0x0, 0x1000, 0x6}, 0x0)

[  864.342705][T22957] loop5: detected capacity change from 0 to 16383
[  864.366981][T22957] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  864.369670][T22953] EXT4-fs error (device loop0): __ext4_fill_super:5326: inode #2: comm syz-executor.0: iget: root inode unallocated
[  864.397770][T22953] EXT4-fs (loop0): get root inode failed
[  864.403479][T22953] EXT4-fs (loop0): mount failed
22:20:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1c00)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:01 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:01 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x200})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:01 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000340)='./bus\x00', r2, r4)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused=[0x0, 0x0, 0x8], @devid})
r7 = getuid()
fchown(r6, r7, 0xffffffffffffffff)
r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r8, &(0x7f0000000140)=""/182, 0xb6)
r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r9, &(0x7f0000000140)=""/182, 0xb6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000080)="082f6d3397940388694a7fa465e3c7db8853be6da64b86dd8bfd94f618de07e79424b339e2a526fb23dc27c64edb19b5e7596bfc5c0f5b37ce824ea32b8b3b2008096ea5c7cfee05906b2346658d4851b509a386952cc4ed70b06612c6dc349c3318ff90cc86edf8d23a6d214a0331cc1c7f97ad2ff037af0be8eebb7c7851736e612721fc5b7e96fd2411ee6c73bb5016b1a38bda8ab6a30d781f1d3ad8a6225d175146812b9cd03ea58818a37dce790c6429a2fa1c6d6ae7d84101b85ce96a95953da819ecd98ed8cc503dbf56be01856fff844545b888d04515ae34c2b91c", 0xe0}, {&(0x7f0000000180)="881c32acf5ad0c68ab855eb3325530f9bac2e8ab9bd8fdaca7020ac5389c39ea602aebe30b6e3b9d6f43b8b4f907a092cc942c6fbb39bf3bc0e1d642ccb560fb25edcaf8110afe2cf8c739858fa4be6a41f84c65dd6ef842464b23a4e1b70e10312e27883e997b4e9cbe1b3adea6943099daccb8b07445130fc8d9551f26f86f1810db6ffd21f3a1d1f6758e8c291a10a72014b40ead3304db5c13cb91ef71aa0cab9ebe5cfd", 0xa6}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)="ec73a6407a280890356fd76d34d1e1aba34788f8bfd712866256ca33232ef47540675831d5644024736bef0e5d8864043868fb426c776cd6d4bf50c32df0d23acf557a4457dafcfcf1326d2b0cad180f70d8965268aa51bd3ea041d40f884d04d84f92483a43a0", 0x67}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}], 0xa8, 0x44001}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001580)="e62aba614ba77ce6d67dc5cfee313cf943d0efb5595e6fe78be4949c6c661a9d508b20274357eb0121144ef63af383aa5c1c611cd05a04cbef52bdc3819be283cec439384a18101fa3de81f7e211f48d0491cd4f6b29c1b0fae76315eb72da0add34bb59461266fe0dbe3671f804bf51d31e2fde3090d6f77cab43ef51b6fc004a", 0x81}, {&(0x7f0000002940)="a3ec954c7f5da5f8796fe9d700e78ec81a862b7e04b221749cb89ddfeb17c686008e472e4144358b7f6b59a6c24670df1f3466f336701270a58e3c5890d3664dd2995e8fb1e2a4545dcd2a08e12a6b51a625abc8043c59c31461bb6efd067e5c7af218598408d909fb68054560d2705e092b370d2b4fc71fcf5cb6ee93cb83623f7f3b94b746", 0x86}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="3608a02861a83c247e27043954c3e16f37aa65a8ad1de577f624d3009a54966ecd6f676b72cb96f14256f35af9d48bfa06aa28e8b84e284981bc81a459e80ab22db61d58c7a179be98b92752af9522e3466acb2e75d6aeae70ca4b07d3513f058444ff63705b150bb19541148aac2caec1d098ad51636ef8089306ef1891ce56f25eb9cefb27e9016de1ca9bccb7d65620e3d4108c9103701d5817e82ddb0fb2d3e8fde736915eb31b441b2062baee2a22bba0cf2c59bada1200b0202f178074305385b5c613b2b840e8b7ac65fcb792529751", 0xd3}], 0x4, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}], 0x40, 0xc0}}], 0x3, 0x4008050)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:01 executing program 0:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f00", 0x15, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:01 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  864.554620][T22976] loop4: detected capacity change from 0 to 16383
[  864.555045][T22975] loop3: detected capacity change from 0 to 16383
[  864.570306][T22979] loop5: detected capacity change from 0 to 16383
[  864.575960][T22976] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  864.585393][T22981] loop0: detected capacity change from 0 to 16383
22:20:01 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  864.609076][T22979] EXT4-fs error (device loop5): __ext4_fill_super:5326: inode #2: comm syz-executor.5: iget: root inode unallocated
[  864.636177][T22981] EXT4-fs error (device loop0): __ext4_fill_super:5326: inode #2: comm syz-executor.0: iget: root inode unallocated
[  864.646013][T22979] EXT4-fs (loop5): get root inode failed
[  864.654185][T22979] EXT4-fs (loop5): mount failed
22:20:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  864.671289][T22981] EXT4-fs (loop0): get root inode failed
[  864.675408][T22975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  864.677038][T22981] EXT4-fs (loop0): mount failed
[  864.681611][T22995] loop4: detected capacity change from 0 to 16383
22:20:01 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:01 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000", 0x22, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  864.728672][T22995] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  864.748132][T22999] loop5: detected capacity change from 0 to 16383
[  864.773609][T23002] loop0: detected capacity change from 0 to 16383
[  864.780977][T22999] EXT4-fs error (device loop5): __ext4_fill_super:5326: inode #2: comm syz-executor.5: iget: root inode unallocated
[  864.811459][T22999] EXT4-fs (loop5): get root inode failed
[  864.817216][T22999] EXT4-fs (loop5): mount failed
22:20:01 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000340)='./bus\x00', r2, r4)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused=[0x0, 0x0, 0x8], @devid})
r7 = getuid()
fchown(r6, r7, 0xffffffffffffffff)
r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r8, &(0x7f0000000140)=""/182, 0xb6)
r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r9, &(0x7f0000000140)=""/182, 0xb6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000080)="082f6d3397940388694a7fa465e3c7db8853be6da64b86dd8bfd94f618de07e79424b339e2a526fb23dc27c64edb19b5e7596bfc5c0f5b37ce824ea32b8b3b2008096ea5c7cfee05906b2346658d4851b509a386952cc4ed70b06612c6dc349c3318ff90cc86edf8d23a6d214a0331cc1c7f97ad2ff037af0be8eebb7c7851736e612721fc5b7e96fd2411ee6c73bb5016b1a38bda8ab6a30d781f1d3ad8a6225d175146812b9cd03ea58818a37dce790c6429a2fa1c6d6ae7d84101b85ce96a95953da819ecd98ed8cc503dbf56be01856fff844545b888d04515ae34c2b91c", 0xe0}, {&(0x7f0000000180)="881c32acf5ad0c68ab855eb3325530f9bac2e8ab9bd8fdaca7020ac5389c39ea602aebe30b6e3b9d6f43b8b4f907a092cc942c6fbb39bf3bc0e1d642ccb560fb25edcaf8110afe2cf8c739858fa4be6a41f84c65dd6ef842464b23a4e1b70e10312e27883e997b4e9cbe1b3adea6943099daccb8b07445130fc8d9551f26f86f1810db6ffd21f3a1d1f6758e8c291a10a72014b40ead3304db5c13cb91ef71aa0cab9ebe5cfd", 0xa6}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)="ec73a6407a280890356fd76d34d1e1aba34788f8bfd712866256ca33232ef47540675831d5644024736bef0e5d8864043868fb426c776cd6d4bf50c32df0d23acf557a4457dafcfcf1326d2b0cad180f70d8965268aa51bd3ea041d40f884d04d84f92483a43a0", 0x67}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}], 0xa8, 0x44001}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001580)="e62aba614ba77ce6d67dc5cfee313cf943d0efb5595e6fe78be4949c6c661a9d508b20274357eb0121144ef63af383aa5c1c611cd05a04cbef52bdc3819be283cec439384a18101fa3de81f7e211f48d0491cd4f6b29c1b0fae76315eb72da0add34bb59461266fe0dbe3671f804bf51d31e2fde3090d6f77cab43ef51b6fc004a", 0x81}, {&(0x7f0000002940)="a3ec954c7f5da5f8796fe9d700e78ec81a862b7e04b221749cb89ddfeb17c686008e472e4144358b7f6b59a6c24670df1f3466f336701270a58e3c5890d3664dd2995e8fb1e2a4545dcd2a08e12a6b51a625abc8043c59c31461bb6efd067e5c7af218598408d909fb68054560d2705e092b370d2b4fc71fcf5cb6ee93cb83623f7f3b94b746", 0x86}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="3608a02861a83c247e27043954c3e16f37aa65a8ad1de577f624d3009a54966ecd6f676b72cb96f14256f35af9d48bfa06aa28e8b84e284981bc81a459e80ab22db61d58c7a179be98b92752af9522e3466acb2e75d6aeae70ca4b07d3513f058444ff63705b150bb19541148aac2caec1d098ad51636ef8089306ef1891ce56f25eb9cefb27e9016de1ca9bccb7d65620e3d4108c9103701d5817e82ddb0fb2d3e8fde736915eb31b441b2062baee2a22bba0cf2c59bada1200b0202f178074305385b5c613b2b840e8b7ac65fcb792529751", 0xd3}], 0x4, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}], 0x40, 0xc0}}], 0x3, 0x4008050)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
getpid() (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
socket(0x10, 0x2, 0x0) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
lchown(&(0x7f0000000340)='./bus\x00', r2, r4) (async)
getpid() (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused=[0x0, 0x0, 0x8], @devid}) (async)
getuid() (async)
fchown(r6, r7, 0xffffffffffffffff) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async)
getdents64(r8, &(0x7f0000000140)=""/182, 0xb6) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async)
getdents64(r9, &(0x7f0000000140)=""/182, 0xb6) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000080)="082f6d3397940388694a7fa465e3c7db8853be6da64b86dd8bfd94f618de07e79424b339e2a526fb23dc27c64edb19b5e7596bfc5c0f5b37ce824ea32b8b3b2008096ea5c7cfee05906b2346658d4851b509a386952cc4ed70b06612c6dc349c3318ff90cc86edf8d23a6d214a0331cc1c7f97ad2ff037af0be8eebb7c7851736e612721fc5b7e96fd2411ee6c73bb5016b1a38bda8ab6a30d781f1d3ad8a6225d175146812b9cd03ea58818a37dce790c6429a2fa1c6d6ae7d84101b85ce96a95953da819ecd98ed8cc503dbf56be01856fff844545b888d04515ae34c2b91c", 0xe0}, {&(0x7f0000000180)="881c32acf5ad0c68ab855eb3325530f9bac2e8ab9bd8fdaca7020ac5389c39ea602aebe30b6e3b9d6f43b8b4f907a092cc942c6fbb39bf3bc0e1d642ccb560fb25edcaf8110afe2cf8c739858fa4be6a41f84c65dd6ef842464b23a4e1b70e10312e27883e997b4e9cbe1b3adea6943099daccb8b07445130fc8d9551f26f86f1810db6ffd21f3a1d1f6758e8c291a10a72014b40ead3304db5c13cb91ef71aa0cab9ebe5cfd", 0xa6}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)="ec73a6407a280890356fd76d34d1e1aba34788f8bfd712866256ca33232ef47540675831d5644024736bef0e5d8864043868fb426c776cd6d4bf50c32df0d23acf557a4457dafcfcf1326d2b0cad180f70d8965268aa51bd3ea041d40f884d04d84f92483a43a0", 0x67}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}], 0xa8, 0x44001}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001580)="e62aba614ba77ce6d67dc5cfee313cf943d0efb5595e6fe78be4949c6c661a9d508b20274357eb0121144ef63af383aa5c1c611cd05a04cbef52bdc3819be283cec439384a18101fa3de81f7e211f48d0491cd4f6b29c1b0fae76315eb72da0add34bb59461266fe0dbe3671f804bf51d31e2fde3090d6f77cab43ef51b6fc004a", 0x81}, {&(0x7f0000002940)="a3ec954c7f5da5f8796fe9d700e78ec81a862b7e04b221749cb89ddfeb17c686008e472e4144358b7f6b59a6c24670df1f3466f336701270a58e3c5890d3664dd2995e8fb1e2a4545dcd2a08e12a6b51a625abc8043c59c31461bb6efd067e5c7af218598408d909fb68054560d2705e092b370d2b4fc71fcf5cb6ee93cb83623f7f3b94b746", 0x86}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="3608a02861a83c247e27043954c3e16f37aa65a8ad1de577f624d3009a54966ecd6f676b72cb96f14256f35af9d48bfa06aa28e8b84e284981bc81a459e80ab22db61d58c7a179be98b92752af9522e3466acb2e75d6aeae70ca4b07d3513f058444ff63705b150bb19541148aac2caec1d098ad51636ef8089306ef1891ce56f25eb9cefb27e9016de1ca9bccb7d65620e3d4108c9103701d5817e82ddb0fb2d3e8fde736915eb31b441b2062baee2a22bba0cf2c59bada1200b0202f178074305385b5c613b2b840e8b7ac65fcb792529751", 0xd3}], 0x4, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}], 0x40, 0xc0}}], 0x3, 0x4008050) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

