79.918977][T24686] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}) [ 379.932641][T24683] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 379.950670][T24684] loop1: detected capacity change from 0 to 131456 [ 379.957529][T24684] EXT4-fs (loop1): inodes count not valid: 1179680 vs 32 [ 380.034332][T24807] loop2: detected capacity change from 0 to 131456 20:28:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 380.168264][T24814] loop1: detected capacity change from 0 to 131456 [ 380.175872][T24814] EXT4-fs (loop1): inodes count not valid: 1310752 vs 32 20:28:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x4}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x30200080}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x0, 0x5, 0x1000, 0x400, 0x1, 0x5adc]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8802}, 0x8000) unshare(0x400) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xfa, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x2f) clone(0x20600, &(0x7f0000000240)="b1b2d48f2540c315bcc46da3480bf9d3387c530000000000001f2f8ee7ab651402d6a7e1a728333c8f40cdb95c610481ed1adf13e74c7f9c324c0b32e5fcc3bcc15a3c0d4e0e7c81a54100d411becbd4827b8c753dd7d353fbf785f7c511f86f1a94b70e5c389a1455aeb75b864c76d076", &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000300)="94c9de94ad64fb695072872d08a51b17baef422c51128feb5b241a1918d98f8422abf42af05055bb0d33898d54f90f09819059e9e72ba71b9aef5bd377281ce423fc0a1e4e7a93f0669d6dcc6075fa1819360c0791a0cd725f5e2d8985d309ac122fa902e4e57da9fd81298f44e1bdabd9e29041aa966aae3dfc11cccb60921eae60f6c486764232da37292ba2bb23dd0341d7749abb2c0d3682f4f2a84b03f74d2cc5ed72ecc58105a8a756c43deee93d1b349157ec6175605238b16617cdaf28a794e0a2a16972d88a9f6336e0f6c2e0b41a0a4a43eee603ff2c2c7597c707321c2a8195ada3cdc34d587583abfba0809285d52b58ef00f8f32b") 20:28:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20ffffffe20100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 380.290557][T24814] loop1: detected capacity change from 0 to 131456 [ 380.297389][T24814] EXT4-fs (loop1): inodes count not valid: 1310752 vs 32 [ 380.313714][T24818] loop4: detected capacity change from 0 to 131456 20:28:37 executing program 5: r0 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:28:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 380.351128][T24827] loop3: detected capacity change from 0 to 131456 [ 380.356889][T24818] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 380.367193][T24827] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 [ 380.414571][T24849] loop1: detected capacity change from 0 to 131456 [ 380.421993][T24849] EXT4-fs (loop1): inodes count not valid: 1572896 vs 32 [ 380.450512][T24849] loop1: detected capacity change from 0 to 131456 [ 380.457321][T24849] EXT4-fs (loop1): inodes count not valid: 1572896 vs 32 [ 380.465426][T24945] loop3: detected capacity change from 0 to 131456 [ 380.472465][T24945] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 20:28:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001680)=""/202, 0xca}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x5, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x24}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:37 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x617c, &(0x7f0000000340), &(0x7f0000ee9000/0x8000)=nil, &(0x7f0000eed000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x6f11, &(0x7f0000000340), &(0x7f0000ee9000/0x8000)=nil, &(0x7f0000eed000/0x2000)=nil, &(0x7f0000000000), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x80005b00) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0xfffffffa) 20:28:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001b00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffff00100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 380.788164][T24958] loop3: detected capacity change from 0 to 131456 [ 380.797252][T24958] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 [ 380.805339][T24953] loop1: detected capacity change from 0 to 131456 [ 380.813342][T24957] loop4: detected capacity change from 0 to 131456 [ 380.820973][T24953] EXT4-fs (loop1): inodes count not valid: 1769504 vs 32 [ 380.834000][T24957] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x28}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 380.860608][T25018] loop1: detected capacity change from 0 to 131456 [ 380.867871][T25018] EXT4-fs (loop1): inodes count not valid: 1769504 vs 32 [ 380.895808][T24958] loop3: detected capacity change from 0 to 131456 20:28:37 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x617c, &(0x7f0000000340), &(0x7f0000ee9000/0x8000)=nil, &(0x7f0000eed000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x6f11, &(0x7f0000000340), &(0x7f0000ee9000/0x8000)=nil, &(0x7f0000eed000/0x2000)=nil, &(0x7f0000000000), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x80005b00) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0xfffffffa) [ 380.905848][T24958] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 20:28:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 380.959218][T25077] loop2: detected capacity change from 0 to 131456 [ 381.091114][T25088] loop1: detected capacity change from 0 to 131456 [ 381.099372][T25088] EXT4-fs (loop1): inodes count not valid: 2228256 vs 32 20:28:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x60}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 381.230797][T25088] loop1: detected capacity change from 0 to 131456 [ 381.237666][T25088] EXT4-fs (loop1): inodes count not valid: 2228256 vs 32 [ 381.287257][T25197] loop4: detected capacity change from 0 to 131456 [ 381.297169][T25197] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002500000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000df30100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7a}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:38 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x617c, &(0x7f0000000340), &(0x7f0000ee9000/0x8000)=nil, &(0x7f0000eed000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x6f11, &(0x7f0000000340), &(0x7f0000ee9000/0x8000)=nil, &(0x7f0000eed000/0x2000)=nil, &(0x7f0000000000), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x80005b00) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0xfffffffa) 20:28:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000d0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7c}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 381.725347][T25214] loop4: detected capacity change from 0 to 131456 [ 381.734803][T25210] loop3: detected capacity change from 0 to 131456 [ 381.739910][T25216] loop1: detected capacity change from 0 to 131456 [ 381.742314][T25210] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32 [ 381.748583][T25216] EXT4-fs (loop1): inodes count not valid: 2424864 vs 32 [ 381.758770][T25214] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002e00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 381.773993][T25214] EXT4-fs mount: 30 callbacks suppressed [ 381.774008][T25214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.782346][T25216] loop1: detected capacity change from 0 to 131456 [ 381.797244][T25216] EXT4-fs (loop1): inodes count not valid: 2424864 vs 32 [ 381.845158][T25230] loop1: detected capacity change from 0 to 131456 [ 381.852533][T25230] EXT4-fs (loop1): inodes count not valid: 3014688 vs 32 20:28:38 executing program 5: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffb3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000010100000c000068ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef0100030e0000d7f4655f0000000001000000000519be000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/681]) 20:28:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xf0}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 381.923307][T25236] loop2: detected capacity change from 0 to 131456 [ 382.010437][T25210] loop3: detected capacity change from 0 to 131456 [ 382.017752][T25210] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32 [ 382.028993][T25230] loop1: detected capacity change from 0 to 131456 [ 382.036497][T25230] EXT4-fs (loop1): inodes count not valid: 3014688 vs 32 [ 382.051325][T25236] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x120}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000df40100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x204}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 382.247655][T25254] loop4: detected capacity change from 0 to 131456 [ 382.260193][T25256] loop1: detected capacity change from 0 to 131456 [ 382.267585][T25256] EXT4-fs (loop1): inodes count not valid: 4718624 vs 32 [ 382.280464][T25260] loop3: detected capacity change from 0 to 131456 [ 382.287823][T25260] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32 20:28:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 382.296218][T25262] loop1: detected capacity change from 0 to 131456 [ 382.309759][T25254] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 382.310133][T25262] EXT4-fs (loop1): inodes count not valid: 4718624 vs 32 [ 382.327225][T25254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.378091][T25260] loop3: detected capacity change from 0 to 131456 [ 382.385084][T25260] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32 20:28:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x406}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffff60100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 382.687309][T25281] loop1: detected capacity change from 0 to 131456 [ 382.694743][T25281] EXT4-fs (loop1): inodes count not valid: 4980768 vs 32 [ 382.695060][T25283] loop4: detected capacity change from 0 to 131456 [ 382.706946][T25286] loop3: detected capacity change from 0 to 131456 [ 382.715894][T25286] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 [ 382.728039][T25283] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 382.737889][T25283] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.752687][T25291] loop1: detected capacity change from 0 to 131456 20:28:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x600}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 382.827236][T25297] loop2: detected capacity change from 0 to 131456 [ 382.836128][T25291] EXT4-fs (loop1): inodes count not valid: 4980768 vs 32 [ 382.897003][T25286] loop3: detected capacity change from 0 to 131456 [ 382.903886][T25286] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 20:28:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x604}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 382.950025][T25297] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20ffffff0f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x700}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffdf90100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 383.153336][T25315] loop3: detected capacity change from 0 to 131456 [ 383.160479][T25315] EXT4-fs (loop3): inodes count not valid: 4261412640 vs 32 [ 383.189259][T25321] loop4: detected capacity change from 0 to 131456 [ 383.197275][T25321] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 383.205229][T25318] loop1: detected capacity change from 0 to 131456 [ 383.212788][T25318] EXT4-fs (loop1): inodes count not valid: 6291488 vs 32 [ 383.240684][T25318] loop1: detected capacity change from 0 to 131456 20:28:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 383.247916][T25318] EXT4-fs (loop1): inodes count not valid: 6291488 vs 32 [ 383.255468][T25315] loop3: detected capacity change from 0 to 131456 [ 383.262338][T25315] EXT4-fs (loop3): inodes count not valid: 4261412640 vs 32 [ 383.303449][T25321] loop4: detected capacity change from 0 to 131456 [ 383.310817][T25321] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:28:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffffb0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000100100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2001}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 383.582155][T25339] loop1: detected capacity change from 0 to 131456 [ 383.589495][T25339] EXT4-fs (loop1): inodes count not valid: 6815776 vs 32 [ 383.607451][T25341] loop4: detected capacity change from 0 to 131456 [ 383.618181][T25345] loop3: detected capacity change from 0 to 131456 20:28:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2400}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 383.625459][T25345] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 [ 383.640290][T25341] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 383.640660][T25339] loop1: detected capacity change from 0 to 131456 [ 383.656658][T25339] EXT4-fs (loop1): inodes count not valid: 6815776 vs 32 [ 383.664534][T25341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 383.737608][T25360] loop2: detected capacity change from 0 to 131456 [ 383.808033][T25364] loop1: detected capacity change from 0 to 131456 [ 383.815794][T25364] EXT4-fs (loop1): inodes count not valid: 7077920 vs 32 20:28:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2800}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000004100100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 383.875004][T25360] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 384.025065][T25371] loop1: detected capacity change from 0 to 131456 [ 384.036098][T25371] EXT4-fs (loop1): inodes count not valid: 7077920 vs 32 [ 384.044207][T25357] loop3: detected capacity change from 0 to 131456 [ 384.052997][T25357] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 [ 384.067621][T25375] loop4: detected capacity change from 0 to 131456 20:28:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 384.075058][T25375] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32 [ 384.114392][T25381] loop1: detected capacity change from 0 to 131456 20:28:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 384.121951][T25381] EXT4-fs (loop1): inodes count not valid: 7602208 vs 32 [ 384.149639][T25375] loop4: detected capacity change from 0 to 131456 [ 384.158422][T25375] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32 [ 384.170717][T25381] loop1: detected capacity change from 0 to 131456 [ 384.177624][T25381] EXT4-fs (loop1): inodes count not valid: 7602208 vs 32 20:28:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffdfd0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000110100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 384.495718][T25391] loop3: detected capacity change from 0 to 131456 [ 384.503133][T25391] EXT4-fs (loop3): inodes count not valid: 4261412640 vs 32 [ 384.512237][T25393] loop4: detected capacity change from 0 to 131456 [ 384.527797][T25393] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007a00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 384.539219][T25393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 384.558499][T25400] loop1: detected capacity change from 0 to 131456 [ 384.565993][T25400] EXT4-fs (loop1): inodes count not valid: 7995424 vs 32 20:28:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7a00}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 384.600360][T25400] loop1: detected capacity change from 0 to 131456 [ 384.607812][T25405] loop3: detected capacity change from 0 to 131456 [ 384.615230][T25400] EXT4-fs (loop1): inodes count not valid: 7995424 vs 32 [ 384.676554][T25408] loop2: detected capacity change from 0 to 131456 [ 384.695794][T25408] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 384.810303][T25405] EXT4-fs (loop3): inodes count not valid: 4261412640 vs 32 20:28:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000d900000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 384.928956][T25415] loop1: detected capacity change from 0 to 131456 [ 384.936752][T25415] EXT4-fs (loop1): inodes count not valid: 14221344 vs 32 20:28:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000120100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7c00}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000da00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 384.980415][T25415] loop1: detected capacity change from 0 to 131456 [ 384.987247][T25415] EXT4-fs (loop1): inodes count not valid: 14221344 vs 32 [ 385.026186][T25422] loop4: detected capacity change from 0 to 131456 [ 385.061228][T25422] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffffe0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xee00}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 385.071058][T25422] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.086835][T25428] loop1: detected capacity change from 0 to 131456 [ 385.094312][T25428] EXT4-fs (loop1): inodes count not valid: 14286880 vs 32 [ 385.115409][T25433] loop3: detected capacity change from 0 to 131456 [ 385.122702][T25433] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 [ 385.131821][T25435] loop1: detected capacity change from 0 to 131456 [ 385.144856][T25435] EXT4-fs (loop1): inodes count not valid: 14286880 vs 32 [ 385.221751][T25433] loop3: detected capacity change from 0 to 131456 [ 385.228692][T25433] EXT4-fs (loop3): inodes count not valid: 4294967072 vs 32 20:28:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xf000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000db00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000fff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x25000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 385.421927][T25453] loop4: detected capacity change from 0 to 131456 [ 385.423192][T25454] loop3: detected capacity change from 0 to 131456 [ 385.435823][T25454] EXT4-fs (loop3): inodes count not valid: 251658272 vs 32 [ 385.450675][T25450] loop1: detected capacity change from 0 to 131456 [ 385.458248][T25450] EXT4-fs (loop1): inodes count not valid: 14352416 vs 32 [ 385.467935][T25453] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 385.477839][T25453] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.501769][T25463] loop1: detected capacity change from 0 to 131456 [ 385.553407][T25467] loop2: detected capacity change from 0 to 131456 [ 385.564993][T25463] EXT4-fs (loop1): inodes count not valid: 14352416 vs 32 [ 385.604305][T25467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000180100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000dc00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 385.845109][T25454] loop3: detected capacity change from 0 to 131456 [ 385.853589][T25454] EXT4-fs (loop3): inodes count not valid: 251658272 vs 32 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x500200}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 385.910152][T25485] loop4: detected capacity change from 0 to 131456 [ 385.925262][T25485] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 385.936361][T25490] loop1: detected capacity change from 0 to 131456 [ 385.943828][T25490] EXT4-fs (loop1): inodes count not valid: 14417952 vs 32 [ 385.960414][T25485] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.990354][T25490] loop1: detected capacity change from 0 to 131456 [ 385.997265][T25490] EXT4-fs (loop1): inodes count not valid: 14417952 vs 32 20:28:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffbff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000001b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000dd00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:42 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x4) personality(0x0) io_setup(0x3, &(0x7f0000001b40)) uname(&(0x7f0000000140)=""/114) 20:28:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 386.307926][T25502] loop3: detected capacity change from 0 to 131456 [ 386.315492][T25502] EXT4-fs (loop3): inodes count not valid: 4227858208 vs 32 [ 386.329651][T25506] loop1: detected capacity change from 0 to 131456 [ 386.337184][T25506] EXT4-fs (loop1): inodes count not valid: 14483488 vs 32 [ 386.347242][T25511] loop4: detected capacity change from 0 to 131456 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xa0ee20}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 386.355531][T25572] loop1: detected capacity change from 0 to 131456 [ 386.368448][T25511] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 386.378118][T25572] EXT4-fs (loop1): inodes count not valid: 14483488 vs 32 [ 386.384920][T25511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.399233][T25621] loop3: detected capacity change from 0 to 131456 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xb01c20}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 386.411745][T25621] EXT4-fs (loop3): inodes count not valid: 4227858208 vs 32 [ 386.465421][T25628] loop2: detected capacity change from 0 to 131456 [ 386.581129][T25628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000200100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200003ffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xf0ff1f}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 386.779640][T25646] loop1: detected capacity change from 0 to 131456 [ 386.787159][T25646] EXT4-fs (loop1): inodes count not valid: 14680096 vs 32 [ 386.800037][T25650] loop3: detected capacity change from 0 to 131456 [ 386.800909][T25649] loop4: detected capacity change from 0 to 131456 [ 386.813898][T25650] EXT4-fs (loop3): inodes count not valid: 4278386720 vs 32 [ 386.817959][T25646] loop1: detected capacity change from 0 to 131456 20:28:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 386.828204][T25646] EXT4-fs (loop1): inodes count not valid: 14680096 vs 32 [ 386.845178][T25649] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 386.855237][T25649] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.901832][T25650] loop3: detected capacity change from 0 to 131456 [ 386.908741][T25650] EXT4-fs (loop3): inodes count not valid: 4278386720 vs 32 20:28:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e100000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001980)}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x4, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003200100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001fffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 387.219169][T25872] loop1: detected capacity change from 0 to 131456 [ 387.226631][T25872] EXT4-fs (loop1): inodes count not valid: 14745632 vs 32 [ 387.231650][T25875] loop3: detected capacity change from 0 to 131456 [ 387.241588][T25875] EXT4-fs (loop3): inodes count not valid: 4280221728 vs 32 [ 387.250122][T25877] loop4: detected capacity change from 0 to 131456 [ 387.258200][T25872] loop1: detected capacity change from 0 to 131456 20:28:43 executing program 5: syz_read_part_table(0x0, 0x5, &(0x7f0000000340)=[{&(0x7f00000003c0)="02080000000000000000ff45ac7aee0c0b0c57a067f012b9a00000ffffffa5000008000000000000024000fffc69e7a90000e10000080000000000000000a6ff37efa80dc57393f3b5d350", 0x4b, 0x1c0}, {&(0x7f0000000140)="7447fcaf942e902e235e52870d5109722dda28cded347e1f8f6d907679c40031a8289dbeb00fc9c0df7cf528bbddc980b483b1425620e445ca0e36b7ebf790c3affbbf20427bb6a404707eb7cb8b18da2ff1ee2f03dd4db38f0c1fab45da6df0bc52526626d1eb01f2df5d5c9de3a9299be7a0ca1182baaea0a097fe4410fa80b2c7cda260739b8353209257768a086d6e29cb00fd10aeb197359f7c3c9d3adca584ea0548a81309ec0a2c5b435f24b247dbc50d1135156d37a65d3e957cfe7d707c16b4d4dfbb3e454539a2", 0xcc}, {&(0x7f0000000040)="4ed45691f1079f52fa", 0x9, 0x4}, {&(0x7f0000000240)="5327a57dabbcb505b9492a7f133fa783ecf1d828452d555ab297dd3bc9d9263659c2f305ee731d756bae66e4306189e4a65729d3621cb2541e2d86f1f02cdaaa73734de73ec8c1a2e72e39074140cea11330b586cf50d14dc99de6a446aa935fd64f9e9df16242b64dfbf7421ffb0a3ed812b6e620c0fbd8480dd9e2e983b010fbb9985c51c8162a3017617e8b70c3e270ad05d1a3f0dd020b9fd07e2e82e64ddd96a769b4c62f9c47648cb2077e4fd11b3f014fc5b7a1a4c0b2db7458234b76d9f0f3acd273a08ff331e75338", 0xcd, 0xfffffffffffffff8}, {&(0x7f0000000080)="486eecbcaab0c46ddb31713babdb3c1bb61f58a1b812f7", 0x17, 0x3}]) 20:28:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000402000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 387.265122][T25872] EXT4-fs (loop1): inodes count not valid: 14745632 vs 32 [ 387.265133][T25877] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 387.336791][T25875] loop3: detected capacity change from 0 to 131456 [ 387.343929][T25875] EXT4-fs (loop3): inodes count not valid: 4280221728 vs 32 [ 387.384154][T25994] loop2: detected capacity change from 0 to 131456 20:28:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 387.521563][T25877] loop4: detected capacity change from 0 to 131456 [ 387.530026][T25877] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 387.552762][T26003] loop1: detected capacity change from 0 to 131456 20:28:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e0ffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:44 executing program 5: r0 = clone3(&(0x7f0000000400)={0xe9185000, &(0x7f00000001c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r2 = getpgrp(r0) r3 = fork() pidfd_open(r3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) clone3(&(0x7f0000000340)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/145, 0x91, &(0x7f0000000200)=""/71, &(0x7f0000000300)=[r1, r0, r2, r3, r4], 0x5}, 0x58) [ 387.570394][T26003] EXT4-fs (loop1): inodes count not valid: 33816608 vs 32 [ 387.642785][T26003] loop1: detected capacity change from 0 to 131456 [ 387.650128][T26003] EXT4-fs (loop1): inodes count not valid: 33816608 vs 32 [ 387.662271][T26013] loop3: detected capacity change from 0 to 131456 [ 387.670122][T26013] EXT4-fs (loop3): inodes count not valid: 4292870176 vs 32 [ 387.690630][T25994] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.736550][T26013] loop3: detected capacity change from 0 to 131456 [ 387.745782][T26013] EXT4-fs (loop3): inodes count not valid: 4292870176 vs 32 20:28:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000010200100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:44 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r1}, {0x0, r3}, {0x0}, {0x0, r3}, {}, {}, {r4}, {}, {r5, r3}, {r2}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {}, {r1}, {0x0, r3}, {}, {}, {r1, r3}, {r2}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {}, {}, {r1, r3}, {}, {r1}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {r2}, {r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r1}, {}, {0x0, r3}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {}, {r1}, {0x0, r3}, {}, {r2}, {r1}, {0x0, r3}, {r1}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {r1}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {r2}, {}, {r1, r3}, {r1}, {r2, r3}, {}, {}, {0x0, r3}, {0x0, r9}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r7}, {}, {0x0, r3}, {r1}, {0x0, r3}, {}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {r2}, {}, {}, {0x0, r3}, {}, {}, {r2, r3}, {r1}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {r2}, {0x0, r3}, {}, {r1}, {0x0, r11}, {}, {}, {}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {}, {}, {r1}, {}, {}, {r1}, {r2, r3}, {0x0, r3}, {}, {0x0, 0x0}, {}, {}, {r2}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r2}, {}, {}, {r1}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {}, {r2, r3}, {}, {}, {r1}, {}, {r1}, {r2}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {r1, r8}, {}, {r2}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r2}, {r1}, {0x0, r3}, {r1, 0x0}, {r2}, {r1}, {r2}, {r2}, {0x0, r6}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r2}, {r1}, {0x0, r3}, {0x0, r3}, {r2}, {}, {}, {}, {}, {r1, r3}], 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r16}, {0x0, r17}], 0x4, "8c73253a626560"}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) 20:28:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffbffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 388.142480][T26124] loop3: detected capacity change from 0 to 131456 [ 388.145786][ C0] sd 0:0:1:0: tag#174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 388.151225][T26124] EXT4-fs (loop3): inodes count not valid: 4294704928 vs 32 [ 388.158793][ C0] sd 0:0:1:0: tag#174 CDB: opcode=0xe5 (vendor) [ 388.172285][ C0] sd 0:0:1:0: tag#174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 388.181435][ C0] sd 0:0:1:0: tag#174 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 20:28:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 388.190401][ C0] sd 0:0:1:0: tag#174 CDB[20]: ba [ 388.206314][T26129] loop4: detected capacity change from 0 to 131456 [ 388.214308][T26127] loop1: detected capacity change from 0 to 131456 20:28:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 388.250080][T26129] EXT4-fs (loop4): inodes count not valid: 268435488 vs 32 [ 388.250088][T26127] EXT4-fs (loop1): inodes count not valid: 50331680 vs 32 [ 388.275653][T26127] loop1: detected capacity change from 0 to 131456 [ 388.282621][T26127] EXT4-fs (loop1): inodes count not valid: 50331680 vs 32 20:28:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001d03000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:45 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030fe3030303030303030302c008b9b0c1b63c9ce7caf89f33d21139ce7ba6a8a8fb5fe0030b54124f88bc49d7eff"]) 20:28:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 388.400225][T26248] loop2: detected capacity change from 0 to 131456 [ 388.503276][T26248] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.515908][T26243] loop3: detected capacity change from 0 to 131456 [ 388.525571][T26256] loop1: detected capacity change from 0 to 131456 [ 388.533038][T26256] EXT4-fs (loop1): inodes count not valid: 52232224 vs 32 20:28:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 388.553744][T26243] EXT4-fs (loop3): inodes count not valid: 4294704928 vs 32 [ 388.575348][T26254] EXT4-fs (sda1): Unrecognized mount option "commit=0x000000þ000000000" or missing value [ 388.621482][T26129] loop4: detected capacity change from 0 to 131456 [ 388.628577][T26129] EXT4-fs (loop4): inodes count not valid: 268435488 vs 32 [ 388.657097][T26256] loop1: detected capacity change from 0 to 131456 [ 388.664347][T26256] EXT4-fs (loop1): inodes count not valid: 52232224 vs 32 20:28:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003210100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1ffff000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20f9fdffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:45 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030fe3030303030303030302c008b9b0c1b63c9ce7caf89f33d21139ce7ba6a8a8fb5fe0030b54124f88bc49d7eff"]) 20:28:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001f03000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 389.164002][T26372] EXT4-fs (sda1): Unrecognized mount option "commit=0x000000þ000000000" or missing value [ 389.168553][T26375] loop4: detected capacity change from 0 to 131456 [ 389.181046][T26375] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 389.189263][T26374] loop3: detected capacity change from 0 to 131456 [ 389.197055][T26374] EXT4-fs (loop3): inodes count not valid: 4294834464 vs 32 [ 389.204903][T26376] loop1: detected capacity change from 0 to 131456 20:28:45 executing program 5: r0 = socket(0x21, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8915, &(0x7f0000000000)={'wg0\x00'}) [ 389.212212][T26376] EXT4-fs (loop1): inodes count not valid: 52363296 vs 32 [ 389.222294][T26375] loop4: detected capacity change from 0 to 131456 [ 389.239844][T26375] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 389.250497][T26376] loop1: detected capacity change from 0 to 131456 20:28:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x20010000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 389.261102][T26376] EXT4-fs (loop1): inodes count not valid: 52363296 vs 32 20:28:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002203000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 389.317178][T26391] loop3: detected capacity change from 0 to 131456 [ 389.344011][T26391] EXT4-fs (loop3): inodes count not valid: 4294834464 vs 32 [ 389.353880][T26399] loop1: detected capacity change from 0 to 131456 20:28:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x201cb000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 389.361519][T26399] EXT4-fs (loop1): inodes count not valid: 52559904 vs 32 [ 389.379347][T26447] loop2: detected capacity change from 0 to 131456 20:28:46 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10800000, &(0x7f0000000240)="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", &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)="c23a2de6560db313d0b515cfe2b9d0f1b12b6f3bdbea0d60550283973518daf139bdb622fc79eeab406ca0d47677990cd7fe1107328f9d586d4f2eb27c5cdbaf09acf73a8903838af263f743db7b38afc4470f4f193154bc808922eb5376c818564161ab00b33835f14c16413576a2bd7b6664ba3b0b62c31a7de1754a909469be2f6f9a6895dad30f4bea867cc4dab5ecbe39a1524bf80816bd97dd89249ef2364f3461c8e4fbd3b0e0a1ad3e7c965fbc8341282fe3") r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x54, &(0x7f00000001c0)="8d31e183156939000000e28c0b1dd2a357b265c8745b78376e18cd3d3dfcb946cf886521539a0c4a0d1ceeb24ae238304c9f4a4aae5c62fe4ee4c3dced276ceec4d65565f8cdfc8a9f482e32a92b2fd0f325de85"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, &(0x7f0000000140)) tkill(r1, 0x3c) [ 389.629007][ T22] audit: type=1326 audit(1634416126.186:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.652919][ T22] audit: type=1326 audit(1634416126.186:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.660029][T26447] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.676791][ T22] audit: type=1326 audit(1634416126.186:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.711226][ T22] audit: type=1326 audit(1634416126.186:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.735212][ T22] audit: type=1326 audit(1634416126.236:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.759292][ T22] audit: type=1326 audit(1634416126.236:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.783361][ T22] audit: type=1326 audit(1634416126.236:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.807326][ T22] audit: type=1326 audit(1634416126.236:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.831024][ T22] audit: type=1326 audit(1634416126.236:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.854931][ T22] audit: type=1326 audit(1634416126.236:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 389.882004][T26399] loop1: detected capacity change from 0 to 131456 [ 389.888862][T26399] EXT4-fs (loop1): inodes count not valid: 52559904 vs 32 20:28:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000220100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x20eea000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:46 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0xffffffffffffffd2, 0x979f) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe8004000800080010000f0000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d24", 0x51}, {&(0x7f0000000080)="02044911", 0x4}], 0x2}, 0x0) 20:28:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fdfdffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002303000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 390.137304][T26518] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 390.142496][T26521] loop3: detected capacity change from 0 to 131456 [ 390.152895][T26521] EXT4-fs (loop3): inodes count not valid: 4294835488 vs 32 [ 390.154574][T26523] loop1: detected capacity change from 0 to 131456 [ 390.167654][T26523] EXT4-fs (loop1): inodes count not valid: 52625440 vs 32 [ 390.176820][T26522] loop4: detected capacity change from 0 to 131456 20:28:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x24000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0xff}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x0, [0x9, 0x3, 0x7, 0x5, 0x1f59, 0x6, 0x68b7, 0x8]}, 0x5c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x200, @remote, 0xdf}, 0x1c) 20:28:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x28000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 390.194918][T26522] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 390.204710][T26522] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.218548][T26523] loop1: detected capacity change from 0 to 131456 [ 390.225693][T26523] EXT4-fs (loop1): inodes count not valid: 52625440 vs 32 [ 390.297959][T26632] loop3: detected capacity change from 0 to 131456 [ 390.305519][T26739] loop2: detected capacity change from 0 to 131456 20:28:47 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x93, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="7f000000000000000a004e2400001461000000000000000000000000000000005e0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000001000000010000000a004e210000003ffe8000000000000000000000000000aa010100"/272], 0x110) socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) openat$cgroup_int(r3, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000440)={0xffffffd5, {{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x1, [{{0xa, 0x4e22, 0xa7a, @loopback, 0x9}}]}, 0x110) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) fork() [ 390.344532][T26632] EXT4-fs (loop3): inodes count not valid: 4294835488 vs 32 [ 390.361094][T26739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002403000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200fffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 390.590563][T26754] loop3: detected capacity change from 0 to 131456 [ 390.597904][T26754] EXT4-fs (loop3): inodes count not valid: 4294905632 vs 32 [ 390.610764][T26756] loop1: detected capacity change from 0 to 131456 [ 390.619740][T26756] EXT4-fs (loop1): inodes count not valid: 52690976 vs 32 [ 390.660442][T26756] loop1: detected capacity change from 0 to 131456 [ 390.667358][T26756] EXT4-fs (loop1): inodes count not valid: 52690976 vs 32 [ 390.677264][T26754] loop3: detected capacity change from 0 to 131456 [ 390.684273][T26754] EXT4-fs (loop3): inodes count not valid: 4294905632 vs 32 20:28:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:47 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003220100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:47 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000280)="0064ff8902026285a34001ee991c63649872a6847de0a8000000", 0x1a}], 0x3, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x36) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x120, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ptrace$setopts(0x4206, r1, 0x0, 0xc) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x22) 20:28:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002503000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="207fffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 391.060485][T26869] loop4: detected capacity change from 0 to 131456 [ 391.060494][T26864] loop1: detected capacity change from 0 to 131456 [ 391.061364][T26864] EXT4-fs (loop1): inodes count not valid: 52756512 vs 32 [ 391.080966][T26869] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 391.088478][T26868] loop3: detected capacity change from 0 to 131456 [ 391.095939][T26868] EXT4-fs (loop3): inodes count not valid: 4294934304 vs 32 20:28:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:47 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x42000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 391.112020][T26864] loop1: detected capacity change from 0 to 131456 [ 391.118991][T26864] EXT4-fs (loop1): inodes count not valid: 52756512 vs 32 20:28:47 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7a000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002603000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 391.166176][T26868] loop3: detected capacity change from 0 to 131456 [ 391.173111][T26868] EXT4-fs (loop3): inodes count not valid: 4294934304 vs 32 [ 391.185172][T26869] loop4: detected capacity change from 0 to 131456 [ 391.192072][T26869] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32 [ 391.220538][T26894] loop1: detected capacity change from 0 to 131456 [ 391.227866][T26894] EXT4-fs (loop1): inodes count not valid: 52822048 vs 32 [ 391.272989][T26995] loop2: detected capacity change from 0 to 131456 20:28:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7c000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 391.498747][T26995] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.513255][T27011] loop1: detected capacity change from 0 to 131456 [ 391.525118][T27011] EXT4-fs (loop1): inodes count not valid: 52822048 vs 32 20:28:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x2, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xee000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2085ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000001240100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {0x0}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000204000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 392.012990][T27115] loop1: detected capacity change from 0 to 131456 [ 392.015168][T27120] loop4: detected capacity change from 0 to 131456 [ 392.027282][T27115] EXT4-fs (loop1): inodes count not valid: 67239968 vs 32 [ 392.027279][T27120] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 392.043724][T27119] loop3: detected capacity change from 0 to 131456 [ 392.051329][T27119] EXT4-fs (loop3): inodes count not valid: 4294935840 vs 32 20:28:48 executing program 5: setreuid(0x0, 0xee00) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000040)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setfsuid(r1) 20:28:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xf0000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000604000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 392.060615][T27115] loop1: detected capacity change from 0 to 131456 [ 392.070016][T27115] EXT4-fs (loop1): inodes count not valid: 67239968 vs 32 20:28:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:48 executing program 5: set_mempolicy(0x3, &(0x7f0000000280)=0x3, 0x8) r0 = syz_mount_image$iso9660(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000006e1ad17a916e570d69efbc9b45bde29159baa3c2e256917e655d8621bf85eff43c4c19acce"]) syz_read_part_table(0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="bc41fa1c7ab3117d9348", 0xa, 0x8001}, {&(0x7f0000000140), 0x0, 0x8}]) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000002c0)={@id={0x2, 0x0, @b}}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x800, 0x7, &(0x7f0000000600)=[{&(0x7f0000000140), 0x0, 0x5}, {&(0x7f0000000180)="907b8f71e1", 0x5, 0x5}, {&(0x7f00000001c0)="eb47b233b5333936", 0x8, 0xffffffffffff7fff}, {&(0x7f0000000400)="5278c1b39026adee57515f6c2b0bcc882d3604619b00ee265f3ffdedddb3baad2427027555167897d0065fc94055806c6a9398ff9b43019c9e641395fd9a6a86a8b8ce5f99f1862a12f676a5411a2603c8ff78160e257c8a892b44c26a94960045b04f593d44cd4f8a3723f1f2d95931a3d782bc3fcd826eb757cd6f70ed8e52daa48f9dbadda0078e607e4356b2abd1f1a7a48e524130a2bed165fd334befcab378f75430b740dd86710e0101a60890e372e6f2b9e88a2947bdf8df09aa249d14b231c69a0df6d098c27e782c14ae320aeb", 0xd2, 0x9}, {&(0x7f0000000240)="3af1cb2332531cfc2b3c413a27a87d00f6f4973dea913e9bb92b3297713ce01f659eda4ed9b9c770437ecace06fa55b3bf204bf2b97354b9bb12a52f6191", 0x3e, 0x7}, {&(0x7f0000000500)="28248e685f4d7767321673aa49fad853202444cea726415c1002cbf88559fa4961ea727bcfff8fbf876188fbb4d2201a942d673099f81ccb3135a8c506e8e049dd56657f5900a935c7fe86065a680fe9cc0d35e45e070eebbe3465e4526238509ea76f284f0c5f492551bc1d9e07fd7d9faef1ca179770c68b702fa474d555c1480853384a5339d8bd5eff93aefd521e819beee48d67f160c56da9e631810c0d7fd16f48077480985102bb0638a974032c63d6d2fad8d245a46fdb559ef67dcecaa520d73c68d1c45ff9e25bd71646c5ab6595314369c4136c83838f88798b5f4a58d8919e93016ea82ea2cb4b05bc3e3419d4d153b5", 0xf6, 0x6}, {&(0x7f0000000300)="8503458d05676bd873eb7baf595b06ba7301f42d9f5a9ec4fd052e2920849ea6ae7929e7d429d449", 0x28, 0x930}], 0x1018020, &(0x7f0000000340)={[{@commit={'commit', 0x3d, 0x100000001}}, {@lazytime}, {@data_journal}, {@journal_ioprio}, {@dioread_lock}], [{@smackfshat={'smackfshat', 0x3d, '(\xca\x00'}}]}) getdents(r1, &(0x7f00000006c0)=""/180, 0xb4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0x10001]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000780), 0x3240014, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@aname}, {@cache_mmap}, {@cache_fscache}, {@access_client}, {@fscache}, {@cache_loose}, {@version_L}, {@msize={'msize', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', r3}}]}}) [ 392.130972][T27300] loop1: detected capacity change from 0 to 131456 [ 392.138535][T27300] EXT4-fs (loop1): inodes count not valid: 67502112 vs 32 [ 392.151290][T27119] loop3: detected capacity change from 0 to 131456 [ 392.152309][T27120] loop4: detected capacity change from 0 to 131456 [ 392.158161][T27119] EXT4-fs (loop3): inodes count not valid: 4294935840 vs 32 [ 