T2774] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000011 [ 2743.476827][ T2774] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:16 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:53:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = gettid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000000)=0x2) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x80000000000000, 0x0) [ 2745.785032][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2745.802074][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2745.815357][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:53:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8", 0xec}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:16 executing program 5 (fault-call:11 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:16 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff1", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa10020, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61785f726561643d3078303030303030301f30303030303065622c6d61785f726561643d3078303030303030303030303030303030392c616c6c6f775f6f746865722c61756462742c61707072616973652c636f6e746f78743d757365725f752c7375626a5f747970653d243a5b217d2c726f6f74636f6e746578743d726f6f742c00"]) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) fchownat(r1, &(0x7f0000000080)='./file0\x00', 0xee01, r2, 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f00000002c0)={0xb}) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2745.831051][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2745.845733][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2745.859463][ T2801] FAULT_INJECTION: forcing a failure. [ 2745.859463][ T2801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2745.864976][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2745.874660][ T2801] CPU: 0 PID: 2801 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2745.894091][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2745.896938][ T2801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2745.896941][ T2801] Call Trace: [ 2745.896957][ T2801] dump_stack+0x1b0/0x21e [ 2745.896971][ T2801] ? devkmsg_release+0x11c/0x11c [ 2745.914182][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2745.922767][ T2801] ? show_regs_print_info+0x12/0x12 [ 2745.922777][ T2801] ? kasan_alloc_pages+0x4a/0x60 [ 2745.922788][ T2801] should_fail+0x6fb/0x860 [ 2745.922801][ T2801] ? setup_fault_attr+0x2b0/0x2b0 [ 2745.931897][ T2808] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2745.935300][ T2801] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2745.935312][ T2801] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2745.935326][ T2801] ? find_get_entry+0x5da/0x670 [ 2745.947700][ T2808] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2745.952781][ T2801] ? xa_load+0x323/0x340 [ 2745.952791][ T2801] __do_page_cache_readahead+0x244/0x510 [ 2745.952802][ T2801] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2745.952812][ T2801] ? unwind_next_frame+0x1c07/0x22b0 [ 2745.952824][ T2801] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2746.037716][ T2801] generic_file_read_iter+0x626/0x20a0 [ 2746.043150][ T2801] ? find_get_pages_range_tag+0xae0/0xae0 [ 2746.048837][ T2801] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2746.054176][ T2801] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2746.060209][ T2801] ? avc_denied+0x1c0/0x1c0 [ 2746.064682][ T2801] generic_file_splice_read+0x491/0x780 [ 2746.070205][ T2801] ? splice_shrink_spd+0xb0/0xb0 [ 2746.075112][ T2801] ? security_file_permission+0x1e9/0x300 [ 2746.080795][ T2801] ? splice_shrink_spd+0xb0/0xb0 [ 2746.085705][ T2801] splice_direct_to_actor+0x3cf/0xb00 [ 2746.091063][ T2801] ? do_splice_direct+0x3d0/0x3d0 [ 2746.096052][ T2801] ? pipe_to_sendpage+0x300/0x300 [ 2746.101052][ T2801] ? security_file_permission+0x128/0x300 [ 2746.106748][ T2801] do_splice_direct+0x279/0x3d0 [ 2746.111565][ T2801] ? splice_direct_to_actor+0xb00/0xb00 [ 2746.117091][ T2801] ? security_file_permission+0x128/0x300 [ 2746.122778][ T2801] do_sendfile+0x89d/0x1110 [ 2746.127249][ T2801] ? compat_writev+0x390/0x390 [ 2746.131978][ T2801] ? security_file_permission+0x128/0x300 [ 2746.137662][ T2801] ? vfs_write+0x427/0x4f0 [ 2746.142041][ T2801] ? fput_many+0x42/0x1a0 [ 2746.146350][ T2801] __x64_sys_sendfile64+0x1ae/0x220 [ 2746.151522][ T2801] ? __ia32_sys_sendfile+0x240/0x240 [ 2746.156783][ T2801] do_syscall_64+0xcb/0x150 [ 2746.161254][ T2801] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2746.167127][ T2801] RIP: 0033:0x45de29 [ 2746.170996][ T2801] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2746.190578][ T2801] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2746.198967][ T2801] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2746.206904][ T2801] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2746.214842][ T2801] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2746.222791][ T2801] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000012 02:53:17 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x100000000000000, 0x0) 02:53:17 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="5b308ec24ef089585eed4b9bea024f62a4227a07455a32cf567b7b667a491468a6d4bda359d4e25e0c49e540ee1fb6e33dc19d33c9cda3c453b4be7864e1e732a4b0b3") ptrace$cont(0x18, r0, 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000100)="835fb2a20c716944fe3bc669355a32c2c394ab3f37177e8891de6767eecf23554a83e5265066d85e6e5f830ae69d636f03700ced87b29981b78ee9419836908d004ec25de6f75bc7e4a1894b6c7c071f709848597c1011ec59e51e995fc657bb42ec5ea802226536f78110d1796d7bec83b4c9cb6044180db0d44ab2e5b4857723be01102a67dfc684f1155191c3087877817c8bc896aea64944666311d2cf661cd36943b237adac94dcb98fa723839bcdbb53e43eadef9ea01eed736c86ad728bd849c771fc580fb4f2aa5503f703acd295e766b79919957c7b0feb1ba1a2cccd27dd55b8", &(0x7f0000000200)=""/100, &(0x7f0000000080)="adffad9a151675fe29613fc1fd0295dcd177eaab4a046edf423b89d255c6", &(0x7f00000007c0)="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", 0x8, r1, 0x4}, 0x38) [ 2746.230749][ T2801] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:17 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x1000000000000000, 0x0) 02:53:17 executing program 5 (fault-call:11 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2746.319827][ T2828] FAULT_INJECTION: forcing a failure. [ 2746.319827][ T2828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2746.333239][ T2828] CPU: 1 PID: 2828 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2746.343304][ T2828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2746.353326][ T2828] Call Trace: [ 2746.356624][ T2828] dump_stack+0x1b0/0x21e [ 2746.360936][ T2828] ? devkmsg_release+0x11c/0x11c [ 2746.365876][ T2828] ? show_regs_print_info+0x12/0x12 [ 2746.371064][ T2828] ? kasan_alloc_pages+0x4a/0x60 [ 2746.375993][ T2828] should_fail+0x6fb/0x860 [ 2746.380400][ T2828] ? setup_fault_attr+0x2b0/0x2b0 [ 2746.385405][ T2828] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2746.390757][ T2828] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2746.396280][ T2828] ? find_get_entry+0x5da/0x670 [ 2746.401108][ T2828] ? xa_load+0x323/0x340 [ 2746.405331][ T2828] __do_page_cache_readahead+0x244/0x510 [ 2746.410943][ T2828] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2746.417334][ T2828] ? unwind_next_frame+0x1c07/0x22b0 [ 2746.422602][ T2828] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2746.428298][ T2828] generic_file_read_iter+0x626/0x20a0 [ 2746.433744][ T2828] ? find_get_pages_range_tag+0xae0/0xae0 [ 2746.439439][ T2828] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2746.444786][ T2828] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2746.450826][ T2828] ? avc_denied+0x1c0/0x1c0 [ 2746.455311][ T2828] generic_file_splice_read+0x491/0x780 [ 2746.460837][ T2828] ? splice_shrink_spd+0xb0/0xb0 [ 2746.465759][ T2828] ? security_file_permission+0x1e9/0x300 [ 2746.471455][ T2828] ? splice_shrink_spd+0xb0/0xb0 [ 2746.476379][ T2828] splice_direct_to_actor+0x3cf/0xb00 [ 2746.481745][ T2828] ? do_splice_direct+0x3d0/0x3d0 [ 2746.486745][ T2828] ? pipe_to_sendpage+0x300/0x300 [ 2746.491749][ T2828] ? security_file_permission+0x128/0x300 [ 2746.497441][ T2828] do_splice_direct+0x279/0x3d0 [ 2746.502273][ T2828] ? splice_direct_to_actor+0xb00/0xb00 [ 2746.507797][ T2828] ? security_file_permission+0x128/0x300 [ 2746.513490][ T2828] do_sendfile+0x89d/0x1110 [ 2746.517972][ T2828] ? compat_writev+0x390/0x390 [ 2746.522726][ T2828] ? security_file_permission+0x128/0x300 [ 2746.528433][ T2828] ? vfs_write+0x427/0x4f0 [ 2746.532825][ T2828] ? fput_many+0x42/0x1a0 [ 2746.537130][ T2828] __x64_sys_sendfile64+0x1ae/0x220 [ 2746.542306][ T2828] ? __ia32_sys_sendfile+0x240/0x240 [ 2746.547567][ T2828] do_syscall_64+0xcb/0x150 [ 2746.552062][ T2828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2746.557928][ T2828] RIP: 0033:0x45de29 [ 2746.561803][ T2828] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2746.581380][ T2828] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2746.589766][ T2828] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2746.597712][ T2828] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2746.605660][ T2828] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 02:53:17 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xfeffffff00000000, 0x0) [ 2746.613608][ T2828] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000013 [ 2746.621554][ T2828] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:19 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:53:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd7b96", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xffffffff00000000, 0x0) 02:53:19 executing program 5 (fault-call:11 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff1", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2748.935451][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2748.952911][ T2847] FAULT_INJECTION: forcing a failure. [ 2748.952911][ T2847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2748.952930][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2748.966414][ T2847] CPU: 1 PID: 2847 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2748.980276][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2748.988478][ T2847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2748.988481][ T2847] Call Trace: [ 2748.988498][ T2847] dump_stack+0x1b0/0x21e [ 2748.988507][ T2847] ? devkmsg_release+0x11c/0x11c [ 2748.988521][ T2847] ? show_regs_print_info+0x12/0x12 [ 2749.005505][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2749.014136][ T2847] ? kasan_alloc_pages+0x4a/0x60 [ 2749.014148][ T2847] should_fail+0x6fb/0x860 [ 2749.014161][ T2847] ? setup_fault_attr+0x2b0/0x2b0 [ 2749.018908][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2749.021724][ T2847] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2749.021735][ T2847] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2749.021749][ T2847] ? find_get_entry+0x5da/0x670 [ 2749.028072][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2749.031827][ T2847] ? xa_load+0x323/0x340 [ 2749.031837][ T2847] __do_page_cache_readahead+0x244/0x510 [ 2749.031848][ T2847] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2749.031862][ T2847] ? unwind_next_frame+0x1c07/0x22b0 [ 2749.046260][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2749.049061][ T2847] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2749.049075][ T2847] generic_file_read_iter+0x626/0x20a0 [ 2749.054245][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2749.058553][ T2847] ? find_get_pages_range_tag+0xae0/0xae0 [ 2749.058568][ T2847] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2749.079471][ T2851] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2749.079501][ T2847] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2749.085657][ T2851] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2749.089855][ T2847] ? avc_denied+0x1c0/0x1c0 [ 2749.089869][ T2847] generic_file_splice_read+0x491/0x780 [ 2749.089882][ T2847] ? splice_shrink_spd+0xb0/0xb0 [ 2749.222375][ T2847] ? security_file_permission+0x1e9/0x300 [ 2749.228091][ T2847] ? splice_shrink_spd+0xb0/0xb0 [ 2749.233026][ T2847] splice_direct_to_actor+0x3cf/0xb00 [ 2749.238365][ T2847] ? do_splice_direct+0x3d0/0x3d0 [ 2749.243372][ T2847] ? pipe_to_sendpage+0x300/0x300 [ 2749.248364][ T2847] ? security_file_permission+0x128/0x300 [ 2749.254047][ T2847] do_splice_direct+0x279/0x3d0 [ 2749.258885][ T2847] ? splice_direct_to_actor+0xb00/0xb00 [ 2749.264415][ T2847] ? security_file_permission+0x128/0x300 [ 2749.270102][ T2847] do_sendfile+0x89d/0x1110 [ 2749.274572][ T2847] ? compat_writev+0x390/0x390 [ 2749.279301][ T2847] ? security_file_permission+0x128/0x300 [ 2749.284998][ T2847] ? vfs_write+0x427/0x4f0 [ 2749.289383][ T2847] ? fput_many+0x42/0x1a0 [ 2749.293683][ T2847] __x64_sys_sendfile64+0x1ae/0x220 [ 2749.298861][ T2847] ? __ia32_sys_sendfile+0x240/0x240 [ 2749.304113][ T2847] do_syscall_64+0xcb/0x150 [ 2749.308596][ T2847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2749.314456][ T2847] RIP: 0033:0x45de29 02:53:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc74", 0xdc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:20 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) waitid(0x2, r0, &(0x7f0000000000), 0x1000000, &(0x7f0000000100)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) epoll_create1(0x80000) 02:53:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x10) 02:53:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc74", 0xdc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2749.318315][ T2847] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2749.337883][ T2847] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2749.346267][ T2847] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2749.354216][ T2847] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2749.362155][ T2847] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.370106][ T2847] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000014 [ 2749.378053][ T2847] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd7b96", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2000) 02:53:20 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x2000000000000000, 0x0) 02:53:20 executing program 5 (fault-call:11 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2749.494332][ T2885] FAULT_INJECTION: forcing a failure. [ 2749.494332][ T2885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2749.507636][ T2885] CPU: 1 PID: 2885 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2749.517678][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2749.527714][ T2885] Call Trace: [ 2749.530992][ T2885] dump_stack+0x1b0/0x21e [ 2749.535312][ T2885] ? devkmsg_release+0x11c/0x11c [ 2749.540239][ T2885] ? show_regs_print_info+0x12/0x12 [ 2749.545431][ T2885] ? kasan_alloc_pages+0x4a/0x60 [ 2749.550373][ T2885] should_fail+0x6fb/0x860 [ 2749.554771][ T2885] ? setup_fault_attr+0x2b0/0x2b0 [ 2749.559778][ T2885] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2749.565137][ T2885] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2749.570649][ T2885] ? find_get_entry+0x5da/0x670 [ 2749.575489][ T2885] ? xa_load+0x323/0x340 [ 2749.579715][ T2885] __do_page_cache_readahead+0x244/0x510 [ 2749.585316][ T2885] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2749.591704][ T2885] ? unwind_next_frame+0x1c07/0x22b0 [ 2749.596962][ T2885] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2749.602659][ T2885] generic_file_read_iter+0x626/0x20a0 [ 2749.608101][ T2885] ? find_get_pages_range_tag+0xae0/0xae0 [ 2749.613788][ T2885] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2749.619125][ T2885] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2749.625170][ T2885] ? _raw_spin_lock+0xa1/0x170 [ 2749.629904][ T2885] generic_file_splice_read+0x491/0x780 [ 2749.635434][ T2885] ? splice_shrink_spd+0xb0/0xb0 [ 2749.640342][ T2885] ? security_file_permission+0x1e9/0x300 [ 2749.646026][ T2885] ? splice_shrink_spd+0xb0/0xb0 [ 2749.650940][ T2885] splice_direct_to_actor+0x3cf/0xb00 [ 2749.656291][ T2885] ? do_splice_direct+0x3d0/0x3d0 [ 2749.661281][ T2885] ? pipe_to_sendpage+0x300/0x300 [ 2749.666286][ T2885] ? security_file_permission+0x128/0x300 [ 2749.671973][ T2885] do_splice_direct+0x279/0x3d0 [ 2749.676790][ T2885] ? splice_direct_to_actor+0xb00/0xb00 [ 2749.682304][ T2885] ? security_file_permission+0x128/0x300 [ 2749.687999][ T2885] do_sendfile+0x89d/0x1110 [ 2749.692472][ T2885] ? compat_writev+0x390/0x390 [ 2749.697202][ T2885] ? security_file_permission+0x128/0x300 [ 2749.702886][ T2885] ? vfs_write+0x427/0x4f0 [ 2749.707267][ T2885] ? fput_many+0x42/0x1a0 [ 2749.711563][ T2885] __x64_sys_sendfile64+0x1ae/0x220 [ 2749.716729][ T2885] ? __ia32_sys_sendfile+0x240/0x240 [ 2749.721984][ T2885] do_syscall_64+0xcb/0x150 [ 2749.726455][ T2885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2749.732314][ T2885] RIP: 0033:0x45de29 [ 2749.736187][ T2885] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2749.755761][ T2885] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2749.764138][ T2885] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2749.772078][ T2885] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2749.780028][ T2885] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.787969][ T2885] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000015 [ 2749.795908][ T2885] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:23 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:53:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = dup(0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) memfd_create(&(0x7f00000002c0)='.