[  864.827590][T23006] loop4: detected capacity change from 0 to 16383
[  864.848287][T23002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
22:20:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x2000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:01 executing program 0:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000340)='./bus\x00', r2, r4)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused=[0x0, 0x0, 0x8], @devid})
r7 = getuid()
fchown(r6, r7, 0xffffffffffffffff)
r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r8, &(0x7f0000000140)=""/182, 0xb6)
r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r9, &(0x7f0000000140)=""/182, 0xb6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="da18faa15ea80cfef84ff7b6aae2c240bf3c90e496ad57aee2fffdcfeb812e68fab28c9ea7c3e7b33db2ce1ef9a1f1c1bf600e8103d277f07631ba5799cd4ec95b5af3653c2bf39a849b2677aa5a37c2ea4aac6b302b5d5381ad66dc4e37102db827ee2af8bafb47cd698a0efadb91af3d4987d8949d805c3cb15dc64d98dfa496826154c8e3a5db67c73b896ea04d302a1295e6618de58af5b28732084e55bbf476b030f4f85b641ae4331219e7683145f48ec087751cb3ce29daeb5e8970fc0fd870c1d5343270307a5bfe267f4c7f958666877303cbc7510a35ae4d5f3bc5bc24e2d18178d0fecb845320a1b6a5cef198c656defbb6f0732b13e9086c668d8574f1d4ee83abbf7594a398af95dfc400dae43c15b7e8660e0b4241519d88f98bb7fa36462fbe4e5045d2f1678345de8369412a77fece09685b67f137595b0840c097a5fe4440627f6819d237203d78dc1b5d0319505c445c24e2446af97e85f277bfa7d7911578e8b64964a68abf860efe129371efad66a2753de2925f74a1879bb4868888f22adb2372cba8d2a33bb18d610b125810bf81bd24cc0f3ff8f21f61e93b6066436c08228190f92abdb755fd46a22177c9d4dd035c3af72c8be31a25616646d3849bbd8e253087ae7274cb05700a40acb0c379fd654dd01b25e068c33fbcf1634e9640a8101ab703f54b4f15b431022e7ee1871dcc4d7d2f466df1f7a23c15471dbb21a8022088a741f78c47eca4834c078b1d3ce93987e37bd1328117eaf8cc20ef068a86156b4553aa8e2db259631d92bf11b2fb080a86eb21ab7e6559f9abebe1e6f6bd0e931bb4482acd7a61af6191e7e27883e3e1dceb1791d7bdbcab254f549454db8c272c3a3dc1825b55552e3ff878e58635e6d5f2b9399a9db95758a3ea197194368383203302961db8590078685c967b0c98f79cff95a5f29d3706f2945aa734cf264701e33ccbcc1967bdbac41a6efecfc70a5876de43283f5c1cbf963e6811561689dcc92da1fdf604c62fc04d1b5573c8675209f72d5a38eee587188bb487d4ed1d4b4ff2fea9a049d7ee4449c7da18690cbfeac1ff46a92a5d9298c6ba2fe634e6618c6180b729b231faece5fc9460aaf8a350cffc08c2d9b6bc3805783a10b9d363105898088bedc39471fa3c38d475a70a0fcf71fe34d2341c5d4365d29dbeaf54ddba72d44355af9b5f0cfae0c67bfaa93abc1ba269e45b21077c86113379c1a0ebf27513d374938c5e60d6952d2ab026c5f5bcb9a285137d8f3d4ad6edb92bb475227bc515b826610b458063cc8fdf8c61f49a3b1cfc9962f7d17669b32cd66f781af3a80bee934b4fb83cec9fc9a4ccf45bfc73a4aa7d36a27b64d2a55a86916774f1d7992f0983620c7b4aa4b58a2b6464e128867ef6f10ae4bfe6fd466ca2049658386d90fea408d6af819613e60f6ab0db3a09078c43f666ca58d44326c414e708a16721f332709b22f52713c0ca7cb1c3e6fefc36cdb87b0a2c1b0e1d6d6e554006496e8a7a36366bc50a2bdfb3ccd39854faee3b5ad41a0a57f0d86bf2592483a300635015a37a10b24fcd051d46d55cafea8b736abd080e1a686dbcf13581a9c026b5ece63e4365c09816f493d26d0a5f0c9f948392e8e7ec01727d5bb5f3a7161cc017d28f413952e073a54d5ff488d4bfc0a3074802038ff6e84427b62f6ffbeb7d8e81457054594a9017ed0050d8af53313ee8dfa494c913cb04e28e76b652c8d3e975ae880199b87a4c40ca0212aa2ef2d2f39cd3a1b2cd27d6bd2dfa81998186f75f4ea15fcb7ff5e26b37a988f66f738392ffb00a7fa8de15c94c367df4a1c7c1515e64659a1fde9b9da3580f48fd83e18a70d8ad780bb1ef89f71eafb9eac52cf71ad3d07ef4836126649baf78f42ef5a205eabd3fb228772ea5ca7c399dd1dd7fa39cf523c0fd9756b4586a2dce5ef6e8db5eaaf6e7362f927ec68d86611c865f4fb99c6fc561100dc131896b99dd7224ecb67d75796b7a05eb6b76954cd033067ecf21bc62a97c8c2a27f2dce851dc7416f413d61190c88208d2c9cc2a6e5b031442e2c90af0917ee3d2d1d8e0479f95fdcc8187d30c3103e07663ab23e7bd9c48b539c1f3c4f2cad74b3059d7dc5079b3f85fef53e42ec26345c827635454de391c366d41acb437b2c7369e961be9ee30c40a13f755645b852b5294e503bed34b3b9ca9484dab092449aa219f1ffd63ccc2370bf4a6700312942fa97707064397ec22512e95dc53eed9473638e1b637dbd9b9cec4602565bdbdd41d09f2d3fe78b56c54539937e2df800586402a15d3e66ef4c966e7c1ac3dbdf9d14ec1916684fd54d109a700ab4441ad8b8397e93eda5ae5b87de2cf7f630137d3d92358a85a577c87a1591e46d983bf7084882a082089261294cd9cd5b1adcaf33f386680ef27a763a317ad0f576581b3579dd8180b225d4b36c7e2c6008d93f88ecd2dddd8638c1a9ec89f0470ead66f4ab86b50852fa23a33711fa7bd7f624d19efafdfbaec4b4063f8328eb7eb1a87e7075c9ce03cac2d5686d46b6621c3221b249c2f5e851e55a30f4365ab5ddaa6c523eb9e77df05b0754c2f3980db9b72f48994acebce5cef8541e63a05243f5e9c4afaa316389ef07904530a4e7072c9bc2f4005d83ba539c3a6cc5d0f46b343908d85d2ae83341432686384195d75a64e017b73384b0813a8028465054d06f7552f4c013f31765f83f930f8caf4fb9851af8e0411abd9da3bdf09341a137a2c02cfc65d9318972faf1887c41156bd5d426107cea415ace70f2c24502e1bdb9852352142df991e8e99d2a92bd6e5ebe3d0ddfd28d2a79122ad47d4a3f88af82dd501f21a9456d8068518cd8b6fe78023407ebeea1fa6ec04e3affd4aceb05c4a9ef663c5d4cec35cd02b7a3a6180b744f5430a70dec306b71ee705b83e38faa469baba9afbe00cf161d41323dc0e09fe8e83c03453b1a0f97568160785b035734f440248a44bbdafd4b403497fcd4ba2b3f02834c04da6e09d2d3c05d2840e09e4a61d71c9e24e9d8e2801518861da99474f60d00e4b2d7d62dd7287cdc37e14c54c6548366f57fdba180597f934f77dfe5c72e3ed6282a4f4604d1fd1112a337907e66adecb799d3a6045c6f1ee30841ed5ce3f13006ceac8e7fb674416ddfd885834ee3d98df13cfd1d9610e28ed295ae39ca540336b28359a7eee6d83716f7ab91bd883b7600f047cc637a52f5dd2512da94d7111dd7a5fa45fa70f2f5704ab6b86df7346b880d28085aef899a49b83057753ed7b3266747e3bd2a0e2340ee2ce5c16933c0e3d7e00ae0545d1308971979893fd88faabb901d8840eb27e54b6f9d34563f5ecd46a940fd487e7fd4f62fe24bd35ef8b20a70643ba35995533a9108c08716c7afc667199a22695a62a2d81d57cf6e738f2acd18dadaf6307a0bc32edd8b013fba3ca9217f2636935739d5af85116925fdc3ea1530bbb389393c7f9ff891c8c53fca9486a9b8f44dae662ba0cbfa583043c4406be540ca532c011a3a87dc247149f532b6c14c5babd2bfe04cc6c3a46ac88155436deaf14204359a7e5dbd7b793ef21669348e2681cc21e09be2d835c919bef0db0e14a205b5fa2178b3d6509408d93e76871fdcc8d9a66b3392af4202ec8adf6d0b4cad332f6d1a54757ec0b09cb391daa11b78cc504ece0f72ebe255ebb8453a4a6903dfe068a63b12de9d68e80c4878d486b8ed5bed275e4f3eb4ffad08467dfde85e3329c46c6c4f88cf84c5c4c2241a43becde4a76b4806bcb772399e46c29d7db213a