392.164931][T27120] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 392.233238][T27386] loop2: detected capacity change from 0 to 131456 [ 392.257767][T27300] loop1: detected capacity change from 0 to 131456 20:28:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 392.380028][T27300] EXT4-fs (loop1): inodes count not valid: 67502112 vs 32 [ 392.509239][T27386] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x2, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004500)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000000)={0x20, 0x11, 0x601, 0x0, 0x0, "", [@generic="6cf2561b05a5ec5db9307ead35"]}, 0x20}], 0x1}, 0x0) 20:28:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xffffc000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="208cffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000250100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001004000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 392.994286][T27466] loop4: detected capacity change from 0 to 131456 [ 393.009818][T27470] loop3: detected capacity change from 0 to 131456 [ 393.018113][T27470] EXT4-fs (loop3): inodes count not valid: 4294937632 vs 32 [ 393.026518][T27472] loop1: detected capacity change from 0 to 131456 [ 393.033835][T27472] EXT4-fs (loop1): inodes count not valid: 68157472 vs 32 20:28:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:49 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000005000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 393.041427][T27466] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 393.056408][T27466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.070274][T27472] loop1: detected capacity change from 0 to 131456 [ 393.077074][T27472] EXT4-fs (loop1): inodes count not valid: 68157472 vs 32 [ 393.138465][T27491] loop1: detected capacity change from 0 to 131456 [ 393.145900][T27491] EXT4-fs (loop1): inodes count not valid: 83886112 vs 32 [ 393.160398][T27492] loop2: detected capacity change from 0 to 131456 [ 393.213687][T27492] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.227386][T27470] loop3: detected capacity change from 0 to 131456 [ 393.234528][T27470] EXT4-fs (loop3): inodes count not valid: 4294937632 vs 32 20:28:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x6) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x80, &(0x7f00000000c0)=0xc77b, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x4}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000004dc0)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x200090}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf2533040000080001001b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000004cc0), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x4800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000008c0)=0x1100, 0x2) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000540)=""/44, 0x2c}], 0xa}, 0x5}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/93, 0x5d}], 0x5, &(0x7f0000003980)=""/170, 0xaa}, 0x1}, {{&(0x7f0000003a40)=@un=@abs, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003ac0)=""/13, 0xd}, {&(0x7f0000003b00)=""/249, 0xf9}, {&(0x7f0000003c00)=""/144, 0x90}, {&(0x7f0000003cc0)=""/195, 0xc3}], 0x4, &(0x7f0000003e00)=""/115, 0x73}}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000003e80)=""/65, 0x41}, {&(0x7f0000003f00)=""/215, 0xd7}, {&(0x7f0000004000)=""/238, 0xee}, {&(0x7f0000004100)=""/49, 0x31}, {&(0x7f0000004140)=""/152, 0x98}, {&(0x7f0000004200)=""/104, 0x68}, {&(0x7f0000004280)=""/101, 0x65}, {&(0x7f0000004300)=""/68, 0x44}, {&(0x7f0000004fc0)=""/216, 0xd8}], 0x9, &(0x7f0000004540)=""/107, 0x6b}, 0xcea9}, {{&(0x7f00000045c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004640)=""/4, 0x4}, {&(0x7f0000004680)=""/142, 0x8e}, {&(0x7f0000004740)=""/36, 0x24}, {&(0x7f0000004780)=""/87, 0x57}, {&(0x7f0000004800)=""/177, 0xb1}], 0x5}, 0x8}, {{&(0x7f0000004940)=@l2, 0x80, &(0x7f0000004a40)=[{&(0x7f00000049c0)=""/87, 0x57}], 0x1, &(0x7f0000004a80)=""/139, 0x8b}, 0x5}], 0x6, 0x40, 0x0) write$sndseq(r4, &(0x7f0000004e80)=[{0x80, 0x4, 0x8, 0x3, @time={0xffff7293, 0xfffffffa}, {0xe0, 0xb1}, {0x1, 0xed}, @time=@tick=0x5}, {0x39, 0x95, 0xef, 0x80, @tick=0x9, {0x37, 0x83}, {0x6, 0xa5}, @queue={0x4, {0x1, 0xffffffff}}}, {0x4, 0xfb, 0x7f, 0x5, @tick=0xffff7fff, {0x3, 0x6}, {0x1, 0xff}, @raw32={[0x1000, 0xfffffffb, 0x7]}}, {0x3, 0x1f, 0x81, 0x4f, @time={0xffffffff, 0x35}, {0x8}, {0x1, 0x9}, @result={0x4, 0x7}}, {0x3f, 0x40, 0x8, 0x40, @time={0x6, 0x1}, {0x1, 0x3f}, {0x81, 0x1f}, @addr={0x9, 0x3d}}, {0x73, 0x3f, 0x4, 0x1, @time={0x5, 0x8eb0}, {0x81, 0x19}, {0xfc}, @ext={0x6f, &(0x7f0000004e00)="0a38de285a0b7885e92b12b26dcefc8825b5c6da709361ec6e6d6ca9d32c4505ea3b0a4f2ecc9b1cb4f4dd39bab826701b3b719066453db0902a31bd4a629df8868cfc6f027e830688f121142fb78bbc5b13a135e76d4bcd3d20019325cc782bf06a7aa04e8ec64cb853b8ef642ff1"}}, {0x3, 0x9, 0x8, 0x53, @time={0x7, 0xff}, {0x5, 0x2}, {0x7c}, @queue={0x19, {0x8, 0x9}}}, {0x5, 0x5, 0x5, 0x20, @time={0x1, 0x3f}, {0x1, 0x1}, {0x1, 0x1f}, @time=@time={0x7, 0x3}}, {0x4, 0x2, 0x40, 0x0, @tick=0x44b000, {0x90, 0x6a}, {0x7, 0x86}, @raw32={[0x5a4, 0x4, 0x8001]}}, {0x7, 0xf0, 0x0, 0x4, @tick=0x1, {0x0, 0x84}, {0x7f, 0x5}, @control={0x1, 0x6, 0x9}}], 0x118) [ 393.442276][T27603] loop1: detected capacity change from 0 to 131456 [ 393.449166][T27603] EXT4-fs (loop1): inodes count not valid: 83886112 vs 32 20:28:50 executing program 5: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x20000000, 0x0) r3 = syz_io_uring_setup(0x20a9, &(0x7f0000000180), &(0x7f00006d7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r4, r2, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x100000000000000) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0xffffffff, 0x20, 0x0, 0x1000000}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000440)) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x110, r3, 0x10000000) syz_io_uring_submit(r6, r10, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0xfffffffc) 20:28:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000001250100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:50 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r3 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x50, r0, 0x10000000) r6 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x20001) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r6, &(0x7f0000000180)={0x10000010}}, 0x7) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, {0x0, r7}}, 0x1) syz_io_uring_setup(0x9aa, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20daffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x2, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000006000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 393.915495][T27607] loop3: detected capacity change from 0 to 131456 [ 393.922404][T27609] loop4: detected capacity change from 0 to 131456 [ 393.929814][T27609] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 393.930324][T27607] EXT4-fs (loop3): inodes count not valid: 4294957600 vs 32 [ 393.948924][T27615] loop1: detected capacity change from 0 to 131456 [ 393.956390][T27615] EXT4-fs (loop1): inodes count not valid: 100663328 vs 32 20:28:50 executing program 0: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0)={0x0, 0xc5c7, 0x20}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r7, r8, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x14ac000, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2004, @fd=r1, 0x10000000000, 0x8, 0x8, 0x14, 0x1, {0x2}}, 0x401) syz_io_uring_submit(r3, r8, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffff, 0x0, 0x8, 0x0, 0x1, {0x0, r9}}, 0x9) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 394.011351][T27615] loop1: detected capacity change from 0 to 131456 [ 394.018281][T27615] EXT4-fs (loop1): inodes count not valid: 100663328 vs 32 [ 394.031770][T27609] loop4: detected capacity change from 0 to 131456 [ 394.038759][T27609] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 394.104161][T28091] loop2: detected capacity change from 0 to 131456 20:28:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000406000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000001260100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 394.186525][T27607] loop3: detected capacity change from 0 to 131456 [ 394.193961][T27607] EXT4-fs (loop3): inodes count not valid: 4294957600 vs 32 20:28:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) 20:28:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0xc0926d088348efd4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044800) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 394.258861][T28095] loop4: detected capacity change from 0 to 131456 [ 394.280326][T28095] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 394.280987][T28091] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 394.350968][T28098] loop1: detected capacity change from 0 to 131456 [ 394.358447][T28098] EXT4-fs (loop1): inodes count not valid: 100925472 vs 32 20:28:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20e2ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 394.410388][T28107] loop1: detected capacity change from 0 to 131456 [ 394.415187][T28099] EXT4-fs (sda1): pa ffff88813dca5f08: logic 32768, phys. 182272, len 2048 [ 394.417524][T28102] device lo entered promiscuous mode [ 394.425610][T28099] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:4776: group 5, free 2018, pa_free 2007 [ 394.434997][T28100] device lo left promiscuous mode [ 394.441948][T28107] EXT4-fs (loop1): inodes count not valid: 100925472 vs 32 [ 394.455530][T28109] device lo entered promiscuous mode [ 394.474050][T28100] device lo left promiscuous mode [ 394.482956][T28113] loop3: detected capacity change from 0 to 131456 [ 394.490411][T28113] EXT4-fs (loop3): inodes count not valid: 4294959648 vs 32 [ 394.503608][T28095] loop4: detected capacity change from 0 to 131456 [ 394.510438][T28095] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 20:28:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000007000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000001270100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 394.576715][T28194] loop1: detected capacity change from 0 to 131456 [ 394.584009][T28194] EXT4-fs (loop1): inodes count not valid: 117440544 vs 32 [ 394.606264][T28223] loop4: detected capacity change from 0 to 131456 [ 394.611156][T28113] loop3: detected capacity change from 0 to 131456 [ 394.619861][T28113] EXT4-fs (loop3): inodes count not valid: 4294959648 vs 32 [ 394.619886][T28223] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 394.638248][T28224] loop1: detected capacity change from 0 to 131456 [ 394.647238][T28224] EXT4-fs (loop1): inodes count not valid: 117440544 vs 32 20:28:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20f0ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 394.676820][ T345] EXT4-fs error (device sda1): mb_free_blocks:1826: group 5, block 182302:freeing already freed block (bit 18462); block bitmap corrupt. [ 394.720383][T28223] loop4: detected capacity change from 0 to 131456 [ 394.727279][T28223] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32 [ 394.731976][T28233] loop3: detected capacity change from 0 to 131456 [ 394.737096][T28228] EXT4-fs (sda1): pa ffff88813ddc20d0: logic 32768, phys. 217088, len 2048 [ 394.749650][T28228] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:4776: group 6, free 2018, pa_free 2007 [ 394.760678][T28233] EXT4-fs (loop3): inodes count not valid: 4294963232 vs 32 20:28:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000009000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) 20:28:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000002e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 394.849490][T28233] loop3: detected capacity change from 0 to 131456 [ 394.856412][T28233] EXT4-fs (loop3): inodes count not valid: 4294963232 vs 32 [ 394.870553][T28240] loop1: detected capacity change from 0 to 131456 [ 394.880484][T28240] EXT4-fs (loop1): inodes count not valid: 150994976 vs 32 20:28:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20f6ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 394.915798][T28240] loop1: detected capacity change from 0 to 131456 [ 394.922628][T28240] EXT4-fs (loop1): inodes count not valid: 150994976 vs 32 [ 394.947914][T28248] loop4: detected capacity change from 0 to 131456 [ 394.975975][T28251] loop3: detected capacity change from 0 to 131456 [ 394.983288][T28251] EXT4-fs (loop3): inodes count not valid: 4294964768 vs 32 [ 394.990849][T28248] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 395.043372][T28261] loop2: detected capacity change from 0 to 131456 [ 395.051905][T28248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.211182][T28261] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.260387][T28357] loop1: detected capacity change from 0 to 131456 [ 395.328467][ T345] EXT4-fs error (device sda1): mb_free_blocks:1826: group 6, block 217118:freeing already freed block (bit 20510); block bitmap corrupt. [ 395.342768][T28357] EXT4-fs (loop1): inodes count not valid: 167772192 vs 32 [ 395.384367][T28251] loop3: detected capacity change from 0 to 131456 [ 395.391178][T28251] EXT4-fs (loop3): inodes count not valid: 4294964768 vs 32 [ 395.400900][T28338] loop1: detected capacity change from 0 to 131456 [ 395.407734][T28338] EXT4-fs (loop1): inodes count not valid: 167772192 vs 32 20:28:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000003f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) 20:28:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fbffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 399.539482][T28820] device lo entered promiscuous mode [ 399.546386][T28819] device lo left promiscuous mode [ 399.558569][T28822] device lo entered promiscuous mode [ 399.565076][T28819] device lo left promiscuous mode 20:28:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6053, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}, 0x27) io_uring_enter(r1, 0x768c, 0x2db3, 0x1, &(0x7f00000000c0), 0x8) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x4}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 399.596048][T28827] loop3: detected capacity change from 0 to 131456 [ 399.605126][T28830] loop4: detected capacity change from 0 to 131456 [ 399.610169][T28827] EXT4-fs (loop3): inodes count not valid: 4294966048 vs 32 [ 399.613931][T28833] loop1: detected capacity change from 0 to 131456 [ 399.626475][T28833] EXT4-fs (loop1): inodes count not valid: 184549408 vs 32 [ 399.636744][T28830] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 399.647406][T28830] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.670697][T28833] loop1: detected capacity change from 0 to 131456 [ 399.677694][T28833] EXT4-fs (loop1): inodes count not valid: 184549408 vs 32 [ 399.729417][T28946] loop2: detected capacity change from 0 to 131456 20:28:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) 20:28:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x4}, &(0x7f0000eea000/0x1000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000279000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r0, 0x10000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x80000000, 0x7, 0x1, {0x0, 0x0, r4}}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r1, 0x10000000) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x151}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 399.927063][T28958] loop1: detected capacity change from 0 to 131456 [ 399.940009][T28958] EXT4-fs (loop1): inodes count not valid: 201326624 vs 32 [ 399.955981][T28946] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x787, &(0x7f0000000200)={0x0, 0xfbf7, 0x10, 0x3, 0x323}, &(0x7f0000278000/0x2000)=nil, &(0x7f0000277000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) syz_io_uring_setup(0x20b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6053, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}, 0x10001) [ 400.011206][T28827] loop3: detected capacity change from 0 to 131456 [ 400.011278][T28953] EXT4-fs (sda1): pa ffff88813dca5c30: logic 32768, phys. 253952, len 2048 [ 400.018138][T28827] EXT4-fs (loop3): inodes count not valid: 4294966048 vs 32 [ 400.026459][T28953] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:4776: group 7, free 2018, pa_free 2007 [ 400.045490][T28961] loop1: detected capacity change from 0 to 131456 20:28:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000400100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 400.056736][T28961] EXT4-fs (loop1): inodes count not valid: 201326624 vs 32 20:28:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0xffffffff}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x5545, &(0x7f0000000140)={0x0, 0x2cc0}, &(0x7f00001cc000/0x4000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_enter(r1, 0x316d, 0x5d53, 0x2, &(0x7f0000000080)={[0x3]}, 0x8) 20:28:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) 20:28:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20feffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 400.116805][T28970] loop4: detected capacity change from 0 to 131456 [ 400.129018][T28970] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 400.139104][T28970] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.159924][T28979] loop3: detected capacity change from 0 to 131456 20:28:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x916c}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 400.167935][T28979] EXT4-fs (loop3): inodes count not valid: 4294966816 vs 32 [ 400.195980][T28985] loop1: detected capacity change from 0 to 131456 [ 400.203337][T28985] EXT4-fs (loop1): inodes count not valid: 218103840 vs 32 [ 400.223565][ T345] EXT4-fs error (device sda1): mb_free_blocks:1826: group 7, block 253982:freeing already freed block (bit 24606); block bitmap corrupt. [ 400.239619][T28985] loop1: detected capacity change from 0 to 131456 [ 400.246492][T28985] EXT4-fs (loop1): inodes count not valid: 218103840 vs 32 [ 400.263753][T28979] loop3: detected capacity change from 0 to 131456 [ 400.270639][T28977] EXT4-fs (sda1): pa ffff888104b9cdd0: logic 32768, phys. 114688, len 2048 [ 400.271497][T28979] EXT4-fs (loop3): inodes count not valid: 4294966816 vs 32 [ 400.279249][T28977] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:4776: group 3, free 2018, pa_free 2007 20:28:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00001c9000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x48002, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x81, 0x0, 0x7fffffff, 0x3, 0x1, {0x0, r5}}, 0x8001) 20:28:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000480100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000e000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1000, 0x0, @perf_config_ext={0x7, 0x33}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x18) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={'L+', 0x1}, 0x16, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)=ANY=[@ANYRESOCT=r0], 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, 0x11819, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x4, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xf7, 0x3) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x6e) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) syncfs(r3) flock(r1, 0x2) fcntl$setlease(r4, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x801e}) creat(&(0x7f0000000240)='./file0\x00', 0x108) creat(&(0x7f0000000040)='./bus\x00', 0x0) 20:28:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000020000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 400.484398][T28998] loop3: detected capacity change from 0 to 131456 [ 400.488057][T29003] loop1: detected capacity change from 0 to 131456 [ 400.494849][ T22] kauditd_printk_skb: 7 callbacks suppressed [ 400.494860][ T22] audit: type=1400 audit(1634416137.166:197): avc: denied { write } for pid=28995 comm="syz-executor.0" name="ptp0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.498165][T29003] EXT4-fs (loop1): inodes count not valid: 234881056 vs 32 [ 400.504007][T28998] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 400.534632][T29002] loop4: detected capacity change from 0 to 131456 [ 400.544205][T28998] EXT4-fs (loop3): group descriptors corrupted! [ 400.568980][T29002] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f00000017c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000001680)=""/130, 0x82}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000001740)=""/88, 0x58}], 0x6, 0x9, 0xc7) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000200)=""/151, 0x97}], 0x3) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 400.581325][T29003] loop1: detected capacity change from 0 to 131456 [ 400.583269][T29002] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.592937][T29003] EXT4-fs (loop1): inodes count not valid: 234881056 vs 32 [ 400.608772][ T345] EXT4-fs error (device sda1): mb_free_blocks:1826: group 3, block 114718:freeing already freed block (bit 16414); block bitmap corrupt. [ 400.661391][T28998] loop3: detected capacity change from 0 to 131456 [ 400.668412][T28998] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 400.678620][T28998] EXT4-fs (loop3): group descriptors corrupted! [ 400.730396][T29108] loop2: detected capacity change from 0 to 131456 20:28:57 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) io_uring_enter(0xffffffffffffffff, 0x975, 0x878d, 0x1, &(0x7f00000000c0)={[0x1f]}, 0x8) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1ae}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x10000000) 20:28:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) [ 400.975951][T29127] loop1: detected capacity change from 0 to 131456 [ 400.983693][T29127] EXT4-fs (loop1): inodes count not valid: 251658272 vs 32 [ 400.991872][T29108] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.017164][T29127] loop1: detected capacity change from 0 to 131456 20:28:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000004c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000040000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 401.024116][T29127] EXT4-fs (loop1): inodes count not valid: 251658272 vs 32 [ 401.070219][T29139] loop3: detected capacity change from 0 to 131456 [ 401.077742][T29139] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 401.088081][T29139] EXT4-fs (loop3): group descriptors corrupted! [ 401.111268][T29241] loop4: detected capacity change from 0 to 131456 [ 401.123767][T29241] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 401.133672][T29241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.159904][T29139] loop3: detected capacity change from 0 to 131456 [ 401.166997][T29139] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 401.177225][T29139] EXT4-fs (loop3): group descriptors corrupted! 20:28:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000410000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) setrlimit(0x7, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) getrlimit(0x7, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20010, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2fe}, &(0x7f0000277000/0x3000)=nil, &(0x7f0000277000/0x2000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) getrlimit(0x6, &(0x7f0000000140)) 20:28:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000600100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:28:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000060000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 401.485418][T29259] loop4: detected capacity change from 0 to 131456 [ 401.493946][T29261] loop3: detected capacity change from 0 to 131456 [ 401.495607][T29257] loop1: detected capacity change from 0 to 131456 [ 401.508180][T29259] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 401.508240][T29261] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 401.517386][T29257] EXT4-fs (loop1): inodes count not valid: 268697632 vs 32 20:28:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:28:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0xad0e}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 401.518215][T29259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.527600][T29261] EXT4-fs (loop3): group descriptors corrupted! [ 401.571210][T29257] loop1: detected capacity change from 0 to 131456 [ 401.583104][T29257] EXT4-fs (loop1): inodes count not valid: 268697632 vs 32 [ 401.625227][T29379] loop3: detected capacity change from 0 to 131456 20:28:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000000280)=""/2, 0x2}], 0x9) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x7fffffff, {0x0, r2}, 0x3, 0x0, 0x1, {0x0, 0x0, r3}}, 0x1000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r9, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) r10 = mmap$IORING_OFF_SQES(&(0x7f00001cb000/0x3000)=nil, 0x3000, 0x100000c, 0x10, r3, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x26, 0x2}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r11}}, 0x7f) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 401.681324][T29481] loop2: detected capacity change from 0 to 131456 [ 401.702112][T29379] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 401.712308][T29379] EXT4-fs (loop3): group descriptors corrupted! 20:28:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002010000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000680100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 401.860937][T29489] loop1: detected capacity change from 0 to 131456 [ 401.868419][T29489] EXT4-fs (loop1): inodes count not valid: 270532640 vs 32 [ 401.886505][T29481] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x2e36, 0x8}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee9000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r1, 0x8000000) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r7, r6, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = socket(0x9, 0x1, 0xe32) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r8, &(0x7f0000000080)={0x80000000}, r9, 0x1, 0x0, 0x0, {0x0, r10}}, 0x2) [ 401.970420][T29489] loop1: detected capacity change from 0 to 131456 [ 401.977357][T29489] EXT4-fs (loop1): inodes count not valid: 270532640 vs 32 [ 401.988295][T29494] loop4: detected capacity change from 0 to 131456 [ 401.996685][T29494] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 402.006417][T29494] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) 20:28:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000011000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002e80000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:28:59 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in=@local}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:28:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 402.467311][T29512] loop3: detected capacity change from 0 to 131456 [ 402.471464][T29513] loop1: detected capacity change from 0 to 131456 [ 402.474539][T29512] EXT4-fs (loop3): inodes count not valid: 33554464 vs 32 [ 402.487699][T29513] EXT4-fs (loop1): inodes count not valid: 285212704 vs 32 [ 402.495987][T29515] loop4: detected capacity change from 0 to 131456 [ 402.510744][T29515] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 402.521036][T29513] loop1: detected capacity change from 0 to 131456 [ 402.521053][T29515] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.550164][T29513] EXT4-fs (loop1): inodes count not valid: 285212704 vs 32 [ 402.595326][T29512] loop3: detected capacity change from 0 to 131456 [ 402.609347][T29527] loop2: detected capacity change from 0 to 131456 [ 402.669868][T29512] EXT4-fs (loop3): inodes count not valid: 33554464 vs 32 20:28:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r2 = signalfd(r1, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_setup(0x9, &(0x7f0000000140)={0x0, 0xd89c, 0x10, 0x3, 0x8c, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) [ 402.711419][T29527] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:28:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000012000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:28:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 402.889127][T29536] loop1: detected capacity change from 0 to 131456 [ 402.896506][T29536] EXT4-fs (loop1): inodes count not valid: 301989920 vs 32 [ 402.923359][T29540] loop3: detected capacity change from 0 to 131456 [ 402.931448][T29536] loop1: detected capacity change from 0 to 131456 20:28:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000277000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1b2e7}, 0x0) 20:28:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000740100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 402.931516][T29540] EXT4-fs (loop3): inodes count not valid: 131104 vs 32 [ 402.938336][T29536] EXT4-fs (loop1): inodes count not valid: 301989920 vs 32 20:28:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000014000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 403.037527][T29549] loop4: detected capacity change from 0 to 131456 [ 403.046779][T29551] loop1: detected capacity change from 0 to 131456 [ 403.049905][T29540] loop3: detected capacity change from 0 to 131456 [ 403.060087][T29551] EXT4-fs (loop1): inodes count not valid: 335544352 vs 32 [ 403.060087][T29540] EXT4-fs (loop3): inodes count not valid: 131104 vs 32 [ 403.076045][T29549] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:28:59 executing program 0: r0 = syz_io_uring_setup(0x4d30, &(0x7f00000002c0)={0x0, 0x4, 0x4, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000240)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_io_uring_setup(0x187, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9aa, &(0x7f0000000480)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1297, &(0x7f0000000080)={0x0, 0xd49, 0x8, 0x3, 0x14a, 0x0, r1}, &(0x7f0000279000/0x1000)=nil, &(0x7f00001cc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r10, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa}, 0x4) [ 403.085886][T29549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.098377][T29551] loop1: detected capacity change from 0 to 131456 [ 403.105539][T29551] EXT4-fs (loop1): inodes count not valid: 335544352 vs 32 20:29:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) 20:29:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000300000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001f15000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) io_uring_enter(r2, 0x2d01, 0x1620, 0x2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r5 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7c}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffffffff}, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r5, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000580)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xf4c) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6609, 0x0) r9 = accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) sendmsg$sock(r9, &(0x7f0000000500)={&(0x7f0000000240)=@ax25={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)="294d4ed7c3601b6f4046d79b716aab07a376e09d237a556599536cb1a6ddca2e560be5cf27f670791e50b65b9669c605e81a1aedd90d2d3843ec2dd911857aba7ed2cd2b387aa3acf05a6e6ab6bf6f3a67b21437a2c0f6e4e22ef885427127a7623bd4889ab4cb08", 0x68}], 0x1, 0xfffffffffffffffc}, 0x40880) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0x8, 0x2, 0x0, {0x0, r10, r0}}, 0x1) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 403.337294][T29566] loop3: detected capacity change from 0 to 131456 [ 403.344704][T29566] EXT4-fs (loop3): inodes count not valid: 196640 vs 32 [ 403.353424][T29568] loop4: detected capacity change from 0 to 131456 [ 403.375570][T29568] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 403.392879][T29574] loop1: detected capacity change from 0 to 131456 [ 403.393027][T29568] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.412430][T29574] EXT4-fs (loop1): inodes count not valid: 354353184 vs 32 [ 403.479914][T29579] loop2: detected capacity change from 0 to 131456 [ 403.683948][T29566] loop3: detected capacity change from 0 to 131456 [ 403.692212][T29566] EXT4-fs (loop3): inodes count not valid: 196640 vs 32 20:29:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x21c}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002015000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 403.750584][T29574] loop1: detected capacity change from 0 to 131456 [ 403.757717][T29574] EXT4-fs (loop1): inodes count not valid: 354353184 vs 32 [ 403.772668][T29579] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 403.883055][T29596] loop1: detected capacity change from 0 to 131456 [ 403.890432][T29596] EXT4-fs (loop1): inodes count not valid: 354418720 vs 32 [ 403.902281][T29598] loop3: detected capacity change from 0 to 131456 [ 403.909799][T29598] EXT4-fs (loop3): inodes count not valid: 262176 vs 32 [ 403.926936][T29600] loop4: detected capacity change from 0 to 131456 20:29:00 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$vcsa(0x0, 0x0, 0xc00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000603c0)={0x5, [{}, {}, {}, {}, {0x0, 0x0}], 0x5c, "ae54064aca0cb0"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x0, 0xfffffffffffffffb}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x10000, 0x0, 0xff, 0x1}, 0x20) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {r6}, {0x0, r8}, {0x0}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {}, {}, {r6}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {}, {}, {r6, r8}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6}, {0x0, r8}, {r6}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r6}, {r6}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {r7}, {}, {0x0, r8}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r6}, {}, {}, {}, {}, {0x0, r8}, {r7, r8}, {}, {0x0, r8}, {}, {r7}, {}, {}, {}, {r6}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {r6}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r7}, {}, {}, {r6}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {}, {r7, r8}, {}, {}, {r6}, {}, {r6}, {r7}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {r6, r8}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {r6}, {r7}, {r6}, {r7}, {}, {}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r7}, {r6}, {0x0, r8}, {0x0, r8}, {r7}, {}, {}, {}, {}, {r6, r8}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000004e800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r11}, {0x0, r12}], 0x4, "8c73253a626560"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000580)={r12, r13, "939fccdedcbda253ea3aea71cec6a35b4c845c3b0bcf10eb04cdce2a5d4adc77f2683491ee2cb372fb5253ea8bc235348d8c3326744610f0c18a4f7c7d374bcecfef4ab01f8162e5524d266391cc9568958c1f64de82c29be5b901fd1dae25f02f95286b0025a02714751b6a26eb8abd30ad8e02a6b0b26616e453cf97515260c8cf5e7614817de91d427f49d4020045c8c2948ec22c337d4907eebcfc25e5894cd88b59b8f20793a85b7108741bca35ac8b06826c0a88f3ea1b86c8ecc77e67d168865c7c8766d44202e5a11cdbfff19a94a4fc63ccfd05a704a9a8cbb1f90d75fca45b2d57e5d9dcebbbdf20e7c63c134fbc43621a241238665016cf9e5457", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000613c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r13}], 0x1f, "fef519f8a7bbc8"}) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB=',version=9p2000']) [ 403.938903][T29600] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 403.949056][T29600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.951833][T29596] loop1: detected capacity change from 0 to 131456 [ 403.966538][T29596] EXT4-fs (loop1): inodes count not valid: 354418720 vs 32 [ 404.003529][ C1] sd 0:0:1:0: tag#181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 404.013337][ C1] sd 0:0:1:0: tag#181 CDB: opcode=0xe5 (vendor) [ 404.019773][ C1] sd 0:0:1:0: tag#181 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 404.028720][ C1] sd 0:0:1:0: tag#181 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 404.037689][ C1] sd 0:0:1:0: tag#181 CDB[20]: ba 20:29:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6053, &(0x7f0000000080)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x11, 0x14ac000, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x9, 0x8, 0x0, 0x1, 0x1, 0x1, {0x0, r2}}, 0x6) r4 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_setup(0x539e, &(0x7f0000000080)={0x0, 0x9c30, 0x0, 0x0, 0x2cb, 0x0, r4}, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000200), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) [ 404.043751][ T22] audit: type=1400 audit(1634416140.716:198): avc: denied { mounton } for pid=29606 comm="syz-executor.5" path=2F726F6F742F73797A6B616C6C65722D746573746469723632383932313435392F73797A6B616C6C65722E6B4359656C582F3730362FE91F7189591E9233614B dev="sda1" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 20:29:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000018000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 404.103276][T29598] loop3: detected capacity change from 0 to 131456 [ 404.133592][T29598] EXT4-fs (loop3): inodes count not valid: 262176 vs 32 20:29:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) 20:29:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000500000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:00 executing program 0: r0 = syz_io_uring_setup(0x312e, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x3ff}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x7d55, &(0x7f0000000500)={0x0, 0xfffffffd, 0x20}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0xf5ca, 0x8, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), 0x0) r3 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20e340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x6609, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x6609, 0x0) linkat(r6, &(0x7f0000000180)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00', 0x1200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6609, 0x0) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000080)=[r4, r3, r5], 0x3, 0x0, 0x0, {0x0, r9}}, 0x8) [ 404.150235][T29618] loop1: detected capacity change from 0 to 131456 [ 404.157475][T29618] EXT4-fs (loop1): inodes count not valid: 402653216 vs 32 [ 404.158295][ C1] sd 0:0:1:0: tag#182 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 404.174456][ C1] sd 0:0:1:0: tag#182 CDB: opcode=0xe5 (vendor) [ 404.180720][ C1] sd 0:0:1:0: tag#182 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 404.189671][ C1] sd 0:0:1:0: tag#182 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 404.198606][ C1] sd 0:0:1:0: tag#182 CDB[20]: ba 20:29:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) [ 404.241716][T29618] loop1: detected capacity change from 0 to 131456 [ 404.252192][T29618] EXT4-fs (loop1): inodes count not valid: 402653216 vs 32 [ 404.276086][T29630] loop3: detected capacity change from 0 to 131456 [ 404.283803][T29630] EXT4-fs (loop3): inodes count not valid: 327712 vs 32 20:29:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000001b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x4, 0x4, 0x0, 0x4}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001c9000/0x4000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x4d5d, &(0x7f0000000080)={0x0, 0x1ded, 0x4, 0x3, 0x22c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00001c9000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x21) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r4, &(0x7f00000001c0)={0x40000000}, r2, 0x3, 0x0, 0x1, {0x0, r6}}, 0x4) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 404.294507][T29625] loop4: detected capacity change from 0 to 131456 [ 404.303836][T29625] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 404.313991][T29625] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.397323][T29743] loop2: detected capacity change from 0 to 131456 20:29:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) [ 404.464444][T29745] loop1: detected capacity change from 0 to 131456 [ 404.472325][T29745] EXT4-fs (loop1): inodes count not valid: 452984864 vs 32 20:29:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x3b67, &(0x7f0000000380)={0x0, 0x11, 0x1, 0x0, 0x37d}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) [ 404.614177][T29744] loop1: detected capacity change from 0 to 131456 [ 404.620834][T29630] loop3: detected capacity change from 0 to 131456 [ 404.627748][T29630] EXT4-fs (loop3): inodes count not valid: 327712 vs 32 [ 404.627748][T29744] EXT4-fs (loop1): inodes count not valid: 452984864 vs 32 [ 404.646122][T29743] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000031d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4}, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x8010, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r4, 0x10000000) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x6609, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd=r10, 0x9, 0x7f, 0x400, 0x12, 0x0, {0x0, r11}}, 0x8) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r0, 0x81, 0x100000000, 0x7}) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffe5) syz_io_uring_setup(0x9a7, &(0x7f0000000580)={0x0, 0x4054, 0x0, 0x4, 0xe7}, &(0x7f0000ee8000/0xd000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000440)) [ 404.749687][T29924] loop1: detected capacity change from 0 to 131456 [ 404.757032][T29924] EXT4-fs (loop1): inodes count not valid: 486735904 vs 32 [ 404.795544][T29924] loop1: detected capacity change from 0 to 131456 [ 404.802474][T29924] EXT4-fs (loop1): inodes count not valid: 486735904 vs 32 20:29:01 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x200201, 0x10) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f0000001440)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 20:29:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000600000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007d0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, 0x0) 20:29:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0xa676}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r3 = io_uring_setup(0x6053, &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x11, 0x14ac000, r4) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2000, @fd, 0x1000, 0x80000000, 0xfffffffe, 0x1, 0x1, {0x3, r4}}, 0x5) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000031f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 405.138006][T29972] loop4: detected capacity change from 0 to 131456 [ 405.146694][T29975] loop3: detected capacity change from 0 to 131456 [ 405.149066][T29979] loop1: detected capacity change from 0 to 131456 [ 405.155443][T29975] EXT4-fs (loop3): inodes count not valid: 393248 vs 32 [ 405.160677][T29979] EXT4-fs (loop1): inodes count not valid: 520290336 vs 32 20:29:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) 20:29:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x348c, 0x93e8, 0x2, &(0x7f0000000080)={[0xffffffffffffff0f]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = eventfd(0x1f) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x280400, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6609, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0xd, 0x0, 0x0, 0x20, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r0, r3, r4, r5, r0, r6, r0, r0], 0xa}, 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 405.183061][T29979] loop1: detected capacity change from 0 to 131456 [ 405.190181][T29979] EXT4-fs (loop1): inodes count not valid: 520290336 vs 32 [ 405.198136][T29972] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 405.209105][T29972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000151f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 405.259887][T29975] loop3: detected capacity change from 0 to 131456 [ 405.267112][T29975] EXT4-fs (loop3): inodes count not valid: 393248 vs 32 20:29:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) [ 405.311472][T30198] loop2: detected capacity change from 0 to 131456 [ 405.372275][T30198] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.387883][T30203] loop1: detected capacity change from 0 to 131456 20:29:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000700000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 405.581328][T30203] EXT4-fs (loop1): inodes count not valid: 521469984 vs 32 [ 405.601828][T30211] loop1: detected capacity change from 0 to 131456 [ 405.609657][T30211] EXT4-fs (loop1): inodes count not valid: 521469984 vs 32 20:29:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r1, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0x10000000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6609, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000200)='./file0\x00', 0x20, 0x200, 0x12345}, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x10000, 