\'\x00', 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) dup3(r1, r2, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000280)=r3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x3}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000e2dbdf257500000208000300", @ANYRES32=0x0, @ANYBLOB="1400f080050003009500000004000400040004000c00f08005000300050000000c00f08008000a00090000001c00f08008000a0000000000050001000200000005000f00d4000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x7422, 0x0) 02:53:23 executing program 5 (fault-call:11 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:23 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x200000) 02:53:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2752.086188][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2752.093269][ T2894] FAULT_INJECTION: forcing a failure. [ 2752.093269][ T2894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2752.106862][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2752.116093][ T2894] CPU: 1 PID: 2894 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2752.130053][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2752.137924][ T2894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.137928][ T2894] Call Trace: [ 2752.137945][ T2894] dump_stack+0x1b0/0x21e [ 2752.137954][ T2894] ? devkmsg_release+0x11c/0x11c [ 2752.137962][ T2894] ? show_regs_print_info+0x12/0x12 [ 2752.137970][ T2894] ? kasan_alloc_pages+0x4a/0x60 [ 2752.137986][ T2894] should_fail+0x6fb/0x860 [ 2752.156003][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2752.163906][ T2894] ? setup_fault_attr+0x2b0/0x2b0 [ 2752.163919][ T2894] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2752.163930][ T2894] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2752.163949][ T2894] ? find_get_entry+0x5da/0x670 02:53:23 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd7b96", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x800000) [ 2752.168978][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2752.171545][ T2894] ? xa_load+0x323/0x340 [ 2752.171555][ T2894] __do_page_cache_readahead+0x244/0x510 [ 2752.171566][ T2894] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2752.171580][ T2894] ? unwind_next_frame+0x1c07/0x22b0 [ 2752.178728][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2752.181931][ T2894] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2752.181941][ T2894] generic_file_read_iter+0x626/0x20a0 02:53:23 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x1000000) [ 2752.181955][ T2894] ? find_get_pages_range_tag+0xae0/0xae0 [ 2752.181974][ T2894] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2752.189041][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2752.191638][ T2894] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2752.191647][ T2894] ? avc_denied+0x1c0/0x1c0 [ 2752.191659][ T2894] generic_file_splice_read+0x491/0x780 [ 2752.191669][ T2894] ? splice_shrink_spd+0xb0/0xb0 02:53:23 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x10000000) [ 2752.191735][ T2894] ? security_file_permission+0x1e9/0x300 [ 2752.206032][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2752.209039][ T2894] ? splice_shrink_spd+0xb0/0xb0 [ 2752.209047][ T2894] splice_direct_to_actor+0x3cf/0xb00 [ 2752.209059][ T2894] ? do_splice_direct+0x3d0/0x3d0 [ 2752.220057][ T2906] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2752.224806][ T2894] ? pipe_to_sendpage+0x300/0x300 [ 2752.224818][ T2894] ? security_file_permission+0x128/0x300 [ 2752.224825][ T2894] do_splice_direct+0x279/0x3d0 [ 2752.224834][ T2894] ? splice_direct_to_actor+0xb00/0xb00 [ 2752.224849][ T2894] ? security_file_permission+0x128/0x300 [ 2752.242278][ T2906] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2752.244852][ T2894] do_sendfile+0x89d/0x1110 [ 2752.244868][ T2894] ? compat_writev+0x390/0x390 [ 2752.432336][ T2894] ? security_file_permission+0x128/0x300 [ 2752.438049][ T2894] ? vfs_write+0x427/0x4f0 [ 2752.442468][ T2894] ? fput_many+0x42/0x1a0 [ 2752.446862][ T2894] __x64_sys_sendfile64+0x1ae/0x220 [ 2752.452099][ T2894] ? __ia32_sys_sendfile+0x240/0x240 [ 2752.457424][ T2894] do_syscall_64+0xcb/0x150 [ 2752.461912][ T2894] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2752.467838][ T2894] RIP: 0033:0x45de29 [ 2752.471789][ T2894] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2752.491375][ T2894] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2752.499769][ T2894] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2752.507769][ T2894] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2752.515742][ T2894] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2752.523835][ T2894] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000016 02:53:23 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc74", 0xdc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:23 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd7b96", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0xfeffffff) 02:53:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x76) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x48000) ptrace$setopts(0x4206, r0, 0x208, 0x6) tkill(r0, 0x3c) ptrace$cont(0x9, 0x0, 0x0, 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$peek(0x1, r2, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x6) [ 2752.531868][ T2894] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x1f, r0, 0x0, 0x3) sched_getparam(0x0, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0xf83d, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x85200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8080) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x840c, r0, 0x0, 0x1) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 02:53:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:53:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0xa4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, r3, {0xd046}}, 0x18) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$peekuser(0x3, r4, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:26 executing program 5 (fault-call:11 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2755.222421][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2755.235568][ T2956] FAULT_INJECTION: forcing a failure. [ 2755.235568][ T2956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2755.240244][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2755.251809][ T2956] CPU: 0 PID: 2956 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2755.269030][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2755.274471][ T2956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2755.274474][ T2956] Call Trace: [ 2755.274491][ T2956] dump_stack+0x1b0/0x21e [ 2755.274501][ T2956] ? devkmsg_release+0x11c/0x11c [ 2755.274509][ T2956] ? show_regs_print_info+0x12/0x12 [ 2755.274523][ T2956] ? kasan_alloc_pages+0x4a/0x60 [ 2755.292361][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2755.300518][ T2956] should_fail+0x6fb/0x860 [ 2755.300529][ T2956] ? setup_fault_attr+0x2b0/0x2b0 [ 2755.300545][ T2956] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2755.305218][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2755.308142][ T2956] ? gfp_pfmemalloc_allowed+0x130/0x130 02:53:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2755.308152][ T2956] ? find_get_entry+0x5da/0x670 [ 2755.308164][ T2956] ? xa_load+0x323/0x340 [ 2755.315436][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2755.318282][ T2956] __do_page_cache_readahead+0x244/0x510 [ 2755.318294][ T2956] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2755.318308][ T2956] ? unwind_next_frame+0x1c07/0x22b0 02:53:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="b1c1d51252c309efe52339ae1133151bfb9b9041a118a1838319db7ab77b95ccdcc2d31cccaa2953f5b52e2e806c31e3bd1efe31b239859743c54e18", 0x3c, 0x80, &(0x7f0000000040)={0xa, 0x4e21, 0x80000001, @remote, 0x9}, 0x1c) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2755.325275][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2755.335743][ T2956] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2755.335754][ T2956] generic_file_read_iter+0x626/0x20a0 [ 2755.335768][ T2956] ? find_get_pages_range_tag+0xae0/0xae0 [ 2755.335777][ T2956] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2755.335786][ T2956] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2755.335799][ T2956] ? avc_denied+0x1c0/0x1c0 [ 2755.341973][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2755.345224][ T2956] generic_file_splice_read+0x491/0x780 [ 2755.345236][ T2956] ? splice_shrink_spd+0xb0/0xb0 [ 2755.345250][ T2956] ? security_file_permission+0x1e9/0x300 [ 2755.356470][ T2966] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2755.366332][ T2956] ? splice_shrink_spd+0xb0/0xb0 [ 2755.366341][ T2956] splice_direct_to_actor+0x3cf/0xb00 [ 2755.366351][ T2956] ? do_splice_direct+0x3d0/0x3d0 02:53:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8", 0xec}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2755.366357][ T2956] ? pipe_to_sendpage+0x300/0x300 [ 2755.366368][ T2956] ? security_file_permission+0x128/0x300 [ 2755.366380][ T2956] do_splice_direct+0x279/0x3d0 [ 2755.372268][ T2966] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2755.376762][ T2956] ? splice_direct_to_actor+0xb00/0xb00 [ 2755.376774][ T2956] ? security_file_permission+0x128/0x300 [ 2755.376786][ T2956] do_sendfile+0x89d/0x1110 [ 2755.564887][ T2956] ? compat_writev+0x390/0x390 02:53:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0xfffffffe) [ 2755.569744][ T2956] ? security_file_permission+0x128/0x300 [ 2755.575468][ T2956] ? vfs_write+0x427/0x4f0 [ 2755.580277][ T2956] ? fput_many+0x42/0x1a0 [ 2755.584617][ T2956] __x64_sys_sendfile64+0x1ae/0x220 [ 2755.589814][ T2956] ? __ia32_sys_sendfile+0x240/0x240 [ 2755.595167][ T2956] do_syscall_64+0xcb/0x150 [ 2755.599716][ T2956] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2755.605589][ T2956] RIP: 0033:0x45de29 02:53:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x200000000000) [ 2755.609467][ T2956] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2755.629311][ T2956] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2755.637871][ T2956] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2755.645842][ T2956] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2755.654209][ T2956] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2755.662165][ T2956] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000017 02:53:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd7b96", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x80000000000000) [ 2755.670117][ T2956] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:26 executing program 5 (fault-call:11 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x100000000000000) [ 2755.744658][ T3005] FAULT_INJECTION: forcing a failure. [ 2755.744658][ T3005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2755.758303][ T3005] CPU: 0 PID: 3005 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2755.768516][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2755.778694][ T3005] Call Trace: [ 2755.781989][ T3005] dump_stack+0x1b0/0x21e [ 2755.786375][ T3005] ? devkmsg_release+0x11c/0x11c [ 2755.791304][ T3005] ? show_regs_print_info+0x12/0x12 [ 2755.796497][ T3005] ? kasan_alloc_pages+0x4a/0x60 [ 2755.801430][ T3005] should_fail+0x6fb/0x860 [ 2755.805838][ T3005] ? setup_fault_attr+0x2b0/0x2b0 [ 2755.810929][ T3005] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2755.816296][ T3005] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2755.821833][ T3005] ? find_get_entry+0x5da/0x670 [ 2755.826680][ T3005] ? xa_load+0x323/0x340 [ 2755.830914][ T3005] __do_page_cache_readahead+0x244/0x510 [ 2755.836537][ T3005] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2755.842947][ T3005] ? unwind_next_frame+0x1c07/0x22b0 [ 2755.848225][ T3005] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2755.854027][ T3005] generic_file_read_iter+0x626/0x20a0 [ 2755.859599][ T3005] ? find_get_pages_range_tag+0xae0/0xae0 [ 2755.865376][ T3005] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2755.870800][ T3005] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2755.876861][ T3005] ? avc_denied+0x1c0/0x1c0 [ 2755.881363][ T3005] generic_file_splice_read+0x491/0x780 [ 2755.887052][ T3005] ? splice_shrink_spd+0xb0/0xb0 [ 2755.892143][ T3005] ? security_file_permission+0x1e9/0x300 [ 2755.897858][ T3005] ? splice_shrink_spd+0xb0/0xb0 [ 2755.902979][ T3005] splice_direct_to_actor+0x3cf/0xb00 [ 2755.908348][ T3005] ? do_splice_direct+0x3d0/0x3d0 [ 2755.913422][ T3005] ? pipe_to_sendpage+0x300/0x300 [ 2755.918442][ T3005] ? security_file_permission+0x128/0x300 [ 2755.924154][ T3005] do_splice_direct+0x279/0x3d0 [ 2755.929056][ T3005] ? splice_direct_to_actor+0xb00/0xb00 [ 2755.934774][ T3005] ? security_file_permission+0x128/0x300 [ 2755.940487][ T3005] do_sendfile+0x89d/0x1110 [ 2755.944982][ T3005] ? compat_writev+0x390/0x390 [ 2755.949735][ T3005] ? security_file_permission+0x128/0x300 [ 2755.955446][ T3005] ? vfs_write+0x427/0x4f0 [ 2755.959853][ T3005] ? fput_many+0x42/0x1a0 [ 2755.964171][ T3005] __x64_sys_sendfile64+0x1ae/0x220 [ 2755.969361][ T3005] ? __ia32_sys_sendfile+0x240/0x240 [ 2755.974643][ T3005] do_syscall_64+0xcb/0x150 [ 2755.979141][ T3005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2755.985090][ T3005] RIP: 0033:0x45de29 [ 2755.988981][ T3005] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2756.008714][ T3005] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2756.017118][ T3005] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2756.025225][ T3005] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2756.033333][ T3005] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.041370][ T3005] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000018 [ 2756.049427][ T3005] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:53:29 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x1000000000000000) 02:53:29 executing program 5 (fault-call:11 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2758.358618][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2758.374498][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2758.375312][ T3015] FAULT_INJECTION: forcing a failure. [ 2758.375312][ T3015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2758.388448][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2758.400670][ T3015] CPU: 1 PID: 3015 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2758.416969][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2758.426470][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.426474][ T3015] Call Trace: [ 2758.426490][ T3015] dump_stack+0x1b0/0x21e [ 2758.426499][ T3015] ? devkmsg_release+0x11c/0x11c [ 2758.426513][ T3015] ? show_regs_print_info+0x12/0x12 [ 2758.440600][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2758.449371][ T3015] ? kasan_alloc_pages+0x4a/0x60 [ 2758.449383][ T3015] should_fail+0x6fb/0x860 [ 2758.449398][ T3015] ? setup_fault_attr+0x2b0/0x2b0 [ 2758.453628][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2758.456999][ T3015] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2758.463205][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2758.467117][ T3015] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2758.483409][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2758.487920][ T3015] ? find_get_entry+0x5da/0x670 [ 2758.497357][ T3024] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2758.509849][ T3015] ? xa_load+0x323/0x340 [ 2758.509860][ T3015] __do_page_cache_readahead+0x244/0x510 [ 2758.509872][ T3015] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2758.509886][ T3015] ? unwind_next_frame+0x1c07/0x22b0 [ 2758.516585][ T3024] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2758.531043][ T3015] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2758.531053][ T3015] generic_file_read_iter+0x626/0x20a0 [ 2758.531072][ T3015] ? find_get_pages_range_tag+0xae0/0xae0 [ 2758.620817][ T3015] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2758.626263][ T3015] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2758.632463][ T3015] ? avc_denied+0x1c0/0x1c0 [ 2758.636964][ T3015] generic_file_splice_read+0x491/0x780 [ 2758.642548][ T3015] ? splice_shrink_spd+0xb0/0xb0 [ 2758.647471][ T3015] ? security_file_permission+0x1e9/0x300 [ 2758.653250][ T3015] ? splice_shrink_spd+0xb0/0xb0 [ 2758.658361][ T3015] splice_direct_to_actor+0x3cf/0xb00 [ 2758.663723][ T3015] ? do_splice_direct+0x3d0/0x3d0 [ 2758.668729][ T3015] ? pipe_to_sendpage+0x300/0x300 [ 2758.673785][ T3015] ? security_file_permission+0x128/0x300 [ 2758.679487][ T3015] do_splice_direct+0x279/0x3d0 [ 2758.684317][ T3015] ? splice_direct_to_actor+0xb00/0xb00 [ 2758.689848][ T3015] ? security_file_permission+0x128/0x300 [ 2758.695544][ T3015] do_sendfile+0x89d/0x1110 [ 2758.700029][ T3015] ? compat_writev+0x390/0x390 [ 2758.704774][ T3015] ? security_file_permission+0x128/0x300 [ 2758.710474][ T3015] ? vfs_write+0x427/0x4f0 [ 2758.715035][ T3015] ? fput_many+0x42/0x1a0 [ 2758.719486][ T3015] __x64_sys_sendfile64+0x1ae/0x220 [ 2758.724672][ T3015] ? __ia32_sys_sendfile+0x240/0x240 [ 2758.729939][ T3015] do_syscall_64+0xcb/0x150 [ 2758.734437][ T3015] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2758.740310][ T3015] RIP: 0033:0x45de29 [ 2758.744187][ T3015] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2758.763921][ T3015] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2758.772397][ T3015] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2758.780406][ T3015] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2758.788364][ T3015] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.796315][ T3015] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000019 02:53:29 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8", 0xec}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:29 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [], 0xa, &(0x7f0000000000)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) ptrace$cont(0x7, r1, 0x0, 0x0) wait4(r1, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:29 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0xfeffffff00000000) [ 2758.804322][ T3015] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:29 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) rt_sigaction(0x10, &(0x7f0000000180)={&(0x7f0000000100)="c48141e3c5c4e2f1bc60846746c3c4c17ff0a20b700000460ffbcff20fd6f6de2a650f7ee641c06c0fa556c4a255bd9707000000", 0x6, &(0x7f0000000140)="8f684097676f0664f2aff30f01af78e60000c4624d035a06c48111f5cac481b05679c7c4a16d5e1cfb3e362e66420f38044a7b6664f3a764dcef", {[0x80000000]}}, &(0x7f0000000240)={&(0x7f00000001c0)="410f01d60fdb2365660febfac48355021f7fc4c145fe9a0f000081c422cdde372ef01115000880410fbab6000000212bc482b93bedc4e2c905d0", 0x0, &(0x7f0000000200)="c44279130c47f0803100c4a27959dbf242a483a74de700004d670f2fd541df4543c44201934c16c3c4c1dd71d400e80b000000"}, 0x8, &(0x7f0000000280)) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ptrace$cont(0x18, r0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x4, 0x7, 0x5, 0x3, 0x3, 0x3, 0x25e, 0x38, 0x3ce, 0x670, 0x9, 0x20, 0x2, 0x0, 0xae1, 0x8}, [{0x7, 0x80000001, 0x5, 0xbc54, 0x9, 0x2, 0x7, 0x6}, {0x6, 0x200, 0x3, 0x3, 0x2, 0x0, 0xee5d, 0x1000}], "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", [[], [], [], [], [], []]}, 0x1678) 02:53:29 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd7b96", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0xffffffff00000000) 02:53:29 executing program 5 (fault-call:11 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:29 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) [ 2758.920852][ T3052] FAULT_INJECTION: forcing a failure. [ 2758.920852][ T3052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2758.934698][ T3052] CPU: 0 PID: 3052 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2758.944922][ T3052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.954979][ T3052] Call Trace: [ 2758.958280][ T3052] dump_stack+0x1b0/0x21e [ 2758.962623][ T3052] ? devkmsg_release+0x11c/0x11c [ 2758.967730][ T3052] ? show_regs_print_info+0x12/0x12 [ 2758.972995][ T3052] ? kasan_alloc_pages+0x4a/0x60 [ 2758.977931][ T3052] should_fail+0x6fb/0x860 [ 2758.982517][ T3052] ? setup_fault_attr+0x2b0/0x2b0 [ 2758.987534][ T3052] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2758.992968][ T3052] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2758.998512][ T3052] ? find_get_entry+0x5da/0x670 [ 2759.003357][ T3052] ? xa_load+0x323/0x340 [ 2759.007819][ T3052] __do_page_cache_readahead+0x244/0x510 [ 2759.013510][ T3052] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2759.019918][ T3052] ? unwind_next_frame+0x1c07/0x22b0 [ 2759.025352][ T3052] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2759.031211][ T3052] generic_file_read_iter+0x626/0x20a0 [ 2759.036668][ T3052] ? find_get_pages_range_tag+0xae0/0xae0 [ 2759.042573][ T3052] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2759.048025][ T3052] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2759.054089][ T3052] ? avc_denied+0x1c0/0x1c0 [ 2759.058586][ T3052] generic_file_splice_read+0x491/0x780 [ 2759.064130][ T3052] ? splice_shrink_spd+0xb0/0xb0 [ 2759.069155][ T3052] ? security_file_permission+0x1e9/0x300 [ 2759.074868][ T3052] ? splice_shrink_spd+0xb0/0xb0 [ 2759.079885][ T3052] splice_direct_to_actor+0x3cf/0xb00 [ 2759.085339][ T3052] ? do_splice_direct+0x3d0/0x3d0 [ 2759.090353][ T3052] ? pipe_to_sendpage+0x300/0x300 [ 2759.095373][ T3052] ? security_file_permission+0x128/0x300 [ 2759.101244][ T3052] do_splice_direct+0x279/0x3d0 [ 2759.106151][ T3052] ? splice_direct_to_actor+0xb00/0xb00 [ 2759.111787][ T3052] ? security_file_permission+0x128/0x300 [ 2759.117515][ T3052] do_sendfile+0x89d/0x1110 [ 2759.122011][ T3052] ? compat_writev+0x390/0x390 [ 2759.126765][ T3052] ? security_file_permission+0x128/0x300 [ 2759.132483][ T3052] ? vfs_write+0x427/0x4f0 [ 2759.136957][ T3052] ? fput_many+0x42/0x1a0 [ 2759.141281][ T3052] __x64_sys_sendfile64+0x1ae/0x220 [ 2759.146478][ T3052] ? __ia32_sys_sendfile+0x240/0x240 [ 2759.151907][ T3052] do_syscall_64+0xcb/0x150 [ 2759.156404][ T3052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2759.162376][ T3052] RIP: 0033:0x45de29 [ 2759.166272][ T3052] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2759.185869][ T3052] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2759.194545][ T3052] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2759.202737][ T3052] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2759.210785][ T3052] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 02:53:30 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/234, 0xea) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x133}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x1) tkill(r0, 0x3c) getpid() ptrace$cont(0x18, 0x0, 0x7f, 0x0) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2759.218753][ T3052] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001a [ 2759.226790][ T3052] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 02:53:32 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_getparam(r0, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:32 executing program 5 (fault-call:11 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:32 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="940000000c0901022abd7000fedbdf2502000006d16dbfc1233d02d0c4c54127dac3b271723b58ff38c8dfa6cf248f47983198ddb76971732f5482afd688031361226452544f46763778074f62d7d99eba10bd41ca236873e0b9b1594c03216647decf616a7c71c78ce228f4ea285d8e96b50f5ecd5524cf0f28579a99f5070afbbcb30afaf2c06fd1331ad397a7b8b8c84d53d0"], 0x94}}, 0x4081) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2761.500027][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2761.508884][ T3076] FAULT_INJECTION: forcing a failure. [ 2761.508884][ T3076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2761.523517][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2761.534571][ T3076] CPU: 0 PID: 3076 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2761.547009][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2761.556013][ T3076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.556016][ T3076] Call Trace: [ 2761.556032][ T3076] dump_stack+0x1b0/0x21e [ 2761.556041][ T3076] ? devkmsg_release+0x11c/0x11c [ 2761.556056][ T3076] ? show_regs_print_info+0x12/0x12 [ 2761.571914][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2761.581675][ T3076] ? kasan_alloc_pages+0x4a/0x60 [ 2761.581687][ T3076] should_fail+0x6fb/0x860 [ 2761.581701][ T3076] ? setup_fault_attr+0x2b0/0x2b0 [ 2761.585399][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2761.589262][ T3076] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2761.589276][ T3076] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2761.594964][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2761.599375][ T3076] ? find_get_entry+0x5da/0x670 [ 2761.599383][ T3076] ? xa_load+0x323/0x340 [ 2761.599397][ T3076] __do_page_cache_readahead+0x244/0x510 [ 2761.612661][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2761.616606][ T3076] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2761.616617][ T3076] ? unwind_next_frame+0x1c07/0x22b0 [ 2761.616629][ T3076] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2761.621062][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2761.626010][ T3076] generic_file_read_iter+0x626/0x20a0 [ 2761.626024][ T3076] ? find_get_pages_range_tag+0xae0/0xae0 [ 2761.626039][ T3076] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2761.646535][ T3083] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2761.646986][ T3076] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2761.647000][ T3076] ? avc_denied+0x1c0/0x1c0 [ 2761.652722][ T3083] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2761.664807][ T3076] generic_file_splice_read+0x491/0x780 [ 2761.664818][ T3076] ? splice_shrink_spd+0xb0/0xb0 [ 2761.664834][ T3076] ? security_file_permission+0x1e9/0x300 [ 2761.795551][ T3076] ? splice_shrink_spd+0xb0/0xb0 [ 2761.800456][ T3076] splice_direct_to_actor+0x3cf/0xb00 [ 2761.805799][ T3076] ? do_splice_direct+0x3d0/0x3d0 [ 2761.810805][ T3076] ? pipe_to_sendpage+0x300/0x300 [ 2761.815796][ T3076] ? security_file_permission+0x128/0x300 [ 2761.821501][ T3076] do_splice_direct+0x279/0x3d0 [ 2761.826367][ T3076] ? splice_direct_to_actor+0xb00/0xb00 [ 2761.831908][ T3076] ? security_file_permission+0x128/0x300 [ 2761.837593][ T3076] do_sendfile+0x89d/0x1110 [ 2761.842063][ T3076] ? compat_writev+0x390/0x390 [ 2761.846820][ T3076] ? security_file_permission+0x128/0x300 [ 2761.852505][ T3076] ? vfs_write+0x427/0x4f0 [ 2761.856899][ T3076] ? fput_many+0x42/0x1a0 [ 2761.861195][ T3076] __x64_sys_sendfile64+0x1ae/0x220 [ 2761.866357][ T3076] ? __ia32_sys_sendfile+0x240/0x240 [ 2761.871608][ T3076] do_syscall_64+0xcb/0x150 [ 2761.876077][ T3076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2761.881983][ T3076] RIP: 0033:0x45de29 [ 2761.885848][ T3076] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:53:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:33 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000000)=0xfc, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 02:53:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x8002800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x41}, 0xf) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:33 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8", 0xec}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2761.905419][ T3076] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2761.913808][ T3076] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2761.921785][ T3076] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2761.929726][ T3076] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.937663][ T3076] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001b [ 2761.945615][ T3076] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:33 executing program 5 (fault-call:11 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2762.036718][ T3105] FAULT_INJECTION: forcing a failure. [ 2762.036718][ T3105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2762.050050][ T3105] CPU: 0 PID: 3105 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2762.060083][ T3105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.070123][ T3105] Call Trace: [ 2762.073406][ T3105] dump_stack+0x1b0/0x21e [ 2762.077723][ T3105] ? devkmsg_release+0x11c/0x11c [ 2762.082647][ T3105] ? show_regs_print_info+0x12/0x12 [ 2762.087825][ T3105] ? kasan_alloc_pages+0x4a/0x60 [ 2762.092742][ T3105] should_fail+0x6fb/0x860 [ 2762.097136][ T3105] ? setup_fault_attr+0x2b0/0x2b0 [ 2762.102139][ T3105] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2762.107488][ T3105] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2762.113014][ T3105] ? find_get_entry+0x5da/0x670 [ 2762.117839][ T3105] ? xa_load+0x323/0x340 [ 2762.122058][ T3105] __do_page_cache_readahead+0x244/0x510 [ 2762.127686][ T3105] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2762.134077][ T3105] ? unwind_next_frame+0x1c07/0x22b0 [ 2762.139337][ T3105] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2762.145034][ T3105] generic_file_read_iter+0x626/0x20a0 [ 2762.150473][ T3105] ? find_get_pages_range_tag+0xae0/0xae0 [ 2762.156170][ T3105] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2762.161518][ T3105] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2762.167557][ T3105] ? avc_denied+0x1c0/0x1c0 [ 2762.172041][ T3105] generic_file_splice_read+0x491/0x780 [ 2762.177576][ T3105] ? splice_shrink_spd+0xb0/0xb0 [ 2762.182509][ T3105] ? security_file_permission+0x1e9/0x300 [ 2762.188205][ T3105] ? splice_shrink_spd+0xb0/0xb0 [ 2762.193119][ T3105] splice_direct_to_actor+0x3cf/0xb00 [ 2762.198466][ T3105] ? do_splice_direct+0x3d0/0x3d0 [ 2762.203463][ T3105] ? pipe_to_sendpage+0x300/0x300 [ 2762.208466][ T3105] ? security_file_permission+0x128/0x300 [ 2762.214163][ T3105] do_splice_direct+0x279/0x3d0 [ 2762.218995][ T3105] ? splice_direct_to_actor+0xb00/0xb00 [ 2762.224550][ T3105] ? security_file_permission+0x128/0x300 [ 2762.230242][ T3105] do_sendfile+0x89d/0x1110 [ 2762.234724][ T3105] ? compat_writev+0x390/0x390 [ 2762.239480][ T3105] ? security_file_permission+0x128/0x300 [ 2762.245187][ T3105] ? vfs_write+0x427/0x4f0 [ 2762.249577][ T3105] ? fput_many+0x42/0x1a0 [ 2762.253887][ T3105] __x64_sys_sendfile64+0x1ae/0x220 [ 2762.259063][ T3105] ? __ia32_sys_sendfile+0x240/0x240 [ 2762.264339][ T3105] do_syscall_64+0xcb/0x150 [ 2762.268822][ T3105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2762.274689][ T3105] RIP: 0033:0x45de29 [ 2762.278560][ T3105] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2762.298140][ T3105] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2762.306525][ T3105] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2762.314470][ T3105] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2762.322417][ T3105] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.330363][ T3105] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001c 02:53:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$evdev(&(0x7f0000000680)='/dev/input/event#\x00', 0x0, 0x100) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000007c0)={0x60000000}) ptrace$cont(0x7, r1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="000000dc001480be002500ccda5c8c106fadb1797a8ae570c4f2186fac7c270f729fe2fc1db074832104ff3830d96a55cded671b067e70806691358a90ce36c23ca682cc78ad99b28d5aa2f0bce781daf56f22012d4cc91704e541d40c571b24090994e450e5c035d047e26ed5598f60f2287b21886c919f1352ea0fa70633ebeafa22f57b73404445e0b60153b6d6cc8ff9aec05a17b553a10bd0b955214eb9b92a87754a3e84ed7a4ab0fd8a59b6d788f67d9e4a0639bb4044ea53537f1516c9e37667db00003d43b9303fcf71c2dd83029a9c2889664ed90631a61722fd73010380070055005b2f0000063e5fdfce827c1c19c34724a9ac51c0b5704435a6ce74ae21ca8ba24ce255b430bc064c5c2364e571558501d23d4f8e5a2e334a3004b93a36934c91793cd3e7803b307bd8e39c92cf711679bdb1db9bca2b45b7f0396bdaba6ad4fc242d30786b5c9dcfe25ea367b1ae479af376b3141547b44f90b557b19601ac98cfd6fcae39132878516c624de43e5c97ef252cfa799fff315215c3f53d1400809038249029679ec5b2e64c2c696c4c4d6aff9204b1c5428c9192eaa03c12004204444a2135225e045dc701ed9bc38d0c53a3676d877fa72adc84aed4ffabf61d1ae97e6b1fe943b85b19495f23bd3049c0ff4625601c88f083ec0700ccaf04811412bc4f87125c9047f8826b03f2c09397c75a54da109fa34d7adba906cb6c4869f0151285e4943c4525f70b4a94cc5a5b4f3b941d9c4f61b2182a3da5b39c40aa2f1cb44248bc6614d01958c85b7d35f35de208003e00ac1414bb08001500ac1e010108004500000000000000"], 0x548}, 0x1, 0x0, 0x0, 0x40}, 0x8000) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x125042, 0x116) recvfrom$unix(r3, &(0x7f0000000140)=""/220, 0xdc, 0x82, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 02:53:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x3f) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000080)=""/38, &(0x7f0000000100)=0x26) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x101, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2762.338324][ T3105] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:33 executing program 5 (fault-call:11 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2762.440442][ T3119] FAULT_INJECTION: forcing a failure. [ 2762.440442][ T3119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2762.453890][ T3119] CPU: 0 PID: 3119 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2762.463953][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.474012][ T3119] Call Trace: [ 2762.477277][ T3119] dump_stack+0x1b0/0x21e [ 2762.481574][ T3119] ? devkmsg_release+0x11c/0x11c [ 2762.486490][ T3119] ? show_regs_print_info+0x12/0x12 [ 2762.491667][ T3119] ? kasan_alloc_pages+0x4a/0x60 [ 2762.496614][ T3119] should_fail+0x6fb/0x860 [ 2762.501008][ T3119] ? setup_fault_attr+0x2b0/0x2b0 [ 2762.506013][ T3119] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2762.511362][ T3119] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2762.516885][ T3119] ? find_get_entry+0x5da/0x670 [ 2762.521712][ T3119] ? xa_load+0x323/0x340 [ 2762.525930][ T3119] __do_page_cache_readahead+0x244/0x510 [ 2762.531539][ T3119] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2762.537929][ T3119] ? unwind_next_frame+0x1c07/0x22b0 [ 2762.543189][ T3119] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2762.548883][ T3119] generic_file_read_iter+0x626/0x20a0 [ 2762.554324][ T3119] ? find_get_pages_range_tag+0xae0/0xae0 [ 2762.560019][ T3119] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2762.565367][ T3119] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2762.571409][ T3119] ? avc_denied+0x1c0/0x1c0 [ 2762.575893][ T3119] generic_file_splice_read+0x491/0x780 [ 2762.581416][ T3119] ? splice_shrink_spd+0xb0/0xb0 [ 2762.586335][ T3119] ? security_file_permission+0x1e9/0x300 [ 2762.592028][ T3119] ? splice_shrink_spd+0xb0/0xb0 [ 2762.596940][ T3119] splice_direct_to_actor+0x3cf/0xb00 [ 2762.604718][ T3119] ? do_splice_direct+0x3d0/0x3d0 [ 2762.609719][ T3119] ? pipe_to_sendpage+0x300/0x300 [ 2762.614726][ T3119] ? security_file_permission+0x128/0x300 [ 2762.620419][ T3119] do_splice_direct+0x279/0x3d0 [ 2762.625246][ T3119] ? splice_direct_to_actor+0xb00/0xb00 [ 2762.630771][ T3119] ? security_file_permission+0x128/0x300 [ 2762.636466][ T3119] do_sendfile+0x89d/0x1110 [ 2762.640965][ T3119] ? compat_writev+0x390/0x390 [ 2762.645721][ T3119] ? security_file_permission+0x128/0x300 [ 2762.651417][ T3119] ? vfs_write+0x427/0x4f0 [ 2762.655808][ T3119] ? fput_many+0x42/0x1a0 [ 2762.660112][ T3119] __x64_sys_sendfile64+0x1ae/0x220 [ 2762.665289][ T3119] ? __ia32_sys_sendfile+0x240/0x240 [ 2762.670550][ T3119] do_syscall_64+0xcb/0x150 [ 2762.675032][ T3119] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2762.680898][ T3119] RIP: 0033:0x45de29 [ 2762.684782][ T3119] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2762.704362][ T3119] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2762.712746][ T3119] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2762.720702][ T3119] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2762.728648][ T3119] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.736593][ T3119] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001d [ 2762.745495][ T3119] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:35 executing program 5 (fault-call:11 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:35 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:35 executing program 2 (fault-call:8 fault-nth:0): clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2764.647047][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.658228][ T3123] FAULT_INJECTION: forcing a failure. [ 2764.658228][ T3123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2764.665628][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.676802][ T3123] CPU: 0 PID: 3123 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2764.689615][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.698266][ T3123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.698270][ T3123] Call Trace: [ 2764.698289][ T3123] dump_stack+0x1b0/0x21e [ 2764.698298][ T3123] ? devkmsg_release+0x11c/0x11c [ 2764.698307][ T3123] ? show_regs_print_info+0x12/0x12 [ 2764.698322][ T3123] ? kasan_alloc_pages+0x4a/0x60 [ 2764.714252][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.724034][ T3123] should_fail+0x6fb/0x860 [ 2764.724045][ T3123] ? setup_fault_attr+0x2b0/0x2b0 [ 2764.724062][ T3123] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2764.728039][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.731620][ T3123] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2764.731631][ T3123] ? find_get_entry+0x5da/0x670 [ 2764.731644][ T3123] ? xa_load+0x323/0x340 [ 2764.737346][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.741720][ T3123] __do_page_cache_readahead+0x244/0x510 [ 2764.741732][ T3123] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2764.741746][ T3123] ? unwind_next_frame+0x1c07/0x22b0 [ 2764.747702][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.758946][ T3123] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2764.758956][ T3123] generic_file_read_iter+0x626/0x20a0 [ 2764.758981][ T3123] ? find_get_pages_range_tag+0xae0/0xae0 [ 2764.763539][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.768372][ T3123] ? avc_has_perm_noaudit+0x2fc/0x3f0 02:53:35 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2764.778234][ T3129] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.789293][ T3123] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2764.789303][ T3123] ? avc_denied+0x1c0/0x1c0 [ 2764.789320][ T3123] generic_file_splice_read+0x491/0x780 [ 2764.795056][ T3129] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.799660][ T3123] ? splice_shrink_spd+0xb0/0xb0 [ 2764.799675][ T3123] ? security_file_permission+0x1e9/0x300 [ 2764.805028][ T3131] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.816171][ T3123] ? splice_shrink_spd+0xb0/0xb0 [ 2764.816180][ T3123] splice_direct_to_actor+0x3cf/0xb00 [ 2764.816195][ T3123] ? do_splice_direct+0x3d0/0x3d0 [ 2764.822040][ T3131] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.828191][ T3123] ? pipe_to_sendpage+0x300/0x300 [ 2764.828202][ T3123] ? security_file_permission+0x128/0x300 [ 2764.828214][ T3123] do_splice_direct+0x279/0x3d0 02:53:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:36 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2764.838652][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.849054][ T3123] ? splice_direct_to_actor+0xb00/0xb00 [ 2764.849066][ T3123] ? security_file_permission+0x128/0x300 [ 2764.849079][ T3123] do_sendfile+0x89d/0x1110 [ 2764.855232][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.860203][ T3123] ? compat_writev+0x390/0x390 02:53:36 executing program 5 (fault-call:11 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2764.860216][ T3123] ? security_file_permission+0x128/0x300 [ 2764.866441][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.878194][ T3123] ? vfs_write+0x427/0x4f0 [ 2764.878203][ T3123] ? fput_many+0x42/0x1a0 [ 2764.878212][ T3123] __x64_sys_sendfile64+0x1ae/0x220 [ 2764.878228][ T3123] ? __ia32_sys_sendfile+0x240/0x240 [ 2764.883798][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.899170][ T3123] do_syscall_64+0xcb/0x150 [ 2764.899181][ T3123] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2764.899194][ T3123] RIP: 0033:0x45de29 [ 2764.905944][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2764.909702][ T3123] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2764.909712][ T3123] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2764.915494][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2764.927521][ T3123] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2764.927526][ T3123] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2764.927531][ T3123] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.927536][ T3123] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001e [ 2764.927541][ T3123] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c [ 2765.067679][ T3140] FAULT_INJECTION: forcing a failure. [ 2765.067679][ T3140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2765.071882][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2765.075636][ T3140] CPU: 0 PID: 3140 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2765.080688][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2765.085906][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2765.085908][ T3140] Call Trace: [ 2765.085924][ T3140] dump_stack+0x1b0/0x21e [ 2765.085934][ T3140] ? devkmsg_release+0x11c/0x11c [ 2765.085942][ T3140] ? show_regs_print_info+0x12/0x12 [ 2765.085956][ T3140] ? kasan_alloc_pages+0x4a/0x60 [ 2765.291541][ T3140] should_fail+0x6fb/0x860 [ 2765.295926][ T3140] ? setup_fault_attr+0x2b0/0x2b0 [ 2765.300918][ T3140] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2765.306259][ T3140] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2765.311784][ T3140] ? find_get_entry+0x5da/0x670 [ 2765.316599][ T3140] ? xa_load+0x323/0x340 [ 2765.320823][ T3140] __do_page_cache_readahead+0x244/0x510 [ 2765.326423][ T3140] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2765.332817][ T3140] ? unwind_next_frame+0x1c07/0x22b0 [ 2765.338072][ T3140] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2765.343765][ T3140] generic_file_read_iter+0x626/0x20a0 [ 2765.349190][ T3140] ? find_get_pages_range_tag+0xae0/0xae0 [ 2765.354887][ T3140] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2765.360238][ T3140] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2765.366268][ T3140] ? avc_denied+0x1c0/0x1c0 [ 2765.370740][ T3140] generic_file_splice_read+0x491/0x780 [ 2765.376269][ T3140] ? splice_shrink_spd+0xb0/0xb0 [ 2765.381175][ T3140] ? security_file_permission+0x1e9/0x300 [ 2765.386873][ T3140] ? splice_shrink_spd+0xb0/0xb0 [ 2765.391775][ T3140] splice_direct_to_actor+0x3cf/0xb00 [ 2765.397111][ T3140] ? do_splice_direct+0x3d0/0x3d0 [ 2765.402099][ T3140] ? pipe_to_sendpage+0x300/0x300 [ 2765.407089][ T3140] ? security_file_permission+0x128/0x300 [ 2765.412770][ T3140] do_splice_direct+0x279/0x3d0 [ 2765.417589][ T3140] ? splice_direct_to_actor+0xb00/0xb00 [ 2765.423100][ T3140] ? security_file_permission+0x128/0x300 [ 2765.428785][ T3140] do_sendfile+0x89d/0x1110 [ 2765.433322][ T3140] ? compat_writev+0x390/0x390 [ 2765.438057][ T3140] ? security_file_permission+0x128/0x300 [ 2765.443743][ T3140] ? vfs_write+0x427/0x4f0 [ 2765.448138][ T3140] ? fput_many+0x42/0x1a0 [ 2765.452450][ T3140] __x64_sys_sendfile64+0x1ae/0x220 [ 2765.457653][ T3140] ? __ia32_sys_sendfile+0x240/0x240 [ 2765.462945][ T3140] do_syscall_64+0xcb/0x150 [ 2765.467417][ T3140] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2765.473274][ T3140] RIP: 0033:0x45de29 [ 2765.477161][ T3140] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:53:36 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) [ 2765.496732][ T3140] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2765.505109][ T3140] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2765.513083][ T3140] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2765.521021][ T3140] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.528959][ T3140] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001f [ 2765.536898][ T3140] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:36 