0fe5e71bd15c03d999c6c0f569bcb96195237c664189510d700be1999da399dd85b8a0a39d9cd442339142ebd2d907db4683f02ebfd7c26cf029e54d3c209d4dbf8d802bd6a2f4219364465846b5e63e79107274b6c8f0c5777dc6b33ad744cf8278644c02dc914367a11beb3013a6921e9fcb8bd33e5a5b874f6f85645a0c9c96c905749cf9fdfaccfc34d4a1d07aa47a3470579e3dd2f409758e4fad87daca15f39ba176c3d433fd998658dfddb8fc8dd96d4b888b58333f66b70b179529fb40bd08b97ae51e3563384b8b49d6ed104f3333b1233ec750ee24242e9c77c393812a5954583aa4d0cc500a16d778297fb6a1bd19b173be5fc0da87f4e1876ffbc119d3ca14a7dab4a29992726fa90caaaba77d7a195957ae929b9f44041c3a0d188ff7c1ca37752577051bb52184a1e84084dc5dd88d27f5e93ad4fd206c2e3b855710f89f2c52bfd362c38874d2c7c77b4162fc21bedae6cd65f2f308aabd87fbacfd4a25cac4938f0994b817a40db76cdd70b563953b6e8208f426a769a6395a189f55a75f915604cfba0b14a935f3fe50d6c41920fe393ed3ba88e047033bb51eddee19e652724834e1a314674406c919bf08dbbd6f5c4951d06507f4fdfb5534bf49223f1e4755a5f900ed80b1eb194a7c363cd777ba2471e92cd569324cb267bf71162c7e54e4d68d952b69045efa3463834878686c7ec221bee0aaab20505be91506bc7d8999de8498ac6e4d73e7a11001883a069639f53d3902ada712340f58aa64efe8d8731928e7b092f2f9df8d74ebad1a3145aadee4fa3b05b73d2f0648d5e9d1d983410c7b79380d4b79b139d87cc41650eba43f8c9b63950cd7ac635d3359249774ac8e5a5cafc20b53ab78123fd477d7359f70a3325cb081926f0d800d5138d76effc5f4c700ae44edbd4a465f2c6acb8180ea1df72bb2f7f4807f7bac660d41919e842c013ec7857c4c279394b70aabc9ef0ee81c7a5836c77e2d66c1e46d00d6fe653d0078ad861c9b21c092877c9ba596c42b5e5bfa1c47b51ebe182f3ad143b659458afd500dac8123be5daee92187ca72253b1c05331a5195d6da471dac6506041a009b98a739fabea671a05ef0bcf051ea9c2dd5698d31f05a8be7a67069ce8480870fefbdf74568c07be82b40d6fd9747c55f7326732338e1cc2552ebfd96b4f5bc7264846ddeec1ffa49a7319a5ec8005d00a7080c928404ec249ecbf28436b2fb446f3fb87e2ade768cb1d3290f4cd25e78eacf24e3a23add764a9c4f3bba26c4b6fd99c1164c6b599a792dc1a9d4c214342ee9c944ce43e58c7e2a9ee4437291c9f27a7336e27b9d6b41f30ff6907835abfc4e80294972b85f7c9e3bd284c700c08810a3a5eee2ca5720db83dff28ce4691fe7e1343a7667f118d3a07551cf3f0890ed1b978be3d8392e73101671e225d2008cc3cb5e12d844005b69bcab163aa2610cfc34109eb297b67af6b7d66a22f49893fc6eb908c9b1bea54561e952d81ddfc083d8ad2697635e6095dab7b156f1413c705e04d9d7a8677f24ac8a2c732e64d121a787bc2a458dbe69c0b772d5661e84d5c9c70226b6c631ca79e361adcb4d1bf0aea3868c272a3404e8c26fb5a8ec8173c7d7d5426574894643383482f16ae3afb2588de7f7a790472d20b561c96e3ac8c85f22542b74fd6ecd244dfb227fa89b031c4a07fcdc69cede70ded626d5ca27d69316d5c202b5a09d51ed28f7b750f9f93b89462f36b23dab76b623b0411a80b126fc34022f8eda48d3ba8c92ae0ca52b7b9aa3d2bd9a538a9248fbf2ff856d9a13384ae67bbf1295437321ec577cd8eb5ef2c9e2f0c94b77a5c89093d9298a299ad2821f988d785bf4d7e2d07bb42f1e2e4b8f464c643c098c48add23a2676a297c656d134a217ee2042aea7ffeebe941d6287c1c9ef4997d2c54979627e22b77d620348f2f3c46edbb70e6e0d577e947039a284a682211c637f8f8235", 0x1000}, {&(0x7f0000000080)="082f6d3397940388694a7fa465e3c7db8853be6da64b86dd8bfd94f618de07e79424b339e2a526fb23dc27c64edb19b5e7596bfc5c0f5b37ce824ea32b8b3b2008096ea5c7cfee05906b2346658d4851b509a386952cc4ed70b06612c6dc349c3318ff90cc86edf8d23a6d214a0331cc1c7f97ad2ff037af0be8eebb7c7851736e612721fc5b7e96fd2411ee6c73bb5016b1a38bda8ab6a30d781f1d3ad8a6225d175146812b9cd03ea58818a37dce790c6429a2fa1c6d6ae7d84101b85ce96a95953da819ecd98ed8cc503dbf56be01856fff844545b888d04515ae34c2b91c", 0xe0}, {&(0x7f0000000180)="881c32acf5ad0c68ab855eb3325530f9bac2e8ab9bd8fdaca7020ac5389c39ea602aebe30b6e3b9d6f43b8b4f907a092cc942c6fbb39bf3bc0e1d642ccb560fb25edcaf8110afe2cf8c739858fa4be6a41f84c65dd6ef842464b23a4e1b70e10312e27883e997b4e9cbe1b3adea6943099daccb8b07445130fc8d9551f26f86f1810db6ffd21f3a1d1f6758e8c291a10a72014b40ead3304db5c13cb91ef71aa0cab9ebe5cfd", 0xa6}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)="ec73a6407a280890356fd76d34d1e1aba34788f8bfd712866256ca33232ef47540675831d5644024736bef0e5d8864043868fb426c776cd6d4bf50c32df0d23acf557a4457dafcfcf1326d2b0cad180f70d8965268aa51bd3ea041d40f884d04d84f92483a43a0", 0x67}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}], 0xa8, 0x44001}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001580)="e62aba614ba77ce6d67dc5cfee313cf943d0efb5595e6fe78be4949c6c661a9d508b20274357eb0121144ef63af383aa5c1c611cd05a04cbef52bdc3819be283cec439384a18101fa3de81f7e211f48d0491cd4f6b29c1b0fae76315eb72da0add34bb59461266fe0dbe3671f804bf51d31e2fde3090d6f77cab43ef51b6fc004a", 0x81}, {&(0x7f0000002940)="a3ec954c7f5da5f8796fe9d700e78ec81a862b7e04b221749cb89ddfeb17c686008e472e4144358b7f6b59a6c24670df1f3466f336701270a58e3c5890d3664dd2995e8fb1e2a4545dcd2a08e12a6b51a625abc8043c59c31461bb6efd067e5c7af218598408d909fb68054560d2705e092b370d2b4fc71fcf5cb6ee93cb83623f7f3b94b746", 0x86}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="3608a02861a83c247e27043954c3e16f37aa65a8ad1de577f624d3009a54966ecd6f676b72cb96f14256f35af9d48bfa06aa28e8b84e284981bc81a459e80ab22db61d58c7a179be98b92752af9522e3466acb2e75d6aeae70ca4b07d3513f058444ff63705b150bb19541148aac2caec1d098ad51636ef8089306ef1891ce56f25eb9cefb27e9016de1ca9bccb7d65620e3d4108c9103701d5817e82ddb0fb2d3e8fde736915eb31b441b2062baee2a22bba0cf2c59bada1200b0202f178074305385b5c613b2b840e8b7ac65fcb792529751", 0xd3}], 0x4, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}], 0x40, 0xc0}}], 0x3, 0x4008050)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  864.907667][T23006] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  864.918513][T23008] loop3: detected capacity change from 0 to 16383
[  864.947246][T23013] loop5: detected capacity change from 0 to 16383
[  864.982888][T23008] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  864.987791][T23013] EXT4-fs error (device loop5): __ext4_fill_super:5326: inode #2: comm syz-executor.5: iget: root inode unallocated
[  865.010052][T23017] loop0: detected capacity change from 0 to 16383
[  865.025289][T23013] EXT4-fs (loop5): get root inode failed
[  865.030965][T23013] EXT4-fs (loop5): mount failed
22:20:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x200})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x200}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800}) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async)