0x2, 0x9}, 0x18) inotify_add_watch(r6, &(0x7f0000000480)='./file0\x00', 0x10001d0) syz_io_uring_setup(0x5c8a, &(0x7f0000000080)={0x0, 0x700f, 0x20, 0x1, 0x2f5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r7, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r0, 0x8, 0x0, 0x200, 0x0, 0x1}, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x0, &(0x7f0000002040)={0x77359400}) [ 405.638936][T30214] loop4: detected capacity change from 0 to 131456 [ 405.643558][T30227] loop3: detected capacity change from 0 to 131456 [ 405.646683][T30214] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 405.670449][T30227] EXT4-fs (loop3): inodes count not valid: 458784 vs 32 20:29:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000020000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 405.671189][T30214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.728634][T30227] loop3: detected capacity change from 0 to 131456 [ 405.735523][T30227] EXT4-fs (loop3): inodes count not valid: 458784 vs 32 [ 405.739414][T30328] loop1: detected capacity change from 0 to 131456 [ 405.750127][T30328] EXT4-fs (loop1): inodes count not valid: 536870944 vs 32 [ 405.794220][T30328] loop1: detected capacity change from 0 to 131456 [ 405.801382][T30328] EXT4-fs (loop1): inodes count not valid: 536870944 vs 32 20:29:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x6b82, 0x4}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x6609, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, r2, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x9) syz_io_uring_setup(0x8e1, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x574b, 0x80000000, 0x0, &(0x7f0000000340)={[0x3f]}, 0x8) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e666174000280200002007a0004f8000060004000000007f900000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000440)) 20:29:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001020000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, 0x0) 20:29:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 406.066892][T30440] loop1: detected capacity change from 0 to 131456 [ 406.071175][T30442] loop4: detected capacity change from 0 to 131456 [ 406.076042][T30440] EXT4-fs (loop1): inodes count not valid: 537919520 vs 32 [ 406.088547][T30443] loop3: detected capacity change from 0 to 131456 [ 406.095745][T30443] EXT4-fs (loop3): inodes count not valid: 524320 vs 32 [ 406.103382][T30442] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 20:29:02 executing program 5: open(&(0x7f00000001c0)='./mnt\x00', 0x2200, 0x16) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000140)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000", 0x60, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001", 0x407, 0x4000000000c00}, {0x0, 0x0, 0x2}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004000000", 0x60, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00269c653cbeb1204cc56d5163a06e11fa2c36da272ba023131523ae52af6ea2da952bac7bcb215aac"]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./mnt\x00', 0x8000, 0x40) chdir(&(0x7f0000000080)='./mnt\x00') 20:29:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000140), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x408c80) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4003, @fd=r3, 0xff, 0x5, 0x6, 0x8, 0x0, {0x1}}, 0xffff) 20:29:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001520000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 406.113226][T30442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.132063][T30440] loop1: detected capacity change from 0 to 131456 [ 406.138985][T30440] EXT4-fs (loop1): inodes count not valid: 537919520 vs 32 20:29:02 executing program 0: r0 = syz_io_uring_setup(0x1fdf, &(0x7f0000000140)={0x0, 0x8000000, 0x0, 0x1, 0x2ac}, &(0x7f00001cb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000279000/0x1000)=nil, 0x1000, 0x8, 0x40010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 406.183931][T30443] loop3: detected capacity change from 0 to 131456 [ 406.191143][T30443] EXT4-fs (loop3): inodes count not valid: 524320 vs 32 [ 406.205976][T30564] loop1: detected capacity change from 0 to 131456 [ 406.242507][T30564] EXT4-fs (loop1): inodes count not valid: 538247200 vs 32 [ 406.262517][T30567] loop2: detected capacity change from 0 to 131456 [ 406.272064][T30567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e202020202020202020100079e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200079e970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="9d9c8b027a43291f85ed7100"]) 20:29:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000900000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20ffffff850100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000276000/0x3000)=nil, 0x3000, 0xb, 0x11, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000140)=0x1, 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000276000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x7000002c}, r3}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0xffffffff}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:03 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = fork() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x1ff, 0x7, r0}) tkill(r2, 0x26) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) 20:29:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000022000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 406.523557][T30578] loop3: detected capacity change from 0 to 131456 [ 406.524762][T30564] loop1: detected capacity change from 0 to 131456 [ 406.537350][T30578] EXT4-fs (loop3): inodes count not valid: 589856 vs 32 [ 406.537350][T30564] EXT4-fs (loop1): inodes count not valid: 538247200 vs 32 [ 406.603733][T30588] loop4: detected capacity change from 0 to 131456 [ 406.603737][T30590] loop1: detected capacity change from 0 to 131456 [ 406.611550][T30588] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 406.624505][T30590] EXT4-fs (loop1): inodes count not valid: 570425376 vs 32 [ 406.648392][T30593] loop3: detected capacity change from 0 to 131456 [ 406.655495][T30593] EXT4-fs (loop3): inodes count not valid: 589856 vs 32 [ 406.670230][T30590] loop1: detected capacity change from 0 to 131456 [ 406.677173][T30590] EXT4-fs (loop1): inodes count not valid: 570425376 vs 32 [ 406.685373][T30588] loop4: detected capacity change from 0 to 131456 [ 406.692334][T30588] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, 0x0) 20:29:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_setup(0x263d, &(0x7f0000000080)={0x0, 0x3358, 0x10, 0x2, 0x39b, 0x0, r0}, &(0x7f0000277000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x5) 20:29:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000322000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20ffffff8c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000a00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 407.017509][T30604] loop3: detected capacity change from 0 to 131456 [ 407.023431][T30608] loop4: detected capacity change from 0 to 131456 [ 407.026818][T30604] EXT4-fs (loop3): inodes count not valid: 655392 vs 32 [ 407.037927][T30608] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 407.045824][T30609] loop1: detected capacity change from 0 to 131456 [ 407.054358][T30609] EXT4-fs (loop1): inodes count not valid: 570621984 vs 32 20:29:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x1574, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12000, 0x0, {0x0, r9}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(r4, r1, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0x5, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 407.091199][T30604] loop3: detected capacity change from 0 to 131456 [ 407.098089][T30604] EXT4-fs (loop3): inodes count not valid: 655392 vs 32 [ 407.110459][T30609] loop1: detected capacity change from 0 to 131456 [ 407.117320][T30609] EXT4-fs (loop1): inodes count not valid: 570621984 vs 32 20:29:03 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x3}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 407.168191][T30621] loop2: detected capacity change from 0 to 131456 [ 407.290597][T30621] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.346785][T30608] loop4: detected capacity change from 0 to 131456 [ 407.353770][T30608] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000323000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000b00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 407.422564][T30701] loop1: detected capacity change from 0 to 131456 [ 407.430122][T30701] EXT4-fs (loop1): inodes count not valid: 587399200 vs 32 [ 407.447280][T30722] loop3: detected capacity change from 0 to 131456 [ 407.458680][T30722] EXT4-fs (loop3): inodes count not valid: 720928 vs 32 20:29:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000001ebf0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x66c7, 0xb27f, 0x0, &(0x7f0000000080), 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:04 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in=@empty}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee00, 0x0, r4) r5 = gettid() sendmsg$netlink(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r4}}}], 0x20}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x4, &(0x7f0000000500)) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@huge_within_size}, {@mode={'mode', 0x3d, 0x4}}, {@gid={'gid', 0x3d, r4}}], [{@smackfshat}, {@uid_lt={'uid<', r3}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@dont_appraise}]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r6, 0x3, 0x6, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', r6, 0x29, 0x7f, 0x6, 0xfffffff7, 0x14, @empty, @private1, 0x1, 0x20, 0x5, 0x8}}) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) chdir(&(0x7f0000000040)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) fstat(r8, &(0x7f0000000140)) [ 407.471078][T30701] loop1: detected capacity change from 0 to 131456 [ 407.479081][T30701] EXT4-fs (loop1): inodes count not valid: 587399200 vs 32 [ 407.511195][T30744] loop4: detected capacity change from 0 to 131456 [ 407.518700][T30744] EXT4-fs (loop4): inodes count not valid: 503316512 vs 32 [ 407.542620][T30722] loop3: detected capacity change from 0 to 131456 [ 407.549739][T30722] EXT4-fs (loop3): inodes count not valid: 720928 vs 32 [ 407.554519][T30747] hugetlbfs: Unknown parameter './file0' [ 407.594621][T30744] loop4: detected capacity change from 0 to 131456 [ 407.601642][T30744] EXT4-fs (loop4): inodes count not valid: 503316512 vs 32 20:29:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x5004, &(0x7f0000000080)={0x0, 0xeb7c, 0x15, 0x0, 0x2f8}, &(0x7f0000277000/0x4000)=nil, &(0x7f0000279000/0x11000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x119}, &(0x7f0000277000/0x3000)=nil, &(0x7f0000286000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1, 0x80010, r1, 0x8000000) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r3, r2, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="5ed0c3f1550ec1894ef4229a005456f902631f47fe5ecbaea3a463ce20555e9fb7ed9cc0850a92ae9cffca53dd63e10cac4925304fa58cc3aa22fc67b50f57c05905b307b20639e4580ba719d194ddca47110df26a261f3fb27f3ab6d6396ddef026e6acaf14a93a9e40452d003b784ea345d8aebae95b1d735c5654d47a2f96397583fedf1185b053cdeb70437d0601a83c14c0fd3e7696b8f39c2a1664c5ecc6c92bcc9deacc9db0b9533b5866b7ebc15175647a1b2f2940c4ec05b4ce07cfc0ad07bbfb74ae88b89ab9f44683355ce36f7a01d533cc57d06eb4", 0xdb, 0x40000, 0x1, {0x0, r5}}, 0x200) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000324000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2241000, &(0x7f00000012c0)="583b52b649a1cd029bf89a391c89631635ffdab6993b6175d2bd80020a2487cf5247ac4a66103264d6e162325d68b6397b66049a2e9aeac23dc4607b767650f711118cc4d18188f8ab53d7f95ac87e34a223ce9545fd", &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="e751b38205609fad85718dc8dea5e7cc112830acb421816a584d7a97bc3dd7b070d6af5f87509531c87261eeecabee540cd18aa0529b0889b49e1816ee80920f293811357e2b8011b15c53a4fd346741586cc6d565f16e97d0833e1e7114076778b3fda275b9a069b5aef1486ae28db6d9e5df18697673707eba49b42df7a8627031c7f96c04") gettid() setreuid(0x0, 0xee01) clone(0x20000, 0x0, 0x0, 0x0, 0x0) clone(0x9a1300, &(0x7f0000000000)="a2de76237ed9a29ca0e699793a34b87ae36b6cef671adafe70091f97adfb0d8aa4a0057184629d07515e2a8a4a4704953b8cef15fb89f35433d47ec05c37ea2fa64724c05c321900f2c6e21fa3399243c954f473adec574ddeb8a6884160c2cab8ea5152423297a7a827386dbd9c82d2399355311b3a77bfd2f90b41", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="d0101fee0d49ac475309e7ce40782249f691b97fe099581c7e8f53bed24c938173853feb9bfee857f668e7c4f1ccbb034cde68f198ab960f00f148303f776f232cfa1e5d15084decad33e7285f5c0a0d152bf14b1a5a158ff8c611d2d51504bd5b0f8bef72f72173fef41df9f923c94b9beedf341224e38b476cc5416e11add0f0c0946ecfa68f27d29a003461132806") clone(0x400, &(0x7f00000001c0)="33f28e60a03d7fea2369a48ffcb9667d258d606d1de475c5a0f733149fb9da6a601e164880bc0655358b456028ed3813bc5e748f3df6a08cb93626e7d3eba90bd0716d9f8984304f39dd9e5c73af9684863315613bd94b4fd4c5693eb287684b9c16c6d820198b9401a3158eb63bf49142014e1b000fbf015c", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 20:29:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000100c00100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 1) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) [ 407.924712][T30861] loop1: detected capacity change from 0 to 131456 [ 407.932126][T30861] EXT4-fs (loop1): inodes count not valid: 604176416 vs 32 [ 407.945036][T30864] loop3: detected capacity change from 0 to 131456 [ 407.945635][T30867] loop4: detected capacity change from 0 to 131456 [ 407.954344][T30864] EXT4-fs (loop3): inodes count not valid: 786464 vs 32 [ 407.965508][T30867] EXT4-fs (loop4): inodes count not valid: 65568 vs 32 20:29:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0xe, 0x0, 0x4, 0x7ced16737ba16fa4, 0x1}, 0x316) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r7 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x1, 0x30, r7, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x110, &(0x7f00000000c0)=0x5, 0x0, 0x4) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 407.980557][T30873] loop1: detected capacity change from 0 to 131456 [ 407.992527][T30873] EXT4-fs (loop1): inodes count not valid: 604176416 vs 32 [ 408.018100][T30864] loop3: detected capacity change from 0 to 131456 20:29:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000025000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2b5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 408.029641][T30864] EXT4-fs (loop3): inodes count not valid: 786464 vs 32 [ 408.050253][T30867] loop4: detected capacity change from 0 to 131456 [ 408.058052][T30867] EXT4-fs (loop4): inodes count not valid: 65568 vs 32 [ 408.085288][T30891] loop1: detected capacity change from 0 to 131456 [ 408.092722][T30891] EXT4-fs (loop1): inodes count not valid: 620757024 vs 32 [ 408.160060][T30895] FAULT_INJECTION: forcing a failure. [ 408.160060][T30895] name failslab, interval 1, probability 0, space 0, times 0 [ 408.172707][T30895] CPU: 1 PID: 30895 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 408.181569][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.191719][T30895] Call Trace: [ 408.194988][T30895] dump_stack_lvl+0xd6/0x122 [ 408.199663][T30895] dump_stack+0x11/0x1b [ 408.203804][T30895] should_fail+0x23c/0x250 [ 408.208208][T30895] ? __se_sys_memfd_create+0xfb/0x390 [ 408.213569][T30895] __should_failslab+0x81/0x90 [ 408.218391][T30895] should_failslab+0x5/0x20 [ 408.222882][T30895] __kmalloc+0x6f/0x350 [ 408.227102][T30895] ? strnlen_user+0x137/0x1c0 [ 408.231770][T30895] __se_sys_memfd_create+0xfb/0x390 [ 408.236951][T30895] __x64_sys_memfd_create+0x2d/0x40 [ 408.242135][T30895] do_syscall_64+0x44/0xa0 [ 408.246657][T30895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 408.252542][T30895] RIP: 0033:0x7f0a416eda39 [ 408.256942][T30895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.276612][T30895] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 408.285007][T30895] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 408.292964][T30895] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 408.300932][T30895] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 408.308889][T30895] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 408.316846][T30895] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 20:29:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000001ec00100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 408.360999][T30899] loop4: detected capacity change from 0 to 131456 [ 408.390452][T30899] EXT4-fs (loop4): inodes count not valid: 503316512 vs 32 20:29:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000d00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 408.434789][T30901] loop1: detected capacity change from 0 to 131456 [ 408.493996][T30901] EXT4-fs (loop1): inodes count not valid: 620757024 vs 32 20:29:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_enter(r0, 0x4a11, 0xc477, 0x3, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x2}, 0x3) connect$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@caif=@util, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/123, 0x7b}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x0, 0x0, 0x1, {0x1}}, 0x4) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 408.576110][T30993] loop3: detected capacity change from 0 to 131456 [ 408.583557][T30993] EXT4-fs (loop3): inodes count not valid: 852000 vs 32 20:29:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000325000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x3645, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) r5 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x80800, 0x1, {0x0, r7}}, 0x6) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x10010, r0, 0x10000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r9, 0x0, r5}, 0x100000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x80000000}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x20, 0x2, 0xfffffffe}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000277000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 408.618133][T30899] loop4: detected capacity change from 0 to 131456 [ 408.625327][T30899] EXT4-fs (loop4): inodes count not valid: 503316512 vs 32 20:29:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000edc00100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 408.673764][T30993] loop3: detected capacity change from 0 to 131456 [ 408.680892][T30993] EXT4-fs (loop3): inodes count not valid: 852000 vs 32 [ 408.710835][T31021] loop1: detected capacity change from 0 to 131456 20:29:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x2, 0x8, 0x0, 0x0, 0x4}, 0xffffff80) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000e00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 408.718270][T31021] EXT4-fs (loop1): inodes count not valid: 620953632 vs 32 [ 408.727788][T31023] loop4: detected capacity change from 0 to 131456 [ 408.735061][T31023] EXT4-fs (loop4): inodes count not valid: 3976200224 vs 32 [ 408.750930][T31021] loop1: detected capacity change from 0 to 131456 [ 408.758140][T31021] EXT4-fs (loop1): inodes count not valid: 620953632 vs 32 [ 408.802530][T31031] loop3: detected capacity change from 0 to 131456 [ 408.810000][T31031] EXT4-fs (loop3): inodes count not valid: 917536 vs 32 20:29:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 2) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000326000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f0000279000/0x2000)=nil, &(0x7f0000000400)=0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_io_uring_setup(0xffff, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x6609, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0', "7f1f7b5d590d6cbb9d69234420e658ffbe3500a2d3bc673651ca7fe530d6e1c21db6b338bd8a8f67e9c83486dcdcd1993689649f94a783cafcbcb008b4a3f149c24f"}, 0x46) r3 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000358000/0x3000)=nil, 0x3000, 0x2, 0x10, r3, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index, 0xfffffffffffffff8, &(0x7f0000000580)="9b82b4afffaad1ac367c603c1b3ea2187fbcc5df50a6ef55189c0b54ee824fd47798fc9dba11cae0b72451130b368359a89ac3515056f56b3cfbf308e164f24c155b450677f5b28eb8e745db40fa4b59f307e7bbc7b8ab2dcf3f6c08308c85e6903d0b7e3a5a39f23fa1264eb7f6171a6422aab818be89fe9fbce45c3ace946f9ab23c69742a81348eedf8b0b3bef1fbbd22ab73d8aac0759030f31d1f02c791524e91871d990098f1afe8c62c6563fa27a11ea293bd980986193360a5b8540a87c1c53cda70c69cfe812275dc5c00555e5e9bf5f16eda07e4efbd010177eb89172e2965282f285ffded301436c8", 0xee, 0x8, 0x1, {0x0, r5}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x1f46, &(0x7f0000000140)={0x0, 0x9420, 0x10, 0x1, 0x3d7, 0x0, r6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 408.845981][T31023] loop4: detected capacity change from 0 to 131456 [ 408.853484][T31023] EXT4-fs (loop4): inodes count not valid: 3976200224 vs 32 20:29:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002d80100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a6, &(0x7f0000000380)={0x0, 0x0, 0x10}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r6, r7, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)={0x468800, 0x2, 0x4}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x101) [ 408.900789][T31031] loop3: detected capacity change from 0 to 131456 [ 408.907609][T31031] EXT4-fs (loop3): inodes count not valid: 917536 vs 32 [ 408.918881][T31040] loop1: detected capacity change from 0 to 131456 [ 408.926318][T31040] EXT4-fs (loop1): inodes count not valid: 637730848 vs 32 [ 408.942796][T31048] loop4: detected capacity change from 0 to 131456 [ 408.951025][T31048] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 408.960927][T31051] loop1: detected capacity change from 0 to 131456 [ 408.978049][T31051] EXT4-fs (loop1): inodes count not valid: 637730848 vs 32 20:29:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x9) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) 20:29:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000f00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 409.045043][T31059] FAULT_INJECTION: forcing a failure. [ 409.045043][T31059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.058144][T31059] CPU: 0 PID: 31059 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 409.067012][T31059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.077137][T31059] Call Trace: [ 409.080400][T31059] dump_stack_lvl+0xd6/0x122 [ 409.084981][T31059] dump_stack+0x11/0x1b [ 409.089233][T31059] should_fail+0x23c/0x250 [ 409.093639][T31059] should_fail_usercopy+0x16/0x20 [ 409.098736][T31059] _copy_from_user+0x1c/0xd0 [ 409.103402][T31059] __se_sys_memfd_create+0x137/0x390 [ 409.108750][T31059] __x64_sys_memfd_create+0x2d/0x40 [ 409.113936][T31059] do_syscall_64+0x44/0xa0 [ 409.118368][T31059] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.124251][T31059] RIP: 0033:0x7f0a416eda39 [ 409.128653][T31059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.148339][T31059] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 409.156755][T31059] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 409.164718][T31059] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 409.172682][T31059] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 409.180639][T31059] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 409.188613][T31059] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 [ 409.303784][T31063] loop3: detected capacity change from 0 to 131456 20:29:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x400, 0x2000, 0x1, {0x0, r7}}, 0xe66) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x6846, 0xd97d, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x20}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000002e000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 409.438301][T31048] loop4: detected capacity change from 0 to 131456 [ 409.447310][T31063] EXT4-fs (loop3): inodes count not valid: 983072 vs 32 [ 409.452601][T31048] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 20:29:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002d90100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x73) io_uring_enter(r2, 0x28db, 0xeca, 0x1, &(0x7f0000000080)={[0xffffffffffffffc0]}, 0x8) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r7, r6, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) syz_io_uring_setup(0x6cc9, &(0x7f0000000200)={0x0, 0xb138, 0x20, 0x0, 0xdb, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000340)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6609, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x2007, @fd=r8, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/93, 0x5d}], 0x1, 0x4, 0x0, {0x0, r9}}, 0x5) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 409.494742][T31076] loop1: detected capacity change from 0 to 131456 [ 409.502190][T31076] EXT4-fs (loop1): inodes count not valid: 771751968 vs 32 [ 409.524738][T31063] loop3: detected capacity change from 0 to 131456 [ 409.532912][T31078] loop1: detected capacity change from 0 to 131456 20:29:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r0, 0x93, {0x0, r7}, 0x7f, 0x0, 0x0, {0x0, r8, r0}}, 0x3ff) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x7108, 0x0, 0x2, 0x379}, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 409.548579][T31081] loop4: detected capacity change from 0 to 131456 [ 409.555966][T31081] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 409.566747][T31063] EXT4-fs (loop3): inodes count not valid: 983072 vs 32 [ 409.574923][T31078] EXT4-fs (loop1): inodes count not valid: 771751968 vs 32 [ 409.645788][T31081] loop4: detected capacity change from 0 to 131456 [ 409.653182][T31081] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 20:29:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 3) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000003f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002da0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000012a000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) msync(&(0x7f0000514000/0x2000)=nil, 0x2000, 0x3) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x5, 0x1, 0x0, 0x8, 0x0, 0x1}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7959, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x104) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0), 0x1) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) [ 409.789228][T31098] loop1: detected capacity change from 0 to 131456 [ 409.796605][T31098] EXT4-fs (loop1): inodes count not valid: 1056964640 vs 32 [ 409.810314][T31100] loop3: detected capacity change from 0 to 131456 [ 409.818977][T31100] EXT4-fs (loop3): inodes count not valid: 1048608 vs 32 [ 409.828947][T31104] loop4: detected capacity change from 0 to 131456 [ 409.836238][T31104] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 409.890995][T31106] FAULT_INJECTION: forcing a failure. [ 409.890995][T31106] name failslab, interval 1, probability 0, space 0, times 0 [ 409.903723][T31106] CPU: 1 PID: 31106 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 409.912521][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.922821][T31106] Call Trace: [ 409.926085][T31106] dump_stack_lvl+0xd6/0x122 [ 409.930679][T31106] dump_stack+0x11/0x1b [ 409.934818][T31106] should_fail+0x23c/0x250 [ 409.939284][T31106] ? shmem_alloc_inode+0x22/0x30 [ 409.944308][T31106] __should_failslab+0x81/0x90 [ 409.949120][T31106] ? shmem_match+0xa0/0xa0 [ 409.953522][T31106] should_failslab+0x5/0x20 [ 409.958083][T31106] kmem_cache_alloc+0x4f/0x300 [ 409.962846][T31106] ? shmem_match+0xa0/0xa0 [ 409.967246][T31106] shmem_alloc_inode+0x22/0x30 [ 409.972101][T31106] new_inode_pseudo+0x38/0x1c0 [ 409.976857][T31106] new_inode+0x21/0x120 [ 409.981001][T31106] shmem_get_inode+0xb7/0x4a0 [ 409.985674][T31106] __shmem_file_setup+0xf1/0x1d0 [ 409.990598][T31106] shmem_file_setup+0x37/0x40 [ 409.995261][T31106] __se_sys_memfd_create+0x1eb/0x390 [ 410.000611][T31106] __x64_sys_memfd_create+0x2d/0x40 [ 410.005808][T31106] do_syscall_64+0x44/0xa0 [ 410.010223][T31106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 410.016107][T31106] RIP: 0033:0x7f0a416eda39 [ 410.020506][T31106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 410.040154][T31106] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 410.048602][T31106] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 410.056560][T31106] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 410.064535][T31106] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 410.072575][T31106] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 410.080583][T31106] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 [ 410.280844][T31110] loop1: detected capacity change from 0 to 131456 20:29:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000040000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 410.386347][T31104] loop4: detected capacity change from 0 to 131456 [ 410.399153][T31104] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 410.412529][T31107] loop3: detected capacity change from 0 to 131456 [ 410.420891][T31107] EXT4-fs (loop3): inodes count not valid: 1048608 vs 32 20:29:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20ffffffda0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x2299, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001100000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 410.475393][T31122] loop1: detected capacity change from 0 to 131456 [ 410.482968][T31122] EXT4-fs (loop1): inodes count not valid: 1073741856 vs 32 [ 410.510407][T31122] loop1: detected capacity change from 0 to 131456 [ 410.517661][T31122] EXT4-fs (loop1): inodes count not valid: 1073741856 vs 32 20:29:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000048000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 410.546376][T31128] loop3: detected capacity change from 0 to 131456 [ 410.559662][T31128] EXT4-fs (loop3): inodes count not valid: 1114144 vs 32 [ 410.567419][T31130] loop4: detected capacity change from 0 to 131456 [ 410.574964][T31130] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 410.585456][T31132] loop1: detected capacity change from 0 to 131456 20:29:07 executing program 0: r0 = syz_io_uring_setup(0x4bad, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x3, &(0x7f0000ffb000/0x3000)=nil, 0x1) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x10000000, 0x0, 0x0, r3}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000400), &(0x7f00000000c0)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000200)) [ 410.592851][T31132] EXT4-fs (loop1): inodes count not valid: 1207959584 vs 32 20:29:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 4) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:07 executing program 0: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250f00000034000180080003000200000014000200697036677265746170300000000000001400020067656e657665300000000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000014000200766574683000000000000000000000002400018008000300000000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6582e7bd8354e341cf33fffa0d921f67e5069daea4f8bd307163797e7c349b8160848ea3e4a3d1a699519dd7eed40716b7a0a064d1f48036192e1339a68b1e72b3b160e0377dcceadf94f440c235afea51f74a3e528d6e9f02f062162baf8724c12024e1743a815d7b1e5586589f4f9fa0fb240bf4ca2de0ef8776fb5d2c0f2467731348bb0aa75562373021f484f437d9356531b634d7f8b22258f727c3121dd8c048ae483a8b05dca9ba49ec1a2a1db3ef78ac86"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x400) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 410.633569][T31132] loop1: detected capacity change from 0 to 131456 [ 410.649412][T31132] EXT4-fs (loop1): inodes count not valid: 1207959584 vs 32 [ 410.663274][T31130] loop4: detected capacity change from 0 to 131456 [ 410.670174][T31130] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000004c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 410.730620][T31128] loop3: detected capacity change from 0 to 131456 [ 410.737680][T31128] EXT4-fs (loop3): inodes count not valid: 1114144 vs 32 [ 410.758026][T31152] FAULT_INJECTION: forcing a failure. [ 410.758026][T31152] name failslab, interval 1, probability 0, space 0, times 0 [ 410.770844][T31152] CPU: 1 PID: 31152 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 410.779688][T31152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.790255][T31152] Call Trace: [ 410.793531][T31152] dump_stack_lvl+0xd6/0x122 [ 410.798130][T31152] dump_stack+0x11/0x1b [ 410.802347][T31152] should_fail+0x23c/0x250 [ 410.806765][T31152] ? security_inode_alloc+0x30/0x180 [ 410.812095][T31152] __should_failslab+0x81/0x90 [ 410.816946][T31152] should_failslab+0x5/0x20 [ 410.821451][T31152] kmem_cache_alloc+0x4f/0x300 [ 410.826200][T31152] security_inode_alloc+0x30/0x180 [ 410.831310][T31152] inode_init_always+0x20b/0x430 [ 410.836234][T31152] ? shmem_match+0xa0/0xa0 [ 410.840636][T31152] new_inode_pseudo+0x73/0x1c0 [ 410.845391][T31152] new_inode+0x21/0x120 [ 410.849546][T31152] shmem_get_inode+0xb7/0x4a0 [ 410.854210][T31152] __shmem_file_setup+0xf1/0x1d0 [ 410.859198][T31152] shmem_file_setup+0x37/0x40 [ 410.863939][T31152] __se_sys_memfd_create+0x1eb/0x390 [ 410.869214][T31152] __x64_sys_memfd_create+0x2d/0x40 [ 410.874400][T31152] do_syscall_64+0x44/0xa0 [ 410.878872][T31152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 410.884758][T31152] RIP: 0033:0x7f0a416eda39 [ 410.889165][T31152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 410.908850][T31152] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 410.917293][T31152] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 410.925268][T31152] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 410.933272][T31152] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 410.941230][T31152] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 410.949271][T31152] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 [ 411.024318][T31157] loop1: detected capacity change from 0 to 131456 [ 411.031868][T31157] EXT4-fs (loop1): inodes count not valid: 1275068448 vs 32 20:29:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002db0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 411.235567][T31161] loop1: detected capacity change from 0 to 131456 [ 411.252111][T31161] EXT4-fs (loop1): inodes count not valid: 1275068448 vs 32 [ 411.269596][T31164] loop3: detected capacity change from 0 to 131456 [ 411.277049][T31164] EXT4-fs (loop3): inodes count not valid: 1179680 vs 32 20:29:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_enter(r0, 0x345f, 0xebe7, 0x0, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x600000a, 0xd514ace58505e7f4, r0, 0x8000000) syz_io_uring_setup(0x1384, &(0x7f0000000080)={0x0, 0x483d, 0x20, 0x0, 0x263, 0x0, r0}, &(0x7f0000277000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0), 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 411.287097][T31165] loop4: detected capacity change from 0 to 131456 [ 411.294630][T31165] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 20:29:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000060000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 411.343927][T31165] loop4: detected capacity change from 0 to 131456 [ 411.350836][T31165] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 411.376216][T31182] loop1: detected capacity change from 0 to 131456 [ 411.383688][T31182] EXT4-fs (loop1): inodes count not valid: 1610612768 vs 32 20:29:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000dd0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:08 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 411.410608][T31179] loop3: detected capacity change from 0 to 131456 [ 411.420773][T31182] loop1: detected capacity change from 0 to 131456 [ 411.427632][T31182] EXT4-fs (loop1): inodes count not valid: 1610612768 vs 32 [ 411.440020][T31179] EXT4-fs (loop3): inodes count not valid: 1179680 vs 32 20:29:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000068000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 5) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) [ 411.473026][T31187] loop4: detected capacity change from 0 to 131456 [ 411.502440][T31191] loop1: detected capacity change from 0 to 131456 [ 411.509774][T31191] EXT4-fs (loop1): inodes count not valid: 1744830496 vs 32 20:29:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 411.517582][T31187] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 411.539624][T31187] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 411.540596][T31191] loop1: detected capacity change from 0 to 131456 [ 411.557837][T31191] EXT4-fs (loop1): inodes count not valid: 1744830496 vs 32 [ 411.608109][T31200] loop3: detected capacity change from 0 to 131456 [ 411.627140][T31201] FAULT_INJECTION: forcing a failure. [ 411.627140][T31201] name failslab, interval 1, probability 0, space 0, times 0 [ 411.639809][T31201] CPU: 0 PID: 31201 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 411.648587][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.658739][T31201] Call Trace: [ 411.662005][T31201] dump_stack_lvl+0xd6/0x122 [ 411.666586][T31201] dump_stack+0x11/0x1b [ 411.670726][T31201] should_fail+0x23c/0x250 [ 411.675233][T31201] ? __d_alloc+0x36/0x370 [ 411.679885][T31201] __should_failslab+0x81/0x90 [ 411.684659][T31201] should_failslab+0x5/0x20 [ 411.689238][T31201] kmem_cache_alloc+0x4f/0x300 [ 411.694062][T31201] __d_alloc+0x36/0x370 [ 411.698205][T31201] d_alloc_pseudo+0x1a/0x50 [ 411.702702][T31201] alloc_file_pseudo+0x77/0x150 [ 411.707703][T31201] __shmem_file_setup+0x14c/0x1d0 [ 411.712976][T31201] shmem_file_setup+0x37/0x40 [ 411.718071][T31201] __se_sys_memfd_create+0x1eb/0x390 [ 411.723418][T31201] __x64_sys_memfd_create+0x2d/0x40 [ 411.728605][T31201] do_syscall_64+0x44/0xa0 [ 411.733126][T31201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 411.739094][T31201] RIP: 0033:0x7f0a416eda39 [ 411.743496][T31201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 411.763173][T31201] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 411.771571][T31201] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 411.779570][T31201] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 411.787612][T31201] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 411.795632][T31201] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 411.803586][T31201] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 20:29:08 executing program 0: r0 = syz_io_uring_setup(0x100187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x3000)=nil, 0x3000, 0x3000007, 0x182110, r0, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r1, 0x0, &(0x7f00000005c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1d0cc000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r7 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000080)={0x0, 0xa671}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_setup(0x18d5, &(0x7f00000001c0)={0x0, 0x807d, 0x8, 0x1, 0x3b9, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x486f, &(0x7f0000000480)={0x0, 0x453e, 0x3, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001ca000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000500)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r7, 0xc19, 0x0, 0x9}, 0x2) [ 411.860255][T31200] EXT4-fs (loop3): inodes count not valid: 1310752 vs 32 20:29:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000006c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000de0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 412.061206][T31216] loop1: detected capacity change from 0 to 131456 [ 412.068506][T31216] EXT4-fs (loop1): inodes count not valid: 1811939360 vs 32 20:29:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r3 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00001cb000/0x1000)=nil, 0x1000, 0x2, 0x7ee300d8010d83f5, r3, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x1, 0x0, 0x2}, 0x8) r6 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r7, 0x80000000, 0x0, 0xa4e0, 0x2, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6}, 0xffff8001) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r11, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0xc0, &(0x7f0000000240)=0x7, 0x0, 0x4) [ 412.118392][T31202] loop3: detected capacity change from 0 to 131456 [ 412.125848][T31216] loop1: detected capacity change from 0 to 131456 [ 412.129469][T31202] EXT4-fs (loop3): inodes count not valid: 1310752 vs 32 [ 412.137472][T31216] EXT4-fs (loop1): inodes count not valid: 1811939360 vs 32 20:29:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000278000/0x1000)=nil, 0x1000, 0x200000e, 0x50, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280), 0x1, 0x0, 0x1}, 0x377) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, &(0x7f0000000080)=0x80, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private}, 0x0, 0x800, 0x1}, 0xfffffffb) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x3410, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3b8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000200)) 20:29:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000074000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 412.168376][T31221] loop4: detected capacity change from 0 to 131456 [ 412.190853][T31221] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 412.202177][T31221] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB="08003c000010000009002900c1fdc4855f95d201000000080003fdd501695e", @ANYRESOCT, @ANYBLOB="00003cf600000000004e76401500bfd169cfb149642d64844cd3b7467c93b8358782e8c595afd7402ab2d023c111ddf0ac56458f8b8a073589fb29d1dd0a0f8d3e83e5bdcb9e16bbef0f1fbbda"], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="80030000", @ANYRES16=0x0], 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00c400000006001100ff7f0000080001005fa85ce001f8e520deec7063690011000200303030303a30303a31302e3000000000080003000200000208000b00040000000600110005000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000300000006001100000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000000000006001100030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000400000008000b00ff00000006001100347400000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00080000000600110001010000080001007063690011000200303030303a30303a31302e3000000000080003000400000008000b000900"], 0x190}, 0x1, 0x0, 0x0, 0x2400c000}, 0x24044006) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @generic={0x22, "f1899e2ccaa9b44d2595bb9ba9d6"}, @vsock={0x28, 0x0, 0xffffd8ef, @hyper}, @nfc={0x27, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xf801, 0x0, 0x80000000, 0x9, 0x1000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@version_u}, {@access_uid={'access', 0x3d, 0xee00}}, {@version_L}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}, {@loose}, {@dfltuid}, {@access_client}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "8c73253a626560"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000063100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {r8}, {0x0, r9}, {0x0, r9}, {}, {}, {r7}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r8}, {}, {}, {r7, r9}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r8}, {r7}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r7}, {0x0, r9}, {}, {r8}, {r7}, {0x0, r9}, {r7}, {r8, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {r7}, {r7}, {}, {0x0, r9}, {0x0, r9}, {}, {r8, r9}, {r7, r9}, {r8}, {}, {0x0, r9}, {}, {r8}, {}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {}, {r8}, {}, {}, {0x0, r9}, {}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r7}, {}, {}, {}, {}, {0x0, r9}, {r8, r9}, {}, {0x0, r9}, {}, {r8}, {}, {}, {}, {r7}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {r7}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r8, r9}, {r7, r9}, {}, {r8, r9}, {}, {}, {r7}, {}, {r7}, {r8}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {r7, r9}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {r7, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {r7}, {r8}, {r7}, {r8}, {}, {}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r8}, {r7}, {0x0, r9}, {0x0, r9}, {r8}, {}, {}, {}, {}, {r7, r9}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063300)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r9}], 0x9, "f8043eb659e91e"}) [ 412.220776][T31229] loop1: detected capacity change from 0 to 131456 [ 412.228045][T31229] EXT4-fs (loop1): inodes count not valid: 1946157088 vs 32 [ 412.248269][ C0] sd 0:0:1:0: tag#191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.258047][ C0] sd 0:0:1:0: tag#191 CDB: opcode=0xe5 (vendor) 20:29:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x400009a7, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x0, 0xb4, 