executing program 5 (fault-call:11 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:36 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2765.621262][ T3152] FAULT_INJECTION: forcing a failure. [ 2765.621262][ T3152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2765.634667][ T3152] CPU: 0 PID: 3152 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2765.644713][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2765.654742][ T3152] Call Trace: [ 2765.658025][ T3152] dump_stack+0x1b0/0x21e [ 2765.662347][ T3152] ? devkmsg_release+0x11c/0x11c [ 2765.667275][ T3152] ? show_regs_print_info+0x12/0x12 [ 2765.672471][ T3152] ? kasan_alloc_pages+0x4a/0x60 [ 2765.677391][ T3152] should_fail+0x6fb/0x860 [ 2765.681787][ T3152] ? setup_fault_attr+0x2b0/0x2b0 [ 2765.686789][ T3152] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2765.692141][ T3152] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2765.697662][ T3152] ? find_get_entry+0x5da/0x670 [ 2765.702490][ T3152] ? xa_load+0x323/0x340 [ 2765.706709][ T3152] __do_page_cache_readahead+0x244/0x510 [ 2765.712318][ T3152] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2765.718726][ T3152] ? unwind_next_frame+0x1c07/0x22b0 [ 2765.723989][ T3152] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2765.729699][ T3152] generic_file_read_iter+0x626/0x20a0 [ 2765.735154][ T3152] ? find_get_pages_range_tag+0xae0/0xae0 [ 2765.740851][ T3152] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2765.746202][ T3152] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2765.752257][ T3152] ? avc_denied+0x1c0/0x1c0 [ 2765.756746][ T3152] generic_file_splice_read+0x491/0x780 [ 2765.762279][ T3152] ? splice_shrink_spd+0xb0/0xb0 [ 2765.767222][ T3152] ? security_file_permission+0x1e9/0x300 [ 2765.772933][ T3152] ? splice_shrink_spd+0xb0/0xb0 [ 2765.777846][ T3152] splice_direct_to_actor+0x3cf/0xb00 [ 2765.783197][ T3152] ? do_splice_direct+0x3d0/0x3d0 [ 2765.788208][ T3152] ? pipe_to_sendpage+0x300/0x300 [ 2765.793235][ T3152] ? security_file_permission+0x128/0x300 [ 2765.798930][ T3152] do_splice_direct+0x279/0x3d0 [ 2765.803758][ T3152] ? splice_direct_to_actor+0xb00/0xb00 [ 2765.809282][ T3152] ? security_file_permission+0x128/0x300 [ 2765.814977][ T3152] do_sendfile+0x89d/0x1110 [ 2765.819465][ T3152] ? compat_writev+0x390/0x390 [ 2765.824204][ T3152] ? security_file_permission+0x128/0x300 [ 2765.829910][ T3152] ? vfs_write+0x427/0x4f0 [ 2765.834302][ T3152] ? fput_many+0x42/0x1a0 [ 2765.838612][ T3152] __x64_sys_sendfile64+0x1ae/0x220 [ 2765.843787][ T3152] ? __ia32_sys_sendfile+0x240/0x240 [ 2765.849059][ T3152] do_syscall_64+0xcb/0x150 [ 2765.853547][ T3152] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2765.859413][ T3152] RIP: 0033:0x45de29 [ 2765.863285][ T3152] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2765.882868][ T3152] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2765.891265][ T3152] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2765.899217][ T3152] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2765.907165][ T3152] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 02:53:36 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)={0x0, 0x0, "f14b4affc2bc7f928c8349b0e003c3673518f1056f5092107dcc1d43f27b410e1aafd7dcc02d68ad122af46fa0e2e9bbbecfe7c214bad678ddb248e249156919d7ac3e89cf53632a5a94734cfb8eb5adebded834ae82535eccc23a687623477419abb28c239ca7c10e2b2d0c25a1e995cf69109157f527a5c192f3da1c1e2bbedb7f9d1896ea8c3f6e9f5064925772821aa9ebb9b22dabf083be289fd162e25d0f541472fce41896686605ebb1e0deca7fad3b8fe626f93d6596adab6b9d8cd3d64c373035b1d93194bc52db340a707616f4c4614a01ec0c047c97804f5d"}, 0xe6, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x1000, 0x5d}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'rmd128\x00'}}, &(0x7f00000007c0)="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", &(0x7f0000000280)=""/93) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x900, 0x0) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x4, @local, 0x80}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000440)="50d8c43f20c360e933d44f70b4b572ab66088d5ea1e8d5e43bec9d8a9fc142f583aaa136a46a5959f697d9023625ee48d81e9e4085e80cf950c1a93b986e8200c888c7a256e1997c6af68b729880ba259f0d0e7d418d5e23db0025630e229b64d061935ed8f834862068bd69baf0a65a4cc740704e53df74968f834e30c003e89b79409b23ed0802958357bd4de3874d90e3944295f331b09f82dc1261ba2860b67312", 0xa3}, {&(0x7f0000000500)="7bc0954d90ca030a721fa2d5085a753a5fc16f0ad3876c18d5a3b81e010af4aaccfc22f84ef1b85bdc76de84d9ef70e5dbc6b88558619925278a", 0x3a}, {&(0x7f0000000540)="49f8ff0547118c5197613ba79d026670aa84", 0x12}, {&(0x7f0000000580)="7508ef541019ca9722608fdd0e4382e7850f6de753c0f83a1a87d95c471ef8f837d881ba58609ac87a724048f184eb7b7b7261765ef7343d5be868486af6887c20cd1ff9dcf9c09828c280eb3f7c109518f8914f834c5a5112a822af293289bc92a2dee1a3357bc62a53b6e3ed6017a863c59d98c765ac9c2de2d6049a7023149d14b819688fba6d77184d0e6f9ee4ec748011a19bcb25bc10948d9e327ce2895dc3f80486f5747fd2d17be6", 0xac}], 0x4}}], 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)=' hash=', 0x0, r2) [ 2765.915116][ T3152] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000020 [ 2765.923077][ T3152] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:37 executing program 5 (fault-call:11 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:37 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250600000008000200070000004c000180080006000400000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fe80000000bf3d6afa823226e2000038060005004e21000014000400fe8000000000000000000000000000aa060001000a000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000240)="4e10c63ab64a5c1060bc4bfe2b55c9a3d300b7efff7768744912d7125a3a913c159aaa4568071fc3b726c6bd47456e8d7cedccfe410e9e32ea43a3dda1c1a4219b1884ab7b34e309a93acc32e59f4ea6bd9252446d4e8dd61aae95d526aecc86d8d3b1ae218777b60a3b8d9edd75acc2d0087bdb9bf5c1e835bfe3fca74ab3ead1bcfe82b2574f381e2855daafe3cbceff13") ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000100)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) socketpair(0xe, 0x800, 0x1, &(0x7f0000000040)) ptrace$cont(0x18, r2, 0x0, 0x0) [ 2766.015119][ T3167] FAULT_INJECTION: forcing a failure. [ 2766.015119][ T3167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2766.028616][ T3167] CPU: 0 PID: 3167 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2766.038661][ T3167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.048697][ T3167] Call Trace: [ 2766.051966][ T3167] dump_stack+0x1b0/0x21e [ 2766.056264][ T3167] ? devkmsg_release+0x11c/0x11c [ 2766.061172][ T3167] ? show_regs_print_info+0x12/0x12 [ 2766.066335][ T3167] ? kasan_alloc_pages+0x4a/0x60 [ 2766.071247][ T3167] should_fail+0x6fb/0x860 [ 2766.075645][ T3167] ? setup_fault_attr+0x2b0/0x2b0 [ 2766.080651][ T3167] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2766.086004][ T3167] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2766.091531][ T3167] ? find_get_entry+0x5da/0x670 [ 2766.096359][ T3167] ? xa_load+0x323/0x340 [ 2766.100589][ T3167] __do_page_cache_readahead+0x244/0x510 [ 2766.106210][ T3167] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2766.112612][ T3167] ? unwind_next_frame+0x1c07/0x22b0 [ 2766.117882][ T3167] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2766.123590][ T3167] generic_file_read_iter+0x626/0x20a0 [ 2766.129036][ T3167] ? find_get_pages_range_tag+0xae0/0xae0 [ 2766.134725][ T3167] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2766.140065][ T3167] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.146116][ T3167] ? avc_denied+0x1c0/0x1c0 [ 2766.150592][ T3167] generic_file_splice_read+0x491/0x780 [ 2766.156128][ T3167] ? splice_shrink_spd+0xb0/0xb0 [ 2766.161049][ T3167] ? security_file_permission+0x1e9/0x300 [ 2766.166751][ T3167] ? splice_shrink_spd+0xb0/0xb0 [ 2766.171655][ T3167] splice_direct_to_actor+0x3cf/0xb00 [ 2766.176995][ T3167] ? do_splice_direct+0x3d0/0x3d0 [ 2766.181988][ T3167] ? pipe_to_sendpage+0x300/0x300 [ 2766.186991][ T3167] ? security_file_permission+0x128/0x300 [ 2766.192676][ T3167] do_splice_direct+0x279/0x3d0 [ 2766.197496][ T3167] ? splice_direct_to_actor+0xb00/0xb00 [ 2766.203012][ T3167] ? security_file_permission+0x128/0x300 [ 2766.208713][ T3167] do_sendfile+0x89d/0x1110 [ 2766.213187][ T3167] ? compat_writev+0x390/0x390 [ 2766.217917][ T3167] ? security_file_permission+0x128/0x300 [ 2766.223601][ T3167] ? vfs_write+0x427/0x4f0 [ 2766.227984][ T3167] ? fput_many+0x42/0x1a0 [ 2766.232282][ T3167] __x64_sys_sendfile64+0x1ae/0x220 [ 2766.237446][ T3167] ? __ia32_sys_sendfile+0x240/0x240 [ 2766.242715][ T3167] do_syscall_64+0xcb/0x150 [ 2766.247200][ T3167] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.253058][ T3167] RIP: 0033:0x45de29 [ 2766.256935][ T3167] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2766.276521][ T3167] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2766.284905][ T3167] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2766.292874][ T3167] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2766.300816][ T3167] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.308757][ T3167] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000021 [ 2766.316696][ T3167] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:38 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001d80)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000001e80)=0xe8) pipe2$9p(&(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000001f40)='/dev/rtc#\x00', 0x7, 0x10800) r5 = syz_open_dev$evdev(&(0x7f0000001f80)='/dev/input/event#\x00', 0x4, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000100)={0x1ec, 0x1f, 0x210, 0x70bd2a, 0x25dfdbff, "", [@generic="7469798e4dce5ae628167c7d5934aa6b04c6bc76ae18da30184d9c604cc48e3ac2d6e7d6b90abf08c274f420048ee760e989c846d6c3cd30175ec7ac8fa1a36736d6c004de7a9782fede54426037c61a013672140f8f7f88ae0a67007585d85ea8958f711910c5bcafe8f5e4e75677947149093d7f7f014d85c45910", @typed={0x87, 0x35, 0x0, 0x0, @binary="43f407e1871dbdd800acdae54c01b543a8cd03159896e010d8c03dc3fa3c7fdba1e40419ee822ba0c2aa9fa5841caa2a75655b04910749ea481a0e811b5f53b08f47b34bb2e1aa12af2db1f00cc1a533a3c7242aff6a69a76c39910c1542a27efcbcb1108d4099ae77608211bd647b6320f07746c78d85bb2514c760e2a5b2d8fc8272"}, @typed={0x8, 0x4a, 0x0, 0x0, @fd}, @generic="51baca7ce1a7c1394e5260760d6e701b0dcb30e3058f97a55d349dc712137eefd0152bb2ba785b62f9bf24959df117afe6f584497c335cd8e900b5d349c4d8f8f354d04b9409c184ae782e5789680c6b9da29a86025442be9dcc73ef8273d851", @generic="cb40f724e104a4e0", @nested={0x5f, 0x35, 0x0, 0x1, [@generic="103126684d42082a6189b16435a558ead65f536b724f672448f857d2f5bcaf6c653d9a90e898e3a51017a2cc9decfe56151ad0dba0791f0223711f6ffbe18427b9f85c57550aa8a078dd62ddf43fcb195ff4562d87e48714e3f3a1"]}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x1ec}, {&(0x7f0000002340)=ANY=[@ANYBLOB="a4020000012cbd7000fddbdf25f9632272fb121c7166e1a7aa83698507f5a2519dddd7d574f4bebd2c34fe06b176f2b6b6f317b44ab826b0ca2055d99e527c31a9c9d2ad5543b2d70800370082bc09092514b4625656b37e82efd7c935708ed284c07e000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08003400ff0300000297f6bccf8b0b420c20f114ac5c03223f048b28c55dafa297fd2970e6a10edb19e5a36989385a3893639d66bacc989dc2fb3a7d4a8a2f4c81bbbc3baa6580615aad4ccb35f0c6b2420e9f7216b1b9c2965f8200704e0f66c4a4a257f02dce2da4498cfba2090458484b3812963f0c23b102685231e4f630e2881f860b12ce4e3f67420cc9e865642708be9b5259198ed061b90908004a00000000000000"], 0x2a4}, {&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x78}, {&(0x7f00000007c0)={0x158c, 0x41, 0x108, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x3d}, @generic="bc9404da5e1668bf9b75bd0a71e8fc1e2d0ee83b95a201706b3a9ee5eb743ad61017840a429ac9ffff77ca2afe2dc65d5d876bb6d8652069a3d830eb99df1a51264224bd4e722f3b752651425e08641500ffab09d35165f58d27ca69ff60f91d66fd13f69a5c19f33b1c3dc4779392df95446a2ed9dbb513d54e0f4ebb2320263c93a282fb738513e825492e33901a9d986f9d81f9d277a4562463114fe6d0935d8edd39ed808c5446f8b662efc1740a382d3c3f429853dae0423a32368a53266e4ab3eda5238e1b8f0828bd3e8f82ba8f074d75c5f5d27fe9d29ea4d6bcab117023238451269dd0ec59dba98abae1183c77", @typed={0x8, 0x5f, 0x0, 0x0, @pid}, @nested={0x274, 0x7e, 0x0, 0x1, [@generic="9697823a8558f8febffaf9363f6365b8ebdac948be811bb3ca8bfb7793ae76efd0", @generic="7314abe1509448298f1dca9055cf0ee3b9709bb2bbd355f4e89e0367810cedb5ee90f50c0dc334219ffa1327d26156b9b97397bc0bbc60800b4799ee341194ccc296", @generic="42e2895c2880646958dfef58990bc4ff6c8c8513c86a67dbc23fd09b50c8c774c0d24d5ece69bb0df56b14a6304215cec8cdb4e0f44b3981754fa6c9a3665e6d03b5108c096774686b05eff2dea07605ea33b9e456d5fd79698b9df7aafddb801cf85b151cfc9b8bb61715869588c9936a5a2e3f49c55f6b21c9bf793389b3caa3fb4143a88980406e3906b91235f4fa9933e84507fa2e8e6466285c8e35b3a72afa50811c640447270131ec4a5ea7cd0ac6ea7bb4a5733cff703a6385508b6b56f3d6dc724203b2f47309d113fd9b9e4eb12b003760742af1007726066315316e9443ab3fc6949b035c19583dac7ca62940612e4575119e7107630ae6587c", @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@ipv4={[], [], @loopback}}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@private0}, @generic="3c274f6508f7b28f132f0d3431227ca0daf2c8f8436173e62d16699f2792a982cec66e54b65a63e0b8465eb6ce80b80dd89f509f464311730347d4750c8c5aff1475502856bf2cad2f26077ec4230755f1d78da95e0ca82fc6794c708fcda00d95735c965d127b8f9679d12b0e663e0524784bbbc2decc143e3adca846e0cff6ab289779fc1f81f17c4d81a530f723451e5ee230fc20abcf909c85d2c8ed80478facc0ebf10deb8cefc6558b9b8c9f51992df8de314a5c8b1f290b039f72934152fb16615c2c1d3ee172503c6b76a05f7fc494fe61ec67bac6e5269a2208"]}, @typed={0x8, 0x11, 0x0, 0x0, @uid}, @nested={0x11fd, 0x41, 0x0, 0x1, [@generic="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", @generic="d087ff9bbc15cc74d0d31327300a7a42244a1eb6bb64609a74ec", @generic="e1164c77ff145d41958b7b5ca668f075406203b12b2fb8a61022582fe68ab20f17de9020e500435edd4bb55031b39da74fa675c9e8e4e3607d8d43e48459561daa46965772ef431159457064f81f96449d3c01c43f6e7cf7737e08180b7b522e21ef3c3d79f970cfbf4b47fc1d5de796c2901c767de7c6a1486c29c473dff456", @generic="8c9aea13af565af9b7d8714c01aafbc3052a138ec3aae0b35a4b448cd8685d1f05f1cef5a3423a4208d8ae061f2594b74467504626f2d2bae9c2c6d742f5", @typed={0x9, 0x1a, 0x0, 0x0, @str='!