22:20:02 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:02 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc) (async)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000340)='./bus\x00', r2, r4) (async)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async)
r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r6}, 0x0, 0x0, @unused=[0x0, 0x0, 0x8], @devid})
r7 = getuid()
fchown(r6, r7, 0xffffffffffffffff) (async)
r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r8, &(0x7f0000000140)=""/182, 0xb6) (async)
r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r9, &(0x7f0000000140)=""/182, 0xb6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000080)="082f6d3397940388694a7fa465e3c7db8853be6da64b86dd8bfd94f618de07e79424b339e2a526fb23dc27c64edb19b5e7596bfc5c0f5b37ce824ea32b8b3b2008096ea5c7cfee05906b2346658d4851b509a386952cc4ed70b06612c6dc349c3318ff90cc86edf8d23a6d214a0331cc1c7f97ad2ff037af0be8eebb7c7851736e612721fc5b7e96fd2411ee6c73bb5016b1a38bda8ab6a30d781f1d3ad8a6225d175146812b9cd03ea58818a37dce790c6429a2fa1c6d6ae7d84101b85ce96a95953da819ecd98ed8cc503dbf56be01856fff844545b888d04515ae34c2b91c", 0xe0}, {&(0x7f0000000180)="881c32acf5ad0c68ab855eb3325530f9bac2e8ab9bd8fdaca7020ac5389c39ea602aebe30b6e3b9d6f43b8b4f907a092cc942c6fbb39bf3bc0e1d642ccb560fb25edcaf8110afe2cf8c739858fa4be6a41f84c65dd6ef842464b23a4e1b70e10312e27883e997b4e9cbe1b3adea6943099daccb8b07445130fc8d9551f26f86f1810db6ffd21f3a1d1f6758e8c291a10a72014b40ead3304db5c13cb91ef71aa0cab9ebe5cfd", 0xa6}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)="ec73a6407a280890356fd76d34d1e1aba34788f8bfd712866256ca33232ef47540675831d5644024736bef0e5d8864043868fb426c776cd6d4bf50c32df0d23acf557a4457dafcfcf1326d2b0cad180f70d8965268aa51bd3ea041d40f884d04d84f92483a43a0", 0x67}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}], 0xa8, 0x44001}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001580)="e62aba614ba77ce6d67dc5cfee313cf943d0efb5595e6fe78be4949c6c661a9d508b20274357eb0121144ef63af383aa5c1c611cd05a04cbef52bdc3819be283cec439384a18101fa3de81f7e211f48d0491cd4f6b29c1b0fae76315eb72da0add34bb59461266fe0dbe3671f804bf51d31e2fde3090d6f77cab43ef51b6fc004a", 0x81}, {&(0x7f0000002940)="a3ec954c7f5da5f8796fe9d700e78ec81a862b7e04b221749cb89ddfeb17c686008e472e4144358b7f6b59a6c24670df1f3466f336701270a58e3c5890d3664dd2995e8fb1e2a4545dcd2a08e12a6b51a625abc8043c59c31461bb6efd067e5c7af218598408d909fb68054560d2705e092b370d2b4fc71fcf5cb6ee93cb83623f7f3b94b746", 0x86}, {&(0x7f0000001700)="36b37a0e8d88537ac99a5bd995af21dfb50b3ed05ac5bfa05f92f72426fc6d43f3d7a26c4cf18d3484dd0ccbac510c59362af16b140917af0fe86ed126a8d7a0bc47f5babe4581ce4bcb4992d8d260778dc1a232b4a232c3f78761d62a14a4736f8321e77dd7849737f7029430d106d25f230f753979e905106ef7a231eb4602a3de9227c90cc9cf0a09985ac58a1b11c90488fb653597a30d5b70674839a6ea5e493bf20efca2947b917618cb0c16b47cd00c1583d37f1b7a43ea7425e558366f650123db7f41a4e7499b47fa7cfa61e084514a62a5b099fbb3d637a93fd4aa8306b5785d261d788df82bbc9a305005c0481441ebf9d55b90b585a6c6d944f4c542ef61676855c6a20dce5ccaf040c8fa39e4a845dac22ebc6428b0eb53c7601e982df083694b64b5aee4b3ab4b5c9cfa753de8adeaad6f52863eabea2dd3edcaddf4d2e93dd22c35105259cfadd059633d2e1f752090284a32a1c657a7c191b4870572226afb9033df12456ac6800a8d0dd3ac08a51adb83391917e3260bf9560a7f2bd7564a4409dc5e4a60f56ce2e426ac57610157e1e02aad77dbbd6d2d06570919c8b4a0c064bd5558cb5d2418c4682670ae6743b4fb7a9f354e3c051a74cea32a4561030ff271bf96b714370e3370b0974162232d3933c8f8ecf2f5694bb78438d92abf36c579b788581edb8d4862f2cd3ee426abc0bc3a70f125b0bc5f660b5bb2ca1909c284ebf5b9367fd2301ed3c3c7b43aef2432bfb0001f4d0ef3031a0e139680e7da8568640aaf67281b8c95346fdfe33d7d0f33ed8cb546c5a240d60f590bf4d9a75fb18e7209fc2fa4b871c0554c7c5168cac899836e69070cde4cbca8c99b5ac3a50b36767887779df3576038e10a5b232a043941d80a74e23079209e95da9eb98f04c568f07f422447759435ee05592c78ad85f33895282adae16b9ce2cfa3ad29bc854a3b35fbefa889bebcfb789847c6947f6c6fd0949ce550a44732ff7aacfd0fcf06540f653d8343dda42e67147ee914f181fe17daedc59879a30a322d37d28e8e830804bf6ed3b3ea6d70cecc9136e1ffc2fe083ad7845500c9e079a23c37d4067d07da2c8c6b7c8e2e32e6934dacf810da126def383241af4309582138c079b92dfb812d93444e7db4c4307c9bb0bc12a4df5aea2fd104f35b8c587036a9cccd1eddbb060eb682c1092f67858e2c067868b7fec2729419d828ab121e5f36269389c3366440f08692966af858beeb56f7893dd9a50fcae3dbc98346c00a08deb0849e7404ea1f18270b4c052c25f83aeef23bde491f191a5fd1081b3b6a7ed17d32c491f96659f9578c2c0b19d54ef0132d0ccdea82f51bab28b88cab785a0bfe46ec7a5ea26f925849610e82b4c514f3f5124e656fbdaf1b33ef7370f0dc3475e6ede0fc01991df97bfbec1357e4496a4cf1360b1677ed7c9f0e31328ae68eac5de717cda3fef403680c95741cdb6c224282224efb3096c1f03241d8050d42b0241121a05fe8c982116636925501b966ac2265cce5187c27a873faf6f553391531806ca24c219f43d88138192c7119bdf3ce9a1a6d1912348c223829097922bfaee7892fe04657e18d639a37501ee727b2d6d22a675bff9a281752d2dd275060a6f166f532a5ff52bbadc1c3d03df66b65cb641645c02f7233ff25ac8cd787adf8ef6b820290d96fac4d5a8305321854eb9ccb9dd7b215a2202786cebfe185668cb4836addda55538d3313afd67c934dd750615c8e1b9031ee2300c711b88b7de3755472ace551e50939489fe99e6128ad7c160ad6e305b9db4a9e993c136994a581ed26b4a035a97717a779f91e66fa1c2d7cb3b3f3a23b36678742712cab727751e760d23e0d3bf05746bfc21afec3ae3cec0e66f8626d8d44936d64e3903d6fb1e1d3a09903ea9876408c2cd753fb143aba4427a122692451247450017796c5cefb2686e9a7416673b686d50289fdd11cd7c16121f59aeae684d3f7cad814223304656eb5d8b35e5993ee839a3af43f00db95c636995bdf131df86d9c0b144821d272cdc78238a19a84b3d9924fef65f6b1de161c69021bbf6bb9ba2bc5a11822000c8d5e44ac0d187f45ba15d80ea4655a9235c0b61ed7d3f31db7b42c18ec4b554b7ca7429b7df35025c04ca77eb9c1bf738cc64422ed2474b21ebb1b93ec3e757c63d03a91e6e76473e82d2796a0736b701bcf4c5e6104c31fd3051dace7978b1e23464bec9d44e93b07861fa184c6b7571d825a412a63c8379bf68fe5b18e38eea883f2dd687a57ea52ae4ddd2ea5bcf74b8d16a2f9c9a9cb73ba83b0e32b075d421ca58a76b9c54150bd23ba19e81cf6561caa9873a84bbb9318b2ae0ff2bc36aa2ba406012178dad5b03084378700ea7eebdd8127594f8941bdb06b74aca328b7657a71dc172d4a69865affe3e23b3f8bdffb0f5bdac38e2dfb51fed7ee2591246efdf665b5f6bcd8a1527878eb4c67678cf86dc360eb5d6c0a757eff0a5a8c38351371cc9997c45aae1f92e450629a0bab19759ba2a0dcfc47fa9f6d2444c1046636f16f47a87ae536100630b7db4c2f79725bb86db523546d94b34b23dd494b7023d99175b3999c6752f4fd48f31a39b37739109d0cfbf493040216d939633c6e67637a7202b1d5fd1f3c61c7990ed2ad3dcd28061493febb43f35e1ccb709881368ebaa042a2e9d9b5a0dd5fdfbb50e557dbf1fdfb376dfb2f9b0c0148ef3564589befba670dd592db60ebfb01232f0d98314b948fddbe66eda036185ba08481d675f767e67b6094b8c4a52ff0cbcad9cf9ec2018b7d4be11d20cddf09c2293320628211609990b7f8231aaeb087b31a08e8ddea89ee86b1b675ab7d51bb1d403f57c7574e6ff8a7ffb57fdba021c3d190f285e991046066c268b3b6c22f618ee4ba0f20567a6f4b365f961f035ade6d6851b0da0162a5aad7282930c469aa7426807438b26f392d7c3819a6b6120a018ffaad85926b4ec8803f40529470c17c4ff52d60c2cc479c11bdc4d54dc52a81905588ef25206cf1900b7ad644fcdf0d3f23b48c7afcc12652e366ca8de740e4df98927dbf16a707869c37697d02029cd1f520db3903be8c9cb461c35865718fa582feb7f1030464778def23eaa9a621ea01aca27fe18c0b431c45f210a62e9a24cf3ea0325936e3449cf0ad8c33e76f6445588742dc3a6f9b3608ead660ded3cc940acdcdf3b143660716d7e55bb357210a0956c55e9fb735edfcac67cfa6fac166b117e08f2ca8127461230458873e426d09b234fb8bbb65a64beff64e0f5d9d3f94d3ae8375c14a0e4ebcb127c8db64ce07a697da03f822501475982bf5a3e2eae060961f7aafac7b437432ee471d725b934449ed196e5b648fa2ec9f1bdaf2ea97ce3dbf13423c7ee10897512b6172009d30690a577cf8c1c3552274755268f8916ab0cf6a56da9e064414d85763bd700d45175b7dfafb83e52b83b7b679d6e1922cd62e96c28fb38e9a2794d4d8f320f50069c70023a1d8558832bc57e3ef1208c0367e9dcfffa2391163a8276528de6f81421c33eb8322fbcf69dd183e4b554354bfafd86a0aa73850d90cc4366ebb4e72dba3858da4510317fa14684b896c9e983483c58d576b05584deb507d6fb9ce97934023e56cb8a352eece3256dd056e952f7fdca8db338555b11f8230bf1f51f56c3f3a6ee464bdfe436442d1c341b991951d8bba6dcecd6531b56c35fba9412fd08ec77a642c57e395f6bfd80ff7452549aa54dcd60e1b52d24e2dff95020aee48ad0b4aa1d29ee56375be94b322db9e920fb42ea521f187becde89bd2dd3044daeafce78ef344bc571edae75e6af6a0b16624fd393cd6799b4534056e044255f81ecaa87f5389db605216642e7b101a21d5b8912e1baf9a8511c99607a49f82bdf7a4efb3666dc6f8a38c07fdba5c2e97ea23ba88bb8b79d16b7ae9346b307d587d3b751f6c6b90b64b9c6ab96d734076e008fd1a9375edc1a135524d350e1e79c08f08aa9d5e16fe7b86744cae5901f1c92368815c652f85d53e969b358db0716aef78dfe31d5cb590f34ec4caed1ee81d82a176fb3ba259f6bc63dbcd977ef034d5c1a76a7b3534d7b02e9bacc121befd37d9eec64f5b3b1d34024519a97920d465b98222fe11a0e2abcb3f2ad5b971be6e5559ef8e4f0c2c512362bbc972799607d77fb9978ab3b471cb85b33dc7645599a962d26877ab9f3b4d43f2af3f8ecad47f62c8dfc219b72026f006d280150b600627615c202c8bb38864cbac79247852b153f271d20efb64328e990e5052274d7e8eb9aa819f50074a770b00748a14e41f3d6de60f3188e550cbc79707abef3fcb28ad0792258a238f8bae6ddc077703a9d5701ca8aa1885246555f5449c16908eabe3afc1be26e1ae53bb2f9c1d25b4a78a7d2cce0d9d1489ebdf8a4c5f4ad5fa201733f7687ac76209123dc8c26eaa27f2791236b7c14245cf7a65cb01b5c12d2dadc2c821855520e76a445461e2e3a39291183d296d731107b3aed9f9fd7c41ed0877b03023126bea901f42f8ac2c52b916eed2b44ffd15641b4c5e90045075a64d1fc8401fe96c75c7e20e562bcffed5bab5fe6d6a774b448818f8eae2a7ab8e7d1ab21047b7b528fbf41b2d205601d9c546bf96eb1f67ab406a3e88d8a7f8d24479309ff7973610bfdde93a4e0edc72d276019f793866b46eabb1daae121d5c13e78254658d54550e1c90257697bf1fb28867e43bef510b9bc88fb2c00932c5850aa2ba74af8cc904d8b23c410643f418aaa8654b2ddf69afeac68641df3d6316f6fd3a878748f51c5ce2c99bbff5668ba7ea4204e580cf7d53b3a8cb6bc5ba6867d4d7ed14907add98df8c90bd6ccb8cc3c144a7faa1ce416b361d854b6400f7c19e1368040f4795632044e8765c240a642c402471d635d7af08607b4da24df5b847c970b2d9e2fc993c9365c6f7df218253a0f04e851936e8a10b8d05bdc42415f11ba26dbc64ee0238cc509b2acd8c8ebb94bc12f6e0feb466d99b75aff1681453ebe80e822274b2e3d590b026b16acf2ce410c21dea4e87413ed4f771afda4921a0dbc67b5963ae397cae2e75e63bd60039748b7e5a288f319c857dbe207bd2b5f398c3541db714ec0704715c243657189d1ea73e25d7552ada89bf94fd9f9949f86d95a5ea6a2374db6a611dab492527851fd8530f8c2308d10966e8a36e1ecd746693702f3d595a2bac744135d71012ed5c1279e5702135f61c1f694f7a4d81e725564e5cfdde895cd22dd5e22cc6ce3b27f2f0efd1e1c36b1ae296735802cda707867be9729f71760ba2401c602b6f090cb5815448c79bf15593f3a5a1e9a4d9f51136ef5e8a4a84ee31974edc623f5f8fb4757013c8fc3649918832453cbfdea627fc86ff40ad1306ee2fc5df3ac8a2e9fe739d6ed242e725055673d0320f4cce7d38e4cd5cdd6d0dd2cd2c65d8b78c18260b04715c981c245abcf201ede747f12ab4794f43bc52f2875684663b69a113ff6e9487f59dc5affc44a19e66f6103455b7fd03c08f78e966316774a039c330d34a13961cfe23ee88bd3192cc7a8c13732d622c1c497e69c8859a2cd6030863b89f0bf7cc0b1b34de39c63f79ca869ce9db7ebd235d76fc601381fa22b3cc1504c0fe47c464cb3c0f90ecd82a0056c370e70c4bb4ab5f2b0f49221b4245d18c8855f83c26483ce2d05da88335035d1d9c305eed27542cafc15e7f68632d4bd496df785b95a8d0cf53328f107a75a8649ffc0ad3340ce4aca5b59397727de350", 0x1000}, {&(0x7f0000002700)="3608a02861a83c247e27043954c3e16f37aa65a8ad1de577f624d3009a54966ecd6f676b72cb96f14256f35af9d48bfa06aa28e8b84e284981bc81a459e80ab22db61d58c7a179be98b92752af9522e3466acb2e75d6aeae70ca4b07d3513f058444ff63705b150bb19541148aac2caec1d098ad51636ef8089306ef1891ce56f25eb9cefb27e9016de1ca9bccb7d65620e3d4108c9103701d5817e82ddb0fb2d3e8fde736915eb31b441b2062baee2a22bba0cf2c59bada1200b0202f178074305385b5c613b2b840e8b7ac65fcb792529751", 0xd3}], 0x4, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}], 0x40, 0xc0}}], 0x3, 0x4008050) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  865.127849][T23017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  865.182595][T23033] loop5: detected capacity change from 0 to 16383
[  865.182911][T23034] loop4: detected capacity change from 0 to 16383
[  865.203272][T23034] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
22:20:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x2e00)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  865.240488][T23033] EXT4-fs (loop5): invalid first ino: 0
22:20:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:02 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000df", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:02 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c300000000", 0x21, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x200}) (async, rerun: 32)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x800})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) (rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (rerun: 32)