0x0, r0}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000df0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 412.264310][ C0] sd 0:0:1:0: tag#191 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.273294][ C0] sd 0:0:1:0: tag#191 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.282274][ C0] sd 0:0:1:0: tag#191 CDB[20]: ba [ 412.304102][T31244] loop3: detected capacity change from 0 to 131456 20:29:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 6) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000012a000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) msync(&(0x7f0000514000/0x2000)=nil, 0x2000, 0x3) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x5, 0x1, 0x0, 0x8, 0x0, 0x1}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7959, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x104) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0), 0x1) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 20:29:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 412.349576][T31244] EXT4-fs (loop3): inodes count not valid: 1572896 vs 32 [ 412.358862][T31345] loop1: detected capacity change from 0 to 131456 [ 412.366529][T31345] EXT4-fs (loop1): inodes count not valid: 1946157088 vs 32 20:29:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000007a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 412.408415][T31354] loop4: detected capacity change from 0 to 131456 [ 412.422922][T31354] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 412.432858][T31354] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.455806][T31363] loop1: detected capacity change from 0 to 131456 [ 412.469765][T31363] EXT4-fs (loop1): inodes count not valid: 2046820384 vs 32 [ 412.506966][T31366] FAULT_INJECTION: forcing a failure. [ 412.506966][T31366] name failslab, interval 1, probability 0, space 0, times 0 [ 412.519599][T31366] CPU: 1 PID: 31366 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 412.528510][T31366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.538640][T31366] Call Trace: [ 412.541907][T31366] dump_stack_lvl+0xd6/0x122 [ 412.546494][T31366] dump_stack+0x11/0x1b [ 412.550677][T31366] should_fail+0x23c/0x250 [ 412.555081][T31366] ? __alloc_file+0x2e/0x1a0 [ 412.559675][T31366] __should_failslab+0x81/0x90 [ 412.564461][T31366] should_failslab+0x5/0x20 [ 412.568960][T31366] kmem_cache_alloc+0x4f/0x300 [ 412.573755][T31366] __alloc_file+0x2e/0x1a0 [ 412.578222][T31366] alloc_empty_file+0xcd/0x1c0 [ 412.583063][T31366] alloc_file+0x3a/0x280 [ 412.587317][T31366] alloc_file_pseudo+0xfa/0x150 [ 412.592157][T31366] __shmem_file_setup+0x14c/0x1d0 [ 412.597187][T31366] shmem_file_setup+0x37/0x40 [ 412.601853][T31366] __se_sys_memfd_create+0x1eb/0x390 [ 412.607124][T31366] __x64_sys_memfd_create+0x2d/0x40 [ 412.612316][T31366] do_syscall_64+0x44/0xa0 [ 412.616721][T31366] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 412.622612][T31366] RIP: 0033:0x7f0a416eda39 [ 412.627053][T31366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 412.646900][T31366] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 20:29:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r3, 0x8000000000000000, 0x0, 0x0, 0x2}, 0x3) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:09 executing program 5: clone(0xd324a900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80, &(0x7f0000000100)="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", &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="6fdb11a862f074f6d12ff50ea0b8a78cde2f9887a994a93d9ca7863854259f1ddb64c0807bd1ead72e2d51e3ff8b8a63d447555a652feb32d2cd92644334908ab1d01314d76825c86272305bcb0bcf98e54a8ea9f4cc8f5e075242d96f78ae62f1244e22c6054b41f5cbbe627eecebbef8a00a979eef5ca18a20bc800ec680a16e8fe8697baba8fc8a5c5636f61d121cbb15f71d3c015e965486051a5c733271f3403e1aa161036cfe4fca9375361b894d3e79b9e2fa5b070f2a7b30327254615df139e76248") r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 412.655405][T31366] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 412.663630][T31366] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 412.671603][T31366] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 412.679572][T31366] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 412.687640][T31366] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 [ 412.779537][ T22] audit: type=1400 audit(1634416149.426:199): avc: denied { sys_admin } for pid=31370 comm="syz-executor.5" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 412.813874][T31244] loop3: detected capacity change from 0 to 131456 [ 412.821091][T31244] EXT4-fs (loop3): inodes count not valid: 1572896 vs 32 [ 412.830093][T31383] loop1: detected capacity change from 0 to 131456 [ 412.848477][T31383] EXT4-fs (loop1): inodes count not valid: 2046820384 vs 32 20:29:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ee9000/0x2000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000d9000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 412.965490][ T22] audit: type=1400 audit(1634416149.566:200): avc: denied { module_request } for pid=31353 comm="syz-executor.4" kmod="net-pf-2-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 412.994626][T31484] loop1: detected capacity change from 0 to 131456 [ 413.002174][T31484] EXT4-fs (loop1): inodes count not valid: 3640655904 vs 32 20:29:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001b00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20ffffffe20100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r3, 0x8000000000000000, 0x0, 0x0, 0x2}, 0x3) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2ba5, &(0x7f0000000080)={0x0, 0x271e, 0x0, 0x2, 0x1cc, 0x0, r0}, &(0x7f00001cb000/0x4000)=nil, &(0x7f0000279000/0x14000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000286000/0x4000)=nil, 0x4000, 0x2, 0x4010, r2, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001780)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000480)="8d6985d759765fc7ee25f3d2e27dfcb5dc45991f5623d0d29013f06071ac6b096567c9d31f5adb2b09cb8d6a7b6b9fc82f08d0be322af3de845de13cbe51d34bfd959bec703848ad5a871a643b07709626522c179c6c9dd90972869c61fac5b3b8b2f58e60bc2d8dcc915d44b1844d569a8a8f39a430b7c03e60fa2ec16888b7b516a3df844e91dde30c05e09c8c13b03a3d5f7e686d75e8afe3d52249f64032296776a79a85b91a1ed728", 0xab}], 0x2, &(0x7f0000000680)=[{0x1010, 0x1, 0x218, "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"}, {0x98, 0x1, 0x1000000, "950a06ee28bc6b966d8a9845325d49fb5dcf00b6e55946e4c282f54ec7af7c5795543e7aa170edb41d5be8c309a9f04882a79ae0602d51ada23a4733f228f2e5fe3496a6cbf82f41bd25c20043c03e880b5c596263392b12e172e145ad710e59a49fa9a97588d9305905bd3b43560cf383b165912960c0b2f5eae3d068e5cd4a1ce691c3"}, {0x38, 0x10d, 0xffffffc9, "936e30fa6d64ea1b334f536c9e6aa2f1e9bc0116ceff267f379e996bc8f32a9715da20"}], 0x10e0}, 0x0, 0x800}, 0x6) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r4 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4200, 0x6, 0x1}, 0x18) io_uring_enter(r4, 0x199, 0x4141, 0x3, &(0x7f0000000240)={[0x80000000]}, 0x8) [ 413.048859][T31484] loop1: detected capacity change from 0 to 131456 [ 413.055786][T31484] EXT4-fs (loop1): inodes count not valid: 3640655904 vs 32 [ 413.086166][T31492] loop3: detected capacity change from 0 to 131456 [ 413.093812][T31492] EXT4-fs (loop3): inodes count not valid: 1769504 vs 32 [ 413.111439][T31494] loop4: detected capacity change from 0 to 131456 [ 413.120298][T31494] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 413.141016][T31492] loop3: detected capacity change from 0 to 131456 [ 413.147904][T31492] EXT4-fs (loop3): inodes count not valid: 1769504 vs 32 [ 413.167113][T31494] loop4: detected capacity change from 0 to 131456 [ 413.174233][T31494] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 7) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000da000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:09 executing program 5: linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x6609, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) 20:29:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00001ca000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e3d, &(0x7f0000000140)={0x0, 0xd8bd, 0x20, 0x0, 0x115, 0x0, r0}, &(0x7f00001cc000/0x2000)=nil, &(0x7f0000279000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0xfffffffa) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffff00100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 413.268145][T31506] loop1: detected capacity change from 0 to 131456 [ 413.269002][T31512] loop4: detected capacity change from 0 to 131456 [ 413.275742][T31506] EXT4-fs (loop1): inodes count not valid: 3657433120 vs 32 [ 413.288722][T31512] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 413.288987][T31518] loop3: detected capacity change from 0 to 131456 [ 413.303476][T31518] EXT4-fs (loop3): inodes count not valid: 2228256 vs 32 20:29:10 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"/972], 0x2}}, 0x0) open(0x0, 0x0, 0x0) unshare(0x8000400) chdir(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800001, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003940), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x7a5c0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) unshare(0x40050280) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac141410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 413.313185][T31506] loop1: detected capacity change from 0 to 131456 [ 413.327837][T31506] EXT4-fs (loop1): inodes count not valid: 3657433120 vs 32 [ 413.369967][T31620] FAULT_INJECTION: forcing a failure. [ 413.369967][T31620] name failslab, interval 1, probability 0, space 0, times 0 [ 413.382745][T31620] CPU: 1 PID: 31620 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 413.391530][T31620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.401567][T31620] Call Trace: [ 413.404828][T31620] dump_stack_lvl+0xd6/0x122 [ 413.409407][T31620] dump_stack+0x11/0x1b [ 413.413626][T31620] should_fail+0x23c/0x250 [ 413.418029][T31620] ? security_file_alloc+0x30/0x190 [ 413.423213][T31620] __should_failslab+0x81/0x90 [ 413.427981][T31620] should_failslab+0x5/0x20 [ 413.432486][T31620] kmem_cache_alloc+0x4f/0x300 [ 413.437248][T31620] security_file_alloc+0x30/0x190 [ 413.442260][T31620] __alloc_file+0x83/0x1a0 [ 413.446674][T31620] alloc_empty_file+0xcd/0x1c0 [ 413.451425][T31620] alloc_file+0x3a/0x280 [ 413.455791][T31620] alloc_file_pseudo+0xfa/0x150 [ 413.460652][T31620] __shmem_file_setup+0x14c/0x1d0 [ 413.465664][T31620] shmem_file_setup+0x37/0x40 [ 413.470346][T31620] __se_sys_memfd_create+0x1eb/0x390 [ 413.475618][T31620] __x64_sys_memfd_create+0x2d/0x40 [ 413.480865][T31620] do_syscall_64+0x44/0xa0 [ 413.485365][T31620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 413.491245][T31620] RIP: 0033:0x7f0a416eda39 [ 413.495641][T31620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 413.515344][T31620] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 413.523830][T31620] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f0a416eda39 [ 413.531883][T31620] RDX: 0000000000011900 RSI: 0000000000000000 RDI: 00007f0a41746dfb [ 413.539846][T31620] RBP: 0000000000000003 R08: 0000000000008c80 R09: ffffffffffffffff [ 413.547973][T31620] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 413.556004][T31620] R13: 0000000020000100 R14: 0000000004030014 R15: 0000000020013800 20:29:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000db000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6053, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x3, 0x43d, 0x0, 0x45, 0x4, 0x1, {0x0, r8}}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 413.724187][T31626] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 413.732529][T31626] netlink: 4662 bytes leftover after parsing attributes in process `syz-executor.5'. [ 413.791013][T31632] loop1: detected capacity change from 0 to 131456 [ 413.798955][T31632] EXT4-fs (loop1): inodes count not valid: 3674210336 vs 32 [ 413.825580][T31512] loop4: detected capacity change from 0 to 131456 [ 413.832969][T31512] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:10 executing program 0: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffff60100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 413.853411][T31518] loop3: detected capacity change from 0 to 131456 [ 413.860766][T31518] EXT4-fs (loop3): inodes count not valid: 2228256 vs 32 [ 413.861228][T31632] loop1: detected capacity change from 0 to 131456 [ 413.875132][T31632] EXT4-fs (loop1): inodes count not valid: 3674210336 vs 32 20:29:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000dc000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 413.908472][T31743] loop4: detected capacity change from 0 to 131456 [ 413.916095][T31743] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 413.958183][T31747] loop1: detected capacity change from 0 to 131456 [ 413.965647][T31747] EXT4-fs (loop1): inodes count not valid: 3690987552 vs 32 [ 413.990269][T31743] loop4: detected capacity change from 0 to 131456 [ 413.997159][T31743] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 414.013091][T31747] loop1: detected capacity change from 0 to 131456 [ 414.019967][T31747] EXT4-fs (loop1): inodes count not valid: 3690987552 vs 32 20:29:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 8) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:10 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) r5 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6609, 0x0) r9 = dup3(r5, r7, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180)=r9, 0x1) syz_io_uring_submit(r2, r0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r7, &(0x7f00000000c0)={0xc0000001}, r8, 0x1, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002500000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:10 executing program 5: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f00000001c0)="0400001c3a") r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="085196e4", @ANYRES16=r1, @ANYBLOB="25022bbd7000fddbdf250200000014000200776c616e3100000000000000000000000900030073797a31000000000900030073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 20:29:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffdf90100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000dd000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8010, r0, 0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) ioctl$int_in(r1, 0x5452, &(0x7f0000000ac0)=0x80000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r3, r2, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@llc={0x1a, 0x30a, 0x2, 0x9, 0x40, 0xd3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="7d255b4f2838901962d944c601d988e8b4db73b639a841d31af1ec7e74a5ebdd390261ca6513e135c5bf47e0138de8372f664ce14d131e618d56953a72471f65a2ba2563ae8a9582f55449bfdb93690349ebe18d43a75f94834a21ebe33595ee56fa357aa338f64bc79a8b1db07334284aee2452db2bc9c9da04cf292edfe58fa8bb6087b75a1f027935c4139a51a8faeae9b986379e7da8fd283ba220b40b5e78d7ef8136a6013d8f5ae74f328edd3cdde157", 0xb3}, {&(0x7f0000000580)="9fbada65978e0776cc18e6fc498e420b5e07fb95b29e7ecba91bef2e30632408498f78d52fb676c221f6bb1572df4daab7d518cc380ef837fa564cd9a3bcc0ec94da3a6d1afb3b7c3fac4f0b9a6c855f46b2fc1d64f7f68e98b683d91857b1a6ac2a36964aece1bb3e750f73591e5cfa29e134112252666b9923d6453c48af5832139217adbe0a1d3aa579134fb7ea4b5036a178e97ae6d106c9b4ba9b0effa4dfcecf9a9cc9a7004450b2df4cdbd7b8b093d4fd35f8bad8e37a92a327da2460e9ce514caa23b713a7d146f145d8cffd2b422137a2f2c2b7e982852906ebaf0aeba0c7a6904c6d251a37", 0xea}, {&(0x7f0000000200)="c3da562c01013db232def5becb5dc8a6b579c816437beddeb203332c8e5808b11a460523d5ebac3775a2a0cacb975aee23bc3d6d91fd76700b8d63fe27d96d25568650789b26c7221a25072120a5688874e18fa29e7cd715eb4ab8965415e24494e32836a5c6229f8df1890396fd1b801c09f6669350b57c49122262ca5be14348aa8cf004dd4137e55095eb42d762764cae280bfe05d24ecf2c6aae9fbf577446d0047bc8", 0xa5}, {&(0x7f0000000340)="bd71723c7071158d5efb9d738646e093a1e17b8484ef1009c4", 0x19}], 0x4, &(0x7f0000000680)=[{0x40, 0x10b, 0x8, "25968584198cca85c07baa9da5b61c7cf46d8dee0695af8e982cbdb19f4bd73892d393ebed5eb898b772153a"}, {0x108, 0x10c, 0x1f, "11666bdfd7286423cb02e86a39eab04c2228966874e415c6934349ed6f13dede060b8e25385c777c7d5b8c460fcefed9bad66654872f7387f8e1a67ddc3fe6c7c28a0b5c355de81093f35df403f975c4616943cf316699f895e9bf1ae3cc32f96326487927f573366dd0db7e82e2100a5eb1a604bda1e99346aac32867fd62280254fb14bb3d52f88b456851f31c68da0df8aea8718ca6574a41c3f765fd24ca3de1470727c0fb796314343365dfb6355a6a543ab11e8c7c0c8112be425070a4abd8892f7931075e0867bb6af2b9f4d8f2ff435ae1a5f76c8544f280adfbc0dba713e21537c98c62b93c1ce5211928c63b5637dbec"}, {0x110, 0x10a, 0x7, "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"}, {0xf0, 0x102, 0x2, "78e7465b52c36be0c42313d46bc59be1509b001a1797bc71dd307d3e541d5400daf52af32ee5527f292bb88824686b6a257a5c6e3f86ccfc5747db62eda442353b554118e82aeaa7a791e87a3ac94661284458d63e4a7117f3c3edce59dc90125f9ec1079ed1511ddc0dfdbd1ca2c257a5e738d29b0f054e2b663b62d81c32cbd774ce26afa0318893a928db774110302527e742407cc1bc62a46b18bcfbf2a9b37bd7cfb23f53a4993ff64e1c628ac7f8a0d9061fccfedd2228a253f511b243ae9876793f7a15048a7beb197e27db6351c051f20687fea37a1c08"}, {0xd0, 0x10e, 0xfff, "80c164ec7bc79ba6c95817b0763e75717e660dc050ecf80b337101171eb30133337ac9a3d8c35c8aa588abc26716b84d528c057324a3490b06f3d40b70af71208a5fe34c89da45cc76d8eeefc1fa930b40f051b1ca24a642607e87674d08538f22c7a7b38fcb7ff9347d3ce75c6cd9007829260b101e1bb39eadea9cc603f2012f11f7342000b8393fdcd55d7fd238bf7c49ac935bb0c60d91101100398f78ed08086d7a85f52002fd4078a0d6ad352bc666e52ddd9f13b6d851bf470919cb"}], 0x418}, 0x0, 0x4000010, 0x0, {0x0, r5}}, 0x7) [ 414.130015][T31760] loop4: detected capacity change from 0 to 131456 [ 414.138085][T31762] loop3: detected capacity change from 0 to 131456 [ 414.138758][T31760] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32 [ 414.152363][T31762] EXT4-fs (loop3): inodes count not valid: 2424864 vs 32 [ 414.160192][T31765] loop1: detected capacity change from 0 to 131456 [ 414.167740][T31765] EXT4-fs (loop1): inodes count not valid: 3707764768 vs 32 [ 414.191237][T31772] loop1: detected capacity change from 0 to 131456 [ 414.202811][T31772] EXT4-fs (loop1): inodes count not valid: 3707764768 vs 32 [ 414.241742][T31762] loop3: detected capacity change from 0 to 131456 [ 414.248900][T31762] EXT4-fs (loop3): inodes count not valid: 2424864 vs 32 [ 414.269940][T31807] FAULT_INJECTION: forcing a failure. [ 414.269940][T31807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 414.283194][T31807] CPU: 0 PID: 31807 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 414.292002][T31807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.302041][T31807] Call Trace: [ 414.305307][T31807] dump_stack_lvl+0xd6/0x122 [ 414.309889][T31807] dump_stack+0x11/0x1b [ 414.314031][T31807] should_fail+0x23c/0x250 [ 414.318488][T31807] __alloc_pages+0x102/0x320 [ 414.323067][T31807] alloc_pages_vma+0x5ee/0x770 [ 414.327855][T31807] shmem_getpage_gfp+0x96d/0x13d0 [ 414.332877][T31807] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 414.338553][T31807] ? policydb_context_isvalid+0x135/0x230 [ 414.344314][T31807] shmem_write_begin+0x7e/0x100 [ 414.349163][T31807] generic_perform_write+0x1b8/0x3e0 [ 414.354572][T31807] __generic_file_write_iter+0x174/0x310 [ 414.360265][T31807] ? generic_write_checks+0x250/0x290 [ 414.365652][T31807] generic_file_write_iter+0x75/0x130 [ 414.371023][T31807] vfs_write+0x7bc/0x900 [ 414.375333][T31807] __x64_sys_pwrite64+0xf5/0x150 [ 414.380327][T31807] do_syscall_64+0x44/0xa0 [ 414.384818][T31807] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 414.390877][T31807] RIP: 0033:0x7f0a416a0a07 [ 414.395286][T31807] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 414.414986][T31807] RSP: 002b:00007f0a3f421f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 414.423504][T31807] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0a07 [ 414.431460][T31807] RDX: 000000000000003f RSI: 0000000020000080 RDI: 0000000000000007 [ 414.439464][T31807] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 414.447445][T31807] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000007 [ 414.455404][T31807] R13: 0000000000000007 R14: 0000000020000300 R15: 0000000000000000 [ 414.463778][T31807] loop2: detected capacity change from 0 to 131456 [ 414.472797][T31807] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 414.641936][T31760] loop4: detected capacity change from 0 to 131456 [ 414.649151][T31760] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32 20:29:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000db000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002e00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffffb0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000e0000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ede000/0xa000)=nil, 0xa000, 0x1, 0x40c1013, r1, 0x8000000) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ee4000/0x3000)=nil) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6609, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000080)=[r1, r0, r5, r1, r0], 0x5, 0x0, 0x1, {0x0, r7}}, 0xfffff800) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x2}, 0x8) [ 414.766022][T31892] loop3: detected capacity change from 0 to 131456 [ 414.773506][T31892] EXT4-fs (loop3): inodes count not valid: 3014688 vs 32 [ 414.795935][T31894] loop4: detected capacity change from 0 to 131456 [ 414.803409][T31894] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 414.823379][T31901] loop1: detected capacity change from 0 to 131456 [ 414.830868][T31901] EXT4-fs (loop1): inodes count not valid: 3758096416 vs 32 [ 414.867014][T31894] loop4: detected capacity change from 0 to 131456 [ 414.874392][T31894] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 [ 414.883823][T31892] loop3: detected capacity change from 0 to 131456 [ 414.883904][T31901] loop1: detected capacity change from 0 to 131456 [ 414.890751][T31892] EXT4-fs (loop3): inodes count not valid: 3014688 vs 32 [ 414.897483][T31901] EXT4-fs (loop1): inodes count not valid: 3758096416 vs 32 20:29:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 9) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:11 executing program 5: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='ip_vti0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x389840, 0x80) pipe(&(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_buf(r1, 0x107, 0x17, &(0x7f0000001680)=""/94, &(0x7f0000001700)=0x5e) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x6609, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/11, 0xb}, {&(0x7f0000001100)=""/185, 0xb9}, {&(0x7f00000011c0)=""/215, 0xd7}, {&(0x7f00000012c0)=""/55, 0x37}, {&(0x7f0000001300)=""/80, 0x50}, {&(0x7f0000001380)=""/142, 0x8e}, {&(0x7f0000001440)=""/187, 0xfc}, {&(0x7f0000001500)=""/82, 0x52}], 0x9) 20:29:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{&(0x7f00000017c0)={0xa, 0x4e22, 0x0, @local={0xfe, 0x10}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000e1000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffdfd0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20003200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:11 executing program 0: r0 = syz_io_uring_setup(0x552a, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0x80000, 0x10000000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00001cc000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, r2, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x101000, 0x23456}, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x7d) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 415.023328][T31920] loop1: detected capacity change from 0 to 131456 [ 415.023367][T31919] loop3: detected capacity change from 0 to 131456 [ 415.032664][T31920] EXT4-fs (loop1): inodes count not valid: 3774873632 vs 32 [ 415.044112][T31919] EXT4-fs (loop3): inodes count not valid: 3276832 vs 32 [ 415.044501][T31917] loop4: detected capacity change from 0 to 131456 [ 415.058645][T31917] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32 [ 415.081729][T31920] loop1: detected capacity change from 0 to 131456 [ 415.088704][T31920] EXT4-fs (loop1): inodes count not valid: 3774873632 vs 32 20:29:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, 0x1000, 0x0, {0x0, r5}}, 0x7fff) r6 = mmap$IORING_OFF_SQES(&(0x7f00001cb000/0x1000)=nil, 0x1000, 0x2000001, 0x40010, r2, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0x80, &(0x7f0000000440)=@nl, 0x0, 0x800, 0x1, {0x0, r7}}, 0x0) syz_io_uring_setup(0x4a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000240)) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) r9 = io_uring_setup(0x6053, &(0x7f0000000080)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r11 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x11, 0x14ac000, r10) syz_io_uring_submit(r8, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x6) [ 415.165010][T32033] FAULT_INJECTION: forcing a failure. [ 415.165010][T32033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.178091][T32033] CPU: 1 PID: 32033 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 415.186845][T32033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.196952][T32033] Call Trace: [ 415.200217][T32033] dump_stack_lvl+0xd6/0x122 [ 415.204975][T32033] dump_stack+0x11/0x1b [ 415.209124][T32033] should_fail+0x23c/0x250 [ 415.213540][T32033] should_fail_usercopy+0x16/0x20 [ 415.218569][T32033] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 415.224729][T32033] ? shmem_write_begin+0x7e/0x100 [ 415.229757][T32033] generic_perform_write+0x201/0x3e0 [ 415.235033][T32033] __generic_file_write_iter+0x174/0x310 [ 415.240728][T32033] ? generic_write_checks+0x250/0x290 [ 415.246258][T32033] generic_file_write_iter+0x75/0x130 [ 415.251681][T32033] vfs_write+0x7bc/0x900 [ 415.255978][T32033] __x64_sys_pwrite64+0xf5/0x150 [ 415.260903][T32033] do_syscall_64+0x44/0xa0 [ 415.265355][T32033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 415.271369][T32033] RIP: 0033:0x7f0a416a0a07 [ 415.275772][T32033] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 415.295450][T32033] RSP: 002b:00007f0a3f421f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 415.303849][T32033] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0a07 [ 415.311864][T32033] RDX: 000000000000003f RSI: 0000000020000080 RDI: 0000000000000007 [ 415.319819][T32033] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 415.327773][T32033] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000007 [ 415.335771][T32033] R13: 0000000000000007 R14: 0000000020000300 R15: 0000000000000000 [ 415.344391][T32033] loop2: detected capacity change from 0 to 131456 20:29:12 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x8001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000080)=0x1ff, 0x0, 0x4) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x7df3, 0x0, 0x0, 0x0, 0x0) 20:29:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000fff000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 415.594890][T31917] loop4: detected capacity change from 0 to 131456 [ 415.601952][T31917] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32 [ 415.616035][T32036] loop3: detected capacity change from 0 to 131456 20:29:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x6d13}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r2 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r2, 0x8000000) syz_io_uring_setup(0x417d, &(0x7f0000000080)={0x0, 0xc65d, 0x0, 0x3, 0x24e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000278000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r6, &(0x7f0000000200)={0x604000, 0x10, 0x8}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x6609, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, r6, 0x0, r9}, 0x1000) [ 415.638881][T32272] loop1: detected capacity change from 0 to 131456 [ 415.646570][T32272] EXT4-fs (loop1): inodes count not valid: 4279173152 vs 32 [ 415.658882][T32033] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.662495][T32036] EXT4-fs (loop3): inodes count not valid: 3276832 vs 32 [ 415.680878][T32272] loop1: detected capacity change from 0 to 131456 [ 415.687808][T32272] EXT4-fs (loop1): inodes count not valid: 4279173152 vs 32 20:29:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffffe0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 415.769915][ T456] loop4: detected capacity change from 0 to 131456 [ 415.777218][ T456] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 10) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:12 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xac, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) ftruncate(r2, 0x7) sendfile(r0, r1, 0x0, 0x80000001) 20:29:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_setup(0x27da, &(0x7f0000000080)={0x0, 0x3dcb, 0x2749d35f03e2564c, 0x2, 0x16a, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000fff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 415.837288][ T456] loop4: detected capacity change from 0 to 131456 [ 415.844378][ T456] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32 20:29:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x1c}, {0x2c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r3, 0x3254, 0x5c3, 0x3, &(0x7f0000000140)={[0x6000000000000000]}, 0x8) [ 415.903316][ T528] loop1: detected capacity change from 0 to 131456 [ 415.911990][ T532] loop3: detected capacity change from 0 to 131456 [ 415.918859][ T528] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 415.919199][ T531] loop4: detected capacity change from 0 to 131456 [ 415.935678][ T531] EXT4-fs (loop4): inodes count not valid: 251658272 vs 32 [ 415.935678][ T532] EXT4-fs (loop3): inodes count not valid: 4718624 vs 32 20:29:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f00001cb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x7526, &(0x7f0000000080)={0x0, 0xacdf, 0x2, 0x3, 0x346, 0x0, r0}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x3d30, &(0x7f00000001c0)={0x0, 0x4acb, 0x1, 0x2, 0x345, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00001cb000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x77359400}, 0x1, 0x0, 0x1}, 0x3) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 415.950787][ T528] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.027652][ T549] loop3: detected capacity change from 0 to 131456 [ 416.082075][ T557] FAULT_INJECTION: forcing a failure. [ 416.082075][ T557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.095145][ T557] CPU: 0 PID: 557 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 416.103947][ T557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.113996][ T557] Call Trace: [ 416.117267][ T557] dump_stack_lvl+0xd6/0x122 [ 416.121846][ T557] dump_stack+0x11/0x1b [ 416.126000][ T557] should_fail+0x23c/0x250 [ 416.130406][ T557] should_fail_usercopy+0x16/0x20 [ 416.135457][ T557] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 416.141201][ T557] ? shmem_write_begin+0x7e/0x100 [ 416.146234][ T557] generic_perform_write+0x201/0x3e0 [ 416.151527][ T557] __generic_file_write_iter+0x174/0x310 [ 416.157146][ T557] ? generic_write_checks+0x250/0x290 [ 416.162552][ T557] generic_file_write_iter+0x75/0x130 [ 416.167932][ T557] vfs_write+0x7bc/0x900 [ 416.172201][ T557] __x64_sys_pwrite64+0xf5/0x150 [ 416.177135][ T557] do_syscall_64+0x44/0xa0 [ 416.181546][ T557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 416.187460][ T557] RIP: 0033:0x7f0a416a0a07 [ 416.191910][ T557] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 416.211512][ T557] RSP: 002b:00007f0a3f421f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 416.220038][ T557] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0a07 [ 416.227992][ T557] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000007 [ 416.236094][ T557] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 416.244047][ T557] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000007 [ 416.252034][ T557] R13: 0000000000000007 R14: 0000000020000318 R15: 0000000000000001 [ 416.260368][ T557] loop2: detected capacity change from 0 to 131456 [ 416.301894][ T555] loop1: detected capacity change from 0 to 131456 [ 416.310626][ T549] EXT4-fs (loop3): inodes count not valid: 4718624 vs 32 20:29:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 416.373300][ T555] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 416.383163][ T555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xa06b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f0000000180)={0x77359400}}, 0x8) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000080)=0x1, 0x0, 0x4) syz_io_uring_setup(0x9aa, &(0x7f0000000380)={0x0, 0x230d, 0x20}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f00001cc000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, r1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00001cd000/0x1000)=nil, 0x1000, 0x1000003, 0x10010, r1, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x9}, 0xfff) syz_io_uring_setup(0x49c, &(0x7f0000000000)={0x0, 0x3789, 0x20, 0x0, 0x2}, &(0x7f00001cd000/0x2000)=nil, &(0x7f00001ca000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x398e, &(0x7f0000000380)={0x0, 0x2c5d}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 416.505432][ T557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.531793][ T531] loop4: detected capacity change from 0 to 131456 [ 416.538969][ T531] EXT4-fs (loop4): inodes count not valid: 251658272 vs 32 [ 416.605398][ T670] loop1: detected capacity change from 0 to 131456 [ 416.615391][ T673] loop3: detected capacity change from 0 to 131456 [ 416.619168][ T670] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 416.622833][ T673] EXT4-fs (loop3): inodes count not valid: 4980768 vs 32 [ 416.632250][ T670] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.695872][ T673] loop3: detected capacity change from 0 to 131456 [ 416.702789][ T673] EXT4-fs (loop3): inodes count not valid: 4980768 vs 32 20:29:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 11) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xac, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) ftruncate(r2, 0x7) sendfile(r0, r1, 0x0, 0x80000001) 20:29:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffffbff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6609, 0x0) r6 = io_uring_setup(0x4bed, &(0x7f0000000080)={0x0, 0x80000}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r2, r4, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x2, 0x0, 0x80000001, 0x2, 0x1, {0x0, r7}}, 0x6) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 416.837545][ T680] loop1: detected capacity change from 0 to 131456 [ 416.848177][ T686] loop3: detected capacity change from 0 to 131456 [ 416.849301][ T682] loop4: detected capacity change from 0 to 131456 [ 416.856964][ T686] EXT4-fs (loop3): inodes count not valid: 6291488 vs 32 [ 416.868479][ T682] EXT4-fs (loop4): inodes count not valid: 4227858208 vs 32 [ 416.868886][ T680] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 20:29:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 416.886568][ T680] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140), 0x1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00001c4000/0x8000)=nil, 0x8000, 0x2000000, 0x110, r0, 0x10000000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc3}) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2004, @fd=r0, 0x6, &(0x7f0000000080)=""/57, 0x39, 0x15}, 0xfffffffb) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r4 = open(&(0x7f0000000200)='./file0\x00', 0x883, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000001d80)=""/221, 0xdd}, {&(0x7f0000001e80)=""/65, 0x41}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000001f00)=""/44, 0x2c}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000002000)=""/143, 0x8f}], 0x9, &(0x7f0000002180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x40000001) sendmsg$netlink(r4, &(0x7f00000037c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003780)=[{&(0x7f0000002300)={0x12f0, 0x39, 0x20, 0x70bd28, 0x25dfdbfc, "", [@nested={0x18, 0x33, 0x0, 0x1, [@generic, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @typed={0x8, 0x93, 0x0, 0x0, @pid}, @generic="8b6f589451f57c03e43770400a1a0e5b46af62b2552f1d65a0621a2ece73ee94a3c9bcc5fb03be4982ace8f3a1ce22debe6cf4cef25c13e27682728f1d263f8c6f6571b36639df9a0a2864eda03991af41fdf130799c05b80fc274dd2de7ec1fdb3a64c5cf64affe564d44c574a5c5c6dcbd2ec0ec3f96145d4557dc359e6003db1787", @generic="15cdced7093c2d72c02d83afdc08c18d927cd769cf2369c5fc983b7f0e6f3ac7837607f81b78555b79d63530c9c40a49eff10dfb6a2eaea3fc4f8e3ab3ca5ba0416650538dc4944894a3838c6a2faaf0e08955f430f9b7a7051271f93552e097120b596d842940397827eda2ea4c16b331312b00c1a0de341b3248e98f7d32a07c7a09583c55e9901f23058993699eb98ff41a23494189dfb1444a6949ff783adb19e7e0eb86a2289b456a334b0edb94457a5075df85b0606c31010f8dce03e79952c4ee627628290eb379f2af40c750a68e77bc4cf7ea877bf77391f1ba8ba2bf3367e0e0cc586b695f141f7c339cc2c8c8", @nested={0x10e4, 0x5a, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @uid=r5}, @typed={0x1004, 0x28, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x22}, @generic="294603d66a610afeb68db3a0553bdfbce60600588c95a3179981535943e868aece951f4904a4459ac6e33452c8a41c361dcfd898a77f0abc810a48d384857af0514d22f596fcd045504ce09f3fb350e16f5680bcdeef2762fceed12cad8eb961b9c79e9760ed7fef3748f9ef111f206bbfbc28ea9223e513cbd3cd05ec45a21536f24d6faf0394cac5611b202cda21573c18c42c969e6b31e09f9bc5d96027825e1710060f479af64dde256b21a8ae9c330059e1a13d21c83b460cefba5f5b0a858179306ec92b48940c932c", @typed={0x4, 0x53}]}, @generic="94f701b560e17d03ef2cd989770fb568af9f6f5606bad10027106c7e71dbdf1a1a5256fc8009e973fdfea19cbdfdd7422908f3894e93e423cd5c2516c4c639ba5f9b81116f15660c8ae4ea4f957f83727747e2a9c388b197ad1b74ca", @typed={0x8, 0x91, 0x0, 0x0, @fd=r0}]}, 0x12f0}, {&(0x7f0000003600)={0x148, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x94, 0xa, 0x0, 0x1, [@typed={0x8f, 0x8e, 0x0, 0x0, @binary="177cfa01aef1e38aa697f54618c01b0c2e481d1371331e1ab3677b2b700a0322691da0c8e5d24f346d43bbda4ca1d3eae037a6337fe0c8c0d9f38a9e67789f36650068455a2609307998d6dc27acdfe60645813e4dfc40b875086c35c7e9cfc415cb80cc851ca365bd058110fedb5fbce68620d7a03c709aee6c22e94b324615637a66d49151cf4294a5f5"}]}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x7}, @nested={0xc, 0x7b, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="ae37b3ef55acd56c6ff13185ad382dbcc2249847604f7e2c9c560ccc57fecbb92ea9dbfa81a9945f59e50b039495c61b7d4c6800020459f9bf229b4f11d6c9319ef0cc18adb7826dabef921cf67c7639c1344cd3995571ee4728a13e1a9d4595fd7f9640090730ee5f03b45bcab0bd5404d8732085c3c176966a318c07fa2f8d4c99fe45cbdfce47b0"]}, 0x148}], 0x2, 0x0, 0x0, 0x41}, 0x4080) mmap$IORING_OFF_SQES(&(0x7f0000ee6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x10d003, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000980)={r7, 0x101, 0x4, 0x1}) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 416.942141][ T686] loop3: detected capacity change from 0 to 131456 [ 416.950504][ T686] EXT4-fs (loop3): inodes count not valid: 6291488 vs 32 [ 416.965871][ T682] loop4: detected capacity change from 0 to 131456 [ 417.019113][ T700] FAULT_INJECTION: forcing a failure. [ 417.019113][ T700] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.032481][ T700] CPU: 0 PID: 700 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 417.041147][ T700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.051187][ T700] Call Trace: [ 417.054451][ T700] dump_stack_lvl+0xd6/0x122 [ 417.059030][ T700] dump_stack+0x11/0x1b [ 417.063171][ T700] should_fail+0x23c/0x250 [ 417.067572][ T700] __alloc_pages+0x102/0x320 [ 417.072150][ T700] alloc_pages_vma+0x5ee/0x770 [ 417.077020][ T700] shmem_getpage_gfp+0x96d/0x13d0 [ 417.082044][ T700] ? policydb_context_isvalid+0x135/0x230 [ 417.087755][ T700] shmem_write_begin+0x7e/0x100 [ 417.092648][ T700] generic_perform_write+0x1b8/0x3e0 [ 417.097923][ T700] __generic_file_write_iter+0x174/0x310 [ 417.103612][ T700] ? generic_write_checks+0x250/0x290 [ 417.108999][ T700] generic_file_write_iter+0x75/0x130 [ 417.114359][ T700] vfs_write+0x7bc/0x900 [ 417.118603][ T700] __x64_sys_pwrite64+0xf5/0x150 [ 417.123580][ T700] do_syscall_64+0x44/0xa0 [ 417.127986][ T700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 417.133973][ T700] RIP: 0033:0x7f0a416a0a07 [ 417.138486][ T700] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 417.158079][ T700] RSP: 002b:00007f0a3f421f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 417.166601][ T700] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0a07 [ 417.174579][ T700] RDX: 000000000000001d RSI: 0000000020012b00 RDI: 0000000000000007 [ 417.182574][ T700] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 417.190582][ T700] R10: 0000000000008c80 R11: 0000000000000293 R12: 0000000000000007 [ 417.198537][ T700] R13: 0000000000000007 R14: 0000000020000330 R15: 0000000000000002 [ 417.206871][ T700] loop2: detected capacity change from 0 to 131456 [ 417.216503][ T682] EXT4-fs (loop4): inodes count not valid: 4227858208 vs 32 [ 417.241523][ T704] loop1: detected capacity change from 0 to 131456 [ 417.251582][ T700] EXT4-fs error (device loop2): ext4_fill_super:4816: inode #2: comm syz-executor.2: iget: root inode unallocated [ 417.270001][ T700] EXT4-fs (loop2): get root inode failed [ 417.275668][ T700] EXT4-fs (loop2): mount failed [ 417.304949][ T704] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 417.320070][ T704] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200003ffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x729c, &(0x7f0000000140)={0x0, 0x7, 0x20, 0x1, 0x143, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000279000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x10000000) r3 = io_uring_setup(0x6053, &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x11, 0x14ac000, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2000, @fd=r0, 0x20, 0x7fffffff, 0xcc, 0x3, 0x0, {0x3, r4}}, 0x3) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x2a33, 0xe9fb, 0x1, &(0x7f0000000080)={[0x800]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 417.519728][ T718] loop3: detected capacity change from 0 to 131456 [ 417.527173][ T718] EXT4-fs (loop3): inodes count not valid: 6815776 vs 32 [ 417.536478][ T719] loop4: detected capacity change from 0 to 131456 [ 417.544100][ T719] EXT4-fs (loop4): inodes count not valid: 4278386720 vs 32 [ 417.568824][ T724] loop1: detected capacity change from 0 to 131456 [ 417.580088][ T724] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 417.589843][ T724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.645499][ T719] loop4: detected capacity change from 0 to 131456 [ 417.652372][ T719] EXT4-fs (loop4): inodes count not valid: 4278386720 vs 32 [ 417.668958][ T730] loop3: detected capacity change from 0 to 131456 [ 417.676881][ T730] EXT4-fs (loop3): inodes count not valid: 6815776 vs 32 20:29:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 12) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xfcfb}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x4c2, &(0x7f0000000380)={0x0, 0x0, 0x8}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x8, 0x1000, 0x1}, 0x1) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001fffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 417.779442][ T746] loop3: detected capacity change from 0 to 131456 [ 417.783162][ T749] loop1: detected capacity change from 0 to 131456 [ 417.788054][ T746] EXT4-fs (loop3): inodes count not valid: 7077920 vs 32 [ 417.794599][ T744] loop4: detected capacity change from 0 to 131456 [ 417.806834][ T744] EXT4-fs (loop4): inodes count not valid: 4280221728 vs 32 [ 417.809222][ T749] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 20:29:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 417.824162][ T749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.886498][ T754] FAULT_INJECTION: forcing a failure. [ 417.886498][ T754] name failslab, interval 1, probability 0, space 0, times 0 [ 417.899107][ T754] CPU: 1 PID: 754 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 417.907772][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.917813][ T754] Call Trace: [ 417.921132][ T754] dump_stack_lvl+0xd6/0x122 [ 417.925835][ T754] dump_stack+0x11/0x1b [ 417.929975][ T754] should_fail+0x23c/0x250 [ 417.934480][ T754] ? xas_create+0x3fb/0xb30 [ 417.938968][ T754] __should_failslab+0x81/0x90 [ 417.943798][ T754] should_failslab+0x5/0x20 [ 417.948331][ T754] kmem_cache_alloc+0x4f/0x300 [ 417.953080][ T754] xas_create+0x3fb/0xb30 [ 417.957469][ T754] xas_create_range+0x146/0x360 [ 417.962323][ T754] shmem_add_to_page_cache+0x3bd/0x660 [ 417.967774][ T754] shmem_getpage_gfp+0xba5/0x13d0 [ 417.972812][ T754] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 417.978885][ T754] shmem_write_begin+0x7e/0x100 [ 417.983783][ T754] generic_perform_write+0x1b8/0x3e0 [ 417.989113][ T754] __generic_file_write_iter+0x174/0x310 [ 417.994739][ T754] ? generic_write_checks+0x250/0x290 [ 418.000099][ T754] generic_file_write_iter+0x75/0x130 [ 418.005645][ T754] vfs_write+0x7bc/0x900 [ 418.009904][ T754] __x64_sys_pwrite64+0xf5/0x150 [ 418.014868][ T754] do_syscall_64+0x44/0xa0 [ 418.019277][ T754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 418.025162][ T754] RIP: 0033:0x7f0a416a0a07 [ 418.029652][ T754] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 418.049267][ T754] RSP: 002b:00007f0a3f421f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 418.057743][ T754] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0a07 [ 418.065756][ T754] RDX: 000000000000001d RSI: 0000000020012b00 RDI: 0000000000000007 [ 418.073712][ T754] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 418.081707][ T754] R10: 0000000000008c80 R11: 0000000000000293 R12: 0000000000000007 [ 418.089665][ T754] R13: 0000000000000007 R14: 0000000020000330 R15: 0000000000000002 [ 418.098148][ T754] loop2: detected capacity change from 0 to 131456 20:29:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x7, 0x5, 0x6, 0x1, 0x13, 0x1, {0x1, r7}}, 0x7) r9 = io_uring_setup(0x4d8b, &(0x7f0000000080)={0x0, 0xcdef, 0x0, 0x0, 0x19e}) io_uring_enter(r9, 0x7199, 0xaaf8, 0x1, &(0x7f0000000140)={[0xffffffff]}, 0x8) 20:29:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 418.183050][ T754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x2, 0x7, 0x8, 0x200, 0x10, 0x1, {0x2}}, 0xd4fd) syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 418.357365][ T744] loop4: detected capacity change from 0 to 131456 [ 418.364380][ T744] EXT4-fs (loop4): inodes count not valid: 4280221728 vs 32 [ 418.375874][ T761] loop3: detected capacity change from 0 to 131456 [ 418.388081][ T761] EXT4-fs (loop3): inodes count not valid: 7077920 vs 32 20:29:15 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) r1 = socket(0x10, 0x80000000000802, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="000028bd7000fbdbdf250e0000000c000380080001000200000008000600050000000c00018008000b00736970001400038008000300020000000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x404c0e0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_set$pid(0x1, 0x0, 0x0) [ 418.402376][ T776] loop1: detected capacity change from 0 to 131456 [ 418.418394][ T776] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 418.430367][ T776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.472203][ T22] audit: type=1326 audit(1634416155.146:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.496125][ T22] audit: type=1326 audit(1634416155.156:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.520035][ T22] audit: type=1326 audit(1634416155.166:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.543822][ T22] audit: type=1326 audit(1634416155.166:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.567531][ T22] audit: type=1326 audit(1634416155.166:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.591271][ T22] audit: type=1326 audit(1634416155.166:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.615078][ T22] audit: type=1326 audit(1634416155.166:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 [ 418.639131][ T22] audit: type=1326 audit(1634416155.166:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 20:29:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 13) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e0ffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r5, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r7}}, 0x9) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000140), &(0x7f0000fee000/0xf000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:15 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:tty_device_t:s0\x00', 0x1e) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x20, 0x4, 0x8, &(0x7f0000000180)}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x110140c, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@afid={'afid', 0x3d, 0x7ff}}, {@mmap}, {@debug={'debug', 0x3d, 0x8}}, {@posixacl}, {@aname={'aname', 0x3d, '%'}}, {@cache_fscache}, {@cache_loose}, {@fscache}, {@cache_none}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_lt={'euid<', r3}}]}}) 20:29:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 418.663218][ T22] audit: type=1326 audit(1634416155.166:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e2968a39 code=0x7ffc0000 20:29:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000580)=0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x200021f9}, 0x14) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xff01) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, {0x6, @link_local}, 0x2c, {0x2, 0x4e22, @broadcast}, 'tunl0\x00'}) splice(r0, 0x0, r2, 0x0, 0xb00, 0x0) [ 418.720737][ T893] loop3: detected capacity change from 0 to 131456 [ 418.727874][ T22] audit: type=1400 audit(1634416155.396:210): avc: denied { setcurrent } for pid=890 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 418.747884][ T893] EXT4-fs (loop3): inodes count not valid: 7602208 vs 32 [ 418.755285][ T887] loop4: detected capacity change from 0 to 131456 [ 418.763289][ T887] EXT4-fs (loop4): inodes count not valid: 4292870176 vs 32 20:29:15 executing program 0: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x296}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 418.781283][ T999] loop1: detected capacity change from 0 to 131456 [ 418.795428][ T999] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 418.797126][ T893] loop3: detected capacity change from 0 to 131456 [ 418.817374][ T893] EXT4-fs (loop3): inodes count not valid: 7602208 vs 32 [ 418.817526][ T999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.886174][ T1079] FAULT_INJECTION: forcing a failure. [ 418.886174][ T1079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.900013][ T1079] CPU: 0 PID: 1079 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 418.908702][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.918785][ T1079] Call Trace: [ 418.922046][ T1079] dump_stack_lvl+0xd6/0x122 [ 418.926652][ T1079] dump_stack+0x11/0x1b [ 418.930795][ T1079] should_fail+0x23c/0x250 [ 418.935193][ T1079] should_fail_usercopy+0x16/0x20 [ 418.940222][ T1079] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 418.945929][ T1079] ? shmem_write_begin+0x7e/0x100 [ 418.950940][ T1079] generic_perform_write+0x201/0x3e0 [ 418.956210][ T1079] __generic_file_write_iter+0x174/0x310 [ 418.961908][ T1079] ? generic_write_checks+0x250/0x290 [ 418.967372][ T1079] generic_file_write_iter+0x75/0x130 [ 418.972862][ T1079] vfs_write+0x7bc/0x900 [ 418.977222][ T1079] __x64_sys_pwrite64+0xf5/0x150 [ 418.982147][ T1079] do_syscall_64+0x44/0xa0 [ 418.986626][ T1079] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 418.992508][ T1079] RIP: 0033:0x7f0a416a0a07 [ 418.996913][ T1079] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 419.016556][ T1079] RSP: 002b:00007f0a3f421f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 419.024984][ T1079] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0a07 [ 419.033082][ T1079] RDX: 000000000000001d RSI: 0000000020012b00 RDI: 0000000000000007 [ 419.041135][ T1079] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 419.049109][ T1079] R10: 0000000000008c80 R11: 0000000000000293 R12: 0000000000000007 [ 419.057062][ T1079] R13: 0000000000000007 R14: 0000000020000330 R15: 0000000000000002 [ 419.065534][ T1079] loop2: detected capacity change from 0 to 131456 [ 419.150629][ T1079] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007a00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 419.212134][ T1003] syz-executor.5 (1003) used greatest stack depth: 10008 bytes left 20:29:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:16 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000008, 0x40010, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x2869, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 419.266262][ T1120] loop3: detected capacity change from 0 to 131456 [ 419.273840][ T1120] EXT4-fs (loop3): inodes count not valid: 7995424 vs 32 20:29:16 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0xffffff00}}) [ 419.358670][ T1120] loop3: detected capacity change from 0 to 131456 [ 419.362850][ T887] loop4: detected capacity change from 0 to 131456 [ 419.365621][ T1120] EXT4-fs (loop3): inodes count not valid: 7995424 vs 32 [ 419.372181][ T887] EXT4-fs (loop4): inodes count not valid: 4292870176 vs 32 [ 419.393720][ T1133] loop1: detected capacity change from 0 to 131456 [ 419.411132][ T1133] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 419.421142][ T1133] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 14) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:16 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe}, &(0x7f0000277000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fffbffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000cc00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x41) io_setup(0x8000, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x82, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4a000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 419.630524][ T1240] loop4: detected capacity change from 0 to 131456 [ 419.637694][ T1240] EXT4-fs (loop4): inodes count not valid: 4294704928 vs 32 [ 419.642880][ T1246] loop1: detected capacity change from 0 to 131456 [ 419.653267][ T1248] loop3: detected capacity change from 0 to 131456 [ 419.657969][ T1246] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 419.660545][ T1248] EXT4-fs (loop3): inodes count not valid: 13369376 vs 32 20:29:16 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r7 = syz_io_uring_setup(0x8f8, &(0x7f0000000200)={0x0, 0xeb0f, 0x2, 0x0, 0x2b5}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee8000/0x9000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r7, 0x5c6f, 0x5524, 0x1, &(0x7f0000000280)={[0x9]}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r9, r8, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10000) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9aa, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 419.669658][ T1246] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 419.791125][ T1258] FAULT_INJECTION: forcing a failure. [ 419.791125][ T1258] name failslab, interval 1, probability 0, space 0, times 0 [ 419.803747][ T1258] CPU: 1 PID: 1258 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 419.812467][ T1258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.822682][ T1258] Call Trace: [ 419.825948][ T1258] dump_stack_lvl+0xd6/0x122 [ 419.830535][ T1258] dump_stack+0x11/0x1b [ 419.834673][ T1258] should_fail+0x23c/0x250 [ 419.839080][ T1258] ? getname_flags+0x84/0x3f0 [ 419.843787][ T1258] __should_failslab+0x81/0x90 [ 419.848537][ T1258] should_failslab+0x5/0x20 [ 419.853128][ T1258] kmem_cache_alloc+0x4f/0x300 [ 419.857884][ T1258] getname_flags+0x84/0x3f0 [ 419.862372][ T1258] getname+0x15/0x20 [ 419.866275][ T1258] do_sys_openat2+0x6d/0x2b0 [ 419.870958][ T1258] __x64_sys_openat+0xef/0x110 [ 419.875706][ T1258] do_syscall_64+0x44/0xa0 [ 419.880187][ T1258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 419.886067][ T1258] RIP: 0033:0x7f0a416a0954 [ 419.890551][ T1258] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 419.910188][ T1258] RSP: 002b:00007f0a3f421ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 419.918598][ T1258] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0954 [ 419.926598][ T1258] RDX: 0000000000000002 RSI: 00007f0a3f422000 RDI: 00000000ffffff9c [ 419.934549][ T1258] RBP: 00007f0a3f422000 R08: 0000000000000000 R09: ffffffffffffffff [ 419.942503][ T1258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 419.950453][ T1258] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 420.177999][ T1260] loop3: detected capacity change from 0 to 131456 [ 420.190353][ T1264] loop1: detected capacity change from 0 to 131456 [ 420.191425][ T1260] EXT4-fs (loop3): inodes count not valid: 13369376 vs 32 [ 420.212789][ T1264] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 20:29:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 420.222752][ T1240] loop4: detected capacity change from 0 to 131456 [ 420.229809][ T1240] EXT4-fs (loop4): inodes count not valid: 4294704928 vs 32 [ 420.237856][ T1264] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20f9fdffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000d900000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x41) io_setup(0x8000, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x82, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4a000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 420.309522][ T1375] loop1: detected capacity change from 0 to 131456 [ 420.325667][ T1381] loop3: detected capacity change from 0 to 131456 [ 420.332905][ T1381] EXT4-fs (loop3): inodes count not valid: 14221344 vs 32 [ 420.344374][ T1382] loop4: detected capacity change from 0 to 131456 [ 420.352082][ T1382] EXT4-fs (loop4): inodes count not valid: 4294834464 vs 32 [ 420.361168][ T1375] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 420.371225][ T1375] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 420.417396][ T1382] loop4: detected capacity change from 0 to 131456 [ 420.424249][ T1382] EXT4-fs (loop4): inodes count not valid: 4294834464 vs 32 [ 420.432372][ T1381] loop3: detected capacity change from 0 to 131456 [ 420.439364][ T1381] EXT4-fs (loop3): inodes count not valid: 14221344 vs 32 20:29:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 15) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fdfdffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000da00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x41) io_setup(0x8000, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x82, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4a000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 420.549178][ T1496] loop4: detected capacity change from 0 to 131456 [ 420.556591][ T1496] EXT4-fs (loop4): inodes count not valid: 4294835488 vs 32 [ 420.565948][ T1494] loop1: detected capacity change from 0 to 131456 [ 420.575348][ T1502] loop3: detected capacity change from 0 to 131456 [ 420.582518][ T1502] EXT4-fs (loop3): inodes count not valid: 14286880 vs 32 20:29:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 420.593869][ T1494] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 420.610216][ T1494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 420.696124][ T1516] FAULT_INJECTION: forcing a failure. [ 420.696124][ T1516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.709293][ T1516] CPU: 0 PID: 1516 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 420.718187][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.728425][ T1516] Call Trace: [ 420.731690][ T1516] dump_stack_lvl+0xd6/0x122 [ 420.736268][ T1516] dump_stack+0x11/0x1b [ 420.740405][ T1516] should_fail+0x23c/0x250 [ 420.744803][ T1516] should_fail_usercopy+0x16/0x20 [ 420.749912][ T1516] strncpy_from_user+0x21/0x250 [ 420.754750][ T1516] getname_flags+0xb8/0x3f0 [ 420.759249][ T1516] getname+0x15/0x20 [ 420.763128][ T1516] do_sys_openat2+0x6d/0x2b0 [ 420.767751][ T1516] __x64_sys_openat+0xef/0x110 [ 420.772508][ T1516] do_syscall_64+0x44/0xa0 [ 420.777035][ T1516] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 420.782952][ T1516] RIP: 0033:0x7f0a416a0954 [ 420.787441][ T1516] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 420.807043][ T1516] RSP: 002b:00007f0a3f421ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 420.815453][ T1516] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0954 [ 420.823489][ T1516] RDX: 0000000000000002 RSI: 00007f0a3f422000 RDI: 00000000ffffff9c [ 420.831524][ T1516] RBP: 00007f0a3f422000 R08: 0000000000000000 R09: ffffffffffffffff 20:29:17 executing program 0: r0 = syz_io_uring_setup(0x7677, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7af6, &(0x7f0000000580)={0x0, 0xcb08, 0x8, 0x2, 0x3c0, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000500)) mmap$perf(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x8, 0x100010, 0xffffffffffffffff, 0x100000001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x460d, &(0x7f0000000180)={0x0, 0xbeb2, 0x20, 0x0, 0xbe, 0x0, r0}, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0xc835cd5a5bc9e5a3, 0x6000, @fd=r0, 0x0, &(0x7f0000000480)="655865f13a3d2f0e6beae85ccafd4416216ce0acabe920273fd7aaa5bcf61d82b838dc77949a27ecb310547573f366af96c9a10ea10343b4ebb7bcc6f7d90ae96ff6350728938731a565c7784b64e23970eb6356cf6ca64677513db85ea86458db4dd0beb65107b6cc634e81a19b03ea1844", 0x72, 0x6, 0x1}, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) io_uring_enter(r4, 0x2526, 0x6f38, 0x0, &(0x7f0000000600)={[0xffffffffffffffe5]}, 0x8) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2010, r4, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="db311e95d97014f6f17f24d1aca83ae7d0d038fef3640ce560f3aaf01e34572fc8d213ff7e43d43d9599d372fa79b2570fb0215a8919a22357cfb765d2746da0d0e3dbac", 0x44, 0x51}, 0x9) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 420.839478][ T1516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 420.847508][ T1516] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 420.971102][ T1496] loop4: detected capacity change from 0 to 131456 [ 420.978149][ T1496] EXT4-fs (loop4): inodes count not valid: 4294835488 vs 32 [ 421.009758][ T1502] loop3: detected capacity change from 0 to 131456 20:29:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x41) io_setup(0x8000, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x82, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4a000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 421.016932][ T1502] EXT4-fs (loop3): inodes count not valid: 14286880 vs 32 20:29:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200fffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000db00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 421.118725][ T1631] loop1: detected capacity change from 0 to 131456 [ 421.130875][ T1631] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 421.134614][ T1634] loop4: detected capacity change from 0 to 131456 [ 421.140675][ T1631] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.159778][ T1634] EXT4-fs (loop4): inodes count not valid: 4294905632 vs 32 20:29:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x10, r0, 0x10000000) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ee8000/0x2000)=nil, 0x2000, 0xe}, 0xa3fd) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 421.233591][ T1740] loop3: detected capacity change from 0 to 131456 [ 421.241484][ T1740] EXT4-fs (loop3): inodes count not valid: 14352416 vs 32 [ 421.251103][ T1742] loop1: detected capacity change from 0 to 131456 [ 421.259013][ T1742] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 421.269089][ T1742] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.289815][ T1634] loop4: detected capacity change from 0 to 131456 [ 421.300000][ T1634] EXT4-fs (loop4): inodes count not valid: 4294905632 vs 32 [ 421.325241][ T1751] loop3: detected capacity change from 0 to 131456 [ 421.332276][ T1751] EXT4-fs (loop3): inodes count not valid: 14352416 vs 32 20:29:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 16) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 20:29:18 executing program 5: r0 = syz_io_uring_setup(0x7677, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7af6, &(0x7f0000000580)={0x0, 0xcb08, 0x8, 0x2, 0x3c0, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000500)) mmap$perf(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x8, 0x100010, 0xffffffffffffffff, 0x100000001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x460d, &(0x7f0000000180)={0x0, 0xbeb2, 0x20, 0x0, 0xbe, 0x0, r0}, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0xc835cd5a5bc9e5a3, 0x6000, @fd=r0, 0x0, &(0x7f0000000480)="655865f13a3d2f0e6beae85ccafd4416216ce0acabe920273fd7aaa5bcf61d82b838dc77949a27ecb310547573f366af96c9a10ea10343b4ebb7bcc6f7d90ae96ff6350728938731a565c7784b64e23970eb6356cf6ca64677513db85ea86458db4dd0beb65107b6cc634e81a19b03ea1844", 0x72, 0x6, 0x1}, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) io_uring_enter(r4, 0x2526, 0x6f38, 0x0, &(0x7f0000000600)={[0xffffffffffffffe5]}, 0x8) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2010, r4, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="db311e95d97014f6f17f24d1aca83ae7d0d038fef3640ce560f3aaf01e34572fc8d213ff7e43d43d9599d372fa79b2570fb0215a8919a22357cfb765d2746da0d0e3dbac", 0x44, 0x51}, 0x9) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="207fffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000dc00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fdfdffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 421.429475][ T1756] loop4: detected capacity change from 0 to 131456 [ 421.429478][ T1760] loop1: detected capacity change from 0 to 131456 [ 421.443906][ T1756] EXT4-fs (loop4): inodes count not valid: 4294934304 vs 32 [ 421.457014][ T1766] loop3: detected capacity change from 0 to 131456 [ 421.464264][ T1766] EXT4-fs (loop3): inodes count not valid: 14417952 vs 32 20:29:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x3) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001a00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r5, 0x0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000140)="a4ab892222a8778672886738eab199efc7d54087251ed411a8843c2634ebc7b974812d4b415199370dbb7c6437c82c00db01ee05f7f5d1555afa3aee5e4c2d4786e134ad477c63ed4ce4b94fffaac9b4a31180086bbd790d860d265b56aecb3ab4e8b57eafec5adab84dcba49b4c2556f297554dbc02f3422e5a7f0847e03f95957c66cb7fab5f150314f13c514a6a7b9f74568009fcb4ee7baf5d57a0e3032132544b4271ef192f0f65e3c3", 0xac}, {&(0x7f0000000200)="fdc587528a0c4816969ab824305c18b5c943fca07332504f0292084f00f710ed2330473718c964dc532dd909816c1eae1fb15db2537c67dc951401bd71c7429f1f866b0f71d656716a672a89a01c3f097fa82387f04b4fbe27144111395cf75ffac3c5a5a037c47032171d48813555d5e7f8ab303f41cdf03d6ce57505390246937c50651b491afa", 0x88}, {&(0x7f0000000080)="f929955f9bc39acdd5e418e0fe99be422fb3b8fbc3a0c5074e6432712576a0a5cb2a8358ac8e584fac4bb4b2ffe32be6864e109b00be9efbf6ad8ceb52e832cb3c3c4800cd9100ca1fbd7c86d6967d05c00976714a9415b613ea2660c0f28202c66732ba297964bea7dc72a4fef6d769d2bcd58a1da90711a59a18e80e", 0x7d}, {&(0x7f0000000480)="ea58a037a2531c73e7d91a952f77ee98981a884ecfc40f9da41956dc0e7e6c06b6010b0bbcd21b37b4d67f45deded09023956f77625d72fab08c94b508ae00cabe9740ba8a1ea5ed363a356739c7f978dcc08360d02fe01124c52765cb0b27cb9a05b151e0e03a3d88da5b7620efce1348c9ba541a4a33e173576f4dcbfef14c486231eb501f1b3feb9a6574619c95a7acb802fed061580d01cc8a7d84d8fe60742f66a0a8674c4e2a710caaf898ff07deb6db1c48746399d7", 0xb9}, {&(0x7f0000000580)="c4a867670cba39d7547540cc4738ff262260a4ae2f74057500a892eecf17b34ddc3191b8f31e55a4b8d17549645a668a4e0dd63b51c611fb6ecd8ae5c6129aebb18504fec4286ba0c4d292bd90548773c2c76dc25d86a4c68d94eb72c1a4dc0ed85ed26ea1e0fbc7e36441756824c4b5f111925d42084b76865b4772b8bdd334335a8e2ee7c37873", 0x88}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="8db7899185f3bb1584bb0ff634072e38b0238b8f55e32e8876d40845c7624c87c04c89b0e0436c53fe8b5534d031c728ef4488ff5a3f12c5445bd15abebd6c39919ac981b4e6fa9952f2db316c09a7a4d9eacd2e47d55bf0b38205c75f2122611d0a97df0be1ae9ab6ec98d9157483010956759337b550f9cdaadce2090d677dd9095496fb4d355976cfb287625e3fa99cc89f4750c41d2dd7d3b02f631a7d5f7ba6a26ee39f62c93316e0e93789b906299cac317fc7705703e0bd7e6bfb30aad748d562", 0xc4}, {&(0x7f0000000340)="e9f82a9867a61334d0ecfb9bff1187b3015bcfef", 0x14}], 0x8, &(0x7f00000017c0)=[{0x110, 0x10c, 0x8, "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"}, {0x68, 0x10f, 0x1, "8fd4ce51198c6c91bb779dfa8f7fd42f7ccbc46c89b325b89da565bb9efc7ff898a6bc0a935b1ba51793905d878c8d0800f801118ac04008020f9b1f902a9e6c5c39b16661e5438c84aa75260379abc50ad82e67223924"}, {0x28, 0x114, 0xb8ac, "4f9477f02bdde256bb70ee7919e2e07616c24c1e4e0d0c"}, {0x40, 0x105, 0x8, "44cf1949f6d9ad0d71d8f772b02fe23f496689124cce3c239766f7f5c7448ebd78ba938f5492f240652d642a65"}], 0x1e0}, 0x0, 0x8880, 0x74fbea24b9099c16, {0x0, r6}}, 0x80) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 421.480259][ T1760] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 421.526263][ T1769] FAULT_INJECTION: forcing a failure. [ 421.526263][ T1769] name failslab, interval 1, probability 0, space 0, times 0 [ 421.538940][ T1769] CPU: 0 PID: 1769 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 421.547617][ T1769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.557767][ T1769] Call Trace: [ 421.561048][ T1769] dump_stack_lvl+0xd6/0x122 [ 421.565643][ T1769] dump_stack+0x11/0x1b [ 421.569814][ T1769] should_fail+0x23c/0x250 [ 421.574250][ T1769] ? __alloc_file+0x2e/0x1a0 [ 421.578828][ T1769] __should_failslab+0x81/0x90 [ 421.583597][ T1769] should_failslab+0x5/0x20 [ 421.588169][ T1769] kmem_cache_alloc+0x4f/0x300 [ 421.592921][ T1769] __alloc_file+0x2e/0x1a0 [ 421.597435][ T1769] alloc_empty_file+0xcd/0x1c0 [ 421.602189][ T1769] path_openat+0x6a/0x1ec0 [ 421.606627][ T1769] ? finish_task_switch+0xce/0x290 [ 421.611731][ T1769] ? __schedule+0x435/0x680 [ 421.616228][ T1769] ? shmem_write_end+0x37d/0x3d0 [ 421.621163][ T1769] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 421.627446][ T1769] ? sysvec_reschedule_ipi+0x27/0xd0 [ 421.632835][ T1769] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 421.638500][ T1769] do_filp_open+0x105/0x220 [ 421.643130][ T1769] do_sys_openat2+0xb5/0x2b0 [ 421.647712][ T1769] __x64_sys_openat+0xef/0x110 [ 421.652546][ T1769] do_syscall_64+0x44/0xa0 [ 421.657027][ T1769] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 421.663002][ T1769] RIP: 0033:0x7f0a416a0954 [ 421.667405][ T1769] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 421.687086][ T1769] RSP: 002b:00007f0a3f421ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 421.695487][ T1769] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0954 [ 421.703577][ T1769] RDX: 0000000000000002 RSI: 00007f0a3f422000 RDI: 00000000ffffff9c [ 421.711531][ T1769] RBP: 00007f0a3f422000 R08: 0000000000000000 R09: ffffffffffffffff [ 421.719486][ T1769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 421.727462][ T1769] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 421.799802][ T1760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fdfdffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 422.005132][ T1770] loop3: detected capacity change from 0 to 131456 [ 422.013609][ T1756] loop4: detected capacity change from 0 to 131456 [ 422.014041][ T1770] EXT4-fs (loop3): inodes count not valid: 14417952 vs 32 [ 422.027993][ T1756] EXT4-fs (loop4): inodes count not valid: 4294934304 vs 32 [ 422.038826][ T1894] loop1: detected capacity change from 0 to 131456 20:29:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x41) io_setup(0x8000, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x82, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4a000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 422.052942][ T1894] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 422.062855][ T1894] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:18 executing program 0: r0 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='acl,fsc=r']) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x480, 0x100) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x3, 0x0, r0, &(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x200, 0x4000, 0x0, {0x0, r5}}, 0x8) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_enter(r1, 0x741f, 0x7dd4, 0x6, &(0x7f0000000080)={[0x6]}, 0x8) 20:29:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 17) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2085ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000dd00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r7, r6, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000277000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_submit(r4, r8, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x20000000}, r0}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x6609, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x6609, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, 0x0, r9}}, 0x7) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0x10000000) 20:29:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x41) io_setup(0x8000, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x145802, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x82, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4a000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 422.293679][ T2012] loop3: detected capacity change from 0 to 131456 [ 422.302899][ T2012] EXT4-fs (loop3): inodes count not valid: 14483488 vs 32 [ 422.304439][ T2019] loop1: detected capacity change from 0 to 131456 [ 422.318056][ T2019] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 422.318521][ T2010] loop4: detected capacity change from 0 to 131456 [ 422.332999][ T2010] EXT4-fs (loop4): inodes count not valid: 4294935840 vs 32 20:29:19 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000276000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x10000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x7, 0x6000, @fd=r4, 0xf8, 0x3, 0x2, 0x5, 0x0, {0x0, r5}}, 0x823) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) syz_io_uring_setup(0x7c0a, &(0x7f0000000140)={0x0, 0x201e, 0x8, 0x2, 0x263, 0x0, r7}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x0) syz_io_uring_submit(r8, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) r9 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000280)={0x5, 0x8, 0x8, 0x10001, 0xe}) [ 422.350867][ T2019] loop1: detected capacity change from 0 to 131456 [ 422.358079][ T2019] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 422.435309][ T2032] FAULT_INJECTION: forcing a failure. [ 422.435309][ T2032] name failslab, interval 1, probability 0, space 0, times 0 [ 422.447964][ T2032] CPU: 1 PID: 2032 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 422.456698][ T2032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.466813][ T2032] Call Trace: [ 422.470079][ T2032] dump_stack_lvl+0xd6/0x122 [ 422.474658][ T2032] dump_stack+0x11/0x1b [ 422.478828][ T2032] should_fail+0x23c/0x250 [ 422.483232][ T2032] ? security_file_alloc+0x30/0x190 [ 422.488477][ T2032] __should_failslab+0x81/0x90 [ 422.493308][ T2032] should_failslab+0x5/0x20 [ 422.497799][ T2032] kmem_cache_alloc+0x4f/0x300 [ 422.502595][ T2032] security_file_alloc+0x30/0x190 [ 422.507607][ T2032] __alloc_file+0x83/0x1a0 [ 422.512009][ T2032] alloc_empty_file+0xcd/0x1c0 [ 422.516799][ T2032] path_openat+0x6a/0x1ec0 [ 422.521219][ T2032] ? copy_page_from_iter_atomic+0x44b/0xbb0 [ 422.527104][ T2032] ? set_page_dirty+0xf4/0x1a0 [ 422.531861][ T2032] ? shmem_write_end+0x37d/0x3d0 [ 422.536779][ T2032] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 422.543001][ T2032] ? generic_perform_write+0x377/0x3e0 [ 422.548447][ T2032] do_filp_open+0x105/0x220 [ 422.552946][ T2032] do_sys_openat2+0xb5/0x2b0 [ 422.557528][ T2032] __x64_sys_openat+0xef/0x110 [ 422.562330][ T2032] do_syscall_64+0x44/0xa0 [ 422.566736][ T2032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 422.572617][ T2032] RIP: 0033:0x7f0a416a0954 [ 422.577012][ T2032] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 422.596623][ T2032] RSP: 002b:00007f0a3f421ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 422.605258][ T2032] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416a0954 [ 422.613211][ T2032] RDX: 0000000000000002 RSI: 00007f0a3f422000 RDI: 00000000ffffff9c [ 422.621167][ T2032] RBP: 00007f0a3f422000 R08: 0000000000000000 R09: ffffffffffffffff [ 422.629120][ T2032] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 422.637168][ T2032] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 422.802287][ T2012] loop3: detected capacity change from 0 to 131456 20:29:19 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000001}, r0, 0x3, 0x0, 0x1}, 0x80000001) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 20:29:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 422.870655][ T2012] EXT4-fs (loop3): inodes count not valid: 14483488 vs 32 20:29:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000276000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x10000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x7, 0x6000, @fd=r4, 0xf8, 0x3, 0x2, 0x5, 0x0, {0x0, r5}}, 0x823) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) syz_io_uring_setup(0x7c0a, &(0x7f0000000140)={0x0, 0x201e, 0x8, 0x2, 0x263, 0x0, r7}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x0) syz_io_uring_submit(r8, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) r9 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000280)={0x5, 0x8, 0x8, 0x10001, 0xe}) 20:29:19 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@hci, &(0x7f0000000140)=0x80, 0x100800) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r3, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x20a0}, 0x1, {0x0, r9}}, 0x400) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 422.919992][ T2010] loop4: detected capacity change from 0 to 131456 [ 422.926919][ T2010] EXT4-fs (loop4): inodes count not valid: 4294935840 vs 32 [ 422.937035][ T2040] loop1: detected capacity change from 0 to 131456 [ 422.944365][ T2040] EXT4-fs (loop1): inodes count not valid: 32 vs 64 20:29:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20003001000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 422.971587][ T2044] loop1: detected capacity change from 0 to 131456 [ 422.987952][ T2044] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 423.012614][ T2050] loop3: detected capacity change from 0 to 131456 [ 423.024110][ T2050] EXT4-fs (loop3): inodes count not valid: 19922976 vs 32 20:29:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 18) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="208cffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000276000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x10000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6609, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x7, 0x6000, @fd=r4, 0xf8, 0x3, 0x2, 0x5, 0x0, {0x0, r5}}, 0x823) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) syz_io_uring_setup(0x7c0a, &(0x7f0000000140)={0x0, 0x201e, 0x8, 0x2, 0x263, 0x0, r7}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x0) syz_io_uring_submit(r8, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) r9 = syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000ee9000/0x2000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000280)={0x5, 0x8, 0x8, 0x10001, 0xe}) 20:29:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:19 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x3c117e, 0x160) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x6609, 0x0) fchmod(r2, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x1000, &(0x7f00000003c0)={[{@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x31, 0x2d, 0x2d, 0x6d]}}, {@huge_never}, {@gid={'gid', 0x3d, r4}}], [{@subj_user}, {@appraise}, {@uid_lt={'uid<', 0xee00}}, {@euid_gt={'euid>', r5}}, {@euid_eq={'euid', 0x3d, r7}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, ']-!}]\x10'}}]}) lseek(r3, 0x7ffffc, 0x2) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYBLOB="0dec96412ed0b5566aaf03f0f44a3cc51dcc224b57e43f45dec96150009730cf2afbf853bf9007fa44e158b4e2761e7d92cd695ee2d574b7cd0f9290ab4a0c36f13abb16de1dd418cc84", @ANYRES16, @ANYRESHEX=r0, @ANYRES64=r1], 0x1a0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) unlink(&(0x7f0000000040)='./bus\x00') [ 423.094777][ T2055] loop3: detected capacity change from 0 to 131456 [ 423.101713][ T2055] EXT4-fs (loop3): inodes count not valid: 19922976 vs 32 20:29:19 executing program 0: set_mempolicy(0x1, &(0x7f0000000080)=0x10001, 0xff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/259, 0x103}], 0x1, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x6609, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x100000000, 0x4e2) [ 423.148503][ T2060] loop4: detected capacity change from 0 to 131456 [ 423.155981][ T2060] EXT4-fs (loop4): inodes count not valid: 4294937632 vs 32 [ 423.164374][ T2068] loop1: detected capacity change from 0 to 131456 [ 423.171748][ T2068] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 423.249302][ T2071] FAULT_INJECTION: forcing a failure. [ 423.249302][ T2071] name failslab, interval 1, probability 0, space 0, times 0 [ 423.262048][ T2071] CPU: 0 PID: 2071 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 423.270901][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.280941][ T2071] Call Trace: [ 423.284225][ T2071] dump_stack_lvl+0xd6/0x122 [ 423.288812][ T2071] dump_stack+0x11/0x1b [ 423.292952][ T2071] should_fail+0x23c/0x250 [ 423.297537][ T2071] ? kzalloc+0x16/0x20 [ 423.301701][ T2071] __should_failslab+0x81/0x90 [ 423.307443][ T2071] should_failslab+0x5/0x20 [ 423.312011][ T2071] __kmalloc+0x6f/0x350 [ 423.316266][ T2071] ? plist_check_list+0xf9/0x160 [ 423.321298][ T2071] kzalloc+0x16/0x20 [ 423.325251][ T2071] alloc_workqueue+0x12f/0xad0 [ 423.330092][ T2071] ? __schedule+0x435/0x680 [ 423.334709][ T2071] ? loop_set_status_from_info+0x35e/0x3a0 [ 423.340557][ T2071] loop_configure+0x681/0xeb0 [ 423.345232][ T2071] lo_ioctl+0x618/0x13e0 [ 423.349633][ T2071] ? path_openat+0x18d4/0x1ec0 [ 423.354422][ T2071] ? sysvec_reschedule_ipi+0x27/0xd0 [ 423.359690][ T2071] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 423.365327][ T2071] ? blkdev_ioctl+0x17c/0x3f0 [ 423.370088][ T2071] ? lo_release+0x120/0x120 [ 423.374584][ T2071] blkdev_ioctl+0x1d0/0x3f0 [ 423.379081][ T2071] block_ioctl+0x6e/0x80 [ 423.383357][ T2071] ? blkdev_iopoll+0x80/0x80 [ 423.388011][ T2071] __se_sys_ioctl+0xcb/0x140 [ 423.392604][ T2071] __x64_sys_ioctl+0x3f/0x50 [ 423.397278][ T2071] do_syscall_64+0x44/0xa0 [ 423.401770][ T2071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 423.407848][ T2071] RIP: 0033:0x7f0a416ed7f7 [ 423.412357][ T2071] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.432238][ T2071] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.440824][ T2071] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 423.448866][ T2071] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 423.456919][ T2071] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 423.465067][ T2071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 423.473021][ T2071] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:20 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x14, 0x417}, 0x14}}, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000380)="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", 0xfc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe0000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f66}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5000}, 0x80) 20:29:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007001000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 423.659640][ T22] kauditd_printk_skb: 3 callbacks suppressed [ 423.659724][ T22] audit: type=1400 audit(1634416160.286:214): avc: denied { nlmsg_read } for pid=2077 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 20:29:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, @time={0x2}, {}, {0x0, 0x3a}, @time}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0xee, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x40, 0x7, 0x338e}) 20:29:20 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x3, 0x100000000, 0x8, 0x5e, 0x6, 0x7, 0x9, 0x3ee2, 0x2, 0x100, 0x5, 0x6, 0x4, 0xff1}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@void, @max}}) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="2ab0bee8e0c0157d63767132d44e035c51a04f86b2e42092b7a1fab47f09797c67b999981830bdc8c6be3288ca32e8d1f2ee42ed473f3deb926089e6f315698496f0914eacb4e1bebec04a7d79788021e705d7c747d57f77f08a7d3febe56e91ce15f2706a372dfd0c171a756c15bf4029895b3e45bb5f55fc79cde947a25a588388001d57148896c58b7194608e4aaf2cbe9e2e6f6d894502f832387e1b9e7d1fde6f586bff351f6e107544eebc742d0a484dc8f4f83237449c44613ce0f8e80cf6910b364709bea1fa44fd56ee49c9ef2f888354e0255f5dc52467748d25652547d5f7ee8babca78c56691457a", 0xee}, {&(0x7f0000000240)="298538438e5cc4c180b9e84d305ffd4f1f8cdb90c1ab24ccc18eb1ef2359bf422694eb1a03ffaa7e987f18fbc7f541941b39bd97b56615", 0x37}, {&(0x7f0000000280)="13fde78ba0488cc3bc7444d286ff1d90aa3015cc5f9a404315fc1c88f8cc92603123766ca3c44aca6fd95050", 0x2c}, {&(0x7f00000002c0)="b44e427f9833f1c84ffc878176135c3a440433af10ea12fd9bedcb42a4389b73bb581e8da7191f9d668425a5e35be1942ee6a61fa97f4e7d391d5736362146a0b3f385c33aa5f96d49259c4fc7cb63c2614b5bdd7adb97d50b052e8241448a93f714171f09c2afb2925fb1c4b0b17ebbe800fe8c2507da50db2e6e9ca4e5d36a2e2ad87be4061950a4b38e51373df073b549e8bd52493c6d0c28974fbd9e6f73365a0a6ccd0b9ecae91b0a3dd39dc8f8a11e5d3f6e5d05f7730628ce362d9b8ef06ab5bc24438e8f749578b6a067120757c9cf89104b0be3f28204be9c0840d3c1", 0xe1}], 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000400), 0x5, 0x64a00) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/202, 0xca}], 0x2, 0x37, 0x0) r2 = accept(r1, &(0x7f0000000680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000700)=0x80) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000740)={0x6, 0x74, 0xffffffff, 0x1, 0x1df4}) creat(&(0x7f0000000780)='./file0\x00', 0x42) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file0\x00', 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004804}, 0x4004) r5 = open(&(0x7f00000009c0)='./file0/file0\x00', 0x50000, 0x94) r6 = socket(0x2b, 0x6, 0x3f) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd=r2, 0x0, &(0x7f0000001c40)=[{0xfffffffffffffffe}, {&(0x7f0000000b80)="1fbaa1bdbc7c9a9c1f61c1bcf983b415e2f02e0c46c4c72e817dccc6f94e18a3f637317ee6044e97ab53a5131c9961dd9454f79003a4534ffdd9ef31887363296aed00a0099d9f8ff3bd7e9cd10c45f2e13b401bcd48ed6629f0aceda146fdfd06", 0x61}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="56aa6c4d8c65dc9126a61163463d804645ce3541b999083e1b0e998f", 0x1c}], 0x4, 0xb, 0x0, {0x3, r9}}, 0x6) socket$netlink(0x10, 0x3, 0x7) [ 423.706260][ T2148] loop1: detected capacity change from 0 to 131456 [ 423.718104][ T2148] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 423.731952][ T2160] loop3: detected capacity change from 0 to 131456 [ 423.739279][ T2160] EXT4-fs (loop3): inodes count not valid: 24117280 vs 32 [ 423.751352][ T2060] loop4: detected capacity change from 0 to 131456 20:29:20 executing program 0: lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000480)={0x0, 0xfb, 0xdd, 0x4, 0x6, "3e64723f23174ab42360f51ecb4e57d9", "77890d8d546f75cbe9be88cac9c8ba6e4ba5d1475c5c29dee573d0cc42a1f6d6dfaae72f96b51a02eb66236b6fb40ebd852e170ca90448cda79696208e09d5e1866cfd3e5b46fab6a6435df25283852c3f819a9547e10d1184421a65da18bfc0db4a5a76b35fb9ca9a5b511dbeb293fedf7edf986e7583eb285ae09c155ab9c5b1a92acade06e382352422773114ebebc76ef3c153e95ea176c0b55a7b2b80b1d69eee83f0f46b7454fc598ce987a3ce12c1b5e40131425940100af9ad4a002b1776ff335ff262eb"}, 0xdd, 0x1) chmod(&(0x7f0000004100)='./file0\x00', 0x32) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) recvmsg$unix(r0, &(0x7f00000040c0)={&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000004000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x3) syz_mount_image$iso9660(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0xf8, 0x3, &(0x7f0000001e00)=[{&(0x7f0000000d80)="35b992d94f4e9acfcf4c", 0xa, 