*\\+\x00'}, @generic="1883c158e02a9d0191a8434eb56f239c769d12c75cf3335445267fe2ce0cbfdab3458748bd9b260a0734b9723406a1666c233bc963159d21b13f74cbbbaec3337bb3a3ef5f4e79eb8d3e2f3efb7d75864b672ce6330b725e292f5bfb20318c609d8fa960122f40d82b2befbe96bdae", @generic="6a5f00bc61619dd788dd4a3c42575ebce77023322767144065b669fce54e05812e1379e3d37b87f513e1e819ba72a45c5f7996c98a2daf4b77b94bd6ba8d4858c93fce35de028bab7b86ecb10cc08d4e38c60dc2110a437c9c", @generic="7bc230aa7e57e9107acd43931d097654d8fb6422d1ab7953bb106e6084f1afb0ebebb90818dc3b020313a12258aa8fecb856e4fc31a9e3a7cd206bdbb0e2d3a8e36952b2b3", @typed={0x8, 0x16, 0x0, 0x0, @fd}]}]}, 0x158c}], 0x4, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r6]}}], 0xf8, 0x880}, 0x4000000) 02:53:38 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0xfffffffffffffee2, 0x60) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap$usbmon(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x1000) tkill(r0, 0x3c) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x10, 0x0) 02:53:39 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) tkill(r1, 0x26) getpgid(r0) ptrace$setregs(0xd, r1, 0x8000000000000, &(0x7f0000000000)="22dabcec8aefa51f6376a9357046624e30d881126e6ab1d6cb5ee7582f04452a55836eb071e884c6") socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x3}, @window={0x3, 0xe88b, 0xfff}, @mss={0x2, 0x8}], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:39 executing program 5 (fault-call:11 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:39 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:39 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:39 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x5) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfc}], 0x4, 0x0) r2 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='[&,^\x00', 0xfffffffffffffffb) keyctl$search(0xa, 0x0, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, r2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2768.120585][ T3198] FAULT_INJECTION: forcing a failure. [ 2768.120585][ T3198] name failslab, interval 1, probability 0, space 0, times 0 [ 2768.133174][ T3198] CPU: 0 PID: 3198 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2768.143198][ T3198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.153219][ T3198] Call Trace: [ 2768.156490][ T3198] dump_stack+0x1b0/0x21e [ 2768.160793][ T3198] ? devkmsg_release+0x11c/0x11c [ 2768.165708][ T3198] ? show_regs_print_info+0x12/0x12 [ 2768.170898][ T3198] ? memset+0x1f/0x40 [ 2768.174871][ T3198] ? unwind_next_frame+0x1c07/0x22b0 [ 2768.180143][ T3198] should_fail+0x6fb/0x860 [ 2768.184548][ T3198] ? setup_fault_attr+0x2b0/0x2b0 [ 2768.189581][ T3198] ? xas_create+0xe07/0x1360 [ 2768.194155][ T3198] should_failslab+0x5/0x20 [ 2768.198646][ T3198] kmem_cache_alloc+0x36/0x250 [ 2768.203397][ T3198] xas_create+0xe07/0x1360 [ 2768.207804][ T3198] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 2768.213333][ T3198] xas_store+0x93/0x13b0 [ 2768.217565][ T3198] ? _raw_spin_lock_irq+0xa2/0x180 [ 2768.222663][ T3198] ? _raw_spin_lock_irqsave+0x1c0/0x1c0 [ 2768.228213][ T3198] ? xas_load+0x46f/0x4c0 [ 2768.232533][ T3198] __add_to_page_cache_locked+0x390/0x8a0 [ 2768.238242][ T3198] ? add_to_page_cache_locked+0x30/0x30 [ 2768.243774][ T3198] ? workingset_activation+0x150/0x150 [ 2768.249217][ T3198] ? unwind_next_frame+0x1c07/0x22b0 [ 2768.254492][ T3198] add_to_page_cache_lru+0x11d/0x280 [ 2768.259765][ T3198] ? __add_to_page_cache_locked+0x8a0/0x8a0 [ 2768.265649][ T3198] ? memset+0x1f/0x40 [ 2768.269620][ T3198] ? unwind_next_frame+0x1c07/0x22b0 [ 2768.274896][ T3198] ext4_mpage_readpages+0x467/0x1eb0 [ 2768.280172][ T3198] ? __rcu_read_lock+0x50/0x50 [ 2768.284928][ T3198] ? ext4_end_bio+0x590/0x590 [ 2768.289592][ T3198] ? prep_new_page+0x11a/0x380 [ 2768.294347][ T3198] ? ext4_readpages+0x8b/0x110 [ 2768.299099][ T3198] ? ext4_journalled_set_page_dirty+0x30/0x30 [ 2768.305153][ T3198] read_pages+0x108/0x3f0 [ 2768.309474][ T3198] ? __do_page_cache_readahead+0x510/0x510 [ 2768.315273][ T3198] ? find_get_entry+0x5da/0x670 [ 2768.320112][ T3198] ? xa_load+0x323/0x340 [ 2768.324351][ T3198] __do_page_cache_readahead+0x470/0x510 [ 2768.329984][ T3198] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2768.336407][ T3198] ? unwind_next_frame+0x1c07/0x22b0 [ 2768.341679][ T3198] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2768.347387][ T3198] generic_file_read_iter+0x626/0x20a0 [ 2768.352846][ T3198] ? find_get_pages_range_tag+0xae0/0xae0 [ 2768.358572][ T3198] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2768.363932][ T3198] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2768.369994][ T3198] ? avc_denied+0x1c0/0x1c0 [ 2768.374493][ T3198] generic_file_splice_read+0x491/0x780 [ 2768.380036][ T3198] ? splice_shrink_spd+0xb0/0xb0 [ 2768.384976][ T3198] ? security_file_permission+0x1e9/0x300 [ 2768.390705][ T3198] ? splice_shrink_spd+0xb0/0xb0 [ 2768.395631][ T3198] splice_direct_to_actor+0x3cf/0xb00 [ 2768.400998][ T3198] ? do_splice_direct+0x3d0/0x3d0 [ 2768.406011][ T3198] ? pipe_to_sendpage+0x300/0x300 [ 2768.411046][ T3198] ? security_file_permission+0x128/0x300 [ 2768.416752][ T3198] do_splice_direct+0x279/0x3d0 [ 2768.421594][ T3198] ? splice_direct_to_actor+0xb00/0xb00 [ 2768.427136][ T3198] ? security_file_permission+0x128/0x300 [ 2768.432840][ T3198] do_sendfile+0x89d/0x1110 [ 2768.437335][ T3198] ? compat_writev+0x390/0x390 [ 2768.442089][ T3198] ? security_file_permission+0x128/0x300 [ 2768.447797][ T3198] ? vfs_write+0x427/0x4f0 [ 2768.452199][ T3198] ? fput_many+0x42/0x1a0 [ 2768.456518][ T3198] __x64_sys_sendfile64+0x1ae/0x220 [ 2768.461711][ T3198] ? __ia32_sys_sendfile+0x240/0x240 [ 2768.466993][ T3198] do_syscall_64+0xcb/0x150 [ 2768.471488][ T3198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2768.477367][ T3198] RIP: 0033:0x45de29 [ 2768.481274][ T3198] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2768.500886][ T3198] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2768.509279][ T3198] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 02:53:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x2000, 0x0) [ 2768.517235][ T3198] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2768.525188][ T3198] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.533146][ T3198] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000022 [ 2768.541102][ T3198] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x200000, 0x0) 02:53:39 executing program 5 (fault-call:11 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2768.680758][ T3233] FAULT_INJECTION: forcing a failure. [ 2768.680758][ T3233] name failslab, interval 1, probability 0, space 0, times 0 [ 2768.693437][ T3233] CPU: 1 PID: 3233 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2768.703490][ T3233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.713549][ T3233] Call Trace: [ 2768.716834][ T3233] dump_stack+0x1b0/0x21e [ 2768.721175][ T3233] ? devkmsg_release+0x11c/0x11c [ 2768.726123][ T3233] ? show_regs_print_info+0x12/0x12 [ 2768.731309][ T3233] ? kmem_cache_alloc+0x1d5/0x250 [ 2768.736324][ T3233] ? __rcu_read_lock+0x50/0x50 [ 2768.741076][ T3233] ? workingset_activation+0x150/0x150 [ 2768.746527][ T3233] should_fail+0x6fb/0x860 [ 2768.750935][ T3233] ? setup_fault_attr+0x2b0/0x2b0 [ 2768.755950][ T3233] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 2768.762006][ T3233] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 2768.767538][ T3233] ? __alloc_skb+0x88/0x4d0 [ 2768.772029][ T3233] should_failslab+0x5/0x20 [ 2768.776519][ T3233] kmem_cache_alloc+0x36/0x250 [ 2768.781271][ T3233] __alloc_skb+0x88/0x4d0 [ 2768.785591][ T3233] ? xas_nomem+0x177/0x1b0 [ 2768.789992][ T3233] tipc_msg_build+0x74a/0x1b20 [ 2768.794744][ T3233] ? _local_bh_enable+0x30/0x30 [ 2768.799583][ T3233] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 2768.805723][ T3233] tipc_sendmcast+0x92a/0xeb0 [ 2768.810409][ T3233] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2768.816031][ T3233] ? memset+0x1f/0x40 [ 2768.820002][ T3233] ? unwind_next_frame+0x1c07/0x22b0 [ 2768.825274][ T3233] ? wait_woken+0x250/0x250 [ 2768.829766][ T3233] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2768.835300][ T3233] __tipc_sendmsg+0x120d/0x2d30 [ 2768.840151][ T3233] ? local_bh_enable+0x20/0x20 [ 2768.844990][ T3233] ? blk_flush_plug_list+0x4b7/0x500 [ 2768.850262][ T3233] ? prep_new_page+0x11a/0x380 [ 2768.855017][ T3233] ? _raw_spin_lock_bh+0xa4/0x180 [ 2768.860027][ T3233] ? _local_bh_enable+0x30/0x30 [ 2768.864865][ T3233] ? memset+0x1f/0x40 [ 2768.868834][ T3233] ? selinux_socket_sendmsg+0x10b/0x320 [ 2768.874367][ T3233] ? lock_sock_nested+0x25a/0x320 [ 2768.879377][ T3233] ? xas_load+0x468/0x4c0 [ 2768.883700][ T3233] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2768.889413][ T3233] ? tipc_recvmsg+0x17c0/0x17c0 [ 2768.894253][ T3233] tipc_sendmsg+0x51/0x70 [ 2768.898574][ T3233] kernel_sendmsg+0xe2/0x120 [ 2768.903156][ T3233] sock_no_sendpage+0x13f/0x1b0 [ 2768.908002][ T3233] ? __receive_sock+0xb0/0xb0 [ 2768.912683][ T3233] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2768.918395][ T3233] ? __receive_sock+0xb0/0xb0 [ 2768.923064][ T3233] sock_sendpage+0xd0/0x120 [ 2768.927561][ T3233] pipe_to_sendpage+0x23b/0x300 [ 2768.932400][ T3233] ? sock_fasync+0xf0/0xf0 [ 2768.936806][ T3233] ? generic_splice_sendpage+0x200/0x200 [ 2768.942424][ T3233] ? atime_needs_update+0x2cf/0x570 [ 2768.947610][ T3233] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2768.953579][ T3233] __splice_from_pipe+0x2d3/0x870 [ 2768.958593][ T3233] ? generic_splice_sendpage+0x200/0x200 [ 2768.964212][ T3233] generic_splice_sendpage+0x172/0x200 [ 2768.969659][ T3233] ? iter_file_splice_write+0xf20/0xf20 [ 2768.975193][ T3233] ? direct_splice_actor+0x25/0x120 [ 2768.980379][ T3233] splice_direct_to_actor+0x496/0xb00 [ 2768.985762][ T3233] ? do_splice_direct+0x3d0/0x3d0 [ 2768.990776][ T3233] ? pipe_to_sendpage+0x300/0x300 [ 2768.995791][ T3233] ? security_file_permission+0x128/0x300 [ 2769.001498][ T3233] do_splice_direct+0x279/0x3d0 [ 2769.007670][ T3233] ? splice_direct_to_actor+0xb00/0xb00 [ 2769.013211][ T3233] ? security_file_permission+0x128/0x300 [ 2769.018916][ T3233] do_sendfile+0x89d/0x1110 [ 2769.023408][ T3233] ? compat_writev+0x390/0x390 [ 2769.028155][ T3233] ? security_file_permission+0x128/0x300 [ 2769.033857][ T3233] ? vfs_write+0x427/0x4f0 [ 2769.038354][ T3233] ? fput_many+0x42/0x1a0 [ 2769.042672][ T3233] __x64_sys_sendfile64+0x1ae/0x220 [ 2769.047881][ T3233] ? __ia32_sys_sendfile+0x240/0x240 [ 2769.053162][ T3233] do_syscall_64+0xcb/0x150 [ 2769.057652][ T3233] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.063530][ T3233] RIP: 0033:0x45de29 [ 2769.067408][ T3233] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2769.086994][ T3233] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2769.095390][ T3233] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2769.103341][ T3233] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2769.111297][ T3233] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2769.119250][ T3233] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000023 [ 2769.127203][ T3233] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:40 executing program 5 (fault-call:11 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x800000, 0x0) [ 2769.237527][ T3238] FAULT_INJECTION: forcing a failure. [ 2769.237527][ T3238] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.265211][ T3238] CPU: 0 PID: 3238 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2769.275277][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.285323][ T3238] Call Trace: [ 2769.288600][ T3238] dump_stack+0x1b0/0x21e [ 2769.292916][ T3238] ? devkmsg_release+0x11c/0x11c [ 2769.297843][ T3238] ? show_regs_print_info+0x12/0x12 [ 2769.303021][ T3238] ? kmem_cache_alloc+0x1d5/0x250 [ 2769.308045][ T3238] ? workingset_update_node+0xe7/0x150 [ 2769.313483][ T3238] should_fail+0x6fb/0x860 [ 2769.317881][ T3238] ? setup_fault_attr+0x2b0/0x2b0 [ 2769.322897][ T3238] ? setup_fault_attr+0x2b0/0x2b0 [ 2769.327899][ T3238] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 2769.333943][ T3238] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 2769.339466][ T3238] ? tipc_msg_build+0x74a/0x1b20 [ 2769.344378][ T3238] should_failslab+0x5/0x20 [ 2769.348860][ T3238] __kmalloc_track_caller+0x5d/0x2b0 [ 2769.354120][ T3238] ? kmem_cache_alloc+0x1d5/0x250 [ 2769.359118][ T3238] ? tipc_msg_build+0x74a/0x1b20 [ 2769.364035][ T3238] __alloc_skb+0xd1/0x4d0 [ 2769.368341][ T3238] tipc_msg_build+0x74a/0x1b20 [ 2769.373079][ T3238] ? _local_bh_enable+0x30/0x30 [ 2769.377923][ T3238] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 2769.384051][ T3238] tipc_sendmcast+0x92a/0xeb0 [ 2769.388705][ T3238] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2769.394315][ T3238] ? memset+0x1f/0x40 [ 2769.398290][ T3238] ? unwind_next_frame+0x1c07/0x22b0 [ 2769.403549][ T3238] ? wait_woken+0x250/0x250 [ 2769.408030][ T3238] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2769.413553][ T3238] __tipc_sendmsg+0x120d/0x2d30 [ 2769.418405][ T3238] ? local_bh_enable+0x20/0x20 [ 2769.423160][ T3238] ? blk_flush_plug_list+0x4b7/0x500 [ 2769.428436][ T3238] ? prep_new_page+0x11a/0x380 [ 2769.433183][ T3238] ? _raw_spin_lock_bh+0xa4/0x180 [ 2769.438183][ T3238] ? _local_bh_enable+0x30/0x30 [ 2769.443009][ T3238] ? memset+0x1f/0x40 [ 2769.446969][ T3238] ? selinux_socket_sendmsg+0x10b/0x320 [ 2769.452513][ T3238] ? lock_sock_nested+0x25a/0x320 [ 2769.457531][ T3238] ? xas_load+0x468/0x4c0 [ 2769.461837][ T3238] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2769.467532][ T3238] ? tipc_recvmsg+0x17c0/0x17c0 [ 2769.472355][ T3238] tipc_sendmsg+0x51/0x70 [ 2769.484132][ T3238] kernel_sendmsg+0xe2/0x120 [ 2769.488699][ T3238] sock_no_sendpage+0x13f/0x1b0 [ 2769.493612][ T3238] ? __receive_sock+0xb0/0xb0 [ 2769.498286][ T3238] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2769.503980][ T3238] ? __receive_sock+0xb0/0xb0 [ 2769.508646][ T3238] sock_sendpage+0xd0/0x120 [ 2769.513127][ T3238] pipe_to_sendpage+0x23b/0x300 [ 2769.517953][ T3238] ? sock_fasync+0xf0/0xf0 [ 2769.522348][ T3238] ? generic_splice_sendpage+0x200/0x200 [ 2769.527970][ T3238] ? atime_needs_update+0x2cf/0x570 [ 2769.533149][ T3238] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2769.539106][ T3238] __splice_from_pipe+0x2d3/0x870 [ 2769.544109][ T3238] ? generic_splice_sendpage+0x200/0x200 [ 2769.549715][ T3238] generic_splice_sendpage+0x172/0x200 [ 2769.555148][ T3238] ? iter_file_splice_write+0xf20/0xf20 [ 2769.560669][ T3238] ? direct_splice_actor+0x25/0x120 [ 2769.565861][ T3238] splice_direct_to_actor+0x496/0xb00 [ 2769.571224][ T3238] ? do_splice_direct+0x3d0/0x3d0 [ 2769.576237][ T3238] ? pipe_to_sendpage+0x300/0x300 [ 2769.581241][ T3238] ? security_file_permission+0x128/0x300 [ 2769.586933][ T3238] do_splice_direct+0x279/0x3d0 [ 2769.591761][ T3238] ? splice_direct_to_actor+0xb00/0xb00 [ 2769.597285][ T3238] ? security_file_permission+0x128/0x300 [ 2769.603000][ T3238] do_sendfile+0x89d/0x1110 [ 2769.607482][ T3238] ? compat_writev+0x390/0x390 [ 2769.612223][ T3238] ? security_file_permission+0x128/0x300 [ 2769.617921][ T3238] ? vfs_write+0x427/0x4f0 [ 2769.622326][ T3238] ? fput_many+0x42/0x1a0 [ 2769.626643][ T3238] __x64_sys_sendfile64+0x1ae/0x220 [ 2769.631819][ T3238] ? __ia32_sys_sendfile+0x240/0x240 [ 2769.637083][ T3238] do_syscall_64+0xcb/0x150 [ 2769.641563][ T3238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.647430][ T3238] RIP: 0033:0x45de29 [ 2769.651301][ T3238] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2769.670879][ T3238] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2769.679263][ T3238] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2769.687209][ T3238] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2769.695170][ T3238] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2769.703115][ T3238] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000024 [ 2769.711062][ T3238] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x1000000, 0x0) [ 2769.737818][ T358] EXT4-fs warning: 21 callbacks suppressed [ 2769.737829][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2769.783520][ T358] EXT4-fs error: 21 callbacks suppressed [ 2769.783531][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2769.821571][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 02:53:40 executing program 5 (fault-call:11 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2769.854811][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2769.880869][ T3246] FAULT_INJECTION: forcing a failure. [ 2769.880869][ T3246] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.893625][ T3246] CPU: 1 PID: 3246 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2769.903461][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2769.903677][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.929297][ T3246] Call Trace: [ 