22:20:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  865.347799][T23060] loop4: detected capacity change from 0 to 16383
[  865.349575][T23061] loop5: detected capacity change from 0 to 16383
[  865.364768][T23061] EXT4-fs (loop5): invalid first ino: 0
[  865.385476][T23064] loop0: detected capacity change from 0 to 16383
22:20:02 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = dup2(r1, r1)
dup2(r0, r2)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=<r3=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
setpgid(r3, r6)
ioctl$TCFLSH(r5, 0x540b, 0x1)

22:20:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  865.405202][T23060] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  865.429857][T23074] loop5: detected capacity change from 0 to 16383
[  865.434809][T23064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
22:20:02 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (fail_nth: 1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:02 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000df", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  865.457482][T23074] EXT4-fs (loop5): invalid first ino: 0
[  865.485645][T23082] loop4: detected capacity change from 0 to 16383
[  865.495048][T23082] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  865.529069][T23090] FAULT_INJECTION: forcing a failure.
[  865.529069][T23090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  865.542395][T23090] CPU: 1 PID: 23090 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  865.548637][T23092] loop5: detected capacity change from 0 to 16383
[  865.553471][T23090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  865.553486][T23090] Call Trace:
[  865.553492][T23090]  <TASK>
[  865.553498][T23090]  dump_stack_lvl+0xd6/0x122
[  865.580900][T23090]  dump_stack+0x11/0x12
[  865.585054][T23090]  should_fail+0x230/0x240
[  865.589465][T23090]  should_fail_usercopy+0x16/0x20
[  865.594539][T23090]  _copy_from_user+0x1a/0xc0
[  865.599114][T23090]  do_semtimedop+0x150/0x200
[  865.603772][T23090]  __x64_sys_semop+0x3f/0x50
[  865.608346][T23090]  do_syscall_64+0x2b/0x70
[  865.612819][T23090]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  865.618773][T23090] RIP: 0033:0x7fb6eb41d0e9
[  865.623208][T23090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  865.642870][T23090] RSP: 002b:00007fb6eab93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000041
[  865.651269][T23090] RAX: ffffffffffffffda RBX: 00007fb6eb52ff60 RCX: 00007fb6eb41d0e9
[  865.659287][T23090] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000000
[  865.667245][T23090] RBP: 00007fb6eab931d0 R08: 0000000000000000 R09: 0000000000000000
22:20:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x3f00)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) (rerun: 32)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 32)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (rerun: 64)

22:20:02 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000df", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:02 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (fail_nth: 2)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:02 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = dup2(r1, r1)
dup2(r0, r2)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=<r3=>0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64)
setpgid(r3, r6) (rerun: 64)
ioctl$TCFLSH(r5, 0x540b, 0x1)

[  865.675202][T23090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  865.683161][T23090] R13: 00007ffd92375c8f R14: 00007fb6eab93300 R15: 0000000000022000
[  865.691292][T23090]  </TASK>
[  865.701081][T23092] EXT4-fs (loop5): unsupported inode size: 0
[  865.707117][T23092] EXT4-fs (loop5): blocksize: 1024
22:20:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x323)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r3 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10)
ioctl$int_out(r3, 0x5460, &(0x7f0000000180))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  865.753935][T23097] loop4: detected capacity change from 0 to 16383
[  865.766824][T23097] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  865.775009][T23102] FAULT_INJECTION: forcing a failure.
[  865.775009][T23102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  865.788177][T23102] CPU: 1 PID: 23102 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  865.799301][T23102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  865.809359][T23102] Call Trace:
[  865.812632][T23102]  <TASK>
[  865.815556][T23102]  dump_stack_lvl+0xd6/0x122
[  865.820154][T23102]  dump_stack+0x11/0x12
[  865.824487][T23102]  should_fail+0x230/0x240
[  865.828921][T23102]  should_fail_usercopy+0x16/0x20
[  865.833990][T23102]  _copy_to_user+0x1a/0x90
[  865.838408][T23102]  simple_read_from_buffer+0xab/0x120
[  865.843788][T23102]  proc_fail_nth_read+0x10d/0x150
[  865.848834][T23102]  ? proc_fault_inject_write+0x230/0x230
22:20:02 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  865.854472][T23102]  vfs_read+0x1a1/0x6a0
[  865.858691][T23102]  ? __fget_files+0x1d2/0x210
[  865.863374][T23102]  ksys_read+0xe8/0x1a0
[  865.867537][T23102]  __x64_sys_read+0x3e/0x50
[  865.872043][T23102]  do_syscall_64+0x2b/0x70
[  865.876475][T23102]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  865.882373][T23102] RIP: 0033:0x7fb6eb3cfc9c
[  865.886826][T23102] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  865.906467][T23102] RSP: 002b:00007fb6eab93160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  865.914920][T23102] RAX: ffffffffffffffda RBX: 00007fb6eb52ff60 RCX: 00007fb6eb3cfc9c
[  865.922882][T23102] RDX: 000000000000000f RSI: 00007fb6eab931e0 RDI: 0000000000000003
[  865.930836][T23102] RBP: 00007fb6eab931d0 R08: 0000000000000000 R09: 0000000000000000
[  865.938803][T23102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  865.946758][T23102] R13: 00007ffd92375c8f R14: 00007fb6eab93300 R15: 0000000000022000
22:20:02 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = dup2(r1, r1)
dup2(r0, r2)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=<r3=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
setpgid(r3, r6)
ioctl$TCFLSH(r5, 0x540b, 0x1)
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r1, r1) (async)
dup2(r0, r2) (async)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r4, r4) (async)
getpid() (async)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async)
setpgid(r3, r6) (async)
ioctl$TCFLSH(r5, 0x540b, 0x1) (async)

[  865.954718][T23102]  </TASK>
22:20:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  866.037718][T23125] loop5: detected capacity change from 0 to 16383
[  866.054247][T23125] EXT4-fs (loop5): unsupported inode size: 0
[  866.060248][T23125] EXT4-fs (loop5): blocksize: 1024
[  866.062440][T23120] loop4: detected capacity change from 0 to 16383
22:20:02 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  866.088756][T23120] EXT4-fs error (device loop4): __ext4_fill_super:5326: inode #2: comm syz-executor.4: iget: root inode unallocated
[  866.117679][T23144] loop5: detected capacity change from 0 to 16383
[  866.129360][T23144] EXT4-fs (loop5): unsupported inode size: 0
22:20:03 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000)
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x8001)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  866.135456][T23144] EXT4-fs (loop5): blocksize: 1024
[  866.165506][T23120] EXT4-fs (loop4): get root inode failed
[  866.171236][T23120] EXT4-fs (loop4): mount failed
22:20:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x8900)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 32)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x323) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r3 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10)
ioctl$int_out(r3, 0x5460, &(0x7f0000000180))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:03 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0xff0f, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  866.233666][T23153] loop5: detected capacity change from 0 to 16383
[  866.247474][T23156] loop4: detected capacity change from 0 to 16383
[  866.261557][T23153] EXT4-fs (loop5): unsupported inode size: 0
[  866.267774][T23153] EXT4-fs (loop5): blocksize: 1024
22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0xff0f}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:03 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x323) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r3 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10)
ioctl$int_out(r3, 0x5460, &(0x7f0000000180)) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:03 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000)
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x8001)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000) (async)
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x8001) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

[  866.285702][T23156] EXT4-fs error (device loop4): __ext4_fill_super:5326: inode #2: comm syz-executor.4: iget: root inode unallocated
22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1f4)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  866.328352][T23156] EXT4-fs (loop4): get root inode failed
[  866.332628][T23174] loop5: detected capacity change from 0 to 16383
[  866.334142][T23156] EXT4-fs (loop4): mount failed
[  866.347299][T23174] EXT4-fs (loop5): unsupported inode size: 0
[  866.353350][T23174] EXT4-fs (loop5): blocksize: 1024
22:20:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xa1ff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:03 executing program 2:
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
perf_event_open(0x0, 0x0, 0xbfff7fffffffffff, r4, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0xa, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800007b529ea2050000004000000000181200008e890732165e35cabf7bc17e018072682f87db7bb318697c71fc807f5917f6b441772632339fff3298252391ab22c99f9829f613931a6635985226571529970c2d3efee5d86c325c969c8490897eb5a5c126902dfcc299021247849727d8b20b10839fffe23b2e5886cf44e2065ccd3099ffba0a71b736faaff66e0be5d2401d3b0effa2d2b945a57e", @ANYRES32=r1, @ANYBLOB="0000000000000000185200000c0000000000000000000000185900000c00000000000000000000008578c0ff080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9e4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0x8001, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r4]}, 0x80)
getdents64(r5, &(0x7f0000000140)=""/182, 0xb6)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000440)={0x0, 0xe45})

22:20:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
semget$private(0x0, 0x4, 0x0)
r2 = semget$private(0x0, 0x4, 0x0)
semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semop(r2, &(0x7f0000000000)=[{0x0, 0x9}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000) (async)
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x8001) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:03 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
semget$private(0x0, 0x4, 0x0) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semop(r2, &(0x7f0000000000)=[{0x0, 0x9}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
semget$private(0x0, 0x4, 0x0)
r2 = semget$private(0x0, 0x4, 0x0)
semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semop(r2, &(0x7f0000000000)=[{0x0, 0x9}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semget$private(0x0, 0x4, 0x0) (async)
semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0x9}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  866.529569][T23198] loop5: detected capacity change from 0 to 16383
[  866.536577][T23199] loop4: detected capacity change from 0 to 16383
[  866.557889][T23198] EXT4-fs (loop5): unsupported inode size: 0
[  866.563943][T23198] EXT4-fs (loop5): blocksize: 1024
22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x6, 0x4}, &(0x7f00000001c0))
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}}, &(0x7f0000000240))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
r5 = semget$private(0x0, 0x2, 0x40)
semop(r5, &(0x7f0000000280)=[{0x1, 0x8}, {0x1ec9a914049ace65, 0x4}], 0x2)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  866.589840][T23199] EXT4-fs error (device loop4): __ext4_fill_super:5326: inode #2: comm syz-executor.4: iget: root inode unallocated
22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x6, 0x4}, &(0x7f00000001c0)) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0) (async, rerun: 32)
timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}}, &(0x7f0000000240)) (async, rerun: 32)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
r5 = semget$private(0x0, 0x2, 0x40)
semop(r5, &(0x7f0000000280)=[{0x1, 0x8}, {0x1ec9a914049ace65, 0x4}], 0x2) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  866.642554][T23199] EXT4-fs (loop4): get root inode failed
[  866.643908][T23230] loop5: detected capacity change from 0 to 16383
[  866.648244][T23199] EXT4-fs (loop4): mount failed
22:20:03 executing program 3:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0, <r5=>0x0})
r6 = syz_io_uring_complete(0x0)
syz_clone3(&(0x7f0000000240)={0x4000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/78, 0x4e, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=[r1, r5], 0x2, {r6}}, 0x58)

[  866.691508][T23230] EXT4-fs (loop5): unsupported inode size: 0
[  866.697586][T23230] EXT4-fs (loop5): blocksize: 1024
22:20:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xc000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:03 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x6, 0x4}, &(0x7f00000001c0))
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}}, &(0x7f0000000240)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
r5 = semget$private(0x0, 0x2, 0x40)
semop(r5, &(0x7f0000000280)=[{0x1, 0x8}, {0x1ec9a914049ace65, 0x4}], 0x2) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:03 executing program 2:
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
perf_event_open(0x0, 0x0, 0xbfff7fffffffffff, r4, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0xa, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800007b529ea2050000004000000000181200008e890732165e35cabf7bc17e018072682f87db7bb318697c71fc807f5917f6b441772632339fff3298252391ab22c99f9829f613931a6635985226571529970c2d3efee5d86c325c969c8490897eb5a5c126902dfcc299021247849727d8b20b10839fffe23b2e5886cf44e2065ccd3099ffba0a71b736faaff66e0be5d2401d3b0effa2d2b945a57e", @ANYRES32=r1, @ANYBLOB="0000000000000000185200000c0000000000000000000000185900000c00000000000000000000008578c0ff080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9e4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0x8001, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r4]}, 0x80) (rerun: 32)
getdents64(r5, &(0x7f0000000140)=""/182, 0xb6) (async, rerun: 64)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000440)={0x0, 0xe45}) (rerun: 64)

22:20:03 executing program 3:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0, <r5=>0x0})
r6 = syz_io_uring_complete(0x0)
syz_clone3(&(0x7f0000000240)={0x4000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/78, 0x4e, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=[r1, r5], 0x2, {r6}}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0xd8fa) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
gettid() (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r3, r3) (async)
dup2(r2, r4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)) (async)
syz_io_uring_complete(0x0) (async)
syz_clone3(&(0x7f0000000240)={0x4000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/78, 0x4e, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=[r1, r5], 0x2, {r6}}, 0x58) (async)