0x4}, {&(0x7f0000000dc0)="422069daba26ae09b63a55790681629c626d30c8bac33151579d17da5ff0bbcfd9a2aa75be14e690fe411c4211757f39e6b1eef2baa03755d4adce316ad9ab7f276156b9a16c5f0ee3249e988b38e3d21453c6a211f713d6b032c4031d4646f715f79b0fb0ba757a8e93e9efb4b2b44360f241517334487d564b26419a3305b335323c1de0053935b1faaa174b15148420532696118710fcc452949caafc8476fb56fdc9038491a24f614229148a4cbc57209e23783ba4025542615755001a66fd8b09defae2fa5b9d47a2601f29dd836bd5413eeac6714eb1b4955c84517ff0a065c6dccf7ea7dbdf3a1b41b340b819c6a0a8507939d011a8cae950450e2be0ab28559d7d1e3f20a94b90fb53604400b55b1314736d83d7ce135537dbf8a77ea83f2b50696c265ed817aa8bb9bcbe2096b3e87b95dd567f680374ea5e6d43beba7161f34011262e274a5cfedf5744bc9d289b3a08c12ff2219735919c135886150766d6e5b9d92d48251eb2700ebfe11019971ba9285bcf53a20a2c448d71dfa3029c8052c22eaf1374f3a55dd473f1fe6baf2598ebb20124982c8a8a1c1c52c4f6709673e706dc2dc547c37f9eaf0b234c213351a0564c097e7c04ffbc20a54b6221372865c7643c25cd4f6f60a6e3fcf48dd43f0ce4c194285d333b5fa9a23c52ae811d5083d51d93c019127111f5157c43efdd9f6ed63059d4ca27a2eec19686cb7da79215b14a4a14a8372ff6615ce1b030e16bdb77ed256660fa958ff9ad4be7118c6bae27ca495285d439fdfd01a612b1a877cd44d860dba80e79f3b2984377141d740dd81e6ee07dcf69a2fc5094c0af8d0fe07230d389318e8e8986dd06025661b7cbe62d77103c13feafbbf346cf2199170a31cb60ff7da22cdd9984bb8f552f8fb859106fe41ca1c3c7579092f557218a17025de2a55e7e08549b5355255091f8f99525c230b7c36eee31a58b99828e87beb70ef1c86409c695c402bf5bd2eec71be5e0f26d31b6b30081978cb3956b71e21db0636668837514dc1539116ed9784296bb3e40a9484fe4c9f562e8c0082d4d4727b1306b1596e70d4b124547736f42be387282e954745f45e134aa43b94b946af3aca16aa95195f3ed66c0aa12dcc678bf9085858ad718fbceef89d1d8fdb95fdb60a6d7d7532a9d62c782e1304f53ac7ef3a28ee8c693b9534193f14dee85b6a307be268bfb494e24a5313ececd2f8abec0cfdc92d28e3fe2f11b76c4e58e99fa82aeec34ba7d57fa1f96398dc076e24975ebb83a604c744c6c372433850e215c855a4389e48282c9f285356847b83f4db9e085b6c3c5f2c3ef8f2e12c1ea1a2d5b53ccca1bf403380c617e3b68b506dc2da33972c9a7a5de99da04fa49966e87eb1eb1bf2893a384330d05579920f692a408c33df7671248c45ea9598c7a662ee8c9cbc565a1a8bf66f95ca70f097a0d6f75b009c4a20a596d4697e7cabc4c3cb57781a67519aaa7036cd2a980b0d090c1fc11cb4f3592e77a3affb7f79d5aa11dc3c0e53379544e7c71a7225bd2d6f29c79b848e8484019a6b760819f26830653beca31d68829401ebe3b83639fd000b8b0f556815ca630d5d613a9a9451daf2421c97121cc3c8ac902a7e1720c59e34d08832531b87efe0cd13eb15a054e43241efa322d13e4b7c4805499405e2d8f3d022aac2ce1d2178aa2134549bae912d6ea6f133f4aa3f9c645f0e5dda718913e9767cb7ad6e849082dfb9545998067dbaa466550622b606def0a94b3a3a7dd6c07c07587802336798a2e906e9c7dd8370287cc9192ba676d15efa253219f295fa08c39b396473358e887e466c7186cd6d37f769e89a5c9b53f355e02af9c3eaae72d35a6f7b0375a98d7438b9e6134f62a7f87df2c4accf9e91477f98e5999e1c60c10c9fc6fb7373c7ad46fa3fa8823078f4f2ff594525fed2ad0c35d5ef6893d133e901c695eea62788617cd937ca2225947ec744a0df080e9ef702204ae35aaaca1891d9a2c149adaa49bd1e8ba8a24dfd650cf1b4681ee018e04078442e6b307c1c5e666254bb5ce421ff702354e638e25f67a067848c870e175d378aae2b37c42a27f2c94153d0ad57477a29a402acb2148d1d108e041bbbc0b28e3f65294e5a7b1c4af9898912390a2d4ff2c37af91a5f70a4916bcaff37549aeea37b9bcb84a918456aaf69b27b08c6d4ffb7d2b6aa82eb7ce5495d723f0996ca445100f45491e44673fa4ba397ef57037875d5ca756c84a7be44560ef71648230053dba6776eef1740f2aa342a0f160bd4262ac8c71b272bcd5b093e489dee9b169fdd31054f23a4f0199f6d5f48c109a146d0be388573bc46ccabd0bf937e85d5579b3eda97c7e5cc547ef37e18dcbc32271f690df1bde6b169dbbbd367771c48534426dc81f90e8c1fde16fa0b4880ed700b0e4dd49ef2785e4873831e2eff7bbe644b90f819cabdb4f5c721a2692829dcbab249e0edf09f597bc1e7ce2ce5aefa3c350fdd9c7cfded91ff316c15a6b07144dc612ba967c7319ec2b63efd0643d2f615cbe86ca21d4b8cff43c3032c0c02128d0f894357d1cf0e7810558a5ff8d92e4f7e57f1701d782916d69891ad37ff0567595ab4aa5d52fae4eed219c4ea38f1dd12ed6ec80f56f73f15e0ee25a6808c486f809a958e2251a4595c291891ce2eee63f07faa615bd38784a51f756873d7d4aafdd97040440ce55d8a4294e45fc9b408a8008731f04a2019698981d547ff83accd5c74b56ae5b67316fe664a4e97d065adc8a96a25317902cda72fae88cc3929dbeb4e348af28b233fe137f971513ef75fab34e12e75d0e50ff766c99dd3f8ca584ccaa9b5b384be33c2b40b847784caebca80b1e907161ba4ecb88e514829aa0ccf40d50ccdaadf71e459d52ba1b0e8cf921bcc828e72f4a5bf105b2a0bd8652398c436a9d29b06a10a9dca2739e6a7277c1c99259fabcf57cfa4040b75e053fb6501fe2193d4d78916c102614d5fe265a5be23d67523ff1c121c9865320c2c93920023ca462e93a0cf8191324c00f187d5f544f7d4ccad203118d07484c9614f7d64e3cece02912b7f53d679782c668f445d7a8be7a4d4a48dbb0aca1a3f208d4fbedb87ff4146618c99e5a0ee66f29be4ad775f9f0fc58912c28c65175efb9cc995f463637a16e168bdcf8bb9d1884d70db57c3e841d3f439927eda2f89c47b0be2019cff25645395dcbe54dcbe90824e191f18a9319d8aeff4db2aed757688d28bfa8d94da8d92b1250bc28814aba30b5b60b323c7b62802c1d9d029ef9587c20a6a14f6119113952acebf75acd08efe46892c61043d7fc9346a84e983d785181b7604f78779fc4d7eae304075cdf07862ef8010c530fd3fd742574dbe7b8bdd7cefc2a92b62ec1255ef9e8afdf49935bf5bb0c999f196dccb83b3cf4b9a44efa7c4436ff522377029e1feb3f32162bf8aed1cd594ab22d8b752dbe0c1871b3991a06570d676fe7977f40c973d2c8f455f05c2c715222487331a61e95df78d3162cfc8f3f85beea1b480ab537b5f7b373ae1d7faf81f2666c131975064cf61cdb12f64b945cc16892de2388e2831d4f24dd25bbd189eede56b14bde8898bfd06f373f4df1c489bf13a43630b43134f223ca12bf6979824b26fadd80ba1e086e13fd6533e56f7a7500c332b1f214f30cca328efe5db21887a6ec8a2b830051d5997fc3cb12f380023d4b8d209b47fa215c9f47d2b032c56b4cbcfe659fa829d314d7fbd3af047154704f2f408368e1da7a9ff7e459dc1120c7d8ffb76f0218d6d7c592e4bd03afc24a6f2cdaa6673065188dd53ff3f5cf1eb743557ef07fe8664bdac70e1ad2db1f3db18903bc3373cd95d7825897fe2991b11ed2618c3d0be9f79295bf15ac5e1a628756662dae5cd72765aa495a1189cf772291574c4baccd02af9bfea8c138e7a3d4ab9c3b6f403bf384d07198dea59d193e80c77aeb57183cdd5d19d037a2b77cb1c0324db25609a7e53130494a56b5e8d9f5ab1f6efece526a014961d8900e271eb67a983ff61624903cea5124b3139ded652b4e39c5b22ce3028054a2eb76538c3956158c2532668b0957e4eaa1804ff0f9647803d422e00579957b895ed8bc09e480b059d8df8a200a374e11859d710e52ce39dbe401811bee59fd6a1664ccb3cf5a8478f2fc3e698ca22895004208f3bec5171fb9b21c78dc4eb692b9a6089b475ddbd0866f9543dcd36229a6d894622664eb75f14a9c9201140ec5c04ef0aa068240d6d167deb29e2e5f2f192bd39dc34b1fd1fc57536c9ca99b7e898c6d970dd1896277a57bd37df5485beec35dd192b8b4ad22da56fadcddd907c63d1c5908f39943dfac099909ce6bf27f16e822cf5612c6856d36a47570b6073571fef38f2c611621717c6fe9b0cb533efd214194bdc78e5cd1281adbd047128c45f2c07548ae6b88e990519fd309428142279e6ac2eed45c956aa6d9fb1b6ea9b4248620ae96adf6f7ecf2c5e20ffdd585d399899f9eb9c7ecddf053efa7c8868561a4bf44e22de7ae340f194c0b16f1bd5057df535ad54d8c7b02349e95a9973e8d96145a0c11401651644b8d817cfe06630701e60504a49b4690168bd8d47e1628c3a3a9cdcc506be994765af120e58727ef61768558aca82c71965c320ef2649a00776ab2503714e429ab8f9e6a9c41cfc316fe5072c9c28043e198c7237b2c75e6d44feb277ab8b1d85273dc0299775befba9530a52cd63e9e591f7ac90de19d3e89fd046f9dadd3e0edcf823fd7ac948f4adb780de42321186e9272043be1d1ccddcf2c08ca5056f98b73afedb0a5847288f0330684c5c7ed6a6f0aabfafdf3e8d0b87445dd047a9cd723467123928e1a32401c947b4861ee3c26bb9f0bfda48a1421df94cfec7c19daa4135bdc2372c6cf0e7da7e01491368f6eeef78c45498aaef4df8008b418855919893729e72e87fa8c5de133201bcbfac716e054ba0f4887b140dee32ebb50c8659d5d72f0247a91dd85b1ced186d8ed73c40784b23af74ae5ef7854eb11b914bff13351fb5759c58f896c02538dc17861225811a4dc1721f1ced7e25e065c1744c16dfc108f9c4bbfc4dd71174ab3ed61399c5189226272fa6b020c0b89ddcdb84e94f4e07f618aa9cf01c6f1196f89894d0bcb4544a160d43ef0b360f69e0db6ee61c898b26484917d4ee3204a33d6647b752acdff8c66213412b38e5fd0bcd5628ac1e320c33ee37efab213a8ef0d8e2b7be322851e4793573d06f8b84b9f087af99c2d3e3847dcb03b66f70657ea22b7a0a1cee4e80e7e7a06917065300999b1703ab4e3b44d9dc83c15735bf181748733ec4e6d4f35913953d82013e0ad09c4ec65285399e8266a08cac01e0f40702e23e2d394e4be740a6d5f02e0a024f98ab6c5d50a1a4aa5bb3d05cfed4657a9688971df916bb3d2a1ca8254b8d94ef9dd205e75acddfe27f5737228ef1de8ef19408424d33245188c14485babc00dde811e23787983d9f75218aa397c1f3a00c740f88fe1f6cc3cf90715ab1bc4ff28f4ea4d9b085aa0b14707b233a4d836d5da6a8d3d7f87b370b9f80695f99da6b26714ed86bcb92297c660e9f22db8ef379f6f6c5f22a9c143521ca785f496bf8fcd022877b2d0fac0a13c61271027de110cb5db6ef91b0874e57a8bbdf092cb9a0f674625416cd94184fecc585ed09f1345ab6d2d9db46cc1e2a640900f3314c7e6abc57a68a08f5125b59c3a0f500769a9d0e909b368bbc7ba39f447daf9b354cb0b47559a64f33b1beb81f03870", 0x1000, 0x7f}, {&(0x7f0000001dc0)="2a25c4f11d55465fe1e191709f66", 0xe, 0xfffffffffffffff7}], 0x1000, &(0x7f0000001e80)={[{@block={'block', 0x3d, 0x800}}, {@nojoliet}, {@cruft}, {@gid}], [{@subj_role={'subj_role', 0x3d, '$!'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x29}}]}) recvmmsg$unix(r0, &(0x7f0000000c40)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000640)=""/226, 0xe2}], 0x2, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000008c0)=""/192, 0xc0}, {&(0x7f0000000980)=""/87, 0x57}, {&(0x7f0000000a00)=""/225, 0xe1}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x2, 0x40010001, &(0x7f0000000cc0)={0x0, 0x3938700}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30313738333335313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003aa2ac8103a046169889a50d8894c561010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000688aa2d2688aa2d200000000e0f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000e0f4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000001fb537300000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c6914ad800000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3031373833333531382f66696c65302f66696c6530000000000000000000000000000000000000000000001f44752800000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="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", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) 20:29:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 423.758248][ T2060] EXT4-fs (loop4): inodes count not valid: 4294937632 vs 32 [ 423.787412][ T22] audit: type=1400 audit(1634416160.456:215): avc: denied { create } for pid=2189 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 423.821074][ T2199] loop1: detected capacity change from 0 to 131456 [ 423.828439][ T2199] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 423.842592][ T2200] loop3: detected capacity change from 0 to 131456 [ 423.849685][ T2200] EXT4-fs (loop3): inodes count not valid: 24117280 vs 32 [ 423.859983][ T2199] loop1: detected capacity change from 0 to 131456 [ 423.866785][ T2199] EXT4-fs (loop1): inodes count not valid: 32 vs 64 20:29:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 19) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20daffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:20 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="42bf"], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 20:29:20 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0xa104a2, &(0x7f0000000500)={[{@nojournal_checksum}]}) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) setresgid(0xee00, 0x0, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) dup2(r1, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) openat$cgroup_pressure(r2, &(0x7f0000004740)='io.pressure\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x5, 0x8, &(0x7f0000000900)=[{&(0x7f0000000200)="f2c51ec9dec3a97dac78b4e9c19a8c986d81f23c3acd19e4613c1c30a973364373e127854c179426804e6b7c8b1c786343b5d7ed19b8d5840c3c73c7583c14d9a97508fa6d554e4a34612b58e77c2e647b223d514748f50da6591a2ee023d82b1d4478863a50f4dd049d7c3c0c657cffcd236d0325ff43d5dafede59ff27c9fc55fd545456b578359e", 0x89, 0x5}, {&(0x7f0000000540)="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", 0xfc, 0x401}, {&(0x7f0000000440)="8de0ef4bda91c31954a4375ec2cff030efd9813d7db890f1f2d9dec2ed9cb02effc9ba00caf8f2ace6c4f1ff80662ce5adfc9349", 0x34, 0x5}, {&(0x7f0000000640)="08cca4a21485a4bd9c77dd01ff291aa0292a0b70748778fd4982a0d5c7336d6cfe28fd7b78825cd7f80dcbc7d01c9102af5f4ee5db75d4a43654fc687ff2b0f188665806e17e7515f22b674ff457c8a97d032130ea5eedfac6e91ac504e84e948012f363ae84371ce63b165c0b1b1ec714d3bf16b3e6251d46cc31a02df1c82eb055ae8aec640727e56a084cb48a895b2bb8cc1b13d85bcbaf4cb5872055f67a5f444421ada45742cbdf9d71cbd7d89aab549eb2e3e4529fe14cfbca51", 0xbd, 0x6}, {&(0x7f0000000480)="a6fe11193861a414a70e744deffff01a5b83d814507733783f47b9205a9c13173926fd80db58ac98b3c91ef7233a73d60122dccd587c06045729e591156d848b2b2882d79228a21ecbad57a8ba5c20fa588dbb43484f789a067326392043b09c72c5e72b9982c8266018907d77", 0x6d, 0x6}, {&(0x7f0000000700)="89a4ec7d4a0782092abf3562531cdfbcc84ec53c8b7067ee09ba098707fd84ea0a5f6a2df44fcfe8013c6e663df2e0785da44b3fc868cfec22f66758a386c47e2ecbd9f6bb4cec7fd6bef290a62aeb25a8db386467c2da0c10168718d3021d4ea10ba161b714b9e12f368c1a5728032bfc1156e7028bf1de6716639ce95d39e089b43850f72506874fd6e681f4d03f4c78e7b32fdd8f32076bfe5cf50c5777de4af68abb1510", 0xa6, 0x2}, {&(0x7f00000007c0)="7aba70e116fefdd74d260b28417d9f8a19b4c0eda3b04d2ddb924c108906c2021fb6bd4b96b18a62c73edc12695bac1838246fb44e939db86f274e9e67625588387c061eda1391efabaa85fcf034e18c4c4724a95112b9193af7526b1339deeaaaa64570829699640ff9828991eb1b0f50af2905e6f2aa97de2d70baad5d1d0dacbb2061e8606a560feff9120cace2eeb6f029fafd79127335d5ce142071e0da005ebc8bfa92a9134d4e9cdf24a3ce057bce217aa443b85717b46372681c699749171079095a96b980be37e5506676794422ca1416d65ad0502071f05b7a11202179201b9f11446c15ed1b5a0fec996819ed8518a988e020", 0xf8, 0x100}, {&(0x7f00000008c0)="7e5c4853433f459e6b9fc71d4864f8534569bd", 0x13, 0x1ff}], 0x100000, &(0x7f00000009c0)=ANY=[@ANYBLOB="71756f74612c746573745f64756d6d795f656e6372797074696f6e2c6f726c6f762c6d61785f62617463687f74696d653d3078303030303030486f636b5f76616c69646974792c626172726965723d3078303030303030303030303030303030342c646f6e745f686173682c66736e616d653d5d527d2c646566636f6e746578743d73797374656d5f752c00"/154]) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d7000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 20:29:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000402000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 424.004250][ T2305] loop4: detected capacity change from 0 to 131456 [ 424.014713][ T2305] EXT4-fs (loop4): inodes count not valid: 4294957600 vs 32 [ 424.020097][ T2310] loop1: detected capacity change from 0 to 131456 [ 424.023327][ T2313] loop3: detected capacity change from 0 to 131456 [ 424.032019][ T2311] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 424.036050][ T2313] EXT4-fs (loop3): inodes count not valid: 33816608 vs 32 [ 424.044346][ T2310] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 424.060747][ T2311] EXT4-fs (sda1): re-mounted. Opts: nojournal_checksum,,errors=continue. Quota mode: none. [ 424.122365][ T2319] FAULT_INJECTION: forcing a failure. [ 424.122365][ T2319] name failslab, interval 1, probability 0, space 0, times 0 [ 424.135119][ T2319] CPU: 1 PID: 2319 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 424.143793][ T2319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.153905][ T2319] Call Trace: [ 424.157170][ T2319] dump_stack_lvl+0xd6/0x122 [ 424.161748][ T2319] dump_stack+0x11/0x1b [ 424.165890][ T2319] should_fail+0x23c/0x250 [ 424.170299][ T2319] __should_failslab+0x81/0x90 [ 424.175138][ T2319] ? alloc_workqueue+0x15d/0xad0 [ 424.180150][ T2319] should_failslab+0x5/0x20 [ 424.184647][ T2319] kmem_cache_alloc_trace+0x52/0x320 [ 424.189915][ T2319] alloc_workqueue+0x15d/0xad0 [ 424.194712][ T2319] ? disk_unblock_events+0x35/0x40 [ 424.199821][ T2319] ? bd_prepare_to_claim+0x1e6/0x270 [ 424.205268][ T2319] ? loop_attr_do_show_dio+0x70/0x70 [ 424.210540][ T2319] ? loop_set_status_from_info+0x35e/0x3a0 [ 424.216341][ T2319] loop_configure+0x681/0xeb0 [ 424.221089][ T2319] lo_ioctl+0x618/0x13e0 [ 424.225420][ T2319] ? path_openat+0x18d4/0x1ec0 [ 424.230184][ T2319] ? blkdev_common_ioctl+0x438/0x1110 [ 424.235537][ T2319] ? selinux_file_ioctl+0x981/0xa10 [ 424.240731][ T2319] ? lo_release+0x120/0x120 [ 424.245216][ T2319] blkdev_ioctl+0x1d0/0x3f0 [ 424.249813][ T2319] block_ioctl+0x6e/0x80 [ 424.254157][ T2319] ? blkdev_iopoll+0x80/0x80 [ 424.258738][ T2319] __se_sys_ioctl+0xcb/0x140 [ 424.263437][ T2319] __x64_sys_ioctl+0x3f/0x50 [ 424.268095][ T2319] do_syscall_64+0x44/0xa0 [ 424.272706][ T2319] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 424.278589][ T2319] RIP: 0033:0x7f0a416ed7f7 [ 424.282993][ T2319] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.302592][ T2319] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.311018][ T2319] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 424.319144][ T2319] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 424.327105][ T2319] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 424.335091][ T2319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 424.343081][ T2319] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:21 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) r1 = getpid() preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x40f6}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000002c0)={0x0, 0x0}) tkill(r1, 0x800000015) [ 424.437804][ T22] audit: type=1400 audit(1634416161.106:216): avc: denied { read } for pid=2423 comm="syz-executor.0" name="usbmon0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 20:29:21 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @sco={0x1f, @none}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='veth0_to_team\x00', 0x1, 0x3, 0x3}) set_mempolicy(0x2, &(0x7f00000000c0)=0x302b, 0x6) set_mempolicy(0x8000, &(0x7f0000000200)=0xf3d, 0x81) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x20, 0xff, 0x1c, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x7}, 0x200, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) accept4(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80000) [ 424.510590][ T2305] loop4: detected capacity change from 0 to 131456 [ 424.517720][ T2305] EXT4-fs (loop4): inodes count not valid: 4294957600 vs 32 [ 424.534024][ T2310] loop1: detected capacity change from 0 to 131456 [ 424.541132][ T2310] EXT4-fs (loop1): inodes count not valid: 32 vs 64 20:29:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20e2ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:21 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14103e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff6, 0x10010, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00900, 0x4, 0x0, 0x0, 0x10000000002) [ 424.637049][ T2425] loop3: detected capacity change from 0 to 131456 [ 424.638207][ T22] audit: type=1400 audit(1634416161.136:217): avc: denied { open } for pid=2423 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 424.657734][ T2435] loop1: detected capacity change from 0 to 131456 [ 424.667960][ T22] audit: type=1400 audit(1634416161.216:218): avc: denied { ioctl } for pid=2423 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=112 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 424.675507][ T2435] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 424.709381][ T2425] EXT4-fs (loop3): inodes count not valid: 33816608 vs 32 [ 424.710427][ T2471] loop4: detected capacity change from 0 to 131456 [ 424.723861][ T2471] EXT4-fs (loop4): inodes count not valid: 4294959648 vs 32 [ 424.735105][ T22] audit: type=1400 audit(1634416161.376:219): avc: denied { mount } for pid=2439 comm="syz-executor.0" name="/" dev="ramfs" ino=47357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 424.739218][ T2435] loop1: detected capacity change from 0 to 131456 20:29:21 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x121ac2, 0x30) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe340}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x6609, 0x0) fdatasync(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x4000000000010046) [ 424.757906][ T22] audit: type=1400 audit(1634416161.376:220): avc: denied { execute } for pid=2439 comm="syz-executor.0" path="/root/syzkaller-testdir472004439/syzkaller.9aylgr/102/file0/bus" dev="ramfs" ino=47358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=file permissive=1 [ 424.764888][ T2435] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 424.826972][ T2471] loop4: detected capacity change from 0 to 131456 20:29:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 20) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002e00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 424.833921][ T2471] EXT4-fs (loop4): inodes count not valid: 4294959648 vs 32 20:29:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20009e02000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 424.888567][ C0] sd 0:0:1:0: tag#181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 424.888645][ T2555] loop1: detected capacity change from 0 to 131456 [ 424.898344][ C0] sd 0:0:1:0: tag#181 CDB: opcode=0xe5 (vendor) [ 424.905618][ T2555] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 424.911103][ C0] sd 0:0:1:0: tag#181 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 424.926626][ C0] sd 0:0:1:0: tag#181 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 20:29:21 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14103e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff6, 0x10010, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00900, 0x4, 0x0, 0x0, 0x10000000002) [ 424.935593][ C0] sd 0:0:1:0: tag#181 CDB[20]: ba [ 424.941426][ T22] audit: type=1400 audit(1634416161.546:221): avc: denied { mounton } for pid=2439 comm="syz-executor.0" path="/root/syzkaller-testdir472004439/syzkaller.9aylgr/102/file0/file0" dev="ramfs" ino=48207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=dir permissive=1 [ 424.990382][ T22] audit: type=1400 audit(1634416161.646:222): avc: denied { unmount } for pid=28371 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 425.011547][ T2625] FAULT_INJECTION: forcing a failure. [ 425.011547][ T2625] name failslab, interval 1, probability 0, space 0, times 0 [ 425.024154][ T2625] CPU: 1 PID: 2625 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 425.032922][ T2625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.043075][ T2625] Call Trace: [ 425.046339][ T2625] dump_stack_lvl+0xd6/0x122 [ 425.050923][ T2625] dump_stack+0x11/0x1b [ 425.055073][ T2625] should_fail+0x23c/0x250 [ 425.059502][ T2625] ? kzalloc+0x16/0x20 [ 425.063564][ T2625] __should_failslab+0x81/0x90 [ 425.068315][ T2625] should_failslab+0x5/0x20 [ 425.072886][ T2625] __kmalloc+0x6f/0x350 [ 425.077027][ T2625] ? plist_check_list+0xf9/0x160 [ 425.082020][ T2625] ? number+0xa13/0xb60 [ 425.086184][ T2625] kzalloc+0x16/0x20 [ 425.090124][ T2625] apply_wqattrs_prepare+0x3a/0x630 [ 425.095307][ T2625] ? vsnprintf+0xe8f/0xed0 [ 425.099723][ T2625] apply_workqueue_attrs+0x9e/0x100 [ 425.104920][ T2625] alloc_workqueue+0x777/0xad0 [ 425.109689][ T2625] ? __schedule+0x435/0x680 [ 425.114180][ T2625] ? loop_set_status_from_info+0x35e/0x3a0 [ 425.120073][ T2625] loop_configure+0x681/0xeb0 [ 425.124809][ T2625] lo_ioctl+0x618/0x13e0 [ 425.129084][ T2625] ? path_openat+0x18d4/0x1ec0 [ 425.133874][ T2625] ? finish_task_switch+0xce/0x290 [ 425.138972][ T2625] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 425.144688][ T2625] ? lo_release+0x120/0x120 [ 425.149178][ T2625] ? blkdev_ioctl+0x1c3/0x3f0 [ 425.153837][ T2625] ? lo_ioctl+0x5/0x13e0 [ 425.158149][ T2625] ? lo_release+0x120/0x120 [ 425.162652][ T2625] blkdev_ioctl+0x1d0/0x3f0 [ 425.167231][ T2625] block_ioctl+0x6e/0x80 [ 425.171483][ T2625] ? blkdev_iopoll+0x80/0x80 [ 425.176105][ T2625] __se_sys_ioctl+0xcb/0x140 [ 425.180691][ T2625] __x64_sys_ioctl+0x3f/0x50 [ 425.185263][ T2625] do_syscall_64+0x44/0xa0 [ 425.189670][ T2625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 425.195558][ T2625] RIP: 0033:0x7f0a416ed7f7 [ 425.199966][ T2625] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 425.219555][ T2625] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.227957][ T2625] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 20:29:21 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x2}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) [ 425.235909][ T2625] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 425.243940][ T2625] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 425.251891][ T2625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 425.259880][ T2625] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20f0ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 425.383553][ T22] audit: type=1400 audit(1634416162.046:223): avc: denied { append } for pid=362 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 20:29:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="0ec0", 0x2}], 0x1}, 0x8001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x4, 0x4, 0x6, 0x10001, 0x11, 0x9, 0xda85}, &(0x7f0000000040)={0x7, 0x5e7c, 0xfff, 0x3, 0x5, 0x0, 0x4, 0x100000000}, &(0x7f0000000140)={0xa75, 0xb93a, 0x7, 0x81, 0x1404, 0xede, 0x9, 0x4}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) [ 425.434985][ T2662] loop3: detected capacity change from 0 to 131456 [ 425.442333][ T2662] EXT4-fs (loop3): inodes count not valid: 43909152 vs 32 [ 425.468515][ T2767] loop4: detected capacity change from 0 to 131456 [ 425.475994][ T2767] EXT4-fs (loop4): inodes count not valid: 4294963232 vs 32 20:29:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000003f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 425.489908][ T2555] loop1: detected capacity change from 0 to 131456 [ 425.496901][ T2555] EXT4-fs (loop1): inodes count not valid: 32 vs 64 20:29:22 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x40223000, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)="d9") clone(0x11020000, &(0x7f0000000140)="a07f01ede7a899d8440ce9e14aae9db972", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) gettid() r0 = gettid() tkill(r0, 0x3a) tkill(0x0, 0x18) clone(0x20088000, 0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)="125940ed0c84ad40b3d9c8b67da7f73a45db0875ba86dd5ba7f4c9bff421efa6e4f1f189888f0650e399c47ba3a7067d1ffbf34a7f2dbba548") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001b80)) wait4(r0, 0x0, 0x8, &(0x7f0000001c40)) clone(0x840200, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="5647efcd77901d4738f05d3b5ee57ba69a206f60222957828a1ff1645cf0a3a7753f9784b10fb4bbdf380ef74aac20d91a66441cdb4271715bb6b678c7048a8b7cfb96bf19ae8694") tkill(0x0, 0x5) clone(0x9c000000, &(0x7f0000001940)="c95864d83105b15c96954c143f6a86ca404bcbd63333621903ede4b6dff292fdb79af3cb6ec3a9b404eeffc1563fdeb3e07946d7c14016480cc13b15832b21e9f05aecd4e2152d4d605d486dc2208ffb3e63b9deab4e76211de18cd20800e35704a127c572a73829d3aacc2ccc820fafd8a4159b6c661a918f0850829e6a0fc0bbca0a7597e6f495c13e18fd879798fd684c2a4b36cc07f120c818831a96f809916236cff97dbf8b21965076734e6af0", &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)="7dd81d42526c63d5d7f8c4cbe60a5d81d7bff15177147cb306b33ba54ddadf474df6aee79fbc2eeddda4c2d6c104648f4239e8924a5eddf3edc9606903761367959d32d001614fc7b81803009e316d7befc6f2533131d96ddb9186387f0300d87b101f61139fada159ed6fc27eb7be49dd0d070867dc485a02324d4f") [ 425.544115][ T2873] loop3: detected capacity change from 0 to 131456 [ 425.551076][ T2873] EXT4-fs (loop3): inodes count not valid: 43909152 vs 32 [ 425.573140][ T2880] loop1: detected capacity change from 0 to 131456 [ 425.580643][ T2880] EXT4-fs (loop1): inodes count not valid: 32 vs 64 20:29:22 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r1, &(0x7f0000001180)=[{{&(0x7f0000000240)=@ll={0x11, 0x15, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="9c7927202b50137cba8e0342de7b3b07b05140e2fb5255d578aa3638c7fb4e501fe3d38d9686ba1155c57ffe72301792c22606a6430ce9920afb387ec42431e28de84c985bc42a84f4a613f7e83450c6bac4ec3f62874130fdf3b8370012cd1586ee677dc95d9573977a5e5cfcc1f1ffd43f556e3e2abae4185245710a67b038b31fe907621bae7f3fab8f426b41801a9270d523f053be7c63bf65363db4f743496e29e68ede218d6b5f2bd33b921b9817ea666c0e05bab7c15550", 0xbb}, {&(0x7f0000000500)="6794306f387da6cb4681249da292d948497f7eed43e701c6054f853665353a480e96c26e14343b1774b8f10ef4bcf184f9298198f505ba1995387e6a82d585ba3b9387e48ee9f792cc38612b1cd825445f59b4ad2dfc0bc8", 0x58}, {&(0x7f0000000000)="1f67361d4c396e97ef56198329cc0d58fef7c169709ab360eaad2e7465", 0x1d}, {&(0x7f0000000580)="28ab85cfd1a0dafc8b96adaaffff7971362f51ba150dd869e39149f3fe30beaa1626198612e77a11294d16a51b18fc4df6368fb11eec985cff3c928c1aa57b7177c916fa0baa", 0x46}], 0x4, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x46}}, @mark={{0x14, 0x1, 0x24, 0xb6}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}], 0x78}}, {{&(0x7f0000000680)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000700)="cfe884b36e65088044c327243f9ef9392ed55dc3f457f97f4a432c1c2ace38904b634264e06c5f24e1f9b3657c6e95564cb3a80798ab34628909db2e70366536b739d45c0261961dc3a20beedba261a13bd7423eeeada0657ee8e95e4ac92045a1a2f4483f", 0x65}, {&(0x7f00000002c0)="33fb76e6", 0x4}, {&(0x7f0000000780)="0a473c818270a7914c54e0c7913627b34366863609a826202efef78d7a23d68b3bd511e404b1575fab4a5a4321900b249c0149b4b9ebd44a87d0aa519003bc99067beb4cae590595c11998cb510c4968fbf190a7832ffe8aff6e0c7b2f8dd219462cfb40f1753c47129e6d45b9091c34c34304b08dd5e3fef3d9b645d8ddbfc640a705d2b3432f5dda9d1558ac0b83b1027818d01268334c52e00d65584cfa5016d86662e30f6b26f98019027c937dc8b31e4628a235ffbeaab7fd6315238de9e60f8a0fd1a64baddf3e746988896dc253d3b0730e3dd65f2ca5d3770514ff1486c42298ff303df3b2b6da8d725be9a81b58", 0xf2}, {&(0x7f0000000880)="a9df0507f9ae5722dcf19467c6c64096da19320283b1e9b9cd147ff759cd73e6b8abef9fe2174edbc5723e27fc57942bc699ab1a577f908280ddf02074547c66da36119a3fd13ed10b889df0d56275d0921018aae185587e8c0e8509cc980bb4e47652cf2fb087226b907234084a8f9e45996e25b3cef7285d0138d3997223ec76450de7ed9bf8db66b41b333db53ae0df90", 0x92}], 0x4}}, {{&(0x7f0000000940)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="1bf9cdc9414555ae3ea5c2b09fcaffc60f07a21a5138ea3c0da1ead815f5924add2cfa0a77d119337bdba46d2ec268739d477cf7f5e7074342c8183ab1fa13afd656fa31230873fe3f8ab24ab5dd302de1a5", 0x52}, {&(0x7f0000000a40)="e7a296a2a9f79564e46f49d5076438be3875ddffcc115523d7f1b6c021eaa35f504b25ca82f01481dfca092a21023a3d14fb36176628636bccaa02d40c91ec0d79a8be45bf122aa9f660d0b4978c5db76ebc636e6b25e27f2bf7b7926b137a9b90832830899a2bcd3f93c9aab5ba4b154ca6586b6b387f18cd464d1b7c5b75c2a6aff741be491ed3d8bb3f5438c466c76d1c40491afee93d0de57d77d443d6f157", 0xa1}, {&(0x7f0000000b00)="89e78b501d7df26e25b42918c9b61dd39d94bbd83ae24b0075fe628b5bdd20004bef2aac905ba64a3e062d19c044666c9b74031f41f1d33c5368411d163e5fec85f7d93172c71900722b7beacf9d4d1b2088df7a58ffe5621a85580bc01dcbaa4a0d644c2ef5014049d9941582f507eeeea447ac3d4ad22ce5728b313e51785a924ad908411e1a59f520a94e164eaf3bee10d9fb9169dadad16db0197c8865bfa0d3ebb73e7c1d1012e2f118b34c20c359bf26b16d19f8cfe4d47f0f", 0xbc}, {&(0x7f0000000bc0)="d5c954cefed828244a3c4b1982953fdb4a0d7a2f939405d36085ceed4d98fd8f12397fb876729bb933d3274a15a5befed307308845d0304f6a1ad170811fecacc3c9f8ef09b16262e451", 0x4a}, {&(0x7f0000000c40)="30298102c812847b257ff2c30036cdd3f94e0e9b60ac1ac4a4d3edffe5eb5031ba0c65426bdb615fb4dbea448fd87552cd8e3b8eca9dacd6b8b314bfb29975290ab1373a5339130d6f2801f9df032387b61237243cf247d679ab1adf2fe4c79e606e5c716cfbac2e4bf40409e2632acdff", 0x71}], 0x5, &(0x7f0000000d40)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000dc0)="c1d30e404030d50290b98c7ac8ef71eb89c8e86c5dc358d584d8bb49efcabaef240a20b6efff341c", 0x28}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="e61e78a5ef8ee84534dfaa6aceba095d3b21fc0e5e9d", 0x16}, {&(0x7f0000000e80)="bf0c0149cf15f63a9ceb8421746fc5c5c035c4be6303bde531d97ea6a0e4e6f67789de3e825a18e9ab771a0168f4cdf8cba7e5f5595a0a9cf4e0c40fef2aa87d4c4c197951b979d3dfc5e70af2ee695b5aaef7e1b14e238b8aae3a1af42f2208f69f", 0x62}, {&(0x7f0000000f00)="d7568db3dababc362ae903898a", 0xd}, {&(0x7f0000000f40)="6ec122de8a308b629727ae091bed3dd3e5d4b9f7cb81b9c4ac90dd926f237c816fa76096a73d89f13e430f0f7dea12662b9d1edce6fa2e12c47a", 0x3a}, {&(0x7f0000000f80)="009ca95e514cd932eb638ab52e", 0xd}, {&(0x7f0000000fc0)="e52ea275b20033a31ad3f4a25ab62e0e50d7582413fdd637b7bde9aca69cecea06cec238dd6e029c6155f3e3d472bf4ed208fea6da60c027b9c309e7de66dd2ec1b87df5f86d151d8d783878016313d9888aae8eb5ca255329003e8482a8b7d8e811de265d7c0ce347979f70c9bb7687f7288858246db7a9504326b23118124d3c24d0a36785cc8774c9e24fb0776b99e4170963f3f98b563783c326c291a67054b5df85555413d07f6b6a5e4af47977bfce1bd1a14e7cbd8c1c1e1a7cf458fbbaf7ed3c36d3a65ab0b07e25985e7bdc143b4c6f4581d3bc", 0xd8}], 0x8, &(0x7f0000001140)=[@timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x30}}], 0x4, 0x40040) set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0xcc) creat(&(0x7f0000000300)='./file0\x00', 0x3) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='^\x00', 0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f00000029c0)='./file0\x00', 0x80a00, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendfile(r3, r3, &(0x7f0000000140)=0x8c1, 0x80000000) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1000000000000113) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='^\x00', 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/exe\x00', 0x0, 0x102) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$nfs(&(0x7f0000000e00), &(0x7f0000001280)='./file0\x00', 0xfffffffffffffffd, 0x8, &(0x7f0000002740)=[{&(0x7f00000012c0)="ff006a9e20a3c60ad2c53f843599ec279bf4a60f531f8afa3bc6480cf69142e3c9c4e30e10b6317531a35baf7b0ddf1719766a7529158f190ccb4974803d9b4da171f616dae5a842042595", 0x4b, 0x1ff}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000001340)="d6945bfcfea702d441d1907f4cc2d9373b333a1936a424b044a0a0e7453112374da18d3cc4196f65f4eb1d1a270a6635361269c6b82b87081521855afa8b2cacd05dcb2b468ab0e54eca7f4e5e4379afb282e4a91c0ed57ba1576e31941ec50c0858ed9143d30eead13ae88ad5926283c6bb4a3e4347657e930706e8d55b9f74ce6e4e1d4aee2d4ac29636f643c1bed5631e6b9ace3ce9e2f9b43d", 0x9b, 0x3}, {&(0x7f0000002500)="290f45372b86b6cecd3ebbda837da97d372bf3e00223bb74878f57ad6e5af645703ee6d81f783476d0dbe58030ec9e5431bf7b15319c2edee6e0ac5ab1636875dc225c4c195a8c82c9967de45385fe3b77496377813f79cc633645df56344d926e829ced5bcbd880e60d25feb3a2de602325b4c2d49ba617f933a4bf14fe8496a5db", 0x82, 0x7f}, {&(0x7f0000001400)="16d191177ad6add14e28e7cc7df0246b05587658e702e66d76bb884138405d25b2b7d94f027d1bdf", 0x28, 0x9}, {&(0x7f0000002a00)="20e56feccdaded27ec1a8229173adfffab3ca65f754049ec186fd15c0ebd9280d0f64f508e806da22030980d4687c3becb645311d63da75549ce5e5da312c70f4c4fbf644ee7effbd9eb50e8f734402df38629b3211432bf60e810bd3fcdf2dddf25f38f8b6dfc47f45ec47ce4d2efa92b7abe3025f9d8e155774e0afd4589158eab29b804526ffbf6b898b5eae38ffba4158edb29a6e26cd9953fd9b99d16755cf62e326df80ddb97a957e8d1c1710b763a22b18d2aeb30bf7e906600bde9920bca98dca0699908bbc67b20e5af20762e26ef8ba4bd25a2864df80c1e3de447088fdb610c52ae1d0072d4a2ae8a579a562320feaf230ee311b3955ba3dd2586f98c4e8d6dabfe7bc2e1f731972132e808fa1caa1f07c624cb10cbc6cab8222431be73f401037c0e0587d5c5472bd7ba8b362b8563f84726cea738ad2ecbe2be49f810236ea169ede0fab3ac2823602652c5ff71e733900b09af66f1406565d44cb993320c0fa575926ed3e2f82757c86f41a9b94bd6ac3f8e5add5884ebbbc404caee8d9f731723d082c111a1333bccd74d818cd670ed3e38df9a9269287aafd4793cad5e52b627a3041bf6a787dcd14fe073d7b0a42400bc9acc135c5851c9b8e59518f7fe69d109def6c4dcd098cf133bb73630d229151ded62aafecc90ccd1e08a570080df82eea0a8858fe8d4612c5c15d99c849b119481b24d6e11c19d79ad576e911ea5abd06c7f6edc89ea4a84ad2e2cee90d1b23d967d9e499054d7a71cf9a141c5e275abbbb0ecab89734a3b024f8b6ed8b04d5d2e6fa143384f42c0e3ad846c65deb49c8a307ae66e29087100d16026ebbd4811d0c04460c369810bc2b1cd1ed55a7d268bd97e2c1f641111f319097256fbbde563cbe19f8aa828bebe91383ab978cc70276823e048aa872858dbc5cb46c861f12ee065236942871c96b2cf74c56bc62988c892c6aa566e36fd2d5dc290121610b4c25ac39964bbf74270ff44acec195f8117b1e64c017c437715ba11cfe0bf4958e9f40965e5277a3df4bb899fce1fcdb6a24d8d8dc735e15fbbb3fee2edb9172e796222a55d31575a8e82d1a96033bbec6a830fe01d38d79b5fe5987d4f642961d27f2cc51cf5151d89cf9688998d79b9b6634e690783fd96a89d5e676769c3a3c7ce2a90d17bda16635cdd1cf5b0c032d01d2c9ad3a666e0e25ca77b49ef6832e5d3570cf52394bf8e3f0b24667f2a0802586592ac717b286dd1d4e5f9268ef152a3374e4496d085e71a0cef650145ba29130c7645335fea44f53081df4774a9d596efc207f37f397c49673434a95ba4db0988838f954d1c07990305d075768f7908f82c7fa327c92f396c6706a485e396ba821b61d4fca0fcbcd5f0ec7a733dd99c9da21006473205b42e28f3b0410b698a284432bc75fbcaca2c76dd06ff68480c76083d9cae1e0d1906b40a90bd332421eafe76ac11cb313f26f5aa1dce8700c7dc60a9d61d6db456e3024f58432025ae50c5942f31cc53baa1bf9db77adc63b52fde35d86388eea81e3ee9560a6b2857b7fef2fdd8efefffe1792e8a3173803f2eed374d53be4e747b4d261a5ce7a0c25d41567ad1c2ec7cd0dcd7a316a7a74be9b96a538e74c9af96b75ba4e13eddfe2caa997f98201156f2bc3dc22fb45c6c4c5cb905160c6eb15b0e367cd1a423bb0519ca79f45199a235247c45791ce83bccf1049b58ffe9266e5d82f7014f0ea6285d3e909640d3a28f6825ec0850c535452a4420928ed837754ebd5ca1db61b9e54729385e22f7d0fbf789e4de22708cf46acc4f5227cb3e90983c068ec7fa0eb6cc767499db7bcfaa18cb1a44808ee8ba4eb96def81cb76eb120e0a9fe539e613dddcec4d3327c526c4c198b02c142f1435ed0f6d2588dc596fdf6a6d1d2af043f71317381f3bed8b0bf7008483ce4bfc152f4a576671c1a942ade9779bf68f1f4b250fe9b2a3e7f1cab2507b2e67cd887a376b975b918205696a505dcd0af5b4f13d68ea36112816fe211e48a90d078efe267396fc7def72e86dfef400d289061f0220e5f969162ca4fe9eaeb7787bc7fb3d5e388390a5c79ba4a74e7c744dce786380c3c6d0bd0c688310e853f246f46cf30e167e5bdf92f5696ba73164d2ac8a5da30bd68308b9559531067672517cec3ba872db6c5e0530a0e488ba2bf80f8300196b5ac0ce43610db39608cff23b366f9e3dc915e837b1bd51feda3a10031c22b60eec3ea067d88d82477882d68823e3231f52e756ee197403a319b73c7447f2620a37f0b4533776ded3b629a0f88093c235453941a2959bb534a9a4b84973c2411589a698b7545f7b717762d2efc821437c9d0887e94023f570a1ddb7921da96938eb153342a221e42dc08239d4eacaa1f0d9df306600542b8a7100c40680fbfe6385fb5e68a1739f71743f01763e6d56de346de46353bf5b854f79d5bc1e750e21250060829e3fba4ef5c75e0738ccf1f48c756775670d644ec6511ff08dec8b2e27d44e9ccfb79920039db02e669074b07987df17efd266d52932786a46652ff90b7da28381761a0171f5f8ea141e591954812f2bc6580f02a5aff74f79c706df116ca5515c9dc5a2c410803b483db544e724b3ef24352f5ea932671eb25c42461623e34d77fd532513a6aba74096458ad676814d903e05a6cdc5df6d6ff42d9eb114e35a6db0e035c2915f0703e1b1c3e00091abc55efe60ab5e76b0ccb56f76a4632f4baad9d32284d0f2ed7f2c178ec0c86fa3210d8e0157b0c531e80202c02bc76a3b5e00d9af58bcfcd936ca5365d546a5a0168bea3a67045e4c9c4d5608821b5eaf15a33a89ec1d014ff48a0d6ab3a805caecef9d8858eb7c4f45a0b72806b58c659686550e5ccde01d16018287ac16473609cdac99f28da4d03186756d1990b484168d811d4da5fa73a8a59eb38ab1443e2728c49675bfc4714d94e11fe9128d97afd64162f4eba3644388dd843bf0fe9abbc744f70696bd0b99eb488cc8efdd0984563ba6d1faae53595bce1db3752813ed5c860d510cb62fa85a01a04aa4b9e35b43d50e75c00016dd0d32f7b3994b9517bfafbb70d3957c29b9ef9e0181686a3948a677e381e79994f0d4c25dfa5148bfad7cedd9c14539dfe2374e7f751ba71900e0442af8a946c5aa3747fa6d6900d7143483541106709b77e0dd0b6efdf90091fc629d3af4276edfcaf3110a049fd20a14dc67a4af1ef95dc2f87fe6eaa7ebd01d5d0a92bf6719e6909107361b8cbac211c70e20d46019156507830a7fe8aaa83e21d9f303e23d8765aadafef308437113d096236118e8b7c7c3b3ea33e37de277ba5dd4c7fd3e3f896e955187f5a5142507b413db3150ceb60558898cce5254e74894b6c5249b0d9bc213a707ccdbeb2c65d84965f5b98954d99b55f8aa89085df70349f6ca4d017355217ad0803c6a457abd6d1079dde3ed436359eba832dd6173ccf10eddb9dffed6c2b5708d9f68a74fa94aa099f5d637eae54147c94513d39093856986cf256c0dc400c2abe51fa6ae0a0a65183bf249e95cdec8d7b0b74af715b3180a514d3ac1de9d19c358fef2a7c013eac0dcde556e574055af78a62d99ad59912f4b10ec82c1ef8a0cb57ad2750dd0c4a7691ba7bc5872727a8d94716a830bfa0a2a6d7a3a4e29ab957494e3a6253840a0309390e7c539ad09ab7efb00ee987356a2f6217a6cb8b41fd31a6ad0a5da230c9df6688f2321b71e7cfa2281d59431f233d356631ca0c0969cfeeedad53886f7aa117ab452c82b1e595c08790ad3bc0d9b583cde8be09320d34e9ed3b7c8bb445f2f215d67af1280567dcd396661d15302ba68283462f3a67077d4670a8afca7c9016bc7c69fbef5e3da0f784a589ef9f4c4f4ea600e553525cc20249d49b411e1d1c5b7b27ee31defbb2d1c6e0a2043266ee9fd83a873df966072bacaaa2f42c441ec3b424607530cfe75d529a8ad7eb1b0a1b369a889155df593065af2937111825f6bf7dd96a30d95bffc6db7168951a163a12ac172498ec217c57b8a7b96810a4b85a84c23ac2770f681e0195faf7ffa87a2f1cad97f14c05a63a49db76cb365efa16156609ff0f078746264413df22e8770c53fae72e08dc231a2a9f54a0798dbda6d9c896a3eda1fc8cdd91ac37f10bb55b346d06f906d2d9f9d6ceba5c4631befc9bec311024a08fca87ec5f983e89db7aeefa4b7947c84814d42922222b9c0c1b1c13045fb58c0681ed0ae98b464c37f6fce6b9ae00f3fe8c1af4e5783499e8f4058b8df3d83c3246e931402135427e73183fe1f873435ea897e84fd2613b14d566e50a5bcf7d43eabd888e921c318aef0b3d3a6bcb34d1f1fc941a355e89b86f5b071cf283086278cc37863977d90246cba897cc2b343c907d3cf517b9b8bbf80f2992301d8b92d799395cde3bbcc2923c20f7baa1918b795cbda3b8dd569dee347795125415907bc36cc037da0e8b090eb63151ac2658645270bab599aebdfe238ba3b0652f7453c9cb320b782d229041932fdff228145000d794a570ff8818f604f7ced8c6d1b3810c28e9be6dd87a87ede972c6c1aaed6cc8a63efec77c1d9660d21b2b7fe59167e34c6f5791cdc617257cc44e93295a1a5c759a92f1916479aedc5f7e8894abb7dbdeab0c0282970d3788b2ddc567aec2ad8733135b28f964303559d546e9c4b5bd186b88f3ce6b04a14c11d905fdec8a88052eb8c8adf4eafa8b681cb2b9878bdc3366749d3fb954ae6969b4955237141d559345c3443a250d77837f0cfb2d32816f5bf65980e67f3d22f83739383d8a9d5590ed0f70e6f2a161b7920ef425f424a8ceb2e89d2866c5dd647b948b3fa4fa7dd86dd0bdf8d278f70aad9bfd23d5bb05d4cbc3c15a1548149fd1e1872d0b732352b02077b7527c5596df6a3625f5fbdf945deb2ea4b68df633c48ef11b9ef7c76f48a873fde081ece87a4e17d1217097d91775c3d0087d8eeae74e8a0030cc93c5ed1538a78eadd96a763b2006fbc6946696585cc5c180a7d33258826b6a722814dcbb0f2e734e57bd636d8fff9b1245b5ccfec617e3bfa98d221d6bcdede7df33f7850eda7e18f1019ddf97dae774034b7ae0bf9adba4a89c5c0b3ec47c615468005d913544d29241a5f6dc4b78543e8ae5b4465c6a1705fac6dda593058263d0971b3ee7cb8998e2757b23f5c6092f61c277ee8c242d1d2cfc7400f0ba1e59f7486b57e83f83b8607cde0d47773b23e5b1601779a17a35224eea2c7a60cad2cf8d77cbc083a788222b74b9106658516f1f72b2a3e85a2707386ad382d3a9b4aceaebd9531c5ba04a59550ab4786f3fa16dc3a182a421d3891ec2a26a41ec263177c573e76bbc2de40a5ba253db72c80be31fa58a3aae7dcb829a9b20ee806c05661e6152dac94f709a041c0367936be672b535870c6cb11e8f1e4aecb83141348d491c5c78c5cad50d07bed3a13a4736c5b55b160feaed4f94c729a2275d0ea64d0c553949a8042724f0b6f6a04b1c506a92e4ae6cdd9570071da5aef8ff9751e61ebdaa9c9f70db31b0926b401dedecc455763389179b61f86367be7dcb37d83a706cd976bf8529dfa5fb8cdcfd84de947824bc8698fd6cf5df152164dcde79b8f59a3c7718fdb42f4a075efbc026d9190e6e4afda6afbf6b53a233adcbf94e6e8069a5554a11c9162c80d7b77c68679578043018f9c02beed494afbef6379d722bcc83fb9b3c81151bf6882557b0f205492f893f704c0fd58188add70ec5783c6ac707f690455d25b8b0812cbe24c9f084b", 0x1000, 0x8000}, {&(0x7f00000025c0)="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", 0xfa, 0x8}, {&(0x7f00000026c0)="ad16b1fa5c9d7df63811b56690a4fa80a4ad0606830794757ec6263fe1f0131489371823e2e3884d0f7ebab0dc5eaf3525840e343f18897984194d7ee15e5acb5d4c", 0x42, 0x20400000}], 0x2000, &(0x7f0000001480)=ANY=[@ANYBLOB="cccccce50bcccccccccccccccccc2c66736d616769633d307830303030303030303030300100008af5735bb29aaa7700302c66756e633d46494c45"]) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendfile(r5, r5, &(0x7f0000000140)=0x8c1, 0x80000000) [ 425.593715][ T2767] loop4: detected capacity change from 0 to 131456 [ 425.600599][ T2767] EXT4-fs (loop4): inodes count not valid: 4294963232 vs 32 [ 425.620681][ T2884] loop1: detected capacity change from 0 to 131456 [ 425.631487][ T2884] EXT4-fs (loop1): inodes count not valid: 32 vs 64 20:29:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20f6ffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 425.665192][ T2988] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 20:29:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 21) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:22 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffff7fd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x3) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x80000000}], 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) 20:29:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000005200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 425.720964][ T2992] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 425.729756][ T2991] loop3: detected capacity change from 0 to 131456 [ 425.739610][ T2991] EXT4-fs (loop3): inodes count not valid: 50331680 vs 32 [ 425.751860][ T2996] loop1: detected capacity change from 0 to 131456 [ 425.752905][ T2988] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 425.759927][ T2999] loop4: detected capacity change from 0 to 131456 [ 425.767156][ T2996] EXT4-fs (loop1): inodes count not valid: 32 vs 96 [ 425.781044][ T2999] EXT4-fs (loop4): inodes count not valid: 4294964768 vs 32 [ 425.797538][ T2992] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 425.857136][ T3105] FAULT_INJECTION: forcing a failure. [ 425.857136][ T3105] name failslab, interval 1, probability 0, space 0, times 0 [ 425.869836][ T3105] CPU: 0 PID: 3105 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 425.878515][ T3105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.888818][ T3105] Call Trace: [ 425.892096][ T3105] dump_stack_lvl+0xd6/0x122 [ 425.896743][ T3105] dump_stack+0x11/0x1b [ 425.900940][ T3105] should_fail+0x23c/0x250 [ 425.905358][ T3105] __should_failslab+0x81/0x90 [ 425.910111][ T3105] ? apply_wqattrs_prepare+0x5f/0x630 [ 425.915484][ T3105] should_failslab+0x5/0x20 [ 425.920022][ T3105] kmem_cache_alloc_trace+0x52/0x320 [ 425.925903][ T3105] apply_wqattrs_prepare+0x5f/0x630 [ 425.931089][ T3105] ? vsnprintf+0xe8f/0xed0 [ 425.935669][ T3105] apply_workqueue_attrs+0x9e/0x100 [ 425.940861][ T3105] alloc_workqueue+0x777/0xad0 [ 425.945621][ T3105] ? disk_unblock_events+0x35/0x40 [ 425.950718][ T3105] ? bd_prepare_to_claim+0x1e6/0x270 [ 425.955994][ T3105] ? loop_attr_do_show_dio+0x70/0x70 [ 425.961266][ T3105] ? loop_set_status_from_info+0x35e/0x3a0 [ 425.967073][ T3105] loop_configure+0x681/0xeb0 [ 425.971778][ T3105] lo_ioctl+0x618/0x13e0 [ 425.976005][ T3105] ? path_openat+0x18d4/0x1ec0 [ 425.980841][ T3105] ? finish_task_switch+0xce/0x290 [ 425.985938][ T3105] ? blkdev_common_ioctl+0x438/0x1110 [ 425.991359][ T3105] ? selinux_file_ioctl+0x981/0xa10 [ 425.996546][ T3105] ? lo_release+0x120/0x120 [ 426.001123][ T3105] blkdev_ioctl+0x1d0/0x3f0 [ 426.005610][ T3105] block_ioctl+0x6e/0x80 [ 426.009836][ T3105] ? blkdev_iopoll+0x80/0x80 [ 426.014429][ T3105] __se_sys_ioctl+0xcb/0x140 [ 426.019006][ T3105] __x64_sys_ioctl+0x3f/0x50 [ 426.023582][ T3105] do_syscall_64+0x44/0xa0 [ 426.027990][ T3105] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 426.033942][ T3105] RIP: 0033:0x7f0a416ed7f7 [ 426.038340][ T3105] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:29:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/185, 