2769.932576][ T3246] dump_stack+0x1b0/0x21e [ 2769.936891][ T3246] ? devkmsg_release+0x11c/0x11c [ 2769.941815][ T3246] ? show_regs_print_info+0x12/0x12 [ 2769.947001][ T3246] ? ctx_sched_out+0x6a0/0x6a0 [ 2769.948566][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2769.951750][ T3246] should_fail+0x6fb/0x860 [ 2769.951760][ T3246] ? setup_fault_attr+0x2b0/0x2b0 [ 2769.951770][ T3246] ? __alloc_skb+0x88/0x4d0 [ 2769.951783][ T3246] should_failslab+0x5/0x20 [ 2769.982560][ T3246] kmem_cache_alloc+0x36/0x250 [ 2769.983511][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2769.987313][ T3246] __alloc_skb+0x88/0x4d0 [ 2769.987324][ T3246] ? __check_object_size+0x2e5/0x3b0 [ 2769.987338][ T3246] tipc_msg_build+0xcf5/0x1b20 [ 2770.017279][ T3246] tipc_sendmcast+0x92a/0xeb0 [ 2770.021944][ T3246] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2770.024870][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2770.027670][ T3246] ? wait_woken+0x250/0x250 [ 2770.027686][ T3246] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2770.050150][ T3246] __tipc_sendmsg+0x120d/0x2d30 [ 2770.054997][ T3246] ? local_bh_enable+0x20/0x20 [ 2770.059746][ T3246] ? blk_flush_plug_list+0x4b7/0x500 [ 2770.065015][ T3246] ? prep_new_page+0x11a/0x380 [ 2770.069763][ T3246] ? _raw_spin_lock_bh+0xa4/0x180 [ 2770.074770][ T3246] ? _local_bh_enable+0x30/0x30 [ 2770.079602][ T3246] ? memset+0x1f/0x40 [ 2770.083572][ T3246] ? selinux_socket_sendmsg+0x10b/0x320 [ 2770.089100][ T3246] ? lock_sock_nested+0x25a/0x320 [ 2770.094113][ T3246] ? xas_load+0x468/0x4c0 [ 2770.098428][ T3246] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2770.104133][ T3246] ? tipc_recvmsg+0x17c0/0x17c0 [ 2770.108971][ T3246] tipc_sendmsg+0x51/0x70 [ 2770.113287][ T3246] kernel_sendmsg+0xe2/0x120 [ 2770.117863][ T3246] sock_no_sendpage+0x13f/0x1b0 [ 2770.122727][ T3246] ? __receive_sock+0xb0/0xb0 [ 2770.127396][ T3246] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2770.133099][ T3246] ? __receive_sock+0xb0/0xb0 [ 2770.137765][ T3246] sock_sendpage+0xd0/0x120 [ 2770.142256][ T3246] pipe_to_sendpage+0x23b/0x300 [ 2770.147093][ T3246] ? sock_fasync+0xf0/0xf0 [ 2770.151495][ T3246] ? generic_splice_sendpage+0x200/0x200 [ 2770.157114][ T3246] ? atime_needs_update+0x2cf/0x570 [ 2770.162303][ T3246] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2770.168291][ T3246] __splice_from_pipe+0x2d3/0x870 [ 2770.173325][ T3246] ? generic_splice_sendpage+0x200/0x200 [ 2770.178941][ T3246] generic_splice_sendpage+0x172/0x200 [ 2770.184386][ T3246] ? iter_file_splice_write+0xf20/0xf20 [ 2770.189919][ T3246] ? direct_splice_actor+0x25/0x120 [ 2770.195101][ T3246] splice_direct_to_actor+0x496/0xb00 [ 2770.200461][ T3246] ? do_splice_direct+0x3d0/0x3d0 [ 2770.205470][ T3246] ? pipe_to_sendpage+0x300/0x300 [ 2770.210481][ T3246] ? security_file_permission+0x128/0x300 [ 2770.216185][ T3246] do_splice_direct+0x279/0x3d0 [ 2770.221042][ T3246] ? splice_direct_to_actor+0xb00/0xb00 [ 2770.226575][ T3246] ? security_file_permission+0x128/0x300 [ 2770.232279][ T3246] do_sendfile+0x89d/0x1110 [ 2770.236769][ T3246] ? compat_writev+0x390/0x390 [ 2770.241519][ T3246] ? security_file_permission+0x128/0x300 [ 2770.247225][ T3246] ? vfs_write+0x427/0x4f0 [ 2770.251623][ T3246] ? fput_many+0x42/0x1a0 [ 2770.255938][ T3246] __x64_sys_sendfile64+0x1ae/0x220 [ 2770.261136][ T3246] ? __ia32_sys_sendfile+0x240/0x240 [ 2770.266407][ T3246] do_syscall_64+0xcb/0x150 [ 2770.270897][ T3246] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2770.276771][ T3246] RIP: 0033:0x45de29 [ 2770.280650][ T3246] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2770.300243][ T3246] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2770.308639][ T3246] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2770.316596][ T3246] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2770.324551][ T3246] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.332510][ T3246] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000025 [ 2770.340465][ T3246] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:41 executing program 5 (fault-call:11 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) [ 2770.351550][ T3247] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2770.367617][ T3247] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2770.404645][ T3254] FAULT_INJECTION: forcing a failure. [ 2770.404645][ T3254] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.417479][ T3254] CPU: 1 PID: 3254 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2770.427553][ T3254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.437595][ T3254] Call Trace: [ 2770.440883][ T3254] dump_stack+0x1b0/0x21e [ 2770.445207][ T3254] ? devkmsg_release+0x11c/0x11c [ 2770.450140][ T3254] ? show_regs_print_info+0x12/0x12 [ 2770.455331][ T3254] ? perf_pmu_sched_task+0x370/0x370 [ 2770.460598][ T3254] ? switch_mm_irqs_off+0x46e/0x870 [ 2770.465777][ T3254] should_fail+0x6fb/0x860 [ 2770.470192][ T3254] ? setup_fault_attr+0x2b0/0x2b0 [ 2770.475202][ T3254] ? setup_fault_attr+0x2b0/0x2b0 [ 2770.480204][ T3254] ? tipc_msg_build+0xcf5/0x1b20 [ 2770.485117][ T3254] should_failslab+0x5/0x20 [ 2770.489600][ T3254] __kmalloc_track_caller+0x5d/0x2b0 [ 2770.494866][ T3254] ? kmem_cache_alloc+0x1d5/0x250 [ 2770.499870][ T3254] ? tipc_msg_build+0xcf5/0x1b20 [ 2770.504787][ T3254] __alloc_skb+0xd1/0x4d0 [ 2770.509094][ T3254] tipc_msg_build+0xcf5/0x1b20 [ 2770.513839][ T3254] tipc_sendmcast+0x92a/0xeb0 [ 2770.518524][ T3254] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2770.524155][ T3254] ? memset+0x1f/0x40 [ 2770.528114][ T3254] ? unwind_next_frame+0x1c07/0x22b0 [ 2770.533390][ T3254] ? wait_woken+0x250/0x250 [ 2770.537872][ T3254] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2770.543404][ T3254] __tipc_sendmsg+0x120d/0x2d30 [ 2770.548236][ T3254] ? local_bh_enable+0x20/0x20 [ 2770.552981][ T3254] ? blk_flush_plug_list+0x4b7/0x500 [ 2770.558243][ T3254] ? prep_new_page+0x11a/0x380 [ 2770.562984][ T3254] ? _raw_spin_lock_bh+0xa4/0x180 [ 2770.567983][ T3254] ? _local_bh_enable+0x30/0x30 [ 2770.572829][ T3254] ? memset+0x1f/0x40 [ 2770.576788][ T3254] ? selinux_socket_sendmsg+0x10b/0x320 [ 2770.582327][ T3254] ? lock_sock_nested+0x25a/0x320 [ 2770.587330][ T3254] ? xas_load+0x468/0x4c0 [ 2770.591636][ T3254] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2770.597332][ T3254] ? tipc_recvmsg+0x17c0/0x17c0 [ 2770.602154][ T3254] tipc_sendmsg+0x51/0x70 [ 2770.606460][ T3254] kernel_sendmsg+0xe2/0x120 [ 2770.611026][ T3254] sock_no_sendpage+0x13f/0x1b0 [ 2770.615855][ T3254] ? __receive_sock+0xb0/0xb0 [ 2770.620514][ T3254] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2770.626223][ T3254] ? __receive_sock+0xb0/0xb0 [ 2770.630879][ T3254] sock_sendpage+0xd0/0x120 [ 2770.635361][ T3254] pipe_to_sendpage+0x23b/0x300 [ 2770.640198][ T3254] ? sock_fasync+0xf0/0xf0 [ 2770.644596][ T3254] ? generic_splice_sendpage+0x200/0x200 [ 2770.650211][ T3254] ? atime_needs_update+0x2cf/0x570 [ 2770.655390][ T3254] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2770.661350][ T3254] __splice_from_pipe+0x2d3/0x870 [ 2770.666354][ T3254] ? generic_splice_sendpage+0x200/0x200 [ 2770.671970][ T3254] generic_splice_sendpage+0x172/0x200 [ 2770.677513][ T3254] ? iter_file_splice_write+0xf20/0xf20 [ 2770.683037][ T3254] ? direct_splice_actor+0x25/0x120 [ 2770.688224][ T3254] splice_direct_to_actor+0x496/0xb00 [ 2770.693575][ T3254] ? do_splice_direct+0x3d0/0x3d0 [ 2770.698589][ T3254] ? pipe_to_sendpage+0x300/0x300 [ 2770.703595][ T3254] ? security_file_permission+0x128/0x300 [ 2770.709288][ T3254] do_splice_direct+0x279/0x3d0 [ 2770.714121][ T3254] ? splice_direct_to_actor+0xb00/0xb00 [ 2770.719649][ T3254] ? security_file_permission+0x128/0x300 [ 2770.725356][ T3254] do_sendfile+0x89d/0x1110 [ 2770.729865][ T3254] ? compat_writev+0x390/0x390 [ 2770.734625][ T3254] ? security_file_permission+0x128/0x300 [ 2770.740331][ T3254] ? vfs_write+0x427/0x4f0 [ 2770.744731][ T3254] ? fput_many+0x42/0x1a0 [ 2770.749039][ T3254] __x64_sys_sendfile64+0x1ae/0x220 [ 2770.754220][ T3254] ? __ia32_sys_sendfile+0x240/0x240 [ 2770.759481][ T3254] do_syscall_64+0xcb/0x150 [ 2770.763969][ T3254] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2770.769840][ T3254] RIP: 0033:0x45de29 [ 2770.773714][ T3254] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2770.793302][ T3254] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2770.801695][ T3254] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2770.809666][ T3254] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2770.817617][ T3254] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.825566][ T3254] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000026 [ 2770.833517][ T3254] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c 02:53:41 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b237800000000000000e2e08c15dadd", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x10000000, 0x0) [ 2770.856713][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2770.873386][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2770.893262][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2770.909512][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2770.922568][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2770.938753][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2770.952528][ T358] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2770.968685][ T358] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 [ 2770.992056][ T3257] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:372: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 2771.007731][ T3257] EXT4-fs error (device loop2): __ext4_find_entry:1621: inode #2: comm syz-executor.2: checksumming directory block 0 02:53:42 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4", 0xed}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 02:53:42 executing program 5 (fault-call:11 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$xdp(r0, 0x0, 0x60) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) socket$tipc(0x1e, 0x2, 0x0) 02:53:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xfeffffff, 0x0) 02:53:42 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5030000008b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9fc740c7ebe7ab41540048d81911b7467c5e8c4d90b2378000000", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 2771.178015][ T3270] FAULT_INJECTION: forcing a failure. [ 2771.178015][ T3270] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.204928][ T3270] CPU: 1 PID: 3270 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2771.215001][ T3270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.225059][ T3270] Call Trace: [ 2771.228360][ T3270] dump_stack+0x1b0/0x21e [ 2771.232680][ T3270] ? devkmsg_release+0x11c/0x11c [ 2771.237606][ T3270] ? show_regs_print_info+0x12/0x12 [ 2771.242789][ T3270] ? 0xffffffffa00a8000 [ 2771.246934][ T3270] should_fail+0x6fb/0x860 [ 2771.251339][ T3270] ? setup_fault_attr+0x2b0/0x2b0 [ 2771.256370][ T3270] ? unwind_get_return_address+0x48/0x90 [ 2771.261991][ T3270] ? arch_stack_walk+0x98/0xe0 [ 2771.266743][ T3270] ? __alloc_skb+0x88/0x4d0 [ 2771.271230][ T3270] should_failslab+0x5/0x20 [ 2771.275718][ T3270] kmem_cache_alloc+0x36/0x250 [ 2771.280470][ T3270] __alloc_skb+0x88/0x4d0 [ 2771.284786][ T3270] ? __do_page_cache_readahead+0x470/0x510 [ 2771.290580][ T3270] skb_copy+0xe3/0x740 [ 2771.294636][ T3270] ? memcpy+0x38/0x50 [ 2771.298606][ T3270] tipc_buf_append+0x461/0xad0 [ 2771.303357][ T3270] ? __kasan_kmalloc+0x117/0x1b0 [ 2771.308279][ T3270] ? tipc_msg_create+0x3a0/0x3a0 [ 2771.313205][ T3270] ? skb_clone+0x1f4/0x370 [ 2771.317608][ T3270] tipc_msg_reassemble+0x331/0x590 [ 2771.322709][ T3270] ? tipc_msg_lookup_dest+0x980/0x980 [ 2771.328064][ T3270] ? xas_create+0x1269/0x1360 [ 2771.332729][ T3270] ? __rcu_read_lock+0x50/0x50 [ 2771.337475][ T3270] ? should_fail+0x182/0x860 [ 2771.342058][ T3270] ? should_fail+0x182/0x860 [ 2771.346630][ T3270] ? setup_fault_attr+0x2b0/0x2b0 [ 2771.351639][ T3270] tipc_mcast_xmit+0x223/0x16c0 [ 2771.356482][ T3270] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2771.362624][ T3270] ? __check_object_size+0x2e5/0x3b0 [ 2771.367896][ T3270] tipc_sendmcast+0xc00/0xeb0 [ 2771.372559][ T3270] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2771.378180][ T3270] ? memset+0x1f/0x40 [ 2771.382151][ T3270] ? unwind_next_frame+0x1c07/0x22b0 [ 2771.387419][ T3270] ? wait_woken+0x250/0x250 [ 2771.391911][ T3270] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2771.397443][ T3270] __tipc_sendmsg+0x120d/0x2d30 [ 2771.402285][ T3270] ? local_bh_enable+0x20/0x20 [ 2771.407042][ T3270] ? blk_flush_plug_list+0x4b7/0x500 [ 2771.412313][ T3270] ? prep_new_page+0x11a/0x380 [ 2771.417062][ T3270] ? _raw_spin_lock_bh+0xa4/0x180 [ 2771.422068][ T3270] ? _local_bh_enable+0x30/0x30 [ 2771.426900][ T3270] ? memset+0x1f/0x40 [ 2771.430862][ T3270] ? selinux_socket_sendmsg+0x10b/0x320 [ 2771.436392][ T3270] ? lock_sock_nested+0x25a/0x320 [ 2771.441403][ T3270] ? xas_load+0x468/0x4c0 [ 2771.445724][ T3270] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2771.451433][ T3270] ? tipc_recvmsg+0x17c0/0x17c0 [ 2771.456267][ T3270] tipc_sendmsg+0x51/0x70 [ 2771.460582][ T3270] kernel_sendmsg+0xe2/0x120 [ 2771.465154][ T3270] sock_no_sendpage+0x13f/0x1b0 [ 2771.469994][ T3270] ? __receive_sock+0xb0/0xb0 [ 2771.474660][ T3270] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2771.480364][ T3270] ? __receive_sock+0xb0/0xb0 [ 2771.485029][ T3270] sock_sendpage+0xd0/0x120 [ 2771.489518][ T3270] pipe_to_sendpage+0x23b/0x300 [ 2771.494350][ T3270] ? sock_fasync+0xf0/0xf0 [ 2771.498749][ T3270] ? generic_splice_sendpage+0x200/0x200 [ 2771.504366][ T3270] ? atime_needs_update+0x2cf/0x570 [ 2771.509553][ T3270] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2771.515520][ T3270] __splice_from_pipe+0x2d3/0x870 [ 2771.520531][ T3270] ? generic_splice_sendpage+0x200/0x200 [ 2771.526163][ T3270] generic_splice_sendpage+0x172/0x200 [ 2771.531606][ T3270] ? iter_file_splice_write+0xf20/0xf20 [ 2771.537155][ T3270] ? direct_splice_actor+0x25/0x120 [ 2771.542336][ T3270] splice_direct_to_actor+0x496/0xb00 [ 2771.547693][ T3270] ? do_splice_direct+0x3d0/0x3d0 [ 2771.552697][ T3270] ? pipe_to_sendpage+0x300/0x300 [ 2771.557706][ T3270] ? security_file_permission+0x128/0x300 [ 2771.563407][ T3270] do_splice_direct+0x279/0x3d0 [ 2771.568241][ T3270] ? splice_direct_to_actor+0xb00/0xb00 [ 2771.573791][ T3270] ? security_file_permission+0x128/0x300 [ 2771.579491][ T3270] do_sendfile+0x89d/0x1110 [ 2771.583983][ T3270] ? compat_writev+0x390/0x390 [ 2771.588729][ T3270] ? security_file_permission+0x128/0x300 [ 2771.594429][ T3270] ? vfs_write+0x427/0x4f0 [ 2771.598826][ T3270] ? fput_many+0x42/0x1a0 [ 2771.603140][ T3270] __x64_sys_sendfile64+0x1ae/0x220 [ 2771.608320][ T3270] ? __ia32_sys_sendfile+0x240/0x240 [ 2771.613586][ T3270] do_syscall_64+0xcb/0x150 [ 2771.618075][ T3270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.623948][ T3270] RIP: 0033:0x45de29 [ 2771.627830][ T3270] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2771.647415][ T3270] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2771.655810][ T3270] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2771.663764][ T3270] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2771.671721][ T3270] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.679671][ T3270] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2771.687625][ T3270] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c [ 2771.697622][ T3270] tipc: Failed do clone local mcast rcv buffer [ 2771.708150][ T3270] ================================================================== [ 2771.716219][ T3270] BUG: KASAN: use-after-free in tipc_mcast_xmit+0x1026/0x16c0 [ 2771.723659][ T3270] Read of size 8 at addr ffff88816d908a00 by task syz-executor.5/3270 [ 2771.731781][ T3270] [ 2771.734092][ T3270] CPU: 1 PID: 3270 Comm: syz-executor.5 Not tainted 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2771.744124][ T3270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.754162][ T3270] Call Trace: [ 2771.757465][ T3270] dump_stack+0x1b0/0x21e [ 2771.761786][ T3270] ? show_regs_print_info+0x12/0x12 [ 2771.766969][ T3270] ? printk+0xc0/0x104 [ 2771.771021][ T3270] ? printk+0xc0/0x104 [ 2771.775076][ T3270] print_address_description+0x96/0x5d0 [ 2771.780602][ T3270] ? devkmsg_release+0x11c/0x11c [ 2771.785522][ T3270] ? skb_clone+0x1f4/0x370 [ 2771.789920][ T3270] ? kfree_skb+0x1b6/0x220 [ 2771.794319][ T3270] ? tipc_msg_reassemble+0x3e2/0x590 [ 2771.799586][ T3270] __kasan_report+0x14b/0x1c0 [ 2771.804247][ T3270] ? tipc_mcast_xmit+0x1026/0x16c0 [ 2771.809338][ T3270] kasan_report+0x27/0x50 [ 2771.813659][ T3270] tipc_mcast_xmit+0x1026/0x16c0 [ 2771.818605][ T3270] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2771.824744][ T3270] ? __check_object_size+0x2e5/0x3b0 [ 2771.830014][ T3270] tipc_sendmcast+0xc00/0xeb0 [ 2771.834678][ T3270] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2771.840294][ T3270] ? memset+0x1f/0x40 [ 2771.844259][ T3270] ? unwind_next_frame+0x1c07/0x22b0 [ 2771.849525][ T3270] ? wait_woken+0x250/0x250 [ 2771.854016][ T3270] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2771.859543][ T3270] __tipc_sendmsg+0x120d/0x2d30 [ 2771.864380][ T3270] ? local_bh_enable+0x20/0x20 [ 2771.869130][ T3270] ? blk_flush_plug_list+0x4b7/0x500 [ 2771.874417][ T3270] ? prep_new_page+0x11a/0x380 [ 2771.879168][ T3270] ? _raw_spin_lock_bh+0xa4/0x180 [ 2771.884178][ T3270] ? _local_bh_enable+0x30/0x30 [ 2771.889012][ T3270] ? memset+0x1f/0x40 [ 2771.892981][ T3270] ? selinux_socket_sendmsg+0x10b/0x320 [ 2771.898508][ T3270] ? lock_sock_nested+0x25a/0x320 [ 2771.903516][ T3270] ? xas_load+0x468/0x4c0 [ 2771.907829][ T3270] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2771.913532][ T3270] ? tipc_recvmsg+0x17c0/0x17c0 [ 2771.918364][ T3270] tipc_sendmsg+0x51/0x70 [ 2771.922676][ T3270] kernel_sendmsg+0xe2/0x120 [ 2771.927251][ T3270] sock_no_sendpage+0x13f/0x1b0 [ 2771.932085][ T3270] ? __receive_sock+0xb0/0xb0 [ 2771.936749][ T3270] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2771.942448][ T3270] ? __receive_sock+0xb0/0xb0 [ 2771.947109][ T3270] sock_sendpage+0xd0/0x120 [ 2771.951597][ T3270] pipe_to_sendpage+0x23b/0x300 [ 2771.956431][ T3270] ? sock_fasync+0xf0/0xf0 [ 2771.960830][ T3270] ? generic_splice_sendpage+0x200/0x200 [ 2771.966442][ T3270] ? atime_needs_update+0x2cf/0x570 [ 2771.971625][ T3270] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2771.977587][ T3270] __splice_from_pipe+0x2d3/0x870 [ 2771.982595][ T3270] ? generic_splice_sendpage+0x200/0x200 [ 2771.988209][ T3270] generic_splice_sendpage+0x172/0x200 [ 2771.993650][ T3270] ? iter_file_splice_write+0xf20/0xf20 [ 2771.999181][ T3270] ? direct_splice_actor+0x25/0x120 [ 2772.004362][ T3270] splice_direct_to_actor+0x496/0xb00 [ 2772.009720][ T3270] ? do_splice_direct+0x3d0/0x3d0 [ 2772.014723][ T3270] ? pipe_to_sendpage+0x300/0x300 [ 2772.019734][ T3270] ? security_file_permission+0x128/0x300 [ 2772.025433][ T3270] do_splice_direct+0x279/0x3d0 [ 2772.030267][ T3270] ? splice_direct_to_actor+0xb00/0xb00 [ 2772.035798][ T3270] ? security_file_permission+0x128/0x300 [ 2772.041540][ T3270] do_sendfile+0x89d/0x1110 [ 2772.046035][ T3270] ? compat_writev+0x390/0x390 [ 2772.050784][ T3270] ? security_file_permission+0x128/0x300 [ 2772.056489][ T3270] ? vfs_write+0x427/0x4f0 [ 2772.060886][ T3270] ? fput_many+0x42/0x1a0 [ 2772.065199][ T3270] __x64_sys_sendfile64+0x1ae/0x220 [ 2772.070382][ T3270] ? __ia32_sys_sendfile+0x240/0x240 [ 2772.075656][ T3270] do_syscall_64+0xcb/0x150 [ 2772.080146][ T3270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.086019][ T3270] RIP: 0033:0x45de29 [ 2772.089902][ T3270] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2772.109490][ T3270] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2772.117881][ T3270] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2772.125852][ T3270] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2772.133806][ T3270] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.141758][ T3270] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2772.149710][ T3270] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c [ 2772.157663][ T3270] [ 2772.159976][ T3270] Allocated by task 3270: [ 2772.164320][ T3270] __kasan_kmalloc+0x117/0x1b0 [ 2772.169066][ T3270] kmem_cache_alloc+0x1d5/0x250 [ 2772.173900][ T3270] __alloc_skb+0x88/0x4d0 [ 2772.178216][ T3270] tipc_msg_build+0x74a/0x1b20 [ 2772.182963][ T3270] tipc_sendmcast+0x92a/0xeb0 [ 2772.187621][ T3270] __tipc_sendmsg+0x120d/0x2d30 [ 2772.192451][ T3270] tipc_sendmsg+0x51/0x70 [ 2772.196761][ T3270] kernel_sendmsg+0xe2/0x120 [ 2772.201354][ T3270] sock_no_sendpage+0x13f/0x1b0 [ 2772.206186][ T3270] sock_sendpage+0xd0/0x120 [ 2772.210669][ T3270] pipe_to_sendpage+0x23b/0x300 [ 2772.215503][ T3270] __splice_from_pipe+0x2d3/0x870 [ 2772.220511][ T3270] generic_splice_sendpage+0x172/0x200 [ 2772.225950][ T3270] splice_direct_to_actor+0x496/0xb00 [ 2772.231299][ T3270] do_splice_direct+0x279/0x3d0 [ 2772.236164][ T3270] do_sendfile+0x89d/0x1110 [ 2772.240647][ T3270] __x64_sys_sendfile64+0x1ae/0x220 [ 2772.245827][ T3270] do_syscall_64+0xcb/0x150 [ 2772.250312][ T3270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.256178][ T3270] [ 2772.258491][ T3270] Freed by task 3270: [ 2772.262462][ T3270] __kasan_slab_free+0x168/0x220 [ 2772.267380][ T3270] slab_free_freelist_hook+0xd0/0x150 [ 2772.272734][ T3270] kmem_cache_free+0xac/0x5c0 [ 2772.277392][ T3270] tipc_buf_append+0x2d1/0xad0 [ 2772.282134][ T3270] tipc_msg_reassemble+0x331/0x590 [ 2772.287227][ T3270] tipc_mcast_xmit+0x223/0x16c0 [ 2772.292063][ T3270] tipc_sendmcast+0xc00/0xeb0 [ 2772.296718][ T3270] __tipc_sendmsg+0x120d/0x2d30 [ 2772.301550][ T3270] tipc_sendmsg+0x51/0x70 [ 2772.305861][ T3270] kernel_sendmsg+0xe2/0x120 [ 2772.310432][ T3270] sock_no_sendpage+0x13f/0x1b0 [ 2772.315264][ T3270] sock_sendpage+0xd0/0x120 [ 2772.319769][ T3270] pipe_to_sendpage+0x23b/0x300 [ 2772.324605][ T3270] __splice_from_pipe+0x2d3/0x870 [ 2772.329608][ T3270] generic_splice_sendpage+0x172/0x200 [ 2772.335054][ T3270] splice_direct_to_actor+0x496/0xb00 [ 2772.340407][ T3270] do_splice_direct+0x279/0x3d0 [ 2772.345239][ T3270] do_sendfile+0x89d/0x1110 [ 2772.349725][ T3270] __x64_sys_sendfile64+0x1ae/0x220 [ 2772.354905][ T3270] do_syscall_64+0xcb/0x150 [ 2772.359389][ T3270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.365258][ T3270] [ 2772.367572][ T3270] The buggy address belongs to the object at ffff88816d908a00 [ 2772.367572][ T3270] which belongs to the cache skbuff_fclone_cache of size 488 [ 2772.382301][ T3270] The buggy address is located 0 bytes inside of [ 2772.382301][ T3270] 488-byte region [ffff88816d908a00, ffff88816d908be8) [ 2772.395377][ T3270] The buggy address belongs to the page: [ 2772.400994][ T3270] page:ffffea0005b64200 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 compound_mapcount: 0 [ 2772.411918][ T3270] flags: 0x8000000000010200(slab|head) [ 2772.417360][ T3270] raw: 8000000000010200 0000000000000000 0000000100000001 ffff8881daa92500 [ 2772.425925][ T3270] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 2772.434484][ T3270] page dumped because: kasan: bad access detected [ 2772.440873][ T3270] [ 2772.443181][ T3270] Memory state around the buggy address: [ 2772.448815][ T3270] ffff88816d908900: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 2772.456858][ T3270] ffff88816d908980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2772.464900][ T3270] >ffff88816d908a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2772.472939][ T3270] ^ 02:53:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xfffffffe, 0x0) [ 2772.476984][ T3270] ffff88816d908a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2772.485022][ T3270] ffff88816d908b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2772.493067][ T3270] ================================================================== [ 2772.501108][ T3270] Disabling lock debugging due to kernel taint [ 2772.515747][ T3270] kasan: CONFIG_KASAN_INLINE enabled [ 2772.521405][ T3270] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2772.530130][ T3270] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2772.537063][ T3270] CPU: 1 PID: 3270 Comm: syz-executor.5 Tainted: G B 5.4.69-syzkaller-00867-g9d0d630081ae #0 [ 2772.548491][ T3270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.558544][ T3270] RIP: 0010:skb_release_data+0x118/0x6f0 [ 2772.564162][ T3270] Code: ef 89 de e8 9a f4 1f fe 39 dd 0f 85 43 02 00 00 e8 1d f3 1f fe 48 8b 44 24 20 48 8d 68 02 48 89 e8 48 c1 e8 03 48 89 44 24 48 <42> 8a 04 30 84 c0 0f 85 d1 04 00 00 0f b6 5d 00 31 ff 89 de e8 6f [ 2772.583750][ T3270] RSP: 0018:ffff88816f8a6e50 EFLAGS: 00010206 [ 2772.589802][ T3270] RAX: 0000000030512a09 RBX: 0000000000000000 RCX: 0000000000040000 [ 2772.597757][ T3270] RDX: ffffc90006d57000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2772.605711][ T3270] RBP: 0000000182895048 R08: ffffffff8321743a R09: ffffed10390aee09 [ 2772.613668][ T3270] R10: ffffed10390aee09 R11: 0000000000000000 R12: 1ffff110390aee06 [ 2772.621625][ T3270] R13: 0000000182895046 R14: dffffc0000000000 R15: ffff8881c8577030 [ 2772.629581][ T3270] FS: 00007ff6ebfe4700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2772.638489][ T3270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2772.645054][ T3270] CR2: 000000000118c000 CR3: 00000001c4b0d006 CR4: 00000000001606e0 [ 2772.653011][ T3270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2772.660967][ T3270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2772.668917][ T3270] Call Trace: [ 2772.672193][ T3270] ? kasan_report+0x27/0x50 [ 2772.676678][ T3270] ? kasan_report+0x27/0x50 [ 2772.681168][ T3270] __kfree_skb+0x55/0x180 [ 2772.685486][ T3270] tipc_mcast_xmit+0x10a8/0x16c0 [ 2772.690412][ T3270] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2772.696548][ T3270] ? __check_object_size+0x2e5/0x3b0 [ 2772.701823][ T3270] tipc_sendmcast+0xc00/0xeb0 [ 2772.706484][ T3270] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2772.712101][ T3270] ? memset+0x1f/0x40 [ 2772.716073][ T3270] ? unwind_next_frame+0x1c07/0x22b0 [ 2772.721339][ T3270] ? wait_woken+0x250/0x250 [ 2772.725826][ T3270] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2772.731380][ T3270] __tipc_sendmsg+0x120d/0x2d30 [ 2772.736219][ T3270] ? local_bh_enable+0x20/0x20 [ 2772.740968][ T3270] ? blk_flush_plug_list+0x4b7/0x500 [ 2772.746244][ T3270] ? prep_new_page+0x11a/0x380 [ 2772.750994][ T3270] ? _raw_spin_lock_bh+0xa4/0x180 [ 2772.756005][ T3270] ? _local_bh_enable+0x30/0x30 [ 2772.760841][ T3270] ? memset+0x1f/0x40 [ 2772.764807][ T3270] ? selinux_socket_sendmsg+0x10b/0x320 [ 2772.770335][ T3270] ? lock_sock_nested+0x25a/0x320 [ 2772.775345][ T3270] ? xas_load+0x468/0x4c0 [ 2772.779659][ T3270] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2772.785365][ T3270] ? tipc_recvmsg+0x17c0/0x17c0 [ 2772.790196][ T3270] tipc_sendmsg+0x51/0x70 [ 2772.794517][ T3270] kernel_sendmsg+0xe2/0x120 [ 2772.799092][ T3270] sock_no_sendpage+0x13f/0x1b0 [ 2772.803953][ T3270] ? __receive_sock+0xb0/0xb0 [ 2772.808619][ T3270] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2772.814320][ T3270] ? __receive_sock+0xb0/0xb0 [ 2772.818984][ T3270] sock_sendpage+0xd0/0x120 [ 2772.823468][ T3270] pipe_to_sendpage+0x23b/0x300 [ 2772.828305][ T3270] ? sock_fasync+0xf0/0xf0 [ 2772.832727][ T3270] ? generic_splice_sendpage+0x200/0x200 [ 2772.838342][ T3270] ? atime_needs_update+0x2cf/0x570 [ 2772.843524][ T3270] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2772.849491][ T3270] __splice_from_pipe+0x2d3/0x870 [ 2772.854507][ T3270] ? generic_splice_sendpage+0x200/0x200 [ 2772.860121][ T3270] generic_splice_sendpage+0x172/0x200 [ 2772.865561][ T3270] ? iter_file_splice_write+0xf20/0xf20 [ 2772.871088][ T3270] ? direct_splice_actor+0x25/0x120 [ 2772.876270][ T3270] splice_direct_to_actor+0x496/0xb00 [ 2772.881632][ T3270] ? do_splice_direct+0x3d0/0x3d0 [ 2772.886642][ T3270] ? pipe_to_sendpage+0x300/0x300 [ 2772.891651][ T3270] ? security_file_permission+0x128/0x300 [ 2772.897372][ T3270] do_splice_direct+0x279/0x3d0 [ 2772.902205][ T3270] ? splice_direct_to_actor+0xb00/0xb00 [ 2772.907737][ T3270] ? security_file_permission+0x128/0x300 [ 2772.913438][ T3270] do_sendfile+0x89d/0x1110 [ 2772.917926][ T3270] ? compat_writev+0x390/0x390 [ 2772.922675][ T3270] ? security_file_permission+0x128/0x300 [ 2772.928375][ T3270] ? vfs_write+0x427/0x4f0 [ 2772.932797][ T3270] ? fput_many+0x42/0x1a0 [ 2772.937114][ T3270] __x64_sys_sendfile64+0x1ae/0x220 [ 2772.942301][ T3270] ? __ia32_sys_sendfile+0x240/0x240 [ 2772.947571][ T3270] do_syscall_64+0xcb/0x150 [ 2772.952058][ T3270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.957932][ T3270] RIP: 0033:0x45de29 [ 2772.961808][ T3270] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2772.981392][ T3270] RSP: 002b:00007ff6ebfe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2772.989811][ T3270] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de29 [ 2772.997763][ T3270] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2773.005722][ T3270] RBP: 00007ff6ebfe3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.013677][ T3270] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2773.021631][ T3270] R13: 00007ffc1feeefdf R14: 00007ff6ebfe49c0 R15: 000000000118bf2c [ 2773.029585][ T3270] Modules linked in: 02:53:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x200000000000, 0x0) [ 2773.035629][ T3270] ---[ end trace 9610ccb4ef645904 ]--- [ 2773.053376][ T3270] RIP: 0010:skb_release_data+0x118/0x6f0 [ 2773.064569][ T3270] Code: ef 89 de e8 9a f4 1f fe 39 dd 0f 85 43 02 00 00 e8 1d f3 1f fe 48 8b 44 24 20 48 8d 68 02 48 89 e8 48 c1 e8 03 48 89 44 24 48 <42> 8a 04 30 84 c0 0f 85 d1 04 00 00 0f b6 5d 00 31 ff 89 de e8 6f [ 2773.104865][ T3270] RSP: 0018:ffff88816f8a6e50 EFLAGS: 00010206 [ 2773.117494][ T3270] RAX: 0000000030512a09 RBX: 0000000000000000 RCX: 0000000000040000 [ 2773.134272][ T3270] RDX: ffffc90006d57000 RSI: 000000000003ffff RDI: 0000000000040000 02:53:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x80000000000000, 0x0) [ 2773.150994][ T3270] RBP: 0000000182895048 R08: ffffffff8321743a R09: ffffed10390aee09 [ 2773.166700][ T3270] R10: ffffed10390aee09 R11: 0000000000000000 R12: 1ffff110390aee06 [ 2773.179517][ T3270] R13: 0000000182895046 R14: dffffc0000000000 R15: ffff8881c8577030 [ 2773.187689][ T3270] FS: 00007ff6ebfe4700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2773.196799][ T3270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2773.205107][ T3270] CR2: 00007fbf75e2edb8 CR3: 00000001c4b0d001 CR4: 00000000001606e0 [ 2773.213537][ T3270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2773.221683][ T3270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2773.230347][ T3270] Kernel panic - not syncing: Fatal exception [ 2773.236803][ T3270] Kernel Offset: disabled [ 2773.241106][ T3270] Rebooting in 86400 seconds..