22:20:03 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x1, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_create(0x6, &(0x7f0000000400)={0x0, 0xa, 0x1, @thr={&(0x7f0000000700)="eb00000000c2756c74b8e4d16251550842283f5cc7c99e18af080000000000000057d81ab40a1d34170d68f9427def860335834994083bedd8eeda1b311e357226ad14dc292aba4f7014420ebce29004f5d979", &(0x7f0000000340)="abc111a9fd6f7daf9d0a756ba44e9d76f6e3e8ea754853839642185e0eac93e5fc46d04b2da336d2334e50872688e3629ccfb7a3fd9e73f88c865493e7fdee0d4b47e447dde96025670f6c1356285331f0c496cb5dc2f8daef05d178e378876d26fe569d65e872aabc4f80f581c0f02c08051ecc0e9b4a280fa01ffeb5883318e1cc2ea966fe6b390c5e668cda3df2dd65977a05660afcbf6d860cfb842da7b479c3b2beaca828d1e4e3e34a146f1d1c0f9d0a956a48d4d71347409a2b3b1986"}}, &(0x7f0000000440))
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0))
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
timer_create(0x7, &(0x7f0000000600)={0x0, 0x1f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000640))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
mq_timedreceive(r4, &(0x7f0000000680)=""/76, 0x4c, 0x40, &(0x7f0000000180)={0x0, 0x989680})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r5=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0})
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x5, &(0x7f0000000580)={0x0, 0x34, 0x2, @thr={&(0x7f0000000480)="48b34894950a4f3486", &(0x7f00000004c0)="20bf664e8f2510d2f220a860fe9217bc4af16d5c039b0c3912cd1ba5d0a9fcdd105382e61c7fe04d79decc05d2a2109f8a162e31e3e1127bc8195b098e8ab422eb64e1ef3db17e158e33e266baa21c17e4d319a51c79b8d260508219de7f18ea708664143d4f0daefb7b6d52be4f6ec0142ba89d9b96a74f5c491363b121eb15673f3397e4"}}, &(0x7f00000005c0))

[  866.893686][T23249] loop5: detected capacity change from 0 to 16383
[  866.900525][T23247] loop4: detected capacity change from 0 to 16383
[  866.912776][T23249] EXT4-fs (loop5): unsupported inode size: 0
[  866.918791][T23249] EXT4-fs (loop5): blocksize: 1024
22:20:03 executing program 2:
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
perf_event_open(0x0, 0x0, 0xbfff7fffffffffff, r4, 0x8) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)
r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0xa, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800007b529ea2050000004000000000181200008e890732165e35cabf7bc17e018072682f87db7bb318697c71fc807f5917f6b441772632339fff3298252391ab22c99f9829f613931a6635985226571529970c2d3efee5d86c325c969c8490897eb5a5c126902dfcc299021247849727d8b20b10839fffe23b2e5886cf44e2065ccd3099ffba0a71b736faaff66e0be5d2401d3b0effa2d2b945a57e", @ANYRES32=r1, @ANYBLOB="0000000000000000185200000c0000000000000000000000185900000c00000000000000000000008578c0ff080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9e4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0x8001, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r4]}, 0x80)
getdents64(r5, &(0x7f0000000140)=""/182, 0xb6) (async)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000440)={0x0, 0xe45})

22:20:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  866.963441][T23247] EXT4-fs (loop4): invalid first ino: 0
22:20:03 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x75)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x4b0045, 0x111)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, r4, 0x701, 0x0, 0x0, {0x2e}, [{@nsim={{0x30}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20000010)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0)
r5 = pidfd_getfd(r2, r0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x5)

22:20:03 executing program 3:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid() (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0, <r5=>0x0})
r6 = syz_io_uring_complete(0x0)
syz_clone3(&(0x7f0000000240)={0x4000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/78, 0x4e, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=[r1, r5], 0x2, {r6}}, 0x58)

22:20:03 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  867.011099][T23287] loop5: detected capacity change from 0 to 16383
[  867.021089][ T3631] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  867.040243][T23287] EXT4-fs (loop5): unsupported inode size: 0
[  867.046323][T23287] EXT4-fs (loop5): blocksize: 1024
[  867.053184][T23294] loop4: detected capacity change from 0 to 16383
[  867.066658][T23294] EXT4-fs (loop4): invalid first ino: 0
22:20:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xec00)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:04 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f0000000000000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:04 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
syz_clone(0x12201400, 0x0, 0x26, 0x0, 0x0, 0x0)
syz_clone(0x83000, &(0x7f0000000100), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="23c99fb3")

22:20:04 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
syz_clone(0x12201400, 0x0, 0x26, 0x0, 0x0, 0x0)
syz_clone(0x83000, &(0x7f0000000100), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="23c99fb3")

[  867.217021][T23301] loop5: detected capacity change from 0 to 16383
[  867.223757][T23303] loop4: detected capacity change from 0 to 16383
[  867.251342][T23301] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
22:20:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  867.262117][T23303] EXT4-fs (loop4): invalid first ino: 0
[  867.332734][T23314] loop5: detected capacity change from 0 to 16383
[  867.354265][T23314] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
22:20:06 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x1, &(0x7f00000001c0)={0x0, <r1=>0x0}) (async)
timer_create(0x6, &(0x7f0000000400)={0x0, 0xa, 0x1, @thr={&(0x7f0000000700)="eb00000000c2756c74b8e4d16251550842283f5cc7c99e18af080000000000000057d81ab40a1d34170d68f9427def860335834994083bedd8eeda1b311e357226ad14dc292aba4f7014420ebce29004f5d979", &(0x7f0000000340)="abc111a9fd6f7daf9d0a756ba44e9d76f6e3e8ea754853839642185e0eac93e5fc46d04b2da336d2334e50872688e3629ccfb7a3fd9e73f88c865493e7fdee0d4b47e447dde96025670f6c1356285331f0c496cb5dc2f8daef05d178e378876d26fe569d65e872aabc4f80f581c0f02c08051ecc0e9b4a280fa01ffeb5883318e1cc2ea966fe6b390c5e668cda3df2dd65977a05660afcbf6d860cfb842da7b479c3b2beaca828d1e4e3e34a146f1d1c0f9d0a956a48d4d71347409a2b3b1986"}}, &(0x7f0000000440)) (async)
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0))
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
timer_create(0x7, &(0x7f0000000600)={0x0, 0x1f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000640)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
mq_timedreceive(r4, &(0x7f0000000680)=""/76, 0x4c, 0x40, &(0x7f0000000180)={0x0, 0x989680})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r5=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0}) (async)
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
timer_create(0x5, &(0x7f0000000580)={0x0, 0x34, 0x2, @thr={&(0x7f0000000480)="48b34894950a4f3486", &(0x7f00000004c0)="20bf664e8f2510d2f220a860fe9217bc4af16d5c039b0c3912cd1ba5d0a9fcdd105382e61c7fe04d79decc05d2a2109f8a162e31e3e1127bc8195b098e8ab422eb64e1ef3db17e158e33e266baa21c17e4d319a51c79b8d260508219de7f18ea708664143d4f0daefb7b6d52be4f6ec0142ba89d9b96a74f5c491363b121eb15673f3397e4"}}, &(0x7f00000005c0))

22:20:06 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
syz_clone(0x12201400, 0x0, 0x26, 0x0, 0x0, 0x0) (async)
syz_clone(0x83000, &(0x7f0000000100), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="23c99fb3")

22:20:06 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x75)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x4b0045, 0x111)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, r4, 0x701, 0x0, 0x0, {0x2e}, [{@nsim={{0x30}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20000010)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0)
r5 = pidfd_getfd(r2, r0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x75) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x4b0045, 0x111) (async)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)=0x1) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, r4, 0x701, 0x0, 0x0, {0x2e}, [{@nsim={{0x30}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20000010) (async)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) (async)
pidfd_getfd(r2, r0, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x5) (async)

22:20:06 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfd11)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:06 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x1, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_create(0x6, &(0x7f0000000400)={0x0, 0xa, 0x1, @thr={&(0x7f0000000700)="eb00000000c2756c74b8e4d16251550842283f5cc7c99e18af080000000000000057d81ab40a1d34170d68f9427def860335834994083bedd8eeda1b311e357226ad14dc292aba4f7014420ebce29004f5d979", &(0x7f0000000340)="abc111a9fd6f7daf9d0a756ba44e9d76f6e3e8ea754853839642185e0eac93e5fc46d04b2da336d2334e50872688e3629ccfb7a3fd9e73f88c865493e7fdee0d4b47e447dde96025670f6c1356285331f0c496cb5dc2f8daef05d178e378876d26fe569d65e872aabc4f80f581c0f02c08051ecc0e9b4a280fa01ffeb5883318e1cc2ea966fe6b390c5e668cda3df2dd65977a05660afcbf6d860cfb842da7b479c3b2beaca828d1e4e3e34a146f1d1c0f9d0a956a48d4d71347409a2b3b1986"}}, &(0x7f0000000440))
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0))
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
timer_create(0x7, &(0x7f0000000600)={0x0, 0x1f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000640))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
mq_timedreceive(r4, &(0x7f0000000680)=""/76, 0x4c, 0x40, &(0x7f0000000180)={0x0, 0x989680})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r5=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0})
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x5, &(0x7f0000000580)={0x0, 0x34, 0x2, @thr={&(0x7f0000000480)="48b34894950a4f3486", &(0x7f00000004c0)="20bf664e8f2510d2f220a860fe9217bc4af16d5c039b0c3912cd1ba5d0a9fcdd105382e61c7fe04d79decc05d2a2109f8a162e31e3e1127bc8195b098e8ab422eb64e1ef3db17e158e33e266baa21c17e4d319a51c79b8d260508219de7f18ea708664143d4f0daefb7b6d52be4f6ec0142ba89d9b96a74f5c491363b121eb15673f3397e4"}}, &(0x7f00000005c0))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async)
clock_gettime(0x1, &(0x7f00000001c0)) (async)
timer_create(0x6, &(0x7f0000000400)={0x0, 0xa, 0x1, @thr={&(0x7f0000000700)="eb00000000c2756c74b8e4d16251550842283f5cc7c99e18af080000000000000057d81ab40a1d34170d68f9427def860335834994083bedd8eeda1b311e357226ad14dc292aba4f7014420ebce29004f5d979", &(0x7f0000000340)="abc111a9fd6f7daf9d0a756ba44e9d76f6e3e8ea754853839642185e0eac93e5fc46d04b2da336d2334e50872688e3629ccfb7a3fd9e73f88c865493e7fdee0d4b47e447dde96025670f6c1356285331f0c496cb5dc2f8daef05d178e378876d26fe569d65e872aabc4f80f581c0f02c08051ecc0e9b4a280fa01ffeb5883318e1cc2ea966fe6b390c5e668cda3df2dd65977a05660afcbf6d860cfb842da7b479c3b2beaca828d1e4e3e34a146f1d1c0f9d0a956a48d4d71347409a2b3b1986"}}, &(0x7f0000000440)) (async)
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) (async)
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0) (async)
timer_create(0x7, &(0x7f0000000600)={0x0, 0x1f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000640)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r3, r3) (async)
dup2(r2, r4) (async)
mq_timedreceive(r4, &(0x7f0000000680)=""/76, 0x4c, 0x40, &(0x7f0000000180)={0x0, 0x989680}) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
timer_create(0x5, &(0x7f0000000580)={0x0, 0x34, 0x2, @thr={&(0x7f0000000480)="48b34894950a4f3486", &(0x7f00000004c0)="20bf664e8f2510d2f220a860fe9217bc4af16d5c039b0c3912cd1ba5d0a9fcdd105382e61c7fe04d79decc05d2a2109f8a162e31e3e1127bc8195b098e8ab422eb64e1ef3db17e158e33e266baa21c17e4d319a51c79b8d260508219de7f18ea708664143d4f0daefb7b6d52be4f6ec0142ba89d9b96a74f5c491363b121eb15673f3397e4"}}, &(0x7f00000005c0)) (async)

22:20:06 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x4, 0x0, 0x95cd601, 0x3ec1, 0x5, 0x2})
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  869.955829][T23325] loop5: detected capacity change from 0 to 16383
[  869.963163][T23331] loop4: detected capacity change from 0 to 16383
[  869.970694][T23325] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
22:20:06 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x75) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x4b0045, 0x111)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)=0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, r4, 0x701, 0x0, 0x0, {0x2e}, [{@nsim={{0x30}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20000010)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) (async)
r5 = pidfd_getfd(r2, r0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x5)

22:20:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, 0x0)

[  870.020107][T23331] EXT4-fs (loop4): unsupported inode size: 0
[  870.025380][T23342] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure
[  870.026175][T23331] EXT4-fs (loop4): blocksize: 1024
22:20:06 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000280)=""/168, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x6530}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(0xffffffffffffffff, r2)
openat$cgroup_ro(r2, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0), &(0x7f0000000100), 0xffffff9e, 0x5)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:06 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  870.077759][T23354] loop5: detected capacity change from 0 to 16383
22:20:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, 0x0)