0xb9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f6465762f6c6f6f703000791c9bbdebfa50cfd58cf54a71670150616f64f6f1f0c12a0a473183340c38b6a6a4a3116ff25af2842c13a0ccdb33541f7916180d206ddfa7"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x80010, &(0x7f00000002c0)='\x00') open(&(0x7f0000000300)='./file0\x00', 0x131c00, 0x99) [ 426.057941][ T3105] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.066336][ T3105] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 426.074307][ T3105] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 426.082263][ T3105] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 426.090221][ T3105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 426.098253][ T3105] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/185, 0xb9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f6465762f6c6f6f703000791c9bbdebfa50cfd58cf54a71670150616f64f6f1f0c12a0a473183340c38b6a6a4a3116ff25af2842c13a0ccdb33541f7916180d206ddfa7"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x80010, &(0x7f00000002c0)='\x00') open(&(0x7f0000000300)='./file0\x00', 0x131c00, 0x99) 20:29:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/185, 0xb9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f6465762f6c6f6f703000791c9bbdebfa50cfd58cf54a71670150616f64f6f1f0c12a0a473183340c38b6a6a4a3116ff25af2842c13a0ccdb33541f7916180d206ddfa7"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x80010, &(0x7f00000002c0)='\x00') open(&(0x7f0000000300)='./file0\x00', 0x131c00, 0x99) 20:29:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmdt(r1) 20:29:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007f5b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 426.350299][ T2996] loop1: detected capacity change from 0 to 131456 [ 426.357401][ T2991] loop3: detected capacity change from 0 to 131456 [ 426.364437][ T2996] EXT4-fs (loop1): inodes count not valid: 32 vs 96 [ 426.364472][ T2991] EXT4-fs (loop3): inodes count not valid: 50331680 vs 32 20:29:23 executing program 5: set_mempolicy(0x1, &(0x7f0000000080)=0x7fff, 0x948) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 426.417933][ T2999] loop4: detected capacity change from 0 to 131456 [ 426.424815][ T2999] EXT4-fs (loop4): inodes count not valid: 4294964768 vs 32 [ 426.446148][ T3229] loop1: detected capacity change from 0 to 131456 [ 426.454835][ T3229] EXT4-fs (loop1): inodes count not valid: 32 vs 96 20:29:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002103000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20fbffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 426.462101][ T3233] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 20:29:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmdt(r1) [ 426.492624][ T3254] loop1: detected capacity change from 0 to 131456 [ 426.494818][ T3236] loop3: detected capacity change from 0 to 131456 [ 426.506999][ T3236] EXT4-fs (loop3): inodes count not valid: 52494368 vs 32 [ 426.516263][ T3281] loop4: detected capacity change from 0 to 131456 [ 426.523568][ T3281] EXT4-fs (loop4): inodes count not valid: 4294966048 vs 32 [ 426.532543][ T3254] EXT4-fs (loop1): inodes count not valid: 32 vs 96 20:29:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 22) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:23 executing program 5: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)='%[\x00', &(0x7f0000000080)='#\\\\@*\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='\x00'], &(0x7f0000000200)=[&(0x7f0000000180)='#\\%\x00', &(0x7f00000001c0)='@%+\'&\x00'], 0x800) stat(&(0x7f00000002c0)='\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x6}, {0x2, 0x2, r1}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x1, r4}, {0x8, 0x0, 0xee00}, {0x8, 0x5, 0xee00}], {0x10, 0x2}, {0x20, 0x3}}, 0x5c, 0x1) 20:29:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000006400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 426.594784][ T3363] loop3: detected capacity change from 0 to 131456 [ 426.609766][ T3281] loop4: detected capacity change from 0 to 131456 [ 426.610921][ T3363] EXT4-fs (loop3): inodes count not valid: 52494368 vs 32 [ 426.620104][ T3281] EXT4-fs (loop4): inodes count not valid: 4294966048 vs 32 20:29:23 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_init() fallocate(r1, 0x40, 0x1, 0x8001) ftruncate(r0, 0xfffffffe) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x145042, 0x0) ftruncate(r1, 0x8000) pwrite64(r2, &(0x7f0000000180)="11", 0x2, 0xfffffffe) [ 426.642200][ T3460] loop1: detected capacity change from 0 to 131456 [ 426.649553][ T3460] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 426.664257][ T3460] loop1: detected capacity change from 0 to 131456 [ 426.683130][ T3460] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 426.735395][ T3480] FAULT_INJECTION: forcing a failure. [ 426.735395][ T3480] name failslab, interval 1, probability 0, space 0, times 0 [ 426.748016][ T3480] CPU: 1 PID: 3480 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 426.756691][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.766733][ T3480] Call Trace: [ 426.769999][ T3480] dump_stack_lvl+0xd6/0x122 [ 426.774581][ T3480] dump_stack+0x11/0x1b [ 426.778795][ T3480] should_fail+0x23c/0x250 [ 426.783199][ T3480] __should_failslab+0x81/0x90 [ 426.787961][ T3480] ? apply_wqattrs_prepare+0xbe/0x630 [ 426.793340][ T3480] should_failslab+0x5/0x20 [ 426.797829][ T3480] kmem_cache_alloc_trace+0x52/0x320 [ 426.803238][ T3480] ? apply_wqattrs_prepare+0x5f/0x630 [ 426.808597][ T3480] apply_wqattrs_prepare+0xbe/0x630 [ 426.813824][ T3480] ? vsnprintf+0xe8f/0xed0 [ 426.818243][ T3480] apply_workqueue_attrs+0x9e/0x100 [ 426.823437][ T3480] alloc_workqueue+0x777/0xad0 [ 426.828195][ T3480] ? __schedule+0x435/0x680 [ 426.832699][ T3480] ? loop_set_status_from_info+0x35e/0x3a0 [ 426.838509][ T3480] loop_configure+0x681/0xeb0 [ 426.843174][ T3480] lo_ioctl+0x618/0x13e0 [ 426.847424][ T3480] ? path_openat+0x18d4/0x1ec0 [ 426.852181][ T3480] ? finish_task_switch+0xce/0x290 [ 426.857282][ T3480] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 426.862986][ T3480] ? blkdev_common_ioctl+0x438/0x1110 [ 426.868344][ T3480] ? __sanitizer_cov_trace_switch+0x71/0x100 [ 426.874423][ T3480] ? lo_release+0x120/0x120 [ 426.878931][ T3480] blkdev_ioctl+0x1d0/0x3f0 [ 426.883482][ T3480] block_ioctl+0x6e/0x80 [ 426.887710][ T3480] ? blkdev_iopoll+0x80/0x80 [ 426.892376][ T3480] __se_sys_ioctl+0xcb/0x140 [ 426.897065][ T3480] __x64_sys_ioctl+0x3f/0x50 [ 426.901642][ T3480] do_syscall_64+0x44/0xa0 [ 426.906050][ T3480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 426.912003][ T3480] RIP: 0033:0x7f0a416ed7f7 [ 426.916417][ T3480] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 426.936110][ T3480] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.944637][ T3480] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 426.952623][ T3480] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 426.960673][ T3480] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 426.968639][ T3480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 426.976598][ T3480] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20feffffff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000746e00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 427.037900][ T3486] loop1: detected capacity change from 0 to 131456 20:29:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmdt(r1) [ 427.081517][ T3486] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002303000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 427.160084][ T3488] loop4: detected capacity change from 0 to 131456 [ 427.167966][ T3488] EXT4-fs (loop4): inodes count not valid: 4294966816 vs 32 20:29:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r1 = socket(0x5, 0x5, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000380)="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", 0xfc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x18c, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x752}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x260}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20048884}, 0x20000002) write(r1, &(0x7f0000000380)="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", 0xfc) getsockopt$netlink(r0, 0x10e, 0xa, 0xfffffffffffffffe, &(0x7f0000000040)) [ 427.265889][ T3615] loop3: detected capacity change from 0 to 131456 [ 427.265973][ T3486] loop1: detected capacity change from 0 to 131456 [ 427.279922][ T3486] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 427.279989][ T3615] EXT4-fs (loop3): inodes count not valid: 52625440 vs 32 20:29:24 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000380)="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", 0xfc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff, 0x7f, 0x76, 0x400, 0xffffffff, 0x84400020, r4}) 20:29:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000746f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmdt(r1) [ 427.319115][ T3488] loop4: detected capacity change from 0 to 131456 [ 427.326148][ T3488] EXT4-fs (loop4): inodes count not valid: 4294966816 vs 32 [ 427.379997][ T3729] loop1: detected capacity change from 0 to 131456 [ 427.387227][ T3729] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 427.411738][ T3615] loop3: detected capacity change from 0 to 131456 [ 427.418650][ T3615] EXT4-fs (loop3): inodes count not valid: 52625440 vs 32 20:29:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 23) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000020000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 427.428834][ T3729] loop1: detected capacity change from 0 to 131456 [ 427.435763][ T3729] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 427.472216][ T3837] loop4: detected capacity change from 0 to 131456 [ 427.480077][ T3837] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 427.490312][ T3837] EXT4-fs (loop4): group descriptors corrupted! 20:29:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002403000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:24 executing program 5: r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xe16d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x44100, 0x100) write$9p(r2, &(0x7f0000000000)=';', 0x1) [ 427.517828][ T3841] loop1: detected capacity change from 0 to 131456 [ 427.529683][ T3841] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 427.550348][ T3846] loop3: detected capacity change from 0 to 131456 [ 427.557783][ T3846] EXT4-fs (loop3): inodes count not valid: 52690976 vs 32 [ 427.608416][ T3949] FAULT_INJECTION: forcing a failure. [ 427.608416][ T3949] name failslab, interval 1, probability 0, space 0, times 0 [ 427.621077][ T3949] CPU: 1 PID: 3949 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 427.629745][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.639786][ T3949] Call Trace: [ 427.643139][ T3949] dump_stack_lvl+0xd6/0x122 [ 427.647716][ T3949] dump_stack+0x11/0x1b [ 427.651871][ T3949] should_fail+0x23c/0x250 [ 427.656364][ T3949] __should_failslab+0x81/0x90 [ 427.661114][ T3949] should_failslab+0x5/0x20 [ 427.665603][ T3949] kmem_cache_alloc_node+0x61/0x2c0 [ 427.670807][ T3949] ? alloc_unbound_pwq+0x3e6/0x780 [ 427.675902][ T3949] alloc_unbound_pwq+0x3e6/0x780 [ 427.680827][ T3949] apply_wqattrs_prepare+0x1ed/0x630 [ 427.686097][ T3949] apply_workqueue_attrs+0x9e/0x100 [ 427.696505][ T3949] alloc_workqueue+0x777/0xad0 [ 427.701337][ T3949] ? __schedule+0x435/0x680 [ 427.705863][ T3949] ? loop_set_status_from_info+0x35e/0x3a0 [ 427.711695][ T3949] loop_configure+0x681/0xeb0 [ 427.716439][ T3949] lo_ioctl+0x618/0x13e0 [ 427.720673][ T3949] ? path_openat+0x18d4/0x1ec0 [ 427.725425][ T3949] ? finish_task_switch+0xce/0x290 [ 427.730522][ T3949] ? blkdev_common_ioctl+0x438/0x1110 [ 427.735878][ T3949] ? selinux_file_ioctl+0x981/0xa10 [ 427.741065][ T3949] ? lo_release+0x120/0x120 [ 427.745590][ T3949] blkdev_ioctl+0x1d0/0x3f0 [ 427.750079][ T3949] block_ioctl+0x6e/0x80 [ 427.754306][ T3949] ? blkdev_iopoll+0x80/0x80 [ 427.758878][ T3949] __se_sys_ioctl+0xcb/0x140 [ 427.763543][ T3949] __x64_sys_ioctl+0x3f/0x50 [ 427.768133][ T3949] do_syscall_64+0x44/0xa0 [ 427.772577][ T3949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 427.778459][ T3949] RIP: 0033:0x7f0a416ed7f7 [ 427.782856][ T3949] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:29:24 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="0408c68b4018ff21e66174660004120a0200eb4000fa", 0x16}], 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x48f674590a4c559b) [ 427.802500][ T3949] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.810897][ T3949] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 427.818858][ T3949] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 427.826847][ T3949] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 427.834802][ T3949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 427.842797][ T3949] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 427.920716][ T3841] loop1: detected capacity change from 0 to 131456 [ 427.928875][ T3837] loop4: detected capacity change from 0 to 131456 [ 427.936114][ T3837] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 427.946417][ T3837] EXT4-fs (loop4): group descriptors corrupted! [ 427.953183][ T3841] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:24 executing program 5: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r3 = open$dir(0x0, 0x180, 0x0) openat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000280)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xfffffffffffffffe, 0x200009, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 428.137930][ C1] sd 0:0:1:0: tag#182 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 428.147745][ C1] sd 0:0:1:0: tag#182 CDB: opcode=0xe5 (vendor) [ 428.154009][ C1] sd 0:0:1:0: tag#182 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 428.162962][ C1] sd 0:0:1:0: tag#182 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 428.172019][ C1] sd 0:0:1:0: tag#182 CDB[20]: ba [ 428.178050][ T3846] loop3: detected capacity change from 0 to 131456 20:29:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000040000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 428.196504][ T3846] EXT4-fs (loop3): inodes count not valid: 52690976 vs 32 [ 428.223430][ T4069] loop4: detected capacity change from 0 to 131456 [ 428.230757][ T4069] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! 20:29:24 executing program 5: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r3 = open$dir(0x0, 0x180, 0x0) openat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000280)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xfffffffffffffffe, 0x200009, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 428.230922][ T4070] loop1: detected capacity change from 0 to 131456 [ 428.240967][ T4069] EXT4-fs (loop4): group descriptors corrupted! [ 428.254730][ T4070] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 428.281488][ T4070] loop1: detected capacity change from 0 to 131456 [ 428.288500][ T4070] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002503000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 24) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) [ 428.296899][ C0] sd 0:0:1:0: tag#183 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 428.306680][ C0] sd 0:0:1:0: tag#183 CDB: opcode=0xe5 (vendor) [ 428.312958][ C0] sd 0:0:1:0: tag#183 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 428.321928][ C0] sd 0:0:1:0: tag#183 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 428.330888][ C0] sd 0:0:1:0: tag#183 CDB[20]: ba [ 428.338585][ T4069] loop4: detected capacity change from 0 to 131456 20:29:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:25 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000000000000000000000000000000000000013000000230000000000000000", 0x29, 0x7f0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001", 0x407, 0xc00}, {0x0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004000000", 0x60, 0x8c60}], 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x3}}, {@journal_async_commit}, {@data_ordered}, {@test_dummy_encryption}, {@nolazytime}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/97, 0x61) [ 428.364201][ T4069] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! [ 428.374570][ T4069] EXT4-fs (loop4): group descriptors corrupted! 20:29:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000400000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 428.411158][ T4083] loop3: detected capacity change from 0 to 131456 [ 428.418497][ T4083] EXT4-fs (loop3): inodes count not valid: 52756512 vs 32 [ 428.438911][ T4088] loop1: detected capacity change from 0 to 131456 [ 428.446245][ T4088] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 428.461492][ T4095] loop4: detected capacity change from 0 to 131456 [ 428.513503][ T4103] FAULT_INJECTION: forcing a failure. [ 428.513503][ T4103] name failslab, interval 1, probability 0, space 0, times 0 [ 428.526116][ T4103] CPU: 1 PID: 4103 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 428.534846][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.544971][ T4103] Call Trace: [ 428.548235][ T4103] dump_stack_lvl+0xd6/0x122 [ 428.552847][ T4103] dump_stack+0x11/0x1b [ 428.556989][ T4103] should_fail+0x23c/0x250 [ 428.561483][ T4103] __should_failslab+0x81/0x90 [ 428.566256][ T4103] ? kobject_uevent_env+0x1a7/0xc40 [ 428.571444][ T4103] should_failslab+0x5/0x20 [ 428.575935][ T4103] kmem_cache_alloc_trace+0x52/0x320 [ 428.581207][ T4103] ? pwq_adjust_max_active+0x491/0x4b0 [ 428.586668][ T4103] ? dev_uevent_filter+0x70/0x70 [ 428.591675][ T4103] kobject_uevent_env+0x1a7/0xc40 [ 428.596689][ T4103] ? __list_add_valid+0x28/0x90 [ 428.601577][ T4103] ? alloc_workqueue+0xa18/0xad0 [ 428.606629][ T4103] disk_force_media_change+0xe3/0x170 [ 428.611992][ T4103] loop_configure+0x6c0/0xeb0 [ 428.616713][ T4103] lo_ioctl+0x618/0x13e0 [ 428.620947][ T4103] ? path_openat+0x18d4/0x1ec0 [ 428.625825][ T4103] ? __sanitizer_cov_trace_switch+0x71/0x100 [ 428.631808][ T4103] ? blkdev_common_ioctl+0x438/0x1110 [ 428.637253][ T4103] ? selinux_file_ioctl+0x981/0xa10 [ 428.642448][ T4103] ? lo_release+0x120/0x120 [ 428.646940][ T4103] blkdev_ioctl+0x1d0/0x3f0 [ 428.651451][ T4103] block_ioctl+0x6e/0x80 [ 428.655677][ T4103] ? blkdev_iopoll+0x80/0x80 [ 428.660269][ T4103] __se_sys_ioctl+0xcb/0x140 [ 428.664850][ T4103] __x64_sys_ioctl+0x3f/0x50 [ 428.669427][ T4103] do_syscall_64+0x44/0xa0 [ 428.673893][ T4103] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 428.679849][ T4103] RIP: 0033:0x7f0a416ed7f7 [ 428.684248][ T4103] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 428.703869][ T4103] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.712271][ T4103] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 428.720245][ T4103] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 428.728365][ T4103] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 428.736321][ T4103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 428.744281][ T4103] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 428.752413][ T4103] loop2: detected capacity change from 0 to 131456 [ 428.988250][ T4083] loop3: detected capacity change from 0 to 131456 [ 428.995086][ T4083] EXT4-fs (loop3): inodes count not valid: 52756512 vs 32 [ 429.003815][ T4204] loop1: detected capacity change from 0 to 131456 [ 429.010841][ T4095] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 429.020589][ T4204] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 429.027743][ T4095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007f7200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 429.027763][ T4103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002603000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 429.135331][ T4215] loop1: detected capacity change from 0 to 131456 [ 429.143156][ T4215] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 429.171029][ T4285] loop3: detected capacity change from 0 to 131456 [ 429.178544][ T4285] EXT4-fs (loop3): inodes count not valid: 52822048 vs 32 20:29:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002e80000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 429.187834][ T4215] loop1: detected capacity change from 0 to 131456 [ 429.196448][ T4215] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 25) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) [ 429.230276][ T4323] loop4: detected capacity change from 0 to 131456 [ 429.239876][ T4323] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 429.245907][ T4285] loop3: detected capacity change from 0 to 131456 [ 429.254584][ T4285] EXT4-fs (loop3): inodes count not valid: 52822048 vs 32 [ 429.271283][ T4327] loop1: detected capacity change from 0 to 131456 20:29:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 429.278536][ T4327] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 429.313012][ T4327] loop1: detected capacity change from 0 to 131456 [ 429.320057][ T4327] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 429.351655][ T4323] loop4: detected capacity change from 0 to 131456 20:29:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20003303000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 429.358643][ T4323] EXT4-fs (loop4): inodes count not valid: 33554464 vs 32 [ 429.376716][ T4346] loop3: detected capacity change from 0 to 131456 [ 429.386916][ T4346] EXT4-fs (loop3): inodes count not valid: 53674016 vs 32 [ 429.407979][ T4349] loop1: detected capacity change from 0 to 131456 [ 429.415450][ T4349] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 429.449235][ T4350] FAULT_INJECTION: forcing a failure. [ 429.449235][ T4350] name failslab, interval 1, probability 0, space 0, times 0 [ 429.461880][ T4350] CPU: 1 PID: 4350 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 429.470560][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.480710][ T4350] Call Trace: [ 429.483980][ T4350] dump_stack_lvl+0xd6/0x122 [ 429.488622][ T4350] dump_stack+0x11/0x1b [ 429.492761][ T4350] should_fail+0x23c/0x250 [ 429.497160][ T4350] ? kzalloc+0x1d/0x30 [ 429.501224][ T4350] __should_failslab+0x81/0x90 [ 429.505971][ T4350] should_failslab+0x5/0x20 [ 429.510474][ T4350] __kmalloc+0x6f/0x350 [ 429.514613][ T4350] kzalloc+0x1d/0x30 [ 429.518511][ T4350] kobject_get_path+0x7c/0x110 [ 429.523277][ T4350] kobject_uevent_env+0x1be/0xc40 [ 429.528345][ T4350] ? __list_add_valid+0x28/0x90 [ 429.533191][ T4350] ? alloc_workqueue+0xa18/0xad0 [ 429.538180][ T4350] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 429.543977][ T4350] disk_force_media_change+0xe3/0x170 [ 429.549338][ T4350] loop_configure+0x6c0/0xeb0 [ 429.554035][ T4350] lo_ioctl+0x618/0x13e0 [ 429.558317][ T4350] ? path_openat+0x18d4/0x1ec0 [ 429.563073][ T4350] ? __sanitizer_cov_trace_switch+0x78/0x100 [ 429.569041][ T4350] ? blkdev_common_ioctl+0x438/0x1110 [ 429.574412][ T4350] ? selinux_file_ioctl+0x981/0xa10 [ 429.579598][ T4350] ? lo_release+0x120/0x120 [ 429.584104][ T4350] blkdev_ioctl+0x1d0/0x3f0 [ 429.588681][ T4350] block_ioctl+0x6e/0x80 [ 429.593000][ T4350] ? blkdev_iopoll+0x80/0x80 [ 429.597571][ T4350] __se_sys_ioctl+0xcb/0x140 [ 429.602150][ T4350] __x64_sys_ioctl+0x3f/0x50 [ 429.606726][ T4350] do_syscall_64+0x44/0xa0 [ 429.611183][ T4350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 429.617144][ T4350] RIP: 0033:0x7f0a416ed7f7 [ 429.621541][ T4350] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.641571][ T4350] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.649969][ T4350] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 429.657936][ T4350] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 429.665961][ T4350] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 429.673927][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 429.681880][ T4350] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 429.690007][ T4350] loop2: detected capacity change from 0 to 131456 20:29:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 429.937415][ T4350] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 429.950782][ T4356] loop4: detected capacity change from 0 to 131456 [ 429.958217][ T4356] EXT4-fs (loop4): inodes count not valid: 131104 vs 32 [ 429.970803][ T4349] loop1: detected capacity change from 0 to 131456 [ 429.977661][ T4349] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 430.050774][ T4357] loop3: detected capacity change from 0 to 131456 [ 430.057862][ T4356] loop4: detected capacity change from 0 to 131456 [ 430.065019][ T4356] EXT4-fs (loop4): inodes count not valid: 131104 vs 32 [ 430.077935][ T4368] loop1: detected capacity change from 0 to 131456 [ 430.085699][ T4368] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000300000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 430.094803][ T4357] EXT4-fs (loop3): inodes count not valid: 53674016 vs 32 [ 430.118916][ T4368] loop1: detected capacity change from 0 to 131456 [ 430.126041][ T4368] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 430.133790][ T4373] loop4: detected capacity change from 0 to 131456 [ 430.141138][ T4373] EXT4-fs (loop4): inodes count not valid: 196640 vs 32 20:29:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 26) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000204000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 430.191093][ T4381] loop1: detected capacity change from 0 to 131456 [ 430.199525][ T4381] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 430.230416][ T4381] loop1: detected capacity change from 0 to 131456 20:29:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 430.238082][ T4381] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 430.251233][ T4456] loop3: detected capacity change from 0 to 131456 [ 430.258632][ T4456] EXT4-fs (loop3): inodes count not valid: 67239968 vs 32 [ 430.266579][ T4373] loop4: detected capacity change from 0 to 131456 [ 430.273530][ T4373] EXT4-fs (loop4): inodes count not valid: 196640 vs 32 20:29:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 430.337075][ T4498] loop1: detected capacity change from 0 to 131456 [ 430.369714][ T4500] FAULT_INJECTION: forcing a failure. [ 430.369714][ T4500] name failslab, interval 1, probability 0, space 0, times 0 [ 430.382334][ T4500] CPU: 1 PID: 4500 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 430.391106][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.401164][ T4500] Call Trace: [ 430.404438][ T4500] dump_stack_lvl+0xd6/0x122 [ 430.409032][ T4500] dump_stack+0x11/0x1b [ 430.413202][ T4500] should_fail+0x23c/0x250 [ 430.417662][ T4500] __should_failslab+0x81/0x90 [ 430.422505][ T4500] should_failslab+0x5/0x20 [ 430.427101][ T4500] kmem_cache_alloc_node+0x61/0x2c0 [ 430.432317][ T4500] ? sysvec_reschedule_ipi+0x27/0xd0 [ 430.437657][ T4500] ? __alloc_skb+0xed/0x420 [ 430.442164][ T4500] __alloc_skb+0xed/0x420 [ 430.446539][ T4500] alloc_uevent_skb+0x5b/0x120 [ 430.451301][ T4500] kobject_uevent_env+0x863/0xc40 [ 430.456385][ T4500] disk_force_media_change+0xe3/0x170 [ 430.461779][ T4500] loop_configure+0x6c0/0xeb0 [ 430.466539][ T4500] lo_ioctl+0x618/0x13e0 [ 430.470770][ T4500] ? path_openat+0x18d4/0x1ec0 [ 430.475549][ T4500] ? blkdev_common_ioctl+0x438/0x1110 [ 430.480993][ T4500] ? selinux_file_ioctl+0x981/0xa10 [ 430.486196][ T4500] ? lo_release+0x120/0x120 [ 430.490763][ T4500] blkdev_ioctl+0x1d0/0x3f0 [ 430.495329][ T4500] block_ioctl+0x6e/0x80 [ 430.499610][ T4500] ? blkdev_iopoll+0x80/0x80 [ 430.504192][ T4500] __se_sys_ioctl+0xcb/0x140 [ 430.508792][ T4500] __x64_sys_ioctl+0x3f/0x50 [ 430.513367][ T4500] do_syscall_64+0x44/0xa0 [ 430.517775][ T4500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 430.523674][ T4500] RIP: 0033:0x7f0a416ed7f7 [ 430.528096][ T4500] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 430.547689][ T4500] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.556090][ T4500] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 430.564051][ T4500] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 430.572072][ T4500] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 430.580033][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 430.588088][ T4500] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 430.596201][ T4500] loop2: detected capacity change from 0 to 131456 [ 430.616790][ T4500] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 430.650054][ T4498] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 430.681579][ T4505] loop4: detected capacity change from 0 to 131456 [ 430.689049][ T4505] EXT4-fs (loop4): inodes count not valid: 262176 vs 32 20:29:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 430.750886][ T4456] loop3: detected capacity change from 0 to 131456 [ 430.757894][ T4456] EXT4-fs (loop3): inodes count not valid: 67239968 vs 32 [ 430.780534][ T4498] loop1: detected capacity change from 0 to 131456 [ 430.810022][ T4498] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 20:29:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000604000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 430.907937][ T4509] loop4: detected capacity change from 0 to 131456 [ 430.924663][ T4519] loop1: detected capacity change from 0 to 131456 [ 430.932065][ T4519] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 430.938081][ T4509] EXT4-fs (loop4): inodes count not valid: 262176 vs 32 20:29:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 430.952132][ T4524] loop1: detected capacity change from 0 to 131456 [ 430.968558][ T4526] loop3: detected capacity change from 0 to 131456 [ 430.975877][ T4526] EXT4-fs (loop3): inodes count not valid: 67502112 vs 32 [ 430.979795][ T4524] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 27) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000500000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 431.075877][ T4526] loop3: detected capacity change from 0 to 131456 [ 431.082713][ T4526] EXT4-fs (loop3): inodes count not valid: 67502112 vs 32 [ 431.109564][ T4534] loop4: detected capacity change from 0 to 131456 [ 431.118568][ T4534] EXT4-fs (loop4): inodes count not valid: 327712 vs 32 20:29:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(0x0) [ 431.126594][ T4536] loop1: detected capacity change from 0 to 131456 [ 431.134423][ T4536] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 20:29:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001004000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 431.180712][ T4544] loop1: detected capacity change from 0 to 131456 [ 431.197034][ T4544] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 431.216529][ T4534] loop4: detected capacity change from 0 to 131456 [ 431.220128][ T4550] loop3: detected capacity change from 0 to 131456 [ 431.230665][ T4550] EXT4-fs (loop3): inodes count not valid: 68157472 vs 32 [ 431.238270][ T4534] EXT4-fs (loop4): inodes count not valid: 327712 vs 32 [ 431.274489][ T4553] FAULT_INJECTION: forcing a failure. [ 431.274489][ T4553] name failslab, interval 1, probability 0, space 0, times 0 [ 431.287153][ T4553] CPU: 1 PID: 4553 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 431.295837][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.305982][ T4553] Call Trace: [ 431.309260][ T4553] dump_stack_lvl+0xd6/0x122 [ 431.313848][ T4553] dump_stack+0x11/0x1b [ 431.317998][ T4553] should_fail+0x23c/0x250 [ 431.322426][ T4553] __should_failslab+0x81/0x90 [ 431.327257][ T4553] should_failslab+0x5/0x20 [ 431.331855][ T4553] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 431.337561][ T4553] ? __kmalloc_node_track_caller+0x30/0x40 [ 431.343359][ T4553] __kmalloc_node_track_caller+0x30/0x40 [ 431.349005][ T4553] ? alloc_uevent_skb+0x5b/0x120 [ 431.354033][ T4553] __alloc_skb+0x187/0x420 [ 431.358451][ T4553] alloc_uevent_skb+0x5b/0x120 [ 431.363224][ T4553] kobject_uevent_env+0x863/0xc40 [ 431.368253][ T4553] disk_force_media_change+0xe3/0x170 [ 431.373657][ T4553] loop_configure+0x6c0/0xeb0 [ 431.378427][ T4553] lo_ioctl+0x618/0x13e0 [ 431.382908][ T4553] ? path_openat+0x18d4/0x1ec0 [ 431.387677][ T4553] ? finish_task_switch+0xce/0x290 [ 431.392777][ T4553] ? blkdev_common_ioctl+0x438/0x1110 [ 431.398188][ T4553] ? selinux_file_ioctl+0x981/0xa10 [ 431.403401][ T4553] ? lo_release+0x120/0x120 [ 431.407919][ T4553] blkdev_ioctl+0x1d0/0x3f0 [ 431.412548][ T4553] block_ioctl+0x6e/0x80 [ 431.416812][ T4553] ? blkdev_iopoll+0x80/0x80 [ 431.421386][ T4553] __se_sys_ioctl+0xcb/0x140 [ 431.425965][ T4553] __x64_sys_ioctl+0x3f/0x50 [ 431.430554][ T4553] do_syscall_64+0x44/0xa0 [ 431.434966][ T4553] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 431.440969][ T4553] RIP: 0033:0x7f0a416ed7f7 [ 431.445377][ T4553] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.465111][ T4553] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.473509][ T4553] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 431.481465][ T4553] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 431.489421][ T4553] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 431.497375][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 431.505330][ T4553] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 431.513535][ T4553] loop2: detected capacity change from 0 to 131456 [ 431.610686][ T4553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(0x0) 20:29:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000600000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 431.796699][ T4550] loop3: detected capacity change from 0 to 131456 [ 431.803660][ T4550] EXT4-fs (loop3): inodes count not valid: 68157472 vs 32 [ 431.819700][ T4566] loop4: detected capacity change from 0 to 131456 [ 431.826996][ T4566] EXT4-fs (loop4): inodes count not valid: 393248 vs 32 [ 431.837263][ T4569] loop1: detected capacity change from 0 to 131456 20:29:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 431.844473][ T4569] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000005000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 431.880464][ T4573] loop1: detected capacity change from 0 to 131456 [ 431.888739][ T4573] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 431.909737][ T4577] loop3: detected capacity change from 0 to 131456 [ 431.917411][ T4577] EXT4-fs (loop3): inodes count not valid: 83886112 vs 32 20:29:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(0x0) [ 431.929700][ T4566] loop4: detected capacity change from 0 to 131456 [ 431.936603][ T4566] EXT4-fs (loop4): inodes count not valid: 393248 vs 32 20:29:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 28) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000700000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 432.023168][ T4577] loop3: detected capacity change from 0 to 131456 [ 432.030153][ T4577] EXT4-fs (loop3): inodes count not valid: 83886112 vs 32 [ 432.041275][ T4590] loop1: detected capacity change from 0 to 131456 [ 432.048732][ T4590] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 432.058620][ T4592] loop4: detected capacity change from 0 to 131456 [ 432.066003][ T4592] EXT4-fs (loop4): inodes count not valid: 458784 vs 32 20:29:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000006000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r0) [ 432.096940][ T4590] loop1: detected capacity change from 0 to 131456 [ 432.103775][ T4590] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 432.126495][ T4599] loop3: detected capacity change from 0 to 131456 [ 432.134109][ T4599] EXT4-fs (loop3): inodes count not valid: 100663328 vs 32 [ 432.216496][ T4608] FAULT_INJECTION: forcing a failure. [ 432.216496][ T4608] name failslab, interval 1, probability 0, space 0, times 0 [ 432.229322][ T4608] CPU: 0 PID: 4608 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 432.238001][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.248268][ T4608] Call Trace: [ 432.251534][ T4608] dump_stack_lvl+0xd6/0x122 [ 432.256141][ T4608] dump_stack+0x11/0x1b [ 432.260283][ T4608] should_fail+0x23c/0x250 [ 432.264686][ T4608] ? skb_clone+0x12c/0x1f0 [ 432.269157][ T4608] __should_failslab+0x81/0x90 [ 432.273907][ T4608] should_failslab+0x5/0x20 [ 432.278420][ T4608] kmem_cache_alloc+0x4f/0x300 [ 432.283179][ T4608] skb_clone+0x12c/0x1f0 [ 432.287560][ T4608] netlink_broadcast_filtered+0x4fd/0xb60 [ 432.293263][ T4608] ? skb_put+0xb9/0xf0 [ 432.297320][ T4608] netlink_broadcast+0x35/0x50 [ 432.302117][ T4608] kobject_uevent_env+0x8c9/0xc40 [ 432.307137][ T4608] disk_force_media_change+0xe3/0x170 [ 432.312624][ T4608] loop_configure+0x6c0/0xeb0 [ 432.317290][ T4608] lo_ioctl+0x618/0x13e0 [ 432.321523][ T4608] ? path_openat+0x18d4/0x1ec0 [ 432.326284][ T4608] ? blkdev_common_ioctl+0x438/0x1110 [ 432.331824][ T4608] ? selinux_file_ioctl+0x981/0xa10 [ 432.337111][ T4608] ? lo_release+0x120/0x120 [ 432.341710][ T4608] blkdev_ioctl+0x1d0/0x3f0 [ 432.346207][ T4608] block_ioctl+0x6e/0x80 [ 432.350435][ T4608] ? blkdev_iopoll+0x80/0x80 [ 432.355012][ T4608] __se_sys_ioctl+0xcb/0x140 [ 432.359612][ T4608] __x64_sys_ioctl+0x3f/0x50 [ 432.364268][ T4608] do_syscall_64+0x44/0xa0 [ 432.368725][ T4608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 432.374611][ T4608] RIP: 0033:0x7f0a416ed7f7 [ 432.379009][ T4608] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 432.398791][ T4608] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.407227][ T4608] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 20:29:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 432.415184][ T4608] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 432.423264][ T4608] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 432.431231][ T4608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 432.439187][ T4608] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 432.447538][ T4608] loop2: detected capacity change from 0 to 131456 [ 432.479036][ T4611] loop1: detected capacity change from 0 to 131456 [ 432.500145][ T4592] loop4: detected capacity change from 0 to 131456 [ 432.507044][ T4592] EXT4-fs (loop4): inodes count not valid: 458784 vs 32 [ 432.509743][ T4611] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 432.570335][ T4599] loop3: detected capacity change from 0 to 131456 [ 432.577297][ T4599] EXT4-fs (loop3): inodes count not valid: 100663328 vs 32 [ 432.613770][ T4608] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r0) 20:29:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000406000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 432.736022][ T4623] loop1: detected capacity change from 0 to 131456 [ 432.749689][ T4623] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 432.764088][ T4629] loop4: detected capacity change from 0 to 131456 [ 432.771777][ T4629] EXT4-fs (loop4): inodes count not valid: 524320 vs 32 [ 432.803414][ T4634] loop3: detected capacity change from 0 to 131456 [ 432.810652][ T4634] EXT4-fs (loop3): inodes count not valid: 100925472 vs 32 [ 432.863227][ T4634] loop3: detected capacity change from 0 to 131456 [ 432.870066][ T4634] EXT4-fs (loop3): inodes count not valid: 100925472 vs 32 [ 432.878098][ T4629] loop4: detected capacity change from 0 to 131456 [ 432.885116][ T4629] EXT4-fs (loop4): inodes count not valid: 524320 vs 32 20:29:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 29) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r0) 20:29:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000900000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000007000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 432.962914][ T4647] loop1: detected capacity change from 0 to 131456 [ 432.970448][ T4647] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 432.984952][ T4653] loop4: detected capacity change from 0 to 131456 [ 432.992384][ T4653] EXT4-fs (loop4): inodes count not valid: 589856 vs 32 [ 432.994952][ T4655] loop3: detected capacity change from 0 to 131456 [ 433.006718][ T4655] EXT4-fs (loop3): inodes count not valid: 117440544 vs 32 [ 433.027803][ T4680] loop1: detected capacity change from 0 to 131456 [ 433.039971][ T4680] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 433.083911][ T4655] loop3: detected capacity change from 0 to 131456 [ 433.109428][ T4655] EXT4-fs (loop3): inodes count not valid: 117440544 vs 32 [ 433.129362][ T4765] FAULT_INJECTION: forcing a failure. [ 433.129362][ T4765] name failslab, interval 1, probability 0, space 0, times 0 [ 433.142022][ T4765] CPU: 0 PID: 4765 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 433.150959][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.160997][ T4765] Call Trace: [ 433.164258][ T4765] dump_stack_lvl+0xd6/0x122 [ 433.169182][ T4765] dump_stack+0x11/0x1b [ 433.173319][ T4765] should_fail+0x23c/0x250 [ 433.177720][ T4765] ? __kernfs_new_node+0x6a/0x330 [ 433.182785][ T4765] __should_failslab+0x81/0x90 [ 433.188122][ T4765] should_failslab+0x5/0x20 [ 433.192700][ T4765] kmem_cache_alloc+0x4f/0x300 [ 433.197449][ T4765] ? __kfree_skb+0xfe/0x150 [ 433.202023][ T4765] ? ___cache_free+0x3c/0x300 [ 433.206704][ T4765] __kernfs_new_node+0x6a/0x330 [ 433.211595][ T4765] ? ___cache_free+0x3c/0x300 [ 433.216253][ T4765] ? kmem_cache_free+0x5e/0xe0 [ 433.221109][ T4765] ? sysvec_reschedule_ipi+0x27/0xd0 [ 433.226434][ T4765] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 433.232154][ T4765] kernfs_create_dir_ns+0x5e/0x140 [ 433.237253][ T4765] internal_create_group+0x148/0x860 [ 433.242591][ T4765] ? __invalidate_device+0xb0/0xc0 [ 433.247873][ T4765] ? set_disk_ro+0x73/0x110 [ 433.252361][ T4765] sysfs_create_group+0x1b/0x20 [ 433.257283][ T4765] loop_configure+0xbcd/0xeb0 [ 433.261950][ T4765] lo_ioctl+0x618/0x13e0 [ 433.266267][ T4765] ? path_openat+0x18d4/0x1ec0 [ 433.271094][ T4765] ? finish_task_switch+0xce/0x290 [ 433.276188][ T4765] ? blkdev_common_ioctl+0x438/0x1110 [ 433.281582][ T4765] ? selinux_file_ioctl+0x981/0xa10 [ 433.286776][ T4765] ? lo_release+0x120/0x120 [ 433.291310][ T4765] blkdev_ioctl+0x1d0/0x3f0 [ 433.295796][ T4765] block_ioctl+0x6e/0x80 [ 433.300020][ T4765] ? blkdev_iopoll+0x80/0x80 [ 433.304601][ T4765] __se_sys_ioctl+0xcb/0x140 [ 433.309194][ T4765] __x64_sys_ioctl+0x3f/0x50 [ 433.313829][ T4765] do_syscall_64+0x44/0xa0 [ 433.318272][ T4765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.324259][ T4765] RIP: 0033:0x7f0a416ed7f7 [ 433.328678][ T4765] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.348541][ T4765] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.357078][ T4765] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 433.365375][ T4765] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 433.373429][ T4765] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 433.381387][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 433.389495][ T4765] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 433.397620][ T4765] loop2: detected capacity change from 0 to 131456 20:29:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747e00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 433.580607][ T4653] loop4: detected capacity change from 0 to 131456 [ 433.587438][ T4653] EXT4-fs (loop4): inodes count not valid: 589856 vs 32 [ 433.609538][ T4777] loop1: detected capacity change from 0 to 131456 [ 433.617026][ T4777] EXT4-fs (loop1): inodes count not valid: 32 vs 128 20:29:30 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000a00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000747f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 433.651677][ T4777] loop1: detected capacity change from 0 to 131456 [ 433.659234][ T4777] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 433.669826][ T4765] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000009000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 433.697529][ T4784] loop4: detected capacity change from 0 to 131456 [ 433.704810][ T4784] EXT4-fs (loop4): inodes count not valid: 655392 vs 32 [ 433.729607][ T4784] ================================================================== [ 433.729794][ T4787] loop1: detected capacity change from 0 to 131456 [ 433.737704][ T4784] BUG: KCSAN: data-race in __lru_add_drain_all / lru_cache_add [ 433.744932][ T4787] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 433.751713][ T4784] [ 433.751723][ T4784] write to 0xffff888237c22528 of 1 bytes by task 4787 on cpu 0: [ 433.751737][ T4784] lru_cache_add+0x75/0x150 [ 433.769577][ T4790] loop3: detected capacity change from 0 to 131456 [ 433.773686][ T4784] shmem_getpage_gfp+0xcb9/0x13d0 [ 433.783667][ T4790] EXT4-fs (loop3): inodes count not valid: 150994976 vs 32 [ 433.785385][ T4784] shmem_write_begin+0x7e/0x100 [ 433.797463][ T4784] generic_perform_write+0x1b8/0x3e0 [ 433.802752][ T4784] __generic_file_write_iter+0x174/0x310 [ 433.808394][ T4784] generic_file_write_iter+0x75/0x130 [ 433.813769][ T4784] vfs_write+0x7bc/0x900 [ 433.818023][ T4784] __x64_sys_pwrite64+0xf5/0x150 [ 433.822976][ T4784] do_syscall_64+0x44/0xa0 [ 433.827400][ T4784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.833311][ T4784] [ 433.835633][ T4784] read to 0xffff888237c22528 of 1 bytes by task 4784 on cpu 1: [ 433.843617][ T4784] __lru_add_drain_all+0x12c/0x3e0 [ 433.848745][ T4784] lru_add_drain_all+0xc/0x10 [ 433.853519][ T4784] invalidate_bdev+0x56/0x80 [ 433.858140][ T4784] __loop_clr_fd+0x521/0x850 [ 433.862731][ T4784] lo_ioctl+0xac5/0x13e0 [ 433.866975][ T4784] blkdev_ioctl+0x1d0/0x3f0 [ 433.871475][ T4784] block_ioctl+0x6e/0x80 [ 433.875723][ T4784] __se_sys_ioctl+0xcb/0x140 [ 433.880313][ T4784] __x64_sys_ioctl+0x3f/0x50 [ 433.884898][ T4784] do_syscall_64+0x44/0xa0 [ 433.889316][ T4784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.895210][ T4784] [ 433.897523][ T4784] value changed: 0x01 -> 0x02 [ 433.902268][ T4784] [ 433.904585][ T4784] Reported by Kernel Concurrency Sanitizer on: [ 433.910725][ T4784] CPU: 1 PID: 4784 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 433.919394][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.929430][ T4784] ================================================================== [ 433.943109][ T4784] loop4: detected capacity change from 0 to 131456 20:29:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 30) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:30 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 433.952681][ T4784] EXT4-fs (loop4): inodes count not valid: 655392 vs 32 [ 433.974456][ T4787] loop1: detected capacity change from 0 to 131456 [ 433.981418][ T4787] EXT4-fs (loop1): inodes count not valid: 32 vs 128 [ 433.990534][ T4790] loop3: detected capacity change from 0 to 131456 20:29:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000b00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 433.997566][ T4790] EXT4-fs (loop3): inodes count not valid: 150994976 vs 32 20:29:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:30 executing program 0: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 434.035666][ T4826] loop4: detected capacity change from 0 to 131456 [ 434.043024][ T4826] EXT4-fs (loop4): inodes count not valid: 720928 vs 32 [ 434.062117][ T4878] loop1: detected capacity change from 0 to 131456 [ 434.069522][ T4878] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 434.137439][ T4916] FAULT_INJECTION: forcing a failure. [ 434.137439][ T4916] name failslab, interval 1, probability 0, space 0, times 0 [ 434.150084][ T4916] CPU: 0 PID: 4916 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 434.158902][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.168956][ T4916] Call Trace: [ 434.172242][ T4916] dump_stack_lvl+0xd6/0x122 [ 434.176869][ T4916] dump_stack+0x11/0x1b [ 434.181019][ T4916] should_fail+0x23c/0x250 [ 434.185448][ T4916] ? __kernfs_new_node+0x6a/0x330 [ 434.190497][ T4916] __should_failslab+0x81/0x90 [ 434.195331][ T4916] should_failslab+0x5/0x20 [ 434.199832][ T4916] kmem_cache_alloc+0x4f/0x300 [ 434.204590][ T4916] __kernfs_new_node+0x6a/0x330 [ 434.209469][ T4916] ? kernfs_activate+0x14b/0x2d0 [ 434.214565][ T4916] kernfs_new_node+0x5b/0xd0 [ 434.219319][ T4916] __kernfs_create_file+0x45/0x1a0 [ 434.224416][ T4916] sysfs_add_file_mode_ns+0x1c1/0x250 [ 434.229773][ T4916] internal_create_group+0x2f4/0x860 [ 434.235044][ T4916] ? set_disk_ro+0x73/0x110 [ 434.239583][ T4916] sysfs_create_group+0x1b/0x20 [ 434.244463][ T4916] loop_configure+0xbcd/0xeb0 [ 434.249208][ T4916] lo_ioctl+0x618/0x13e0 [ 434.253450][ T4916] ? kcsan_setup_watchpoint+0x94/0x3f0 [ 434.258899][ T4916] ? blkdev_common_ioctl+0x438/0x1110 [ 434.264282][ T4916] ? selinux_file_ioctl+0x981/0xa10 [ 434.269515][ T4916] ? lo_release+0x120/0x120 [ 434.274005][ T4916] blkdev_ioctl+0x1d0/0x3f0 [ 434.278496][ T4916] block_ioctl+0x6e/0x80 [ 434.282724][ T4916] ? blkdev_iopoll+0x80/0x80 [ 434.287298][ T4916] __se_sys_ioctl+0xcb/0x140 [ 434.291928][ T4916] __x64_sys_ioctl+0x3f/0x50 [ 434.296503][ T4916] do_syscall_64+0x44/0xa0 [ 434.300931][ T4916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 434.306831][ T4916] RIP: 0033:0x7f0a416ed7f7 [ 434.311409][ T4916] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 434.331022][ T4916] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.339429][ T4916] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 434.347649][ T4916] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 434.355640][ T4916] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 434.363675][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 434.371699][ T4916] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 434.379763][ T4916] loop2: detected capacity change from 0 to 131456 20:29:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 434.441594][ T4826] loop4: detected capacity change from 0 to 131456 [ 434.448488][ T4826] EXT4-fs (loop4): inodes count not valid: 720928 vs 32 [ 434.472531][ T4878] loop1: detected capacity change from 0 to 131456 [ 434.479450][ T4878] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 434.513302][ T4926] loop3: detected capacity change from 0 to 131456 20:29:31 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 434.590172][ T4926] EXT4-fs (loop3): inodes count not valid: 167772192 vs 32 20:29:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 434.654709][ T4916] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.678863][ T4934] loop1: detected capacity change from 0 to 131456 [ 434.686235][ T4934] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 434.686846][ T4935] loop4: detected capacity change from 0 to 131456 [ 434.700439][ T4935] EXT4-fs (loop4): inodes count not valid: 786464 vs 32 20:29:31 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 434.727176][ T4926] loop3: detected capacity change from 0 to 131456 [ 434.734130][ T4926] EXT4-fs (loop3): inodes count not valid: 167772192 vs 32 [ 434.743676][ T4934] loop1: detected capacity change from 0 to 131456 [ 434.750573][ T4934] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 434.782907][ T4935] loop4: detected capacity change from 0 to 131456 [ 434.790306][ T4935] EXT4-fs (loop4): inodes count not valid: 786464 vs 32 20:29:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 31) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000d00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:31 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 434.893118][ T5051] loop1: detected capacity change from 0 to 131456 [ 434.900395][ T5051] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 434.909565][ T5054] loop3: detected capacity change from 0 to 131456 [ 434.916816][ T5054] EXT4-fs (loop3): inodes count not valid: 184549408 vs 32 [ 434.925197][ T5055] loop4: detected capacity change from 0 to 131456 [ 434.933209][ T5055] EXT4-fs (loop4): inodes count not valid: 852000 vs 32 20:29:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 434.934244][ T5051] loop1: detected capacity change from 0 to 131456 [ 434.947043][ T5051] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 435.058427][ T5068] FAULT_INJECTION: forcing a failure. [ 435.058427][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 435.071069][ T5068] CPU: 0 PID: 5068 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 435.079924][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.090073][ T5068] Call Trace: [ 435.093346][ T5068] dump_stack_lvl+0xd6/0x122 [ 435.097945][ T5068] dump_stack+0x11/0x1b [ 435.102086][ T5068] should_fail+0x23c/0x250 [ 435.106488][ T5068] ? __kernfs_new_node+0x6a/0x330 [ 435.111637][ T5068] __should_failslab+0x81/0x90 [ 435.116472][ T5068] should_failslab+0x5/0x20 [ 435.120965][ T5068] kmem_cache_alloc+0x4f/0x300 [ 435.125745][ T5068] ? __down_write_common+0x42/0x830 [ 435.130962][ T5068] __kernfs_new_node+0x6a/0x330 [ 435.135802][ T5068] ? up_write+0x25/0xc0 [ 435.139999][ T5068] kernfs_new_node+0x5b/0xd0 [ 435.144584][ T5068] __kernfs_create_file+0x45/0x1a0 [ 435.149866][ T5068] sysfs_add_file_mode_ns+0x1c1/0x250 [ 435.155222][ T5068] internal_create_group+0x2f4/0x860 [ 435.160544][ T5068] ? set_disk_ro+0x73/0x110 [ 435.165131][ T5068] sysfs_create_group+0x1b/0x20 [ 435.170053][ T5068] loop_configure+0xbcd/0xeb0 [ 435.174736][ T5068] lo_ioctl+0x618/0x13e0 [ 435.178964][ T5068] ? path_openat+0x18d4/0x1ec0 [ 435.183790][ T5068] ? finish_task_switch+0xce/0x290 [ 435.188955][ T5068] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 435.194595][ T5068] ? blkdev_common_ioctl+0x438/0x1110 [ 435.199952][ T5068] ? __sanitizer_cov_trace_switch+0x71/0x100 [ 435.205919][ T5068] ? lo_release+0x120/0x120 [ 435.210409][ T5068] blkdev_ioctl+0x1d0/0x3f0 [ 435.214900][ T5068] block_ioctl+0x6e/0x80 [ 435.219127][ T5068] ? blkdev_iopoll+0x80/0x80 [ 435.223698][ T5068] __se_sys_ioctl+0xcb/0x140 [ 435.228321][ T5068] __x64_sys_ioctl+0x3f/0x50 [ 435.232894][ T5068] do_syscall_64+0x44/0xa0 [ 435.237342][ T5068] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 435.243231][ T5068] RIP: 0033:0x7f0a416ed7f7 [ 435.247631][ T5068] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 435.267514][ T5068] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.276070][ T5068] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 435.284039][ T5068] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 435.292000][ T5068] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 435.299979][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 435.307937][ T5068] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 435.316099][ T5068] loop2: detected capacity change from 0 to 131456 20:29:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 435.556603][ T5055] loop4: detected capacity change from 0 to 131456 [ 435.563557][ T5055] EXT4-fs (loop4): inodes count not valid: 852000 vs 32 [ 435.577844][ T5068] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.590449][ T5177] loop1: detected capacity change from 0 to 131456 [ 435.598155][ T5065] loop3: detected capacity change from 0 to 131456 20:29:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 435.604740][ T5177] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000e00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 435.630469][ T5177] loop1: detected capacity change from 0 to 131456 [ 435.637591][ T5177] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 435.637685][ T5065] EXT4-fs (loop3): inodes count not valid: 184549408 vs 32 [ 435.664870][ T5183] loop4: detected capacity change from 0 to 131456 [ 435.672232][ T5183] EXT4-fs (loop4): inodes count not valid: 917536 vs 32 [ 435.714738][ T5183] loop4: detected capacity change from 0 to 131456 [ 435.721804][ T5183] EXT4-fs (loop4): inodes count not valid: 917536 vs 32 [ 435.733114][ T5196] loop1: detected capacity change from 0 to 131456 [ 435.740436][ T5196] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 32) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000f00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.785785][ T5196] loop1: detected capacity change from 0 to 131456 [ 435.806587][ T5196] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 435.839557][ T5300] loop4: detected capacity change from 0 to 131456 [ 435.839555][ T5298] loop3: detected capacity change from 0 to 131456 [ 435.840552][ T5300] EXT4-fs (loop4): inodes count not valid: 983072 vs 32 [ 435.861073][ T5298] EXT4-fs (loop3): inodes count not valid: 201326624 vs 32 [ 435.898779][ T5306] loop1: detected capacity change from 0 to 131456 [ 435.907763][ T5306] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 435.970481][ T5314] FAULT_INJECTION: forcing a failure. [ 435.970481][ T5314] name failslab, interval 1, probability 0, space 0, times 0 [ 435.983106][ T5314] CPU: 1 PID: 5314 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 435.991769][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.001894][ T5314] Call Trace: [ 436.005159][ T5314] dump_stack_lvl+0xd6/0x122 [ 436.009828][ T5314] dump_stack+0x11/0x1b [ 436.013973][ T5314] should_fail+0x23c/0x250 [ 436.018377][ T5314] ? __kernfs_new_node+0x6a/0x330 [ 436.023404][ T5314] __should_failslab+0x81/0x90 [ 436.028154][ T5314] should_failslab+0x5/0x20 [ 436.032646][ T5314] kmem_cache_alloc+0x4f/0x300 [ 436.037394][ T5314] ? __down_write_common+0x42/0x830 [ 436.042589][ T5314] __kernfs_new_node+0x6a/0x330 [ 436.047429][ T5314] ? up_write+0x25/0xc0 [ 436.051589][ T5314] kernfs_new_node+0x5b/0xd0 [ 436.056234][ T5314] __kernfs_create_file+0x45/0x1a0 [ 436.061328][ T5314] sysfs_add_file_mode_ns+0x1c1/0x250 [ 436.066699][ T5314] internal_create_group+0x2f4/0x860 [ 436.072007][ T5314] sysfs_create_group+0x1b/0x20 [ 436.076871][ T5314] loop_configure+0xbcd/0xeb0 [ 436.083418][ T5314] lo_ioctl+0x618/0x13e0 [ 436.087737][ T5314] ? path_openat+0x18d4/0x1ec0 [ 436.092543][ T5314] ? blkdev_common_ioctl+0x438/0x1110 [ 436.097974][ T5314] ? selinux_file_ioctl+0x981/0xa10 [ 436.103205][ T5314] ? lo_release+0x120/0x120 [ 436.107871][ T5314] blkdev_ioctl+0x1d0/0x3f0 [ 436.112360][ T5314] block_ioctl+0x6e/0x80 [ 436.116599][ T5314] ? blkdev_iopoll+0x80/0x80 [ 436.121175][ T5314] __se_sys_ioctl+0xcb/0x140 [ 436.125754][ T5314] __x64_sys_ioctl+0x3f/0x50 [ 436.130426][ T5314] do_syscall_64+0x44/0xa0 [ 436.134857][ T5314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 436.140747][ T5314] RIP: 0033:0x7f0a416ed7f7 [ 436.145232][ T5314] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 436.164828][ T5314] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.173228][ T5314] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 436.181234][ T5314] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 436.189247][ T5314] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 436.197216][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 436.205183][ T5314] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 436.213239][ T5314] loop2: detected capacity change from 0 to 131456 20:29:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) [ 436.332103][ T5300] loop4: detected capacity change from 0 to 131456 [ 436.339406][ T5300] EXT4-fs (loop4): inodes count not valid: 983072 vs 32 [ 436.350322][ T5306] loop1: detected capacity change from 0 to 131456 [ 436.357257][ T5306] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 436.450677][ T5298] loop3: detected capacity change from 0 to 131456 [ 436.457956][ T5298] EXT4-fs (loop3): inodes count not valid: 201326624 vs 32 [ 436.512028][ T5332] loop1: detected capacity change from 0 to 131456 [ 436.519361][ T5332] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 436.529087][ T5333] loop4: detected capacity change from 0 to 131456 [ 436.536427][ T5333] EXT4-fs (loop4): inodes count not valid: 1048608 vs 32 [ 436.551572][ T5314] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 436.563274][ T5332] loop1: detected capacity change from 0 to 131456 [ 436.570342][ T5332] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 436.579651][ T5406] loop3: detected capacity change from 0 to 131456 [ 436.587311][ T5406] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32 20:29:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) [ 436.619475][ T5333] loop4: detected capacity change from 0 to 131456 [ 436.626431][ T5333] EXT4-fs (loop4): inodes count not valid: 1048608 vs 32 20:29:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 33) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001100000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 436.707430][ T5406] loop3: detected capacity change from 0 to 131456 [ 436.715449][ T5406] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32 [ 436.727540][ T5452] loop1: detected capacity change from 0 to 131456 [ 436.730493][ T5454] loop4: detected capacity change from 0 to 131456 [ 436.735036][ T5452] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 436.747733][ T5454] EXT4-fs (loop4): inodes count not valid: 1114144 vs 32 20:29:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 436.794459][ T5461] loop1: detected capacity change from 0 to 131456 [ 436.802031][ T5461] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 436.882216][ T5567] FAULT_INJECTION: forcing a failure. [ 436.882216][ T5567] name failslab, interval 1, probability 0, space 0, times 0 [ 436.894940][ T5567] CPU: 0 PID: 5567 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 436.904046][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.914143][ T5567] Call Trace: [ 436.917420][ T5567] dump_stack_lvl+0xd6/0x122 [ 436.922004][ T5567] dump_stack+0x11/0x1b [ 436.926146][ T5567] should_fail+0x23c/0x250 [ 436.930548][ T5567] ? __kernfs_new_node+0x6a/0x330 [ 436.935689][ T5567] __should_failslab+0x81/0x90 [ 436.940460][ T5567] should_failslab+0x5/0x20 [ 436.944952][ T5567] kmem_cache_alloc+0x4f/0x300 [ 436.949750][ T5567] ? __down_write_common+0x42/0x830 [ 436.954937][ T5567] __kernfs_new_node+0x6a/0x330 [ 436.959776][ T5567] ? up_write+0x25/0xc0 [ 436.963955][ T5567] kernfs_new_node+0x5b/0xd0 [ 436.968531][ T5567] __kernfs_create_file+0x45/0x1a0 [ 436.973627][ T5567] sysfs_add_file_mode_ns+0x1c1/0x250 [ 436.978983][ T5567] internal_create_group+0x2f4/0x860 [ 436.984301][ T5567] ? set_disk_ro+0x73/0x110 [ 436.988787][ T5567] sysfs_create_group+0x1b/0x20 [ 436.993676][ T5567] loop_configure+0xbcd/0xeb0 [ 436.998375][ T5567] lo_ioctl+0x618/0x13e0 [ 437.002601][ T5567] ? path_openat+0x18d4/0x1ec0 [ 437.007359][ T5567] ? blkdev_common_ioctl+0x438/0x1110 [ 437.012718][ T5567] ? selinux_file_ioctl+0x981/0xa10 [ 437.017903][ T5567] ? lo_release+0x120/0x120 [ 437.022435][ T5567] blkdev_ioctl+0x1d0/0x3f0 [ 437.026928][ T5567] block_ioctl+0x6e/0x80 [ 437.031155][ T5567] ? blkdev_iopoll+0x80/0x80 [ 437.035725][ T5567] __se_sys_ioctl+0xcb/0x140 [ 437.040307][ T5567] __x64_sys_ioctl+0x3f/0x50 [ 437.044903][ T5567] do_syscall_64+0x44/0xa0 [ 437.049416][ T5567] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 437.055310][ T5567] RIP: 0033:0x7f0a416ed7f7 [ 437.059711][ T5567] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.079315][ T5567] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.087715][ T5567] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 437.095669][ T5567] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 437.103623][ T5567] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 437.111579][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 437.119630][ T5567] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f30d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 437.127734][ T5567] loop2: detected capacity change from 0 to 131456 20:29:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 437.220182][ T5454] loop4: detected capacity change from 0 to 131456 [ 437.279313][ T5567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.298937][ T5454] EXT4-fs (loop4): inodes count not valid: 1114144 vs 32 20:29:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 437.387893][ T5575] loop3: detected capacity change from 0 to 131456 [ 437.397255][ T5580] loop1: detected capacity change from 0 to 131456 [ 437.402298][ T5575] EXT4-fs (loop3): inodes count not valid: 234029088 vs 32 [ 437.411421][ T5580] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x957}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 20:29:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 437.433871][ T5584] loop4: detected capacity change from 0 to 131456 [ 437.441276][ T5584] EXT4-fs (loop4): inodes count not valid: 1179680 vs 32 [ 437.460621][ T5587] loop1: detected capacity change from 0 to 131456 [ 437.472714][ T5587] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 437.522809][ T5584] loop4: detected capacity change from 0 to 131456 [ 437.530280][ T5584] EXT4-fs (loop4): inodes count not valid: 1179680 vs 32 [ 437.543475][ T5577] loop3: detected capacity change from 0 to 131456 [ 437.550466][ T5577] EXT4-fs (loop3): inodes count not valid: 234029088 vs 32 20:29:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 34) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:34 executing program 5: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f40d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 437.601430][ T5701] loop1: detected capacity change from 0 to 131456 [ 437.608822][ T5701] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 437.634846][ T5705] loop4: detected capacity change from 0 to 131456 [ 437.642178][ T5705] EXT4-fs (loop4): inodes count not valid: 1310752 vs 32 [ 437.666886][ T5701] loop1: detected capacity change from 0 to 131456 [ 437.674186][ T5701] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 437.675447][ T5711] loop3: detected capacity change from 0 to 131456 [ 437.691894][ T5711] EXT4-fs (loop3): inodes count not valid: 234094624 vs 32 20:29:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 437.736146][ T5705] loop4: detected capacity change from 0 to 131456 [ 437.743209][ T5705] EXT4-fs (loop4): inodes count not valid: 1310752 vs 32 [ 437.749752][ T5711] loop3: detected capacity change from 0 to 131456 [ 437.761808][ T5711] EXT4-fs (loop3): inodes count not valid: 234094624 vs 32 [ 437.812568][ T5823] FAULT_INJECTION: forcing a failure. [ 437.812568][ T5823] name failslab, interval 1, probability 0, space 0, times 0 [ 437.825182][ T5823] CPU: 1 PID: 5823 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 437.833865][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.843905][ T5823] Call Trace: [ 437.847213][ T5823] dump_stack_lvl+0xd6/0x122 [ 437.851814][ T5823] dump_stack+0x11/0x1b [ 437.855971][ T5823] should_fail+0x23c/0x250 [ 437.860371][ T5823] ? __kernfs_new_node+0x6a/0x330 [ 437.865386][ T5823] __should_failslab+0x81/0x90 [ 437.870132][ T5823] should_failslab+0x5/0x20 [ 437.874696][ T5823] kmem_cache_alloc+0x4f/0x300 [ 437.879493][ T5823] ? __down_write_common+0x42/0x830 [ 437.884677][ T5823] __kernfs_new_node+0x6a/0x330 [ 437.889517][ T5823] ? up_write+0x25/0xc0 [ 437.893652][ T5823] kernfs_new_node+0x5b/0xd0 [ 437.898388][ T5823] __kernfs_create_file+0x45/0x1a0 [ 437.903479][ T5823] sysfs_add_file_mode_ns+0x1c1/0x250 [ 437.908836][ T5823] internal_create_group+0x2f4/0x860 [ 437.914538][ T5823] ? set_disk_ro+0x73/0x110 [ 437.919022][ T5823] sysfs_create_group+0x1b/0x20 [ 437.923863][ T5823] loop_configure+0xbcd/0xeb0 [ 437.928539][ T5823] lo_ioctl+0x618/0x13e0 [ 437.932828][ T5823] ? path_openat+0x18d4/0x1ec0 [ 437.937591][ T5823] ? finish_task_switch+0xce/0x290 [ 437.942744][ T5823] ? __sanitizer_cov_trace_switch+0x90/0x100 [ 437.948713][ T5823] ? blkdev_common_ioctl+0x438/0x1110 [ 437.954071][ T5823] ? selinux_file_ioctl+0x981/0xa10 [ 437.959264][ T5823] ? lo_release+0x120/0x120 [ 437.963751][ T5823] blkdev_ioctl+0x1d0/0x3f0 [ 437.968235][ T5823] block_ioctl+0x6e/0x80 [ 437.972552][ T5823] ? blkdev_iopoll+0x80/0x80 [ 437.977122][ T5823] __se_sys_ioctl+0xcb/0x140 [ 437.981693][ T5823] __x64_sys_ioctl+0x3f/0x50 [ 437.986265][ T5823] do_syscall_64+0x44/0xa0 [ 437.990741][ T5823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 437.996626][ T5823] RIP: 0033:0x7f0a416ed7f7 [ 438.001024][ T5823] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.020614][ T5823] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.029053][ T5823] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 438.037323][ T5823] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 438.045275][ T5823] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 438.053229][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 438.061216][ T5823] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 [ 438.069361][ T5823] loop2: detected capacity change from 0 to 131456 20:29:35 executing program 5: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 438.299222][ T22] kauditd_printk_skb: 7 callbacks suppressed [ 438.299274][ T22] audit: type=1400 audit(1634416174.966:231): avc: denied { rename } for pid=362 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.325358][ T5835] loop1: detected capacity change from 0 to 131456 20:29:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000e000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 438.327804][ T22] audit: type=1400 audit(1634416174.966:232): avc: denied { unlink } for pid=362 comm="syslogd" name="messages.0" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.356689][ T22] audit: type=1400 audit(1634416174.966:233): avc: denied { create } for pid=362 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.378225][ T5835] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 438.385514][ T5823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 438.410924][ T5835] loop1: detected capacity change from 0 to 131456 [ 438.416431][ T5839] loop3: detected capacity change from 0 to 131456 [ 438.417826][ T5835] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 438.427016][ T5841] loop4: detected capacity change from 0 to 131456 [ 438.431162][ T5839] EXT4-fs (loop3): inodes count not valid: 234881056 vs 32 [ 438.444801][ T5841] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32 20:29:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 35) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) [ 438.494480][ T5948] loop1: detected capacity change from 0 to 131456 [ 438.502023][ T5948] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:35 executing program 5: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 438.541440][ T5948] loop1: detected capacity change from 0 to 131456 [ 438.548367][ T5948] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 438.561788][ T5952] loop3: detected capacity change from 0 to 131456 [ 438.581372][ T5841] loop4: detected capacity change from 0 to 131456 [ 438.588271][ T5952] EXT4-fs (loop3): inodes count not valid: 234881056 vs 32 [ 438.588249][ T5841] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32 [ 438.598578][ T5959] loop1: detected capacity change from 0 to 131456 [ 438.610008][ T5959] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001b00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 438.640586][ T5959] loop1: detected capacity change from 0 to 131456 [ 438.647401][ T5959] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 438.666814][ T6067] loop4: detected capacity change from 0 to 131456 [ 438.677438][ T6067] EXT4-fs (loop4): inodes count not valid: 1769504 vs 32 [ 438.736488][ T6071] FAULT_INJECTION: forcing a failure. [ 438.736488][ T6071] name failslab, interval 1, probability 0, space 0, times 0 [ 438.749139][ T6071] CPU: 1 PID: 6071 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 438.757814][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.767882][ T6071] Call Trace: [ 438.771580][ T6071] dump_stack_lvl+0xd6/0x122 [ 438.776179][ T6071] dump_stack+0x11/0x1b [ 438.780363][ T6071] should_fail+0x23c/0x250 [ 438.784802][ T6071] ? __kernfs_new_node+0x6a/0x330 [ 438.789909][ T6071] __should_failslab+0x81/0x90 [ 438.794746][ T6071] should_failslab+0x5/0x20 [ 438.799235][ T6071] kmem_cache_alloc+0x4f/0x300 [ 438.803987][ T6071] ? __down_write_common+0x42/0x830 [ 438.809188][ T6071] __kernfs_new_node+0x6a/0x330 [ 438.814187][ T6071] ? up_write+0x25/0xc0 [ 438.818329][ T6071] kernfs_new_node+0x5b/0xd0 [ 438.822914][ T6071] __kernfs_create_file+0x45/0x1a0 [ 438.828058][ T6071] sysfs_add_file_mode_ns+0x1c1/0x250 [ 438.833505][ T6071] internal_create_group+0x2f4/0x860 [ 438.838829][ T6071] ? set_disk_ro+0x73/0x110 [ 438.843432][ T6071] sysfs_create_group+0x1b/0x20 [ 438.848281][ T6071] loop_configure+0xbcd/0xeb0 [ 438.853019][ T6071] lo_ioctl+0x618/0x13e0 [ 438.857317][ T6071] ? path_openat+0x18d4/0x1ec0 [ 438.862237][ T6071] ? blkdev_common_ioctl+0x438/0x1110 [ 438.867639][ T6071] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 438.873960][ T6071] ? lo_release+0x120/0x120 [ 438.878448][ T6071] blkdev_ioctl+0x1d0/0x3f0 [ 438.882935][ T6071] block_ioctl+0x6e/0x80 [ 438.887172][ T6071] ? blkdev_iopoll+0x80/0x80 [ 438.891850][ T6071] __se_sys_ioctl+0xcb/0x140 [ 438.896424][ T6071] __x64_sys_ioctl+0x3f/0x50 [ 438.901005][ T6071] do_syscall_64+0x44/0xa0 [ 438.905410][ T6071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 438.911294][ T6071] RIP: 0033:0x7f0a416ed7f7 [ 438.915695][ T6071] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.935288][ T6071] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.943770][ T6071] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 438.951723][ T6071] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 438.960556][ T6071] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 438.968582][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 438.976537][ T6071] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:35 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 438.984739][ T6071] loop2: detected capacity change from 0 to 131456 [ 439.043037][ T6076] loop1: detected capacity change from 0 to 131456 [ 439.050626][ T6076] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 439.102233][ T6071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:29:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 439.247997][ T6085] loop3: detected capacity change from 0 to 131456 [ 439.256551][ T6085] EXT4-fs (loop3): inodes count not valid: 251658272 vs 32 [ 439.259587][ T6076] loop1: detected capacity change from 0 to 131456 [ 439.271009][ T6076] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 439.282293][ T6067] loop4: detected capacity change from 0 to 131456 [ 439.289228][ T6067] EXT4-fs (loop4): inodes count not valid: 1769504 vs 32 [ 439.342645][ T6085] loop3: detected capacity change from 0 to 131456 [ 439.350816][ T6093] loop1: detected capacity change from 0 to 131456 [ 439.360013][ T6085] EXT4-fs (loop3): inodes count not valid: 251658272 vs 32 [ 439.360063][ T6093] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 439.400482][ T6093] loop1: detected capacity change from 0 to 131456 [ 439.407361][ T6093] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 36) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002200000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000410000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 439.500430][ T6103] loop4: detected capacity change from 0 to 131456 [ 439.507855][ T6103] EXT4-fs (loop4): inodes count not valid: 2228256 vs 32 [ 439.523084][ T6107] loop1: detected capacity change from 0 to 131456 [ 439.523153][ T6106] loop3: detected capacity change from 0 to 131456 [ 439.530563][ T6107] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 439.542997][ T6106] EXT4-fs (loop3): inodes count not valid: 268697632 vs 32 [ 439.592663][ T6103] loop4: detected capacity change from 0 to 131456 [ 439.599519][ T6103] EXT4-fs (loop4): inodes count not valid: 2228256 vs 32 [ 439.607074][ T6107] loop1: detected capacity change from 0 to 131456 [ 439.662672][ T6221] loop2: detected capacity change from 0 to 131456 [ 439.669208][ T6221] FAULT_INJECTION: forcing a failure. [ 439.669208][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 439.681906][ T6221] CPU: 0 PID: 6221 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 439.690587][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.700648][ T6221] Call Trace: [ 439.703944][ T6221] dump_stack_lvl+0xd6/0x122 [ 439.708531][ T6221] dump_stack+0x11/0x1b [ 439.712677][ T6221] should_fail+0x23c/0x250 [ 439.717144][ T6221] __should_failslab+0x81/0x90 [ 439.721908][ T6221] ? kobject_uevent_env+0x1a7/0xc40 [ 439.727095][ T6221] should_failslab+0x5/0x20 [ 439.731632][ T6221] kmem_cache_alloc_trace+0x52/0x320 [ 439.737180][ T6221] ? dev_uevent_filter+0x70/0x70 [ 439.742188][ T6221] kobject_uevent_env+0x1a7/0xc40 [ 439.747303][ T6221] ? internal_create_group+0x7d9/0x860 [ 439.752791][ T6221] ? set_capacity_and_notify+0x1eb/0x200 [ 439.758410][ T6221] kobject_uevent+0x18/0x20 [ 439.762905][ T6221] loop_configure+0xce1/0xeb0 [ 439.767570][ T6221] lo_ioctl+0x618/0x13e0 [ 439.771903][ T6221] ? path_openat+0x18d4/0x1ec0 [ 439.776708][ T6221] ? blkdev_common_ioctl+0x438/0x1110 [ 439.782070][ T6221] ? selinux_file_ioctl+0x981/0xa10 [ 439.787257][ T6221] ? lo_release+0x120/0x120 [ 439.791804][ T6221] blkdev_ioctl+0x1d0/0x3f0 [ 439.796334][ T6221] block_ioctl+0x6e/0x80 [ 439.800565][ T6221] ? blkdev_iopoll+0x80/0x80 [ 439.805152][ T6221] __se_sys_ioctl+0xcb/0x140 [ 439.809738][ T6221] __x64_sys_ioctl+0x3f/0x50 [ 439.814322][ T6221] do_syscall_64+0x44/0xa0 [ 439.818743][ T6221] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 439.824736][ T6221] RIP: 0033:0x7f0a416ed7f7 [ 439.829228][ T6221] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.848844][ T6221] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.857241][ T6221] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 439.865197][ T6221] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 439.873406][ T6221] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 439.881468][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 439.889470][ T6221] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 440.050162][ T6107] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002500000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748e00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 440.140568][ T6221] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.162306][ T6230] loop4: detected capacity change from 0 to 131456 [ 440.170795][ T6230] EXT4-fs (loop4): inodes count not valid: 2424864 vs 32 [ 440.178528][ T6218] loop3: detected capacity change from 0 to 131456 20:29:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 440.187439][ T6218] EXT4-fs (loop3): inodes count not valid: 268697632 vs 32 [ 440.206726][ T6232] loop1: detected capacity change from 0 to 131456 [ 440.214172][ T6232] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002010000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 440.237527][ T6230] loop4: detected capacity change from 0 to 131456 [ 440.244459][ T6230] EXT4-fs (loop4): inodes count not valid: 2424864 vs 32 [ 440.253571][ T6232] loop1: detected capacity change from 0 to 131456 [ 440.260536][ T6232] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 440.337185][ T6248] loop3: detected capacity change from 0 to 131456 [ 440.344800][ T6248] EXT4-fs (loop3): inodes count not valid: 270532640 vs 32 20:29:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 37) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000748f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002e00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 440.383185][ T6248] loop3: detected capacity change from 0 to 131456 [ 440.390015][ T6248] EXT4-fs (loop3): inodes count not valid: 270532640 vs 32 20:29:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000011000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 440.425559][ T6254] loop4: detected capacity change from 0 to 131456 [ 440.432955][ T6254] EXT4-fs (loop4): inodes count not valid: 3014688 vs 32 [ 440.447016][ T6252] loop1: detected capacity change from 0 to 131456 [ 440.454308][ T6252] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 440.492940][ T6252] loop1: detected capacity change from 0 to 131456 [ 440.499957][ T6252] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 440.575544][ T6270] loop2: detected capacity change from 0 to 131456 [ 440.582186][ T6270] FAULT_INJECTION: forcing a failure. [ 440.582186][ T6270] name failslab, interval 1, probability 0, space 0, times 0 [ 440.594857][ T6270] CPU: 0 PID: 6270 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 440.603527][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.613573][ T6270] Call Trace: [ 440.616932][ T6270] dump_stack_lvl+0xd6/0x122 [ 440.621543][ T6270] dump_stack+0x11/0x1b [ 440.625684][ T6270] should_fail+0x23c/0x250 [ 440.630208][ T6270] ? kzalloc+0x1d/0x30 [ 440.634259][ T6270] __should_failslab+0x81/0x90 [ 440.639050][ T6270] should_failslab+0x5/0x20 [ 440.643543][ T6270] __kmalloc+0x6f/0x350 [ 440.647762][ T6270] kzalloc+0x1d/0x30 [ 440.651742][ T6270] kobject_get_path+0x7c/0x110 [ 440.656487][ T6270] kobject_uevent_env+0x1be/0xc40 [ 440.661581][ T6270] ? internal_create_group+0x7d9/0x860 [ 440.667038][ T6270] ? set_capacity_and_notify+0x1eb/0x200 [ 440.672668][ T6270] kobject_uevent+0x18/0x20 [ 440.677252][ T6270] loop_configure+0xce1/0xeb0 [ 440.681940][ T6270] lo_ioctl+0x618/0x13e0 [ 440.686167][ T6270] ? path_openat+0x18d4/0x1ec0 [ 440.690922][ T6270] ? blkdev_common_ioctl+0x438/0x1110 [ 440.696276][ T6270] ? selinux_file_ioctl+0x981/0xa10 [ 440.701463][ T6270] ? lo_release+0x120/0x120 [ 440.705980][ T6270] blkdev_ioctl+0x1d0/0x3f0 [ 440.710573][ T6270] block_ioctl+0x6e/0x80 [ 440.714798][ T6270] ? blkdev_iopoll+0x80/0x80 [ 440.719396][ T6270] __se_sys_ioctl+0xcb/0x140 [ 440.723968][ T6270] __x64_sys_ioctl+0x3f/0x50 [ 440.728547][ T6270] do_syscall_64+0x44/0xa0 [ 440.733097][ T6270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.738978][ T6270] RIP: 0033:0x7f0a416ed7f7 [ 440.743391][ T6270] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.763076][ T6270] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.771581][ T6270] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 440.779536][ T6270] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 440.787667][ T6270] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 440.795676][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 440.803695][ T6270] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 440.931324][ T6254] loop4: detected capacity change from 0 to 131456 [ 440.938351][ T6254] EXT4-fs (loop4): inodes count not valid: 3014688 vs 32 [ 440.959946][ T6269] loop3: detected capacity change from 0 to 131456 20:29:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000749000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 440.978089][ T6269] EXT4-fs (loop3): inodes count not valid: 285212704 vs 32 [ 441.024776][ T6281] loop1: detected capacity change from 0 to 131456 20:29:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 441.073956][ T6281] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 441.093784][ T6270] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 441.110449][ T6287] loop4: detected capacity change from 0 to 131456 20:29:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 441.118069][ T6287] EXT4-fs (loop4): inodes count not valid: 4718624 vs 32 [ 441.131764][ T6281] loop1: detected capacity change from 0 to 131456 [ 441.138660][ T6281] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000749100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 441.172121][ T6269] loop3: detected capacity change from 0 to 131456 [ 441.179356][ T6269] EXT4-fs (loop3): inodes count not valid: 285212704 vs 32 [ 441.187787][ T6293] loop1: detected capacity change from 0 to 131456 [ 441.193388][ T6287] loop4: detected capacity change from 0 to 131456 [ 441.201200][ T6293] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 441.208156][ T6287] EXT4-fs (loop4): inodes count not valid: 4718624 vs 32 [ 441.241280][ T6293] loop1: detected capacity change from 0 to 131456 [ 441.254050][ T6293] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 38) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:29:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000012000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000749200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 441.329311][ T6304] loop4: detected capacity change from 0 to 131456 [ 441.336805][ T6304] EXT4-fs (loop4): inodes count not valid: 4980768 vs 32 [ 441.342277][ T6308] loop1: detected capacity change from 0 to 131456 [ 441.351131][ T6308] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 441.360024][ T6310] loop3: detected capacity change from 0 to 131456 [ 441.367380][ T6310] EXT4-fs (loop3): inodes count not valid: 301989920 vs 32 20:29:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 441.390898][ T6308] loop1: detected capacity change from 0 to 131456 [ 441.397848][ T6308] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 441.420796][ T6304] loop4: detected capacity change from 0 to 131456 [ 441.427731][ T6304] EXT4-fs (loop4): inodes count not valid: 4980768 vs 32 20:29:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000749300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 441.449665][ T6310] loop3: detected capacity change from 0 to 131456 [ 441.456555][ T6310] EXT4-fs (loop3): inodes count not valid: 301989920 vs 32 [ 441.522627][ T6327] loop2: detected capacity change from 0 to 131456 [ 441.529260][ T6327] FAULT_INJECTION: forcing a failure. [ 441.529260][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 441.541941][ T6327] CPU: 0 PID: 6327 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 441.551069][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.561109][ T6327] Call Trace: [ 441.564373][ T6327] dump_stack_lvl+0xd6/0x122 [ 441.568951][ T6327] dump_stack+0x11/0x1b [ 441.573159][ T6327] should_fail+0x23c/0x250 [ 441.577557][ T6327] __should_failslab+0x81/0x90 [ 441.582375][ T6327] should_failslab+0x5/0x20 [ 441.586871][ T6327] kmem_cache_alloc_node+0x61/0x2c0 [ 441.592101][ T6327] ? __alloc_skb+0xed/0x420 [ 441.596592][ T6327] __alloc_skb+0xed/0x420 [ 441.600904][ T6327] alloc_uevent_skb+0x5b/0x120 [ 441.605659][ T6327] kobject_uevent_env+0x863/0xc40 [ 441.610672][ T6327] ? internal_create_group+0x7d9/0x860 [ 441.616184][ T6327] ? set_capacity_and_notify+0x1eb/0x200 [ 441.621872][ T6327] kobject_uevent+0x18/0x20 [ 441.626450][ T6327] loop_configure+0xce1/0xeb0 [ 441.631201][ T6327] lo_ioctl+0x618/0x13e0 [ 441.635550][ T6327] ? path_openat+0x18d4/0x1ec0 [ 441.640387][ T6327] ? blkdev_common_ioctl+0x438/0x1110 [ 441.645741][ T6327] ? selinux_file_ioctl+0x981/0xa10 [ 441.650924][ T6327] ? lo_release+0x120/0x120 [ 441.655485][ T6327] blkdev_ioctl+0x1d0/0x3f0 [ 441.659989][ T6327] block_ioctl+0x6e/0x80 [ 441.664217][ T6327] ? blkdev_iopoll+0x80/0x80 [ 441.668806][ T6327] __se_sys_ioctl+0xcb/0x140 [ 441.673462][ T6327] __x64_sys_ioctl+0x3f/0x50 [ 441.678124][ T6327] do_syscall_64+0x44/0xa0 [ 441.682543][ T6327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 441.688425][ T6327] RIP: 0033:0x7f0a416ed7f7 [ 441.692830][ T6327] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.712423][ T6327] RSP: 002b:00007f0a3f421f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.720819][ T6327] RAX: ffffffffffffffda RBX: 00007f0a41737970 RCX: 00007f0a416ed7f7 [ 441.728824][ T6327] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 441.736779][ T6327] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffffffffffff [ 441.744736][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 441.752690][ T6327] R13: 0000000000000007 R14: 0000000020000348 R15: 0000000000000003 20:29:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) [ 441.837903][ T6338] loop1: detected capacity change from 0 to 131456 [ 441.845376][ T6338] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 442.005447][ T6327] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 442.020525][ T6340] loop4: detected capacity change from 0 to 131456 [ 442.027708][ T6340] EXT4-fs (loop4): inodes count not valid: 6291488 vs 32 [ 442.040366][ T6338] loop1: detected capacity change from 0 to 131456 [ 442.047278][ T6338] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 442.070807][ T6340] loop4: detected capacity change from 0 to 131456 [ 442.077630][ T6340] EXT4-fs (loop4): inodes count not valid: 6291488 vs 32 20:29:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (fail_nth: 39) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = socket$inet(0x2, 0xa, 0x0) fremovexattr(r5, 0x0) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/122, 0x7a}], 0x3}}], 0x1, 0x40010040, &(0x7f0000002040)={0x77359400}) 20:29:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000014000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 20:29:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmdt(r1) 20:29:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000749400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006800000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 442.274895][ T6350] loop1: detected capacity change from 0 to 131456 [ 442.284002][ T6354] loop3: detected capacity change from 0 to 131456 [ 442.286783][ T6350] EXT4-fs (loop1): inodes count not valid: 32 vs 160 [ 442.298080][ T6354] EXT4-fs (loop3): inodes count not valid: 335544352 vs 32 [ 442.310032][ T6357] loop4: detected capacity change from 0 to 131456 [ 442.317551][ T6357] EXT4-fs (loop4): inodes count not valid: 6815776 vs 32 20:29:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 20:29:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) shmdt(r1) 20:29:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 442.317822][ T6350] loop1: detected capacity change from 0 to 131456 [ 442.331960][ T6350] EXT4-fs (loop1): inodes count not valid: 32 vs 160 20:29:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000749500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 20:29:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0