[  870.122110][T23359] loop4: detected capacity change from 0 to 16383
[  870.143108][T23359] EXT4-fs (loop4): unsupported inode size: 0
[  870.149154][T23359] EXT4-fs (loop4): blocksize: 1024
22:20:07 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x4, 0x0, 0x95cd601, 0x3ec1, 0x5, 0x2})
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x4, 0x0, 0x95cd601, 0x3ec1, 0x5, 0x2}) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

22:20:07 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  870.193625][ T3631] I/O error, dev loop5, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  870.211816][T23363] loop5: detected capacity change from 0 to 16383
[  870.228374][T23365] loop4: detected capacity change from 0 to 16383
22:20:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffa1)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, 0x0)

[  870.255777][T23365] EXT4-fs (loop4): unsupported inode size: 0
[  870.261792][T23365] EXT4-fs (loop4): blocksize: 1024
22:20:07 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  870.331310][ T6981] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  870.375790][T23379] loop4: detected capacity change from 0 to 16383
[  870.383145][ T6981] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  870.392713][ T6981] Buffer I/O error on dev loop4, logical block 8064, async page read
[  870.407358][T23379] EXT4-fs (loop4): unsupported inode size: 0
[  870.413394][T23379] EXT4-fs (loop4): blocksize: 1024
[  870.452656][ T3631] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  870.462208][ T3631] Buffer I/O error on dev loop4, logical block 8064, async page read
22:20:09 executing program 5:
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x3, 0x14)
r4 = dup2(r3, r3)
dup2(r2, r4)
perf_event_open(0x0, 0x0, 0xbfff7fffffffffff, r4, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0xa, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800007b529ea2050000004000000000181200008e890732165e35cabf7bc17e018072682f87db7bb318697c71fc807f5917f6b441772632339fff3298252391ab22c99f9829f613931a6635985226571529970c2d3efee5d86c325c969c8490897eb5a5c126902dfcc299021247849727d8b20b10839fffe23b2e5886cf44e2065ccd3099ffba0a71b736faaff66e0be5d2401d3b0effa2d2b945a57e", @ANYRES32=r1, @ANYBLOB="0000000000000000185200000c0000000000000000000000185900000c00000000000000000000008578c0ff080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9e4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0x8001, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r4]}, 0x80)
getdents64(r5, &(0x7f0000000140)=""/182, 0xb6)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000440)={0x0, 0xe45})

22:20:09 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x4, 0x0, 0x95cd601, 0x3ec1, 0x5, 0x2})
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x4, 0x0, 0x95cd601, 0x3ec1, 0x5, 0x2}) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

22:20:09 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000280)=""/168, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x6530}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async, rerun: 64)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 64)
dup2(0xffffffffffffffff, r2)
openat$cgroup_ro(r2, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) (async)
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0), &(0x7f0000000100), 0xffffff9e, 0x5) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:09 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x40000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:09 executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001580))
timer_create(0x1, &(0x7f0000000080)={0x0, 0x800013, 0x4, @thr={&(0x7f00000015c0)="1ff9c837544ae338430080", &(0x7f0000001600)="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"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180)="478922681e8868391c0e9f3891c567fe4ea625a16641af7b34760b4c62e10cafb3e1ac3a9f381d596208e763d5566af8515080aa0be1d734571b9434842c094db79eff2e374e1237fec82a5e6477338edf5adaddd67b2f762e5b76661ad167d325adb234bdafa0b626a02384fad87acbc18b96fbb9593bfb456ee1a7cfb99e4dca63760cd2c0305ce015d561f696d8c83ab50f73a625c11f27e1536dee06f2ad6e48a3c6e3a6b0e11df2de7ba3f0eed5a7a118f548e3e1f48e4e1b2181d489cd1df62848c22a81e56af54528e4047f6f1c650ad775908787a315d25da62ab3ab5644", &(0x7f0000000340)="b19dd38b67617860fa1e4b9daa1494697c061851e531102d40dbc025cc4d5a67fc864ff0e2a42e7897b9766ce30e4b61ff218aeaa2befde8dfb87783703c54a4b0bba9bb962d23d106aef2557cb2ff1c25e2f94f6758de50320cc571c73cdb89d2bed629abca996ae5e6538804dcc39aeaca0f46615292701ca19d16a959a34b213c41112418b16540b4ad6ada81097bb8572ef49e5b134b"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x3, &(0x7f0000001800)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r5=>0x0, <r6=>0x0})
timer_settime(r3, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}}, &(0x7f0000000300))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x2, &(0x7f00000014c0)={0x0, 0x11, 0x2, @thr={&(0x7f0000000440)="51c14b5d7758c00a8266d4ca02ef710e1ce745a4b47083a4be8b613d39e59a323a2a4e1f00f21b0333b23aed7cb9444b6939a1e4ce3d6508", &(0x7f0000000580)="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"}}, &(0x7f0000000400)=<r8=>0x0)
timer_gettime(r8, &(0x7f0000001540))
semget$private(0x0, 0x3, 0x18)

22:20:09 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000280)=""/168, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x6530}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup2(0xffffffffffffffff, r2) (async)
openat$cgroup_ro(r2, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6) (async)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0), &(0x7f0000000100), 0xffffff9e, 0x5) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  873.017845][T23387] loop4: detected capacity change from 0 to 16383
22:20:09 executing program 3:
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0xd8f7)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  873.062991][T23387] EXT4-fs (loop4): unsupported inode size: 0
[  873.069068][T23387] EXT4-fs (loop4): blocksize: 1024
22:20:09 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:10 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x84480)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6)

[  873.152829][T23417] loop4: detected capacity change from 0 to 16383
[  873.166506][T23400] loop5: detected capacity change from 0 to 16383
[  873.174769][T23417] EXT4-fs (loop4): unsupported inode size: 0
[  873.180770][T23417] EXT4-fs (loop4): blocksize: 1024
[  873.186956][T23400] ext4: Unknown parameter 'threaded'
22:20:10 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:10 executing program 3:
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0xd8f7) (async)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  873.265082][T23423] loop4: detected capacity change from 0 to 16383
[  873.289261][T23423] EXT4-fs (loop4): unsupported inode size: 0
[  873.295431][T23423] EXT4-fs (loop4): blocksize: 1024
22:20:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x8900)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x100000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:10 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:10 executing program 3:
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0xd8f7) (async, rerun: 64)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)

22:20:10 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x84480)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6)

[  873.478266][T23433] loop4: detected capacity change from 0 to 16383
[  873.486939][T23433] EXT4-fs (loop4): unsupported inode size: 0
[  873.492990][T23433] EXT4-fs (loop4): blocksize: 1024
22:20:12 executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001580))
timer_create(0x1, &(0x7f0000000080)={0x0, 0x800013, 0x4, @thr={&(0x7f00000015c0)="1ff9c837544ae338430080", &(0x7f0000001600)="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"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180)="478922681e8868391c0e9f3891c567fe4ea625a16641af7b34760b4c62e10cafb3e1ac3a9f381d596208e763d5566af8515080aa0be1d734571b9434842c094db79eff2e374e1237fec82a5e6477338edf5adaddd67b2f762e5b76661ad167d325adb234bdafa0b626a02384fad87acbc18b96fbb9593bfb456ee1a7cfb99e4dca63760cd2c0305ce015d561f696d8c83ab50f73a625c11f27e1536dee06f2ad6e48a3c6e3a6b0e11df2de7ba3f0eed5a7a118f548e3e1f48e4e1b2181d489cd1df62848c22a81e56af54528e4047f6f1c650ad775908787a315d25da62ab3ab5644", &(0x7f0000000340)="b19dd38b67617860fa1e4b9daa1494697c061851e531102d40dbc025cc4d5a67fc864ff0e2a42e7897b9766ce30e4b61ff218aeaa2befde8dfb87783703c54a4b0bba9bb962d23d106aef2557cb2ff1c25e2f94f6758de50320cc571c73cdb89d2bed629abca996ae5e6538804dcc39aeaca0f46615292701ca19d16a959a34b213c41112418b16540b4ad6ada81097bb8572ef49e5b134b"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x3, &(0x7f0000001800)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r5=>0x0, <r6=>0x0})
timer_settime(r3, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}}, &(0x7f0000000300))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x2, &(0x7f00000014c0)={0x0, 0x11, 0x2, @thr={&(0x7f0000000440)="51c14b5d7758c00a8266d4ca02ef710e1ce745a4b47083a4be8b613d39e59a323a2a4e1f00f21b0333b23aed7cb9444b6939a1e4ce3d6508", &(0x7f0000000580)="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"}}, &(0x7f0000000400)=<r8=>0x0)
timer_gettime(r8, &(0x7f0000001540))
semget$private(0x0, 0x3, 0x18)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001580)) (async)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x800013, 0x4, @thr={&(0x7f00000015c0)="1ff9c837544ae338430080", &(0x7f0000001600)="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"}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180)="478922681e8868391c0e9f3891c567fe4ea625a16641af7b34760b4c62e10cafb3e1ac3a9f381d596208e763d5566af8515080aa0be1d734571b9434842c094db79eff2e374e1237fec82a5e6477338edf5adaddd67b2f762e5b76661ad167d325adb234bdafa0b626a02384fad87acbc18b96fbb9593bfb456ee1a7cfb99e4dca63760cd2c0305ce015d561f696d8c83ab50f73a625c11f27e1536dee06f2ad6e48a3c6e3a6b0e11df2de7ba3f0eed5a7a118f548e3e1f48e4e1b2181d489cd1df62848c22a81e56af54528e4047f6f1c650ad775908787a315d25da62ab3ab5644", &(0x7f0000000340)="b19dd38b67617860fa1e4b9daa1494697c061851e531102d40dbc025cc4d5a67fc864ff0e2a42e7897b9766ce30e4b61ff218aeaa2befde8dfb87783703c54a4b0bba9bb962d23d106aef2557cb2ff1c25e2f94f6758de50320cc571c73cdb89d2bed629abca996ae5e6538804dcc39aeaca0f46615292701ca19d16a959a34b213c41112418b16540b4ad6ada81097bb8572ef49e5b134b"}}, &(0x7f0000000040)) (async)
clock_gettime(0x3, &(0x7f0000001800)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000280)) (async)
timer_settime(r3, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}}, &(0x7f0000000300)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) (async)
getpid() (async)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) (async)
timer_create(0x2, &(0x7f00000014c0)={0x0, 0x11, 0x2, @thr={&(0x7f0000000440)="51c14b5d7758c00a8266d4ca02ef710e1ce745a4b47083a4be8b613d39e59a323a2a4e1f00f21b0333b23aed7cb9444b6939a1e4ce3d6508", &(0x7f0000000580)="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"}}, &(0x7f0000000400)) (async)
timer_gettime(r8, &(0x7f0000001540)) (async)
semget$private(0x0, 0x3, 0x18) (async)

22:20:12 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:12 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x84480)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)
pipe2(&(0x7f0000000000), 0x84480) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6) (async)

22:20:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x200000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:12 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 1)

22:20:12 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000000, 0x0, 0x5d, 0x0, 0x0, 0x0)
ptrace(0x8, 0xffffffffffffffff)

[  876.043760][T23462] loop4: detected capacity change from 0 to 16383
[  876.050637][T23463] FAULT_INJECTION: forcing a failure.
[  876.050637][T23463] name failslab, interval 1, probability 0, space 0, times 0
[  876.063293][T23463] CPU: 1 PID: 23463 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  876.074422][T23463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.084474][T23463] Call Trace:
[  876.087749][T23463]  <TASK>
[  876.090669][T23463]  dump_stack_lvl+0xd6/0x122
[  876.095259][T23463]  dump_stack+0x11/0x12
[  876.099494][T23463]  should_fail+0x230/0x240
[  876.103897][T23463]  ? __se_sys_memfd_create+0xe9/0x330
[  876.109359][T23463]  __should_failslab+0x81/0x90
[  876.114141][T23463]  should_failslab+0x5/0x20
[  876.118671][T23463]  __kmalloc+0x66/0x350
[  876.122818][T23463]  ? strnlen_user+0x127/0x1b0
[  876.127487][T23463]  __se_sys_memfd_create+0xe9/0x330
[  876.132736][T23463]  __x64_sys_memfd_create+0x2d/0x40
[  876.137930][T23463]  do_syscall_64+0x2b/0x70
[  876.142394][T23463]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  876.148277][T23463] RIP: 0033:0x7fce157dc0e9
[  876.152676][T23463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  876.172268][T23463] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  876.180686][T23463] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
22:20:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 2)

22:20:13 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa) (async)
syz_clone(0x4000000, 0x0, 0x5d, 0x0, 0x0, 0x0) (async)
ptrace(0x8, 0xffffffffffffffff)

[  876.188672][T23463] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  876.196640][T23463] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  876.204617][T23463] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
[  876.212580][T23463] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  876.220634][T23463]  </TASK>
22:20:13 executing program 3:
sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0xd8fa)
syz_clone(0x4000000, 0x0, 0x5d, 0x0, 0x0, 0x0) (async)
ptrace(0x8, 0xffffffffffffffff)

22:20:13 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0)

22:20:13 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 1)

[  876.322489][T23462] EXT4-fs (loop4): unsupported inode size: 0
[  876.328524][T23462] EXT4-fs (loop4): blocksize: 1024
[  876.369557][   T24] audit: type=1400 audit(1651443613.200:387): avc:  denied  { write } for  pid=23494 comm="syz-executor.2" name="net" dev="proc" ino=128550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  876.419705][   T24] audit: type=1400 audit(1651443613.200:388): avc:  denied  { add_name } for  pid=23494 comm="syz-executor.2" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  876.440179][   T24] audit: type=1400 audit(1651443613.200:389): avc:  denied  { create } for  pid=23494 comm="syz-executor.2" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  876.460568][   T24] audit: type=1400 audit(1651443613.200:390): avc:  denied  { associate } for  pid=23494 comm="syz-executor.2" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  876.512236][T23499] FAULT_INJECTION: forcing a failure.
[  876.512236][T23499] name failslab, interval 1, probability 0, space 0, times 0
[  876.525129][T23499] CPU: 0 PID: 23499 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  876.536200][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.546255][T23499] Call Trace:
[  876.549530][T23499]  <TASK>
[  876.552452][T23499]  dump_stack_lvl+0xd6/0x122
[  876.557048][T23499]  dump_stack+0x11/0x12
[  876.561227][T23499]  should_fail+0x230/0x240
[  876.565653][T23499]  ? strndup_user+0x64/0xa0
[  876.570174][T23499]  __should_failslab+0x81/0x90
[  876.574935][T23499]  should_failslab+0x5/0x20
[  876.579488][T23499]  __kmalloc_track_caller+0x64/0x350
[  876.584770][T23499]  ? vfs_write+0x607/0x890
[  876.589294][T23499]  memdup_user+0x22/0xb0
[  876.593544][T23499]  strndup_user+0x64/0xa0
[  876.597901][T23499]  __se_sys_mount+0x4e/0x2d0
[  876.602557][T23499]  ? fput+0x2d/0x130
[  876.606475][T23499]  __x64_sys_mount+0x63/0x70
[  876.611061][T23499]  do_syscall_64+0x2b/0x70
[  876.615559][T23499]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  876.621628][T23499] RIP: 0033:0x7f29122de0e9
[  876.626035][T23499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  876.630035][T23500] FAULT_INJECTION: forcing a failure.
[  876.630035][T23500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  876.645640][T23499] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  876.645666][T23499] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  876.645710][T23499] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  876.645724][T23499] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  876.645735][T23499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  876.698912][T23499] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  876.706874][T23499]  </TASK>
[  876.709888][T23500] CPU: 1 PID: 23500 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  876.720914][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.730969][T23500] Call Trace:
[  876.734244][T23500]  <TASK>
[  876.737170][T23500]  dump_stack_lvl+0xd6/0x122
[  876.741769][T23500]  dump_stack+0x11/0x12
[  876.745932][T23500]  should_fail+0x230/0x240
[  876.750374][T23500]  should_fail_usercopy+0x16/0x20
[  876.755405][T23500]  _copy_from_user+0x1a/0xc0
22:20:13 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20) (async)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2) (async)
fsmount(r0, 0x1, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0) (async)

[  876.760001][T23500]  __se_sys_memfd_create+0x125/0x330
[  876.765291][T23500]  __x64_sys_memfd_create+0x2d/0x40
[  876.770497][T23500]  do_syscall_64+0x2b/0x70
[  876.774925][T23500]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  876.780868][T23500] RIP: 0033:0x7fce157dc0e9
[  876.785272][T23500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  876.804880][T23500] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  876.813290][T23500] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
[  876.821353][T23500] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  876.829333][T23500] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  876.837303][T23500] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
[  876.845268][T23500] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  876.853242][T23500]  </TASK>
22:20:15 executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001580)) (async, rerun: 32)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x800013, 0x4, @thr={&(0x7f00000015c0)="1ff9c837544ae338430080", &(0x7f0000001600)="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"}}, &(0x7f0000000140)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180)="478922681e8868391c0e9f3891c567fe4ea625a16641af7b34760b4c62e10cafb3e1ac3a9f381d596208e763d5566af8515080aa0be1d734571b9434842c094db79eff2e374e1237fec82a5e6477338edf5adaddd67b2f762e5b76661ad167d325adb234bdafa0b626a02384fad87acbc18b96fbb9593bfb456ee1a7cfb99e4dca63760cd2c0305ce015d561f696d8c83ab50f73a625c11f27e1536dee06f2ad6e48a3c6e3a6b0e11df2de7ba3f0eed5a7a118f548e3e1f48e4e1b2181d489cd1df62848c22a81e56af54528e4047f6f1c650ad775908787a315d25da62ab3ab5644", &(0x7f0000000340)="b19dd38b67617860fa1e4b9daa1494697c061851e531102d40dbc025cc4d5a67fc864ff0e2a42e7897b9766ce30e4b61ff218aeaa2befde8dfb87783703c54a4b0bba9bb962d23d106aef2557cb2ff1c25e2f94f6758de50320cc571c73cdb89d2bed629abca996ae5e6538804dcc39aeaca0f46615292701ca19d16a959a34b213c41112418b16540b4ad6ada81097bb8572ef49e5b134b"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x3, &(0x7f0000001800)={0x0, <r1=>0x0}) (async, rerun: 64)
r2 = semget$private(0x0, 0x4, 0x0) (rerun: 64)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0}) (rerun: 32)
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000280)={<r5=>0x0, <r6=>0x0})
timer_settime(r3, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}}, &(0x7f0000000300)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) (async, rerun: 32)
r7 = getpid() (rerun: 32)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) (async)
timer_create(0x2, &(0x7f00000014c0)={0x0, 0x11, 0x2, @thr={&(0x7f0000000440)="51c14b5d7758c00a8266d4ca02ef710e1ce745a4b47083a4be8b613d39e59a323a2a4e1f00f21b0333b23aed7cb9444b6939a1e4ce3d6508", &(0x7f0000000580)="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"}}, &(0x7f0000000400)=<r8=>0x0)
timer_gettime(r8, &(0x7f0000001540)) (async, rerun: 32)
semget$private(0x0, 0x3, 0x18) (rerun: 32)

22:20:15 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

22:20:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 3)

22:20:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x80ffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:15 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 2)

22:20:15 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20) (async)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2) (async)
fsmount(r0, 0x1, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0) (async)

[  879.071440][T23515] loop4: detected capacity change from 0 to 16383
[  879.074239][T23517] FAULT_INJECTION: forcing a failure.
[  879.074239][T23517] name failslab, interval 1, probability 0, space 0, times 0
[  879.090602][T23517] CPU: 0 PID: 23517 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  879.101728][T23517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  879.111795][T23517] Call Trace:
[  879.115070][T23517]  <TASK>
[  879.118071][T23517]  dump_stack_lvl+0xd6/0x122
[  879.122715][T23517]  dump_stack+0x11/0x12
[  879.126907][T23517]  should_fail+0x230/0x240
[  879.131343][T23517]  ? shmem_alloc_inode+0x2d/0x40
[  879.136374][T23517]  __should_failslab+0x81/0x90
[  879.141147][T23517]  should_failslab+0x5/0x20
[  879.145646][T23517]  kmem_cache_alloc_lru+0x52/0x2b0
[  879.150751][T23517]  ? 0xffffffff81000000
[  879.154895][T23517]  shmem_alloc_inode+0x2d/0x40
[  879.159658][T23517]  ? shmem_match+0xa0/0xa0
[  879.164069][T23517]  alloc_inode+0x38/0x150
[  879.168400][T23517]  new_inode+0x21/0x140
[  879.172629][T23517]  shmem_get_inode+0x22b/0x6e0
[  879.173141][T23525] FAULT_INJECTION: forcing a failure.
[  879.173141][T23525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  879.177468][T23517]  __shmem_file_setup+0xef/0x1c0
[  879.195434][T23517]  shmem_file_setup+0x37/0x40
[  879.200224][T23517]  __se_sys_memfd_create+0x1c1/0x330
[  879.205519][T23517]  __x64_sys_memfd_create+0x2d/0x40
[  879.210810][T23517]  do_syscall_64+0x2b/0x70
[  879.215292][T23517]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  879.221264][T23517] RIP: 0033:0x7fce157dc0e9
[  879.225666][T23517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  879.245255][T23517] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  879.253653][T23517] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
[  879.261623][T23517] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  879.269578][T23517] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  879.277535][T23517] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
[  879.285490][T23517] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  879.293447][T23517]  </TASK>
[  879.296450][T23525] CPU: 1 PID: 23525 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  879.307622][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  879.317681][T23525] Call Trace:
22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x2, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  879.320956][T23525]  <TASK>
[  879.323885][T23525]  dump_stack_lvl+0xd6/0x122
[  879.328522][T23525]  dump_stack+0x11/0x12
[  879.332685][T23525]  should_fail+0x230/0x240
[  879.337131][T23525]  should_fail_usercopy+0x16/0x20
[  879.342197][T23525]  _copy_from_user+0x1a/0xc0
[  879.346784][T23525]  memdup_user+0x5b/0xb0
[  879.351051][T23525]  strndup_user+0x64/0xa0
[  879.355485][T23525]  __se_sys_mount+0x4e/0x2d0
[  879.360065][T23525]  ? fput+0x2d/0x130
[  879.363952][T23525]  __x64_sys_mount+0x63/0x70
[  879.368532][T23525]  do_syscall_64+0x2b/0x70
[  879.372986][T23525]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  879.378916][T23525] RIP: 0033:0x7f29122de0e9
[  879.383314][T23525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  879.402903][T23525] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  879.411297][T23525] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async, rerun: 32)
clock_gettime(0x2, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async, rerun: 32)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)

[  879.419317][T23525] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  879.427344][T23525] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  879.435301][T23525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.443256][T23525] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  879.451215][T23525]  </TASK>
22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 64)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x2, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:16 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 4)

22:20:16 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = dup2(r1, r1)
dup2(r0, r2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x800})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00000068bd7000fedbdf250264201ffc02c80800040000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20044044)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0)

22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:16 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  879.482326][T23515] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  879.548958][T23563] FAULT_INJECTION: forcing a failure.
[  879.548958][T23563] name failslab, interval 1, probability 0, space 0, times 0
[  879.561636][T23563] CPU: 0 PID: 23563 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  879.572659][T23563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  879.582715][T23563] Call Trace:
[  879.586018][T23563]  <TASK>
[  879.588958][T23563]  dump_stack_lvl+0xd6/0x122
[  879.593585][T23563]  dump_stack+0x11/0x12
[  879.597741][T23563]  should_fail+0x230/0x240
[  879.602179][T23563]  __should_failslab+0x81/0x90
[  879.606942][T23563]  ? security_inode_alloc+0x2e/0xf0
[  879.612230][T23563]  should_failslab+0x5/0x20
[  879.616731][T23563]  kmem_cache_alloc+0x46/0x300
[  879.621498][T23563]  ? __rcu_read_unlock+0x4a/0x70
[  879.626445][T23563]  security_inode_alloc+0x2e/0xf0
[  879.631542][T23563]  inode_init_always+0x22b/0x400
[  879.636519][T23563]  ? shmem_match+0xa0/0xa0
[  879.640945][T23563]  alloc_inode+0x77/0x150
[  879.645370][T23563]  new_inode+0x21/0x140
[  879.649611][T23563]  shmem_get_inode+0x22b/0x6e0
[  879.654435][T23563]  __shmem_file_setup+0xef/0x1c0
[  879.659410][T23563]  shmem_file_setup+0x37/0x40
[  879.664096][T23563]  __se_sys_memfd_create+0x1c1/0x330
[  879.669389][T23563]  __x64_sys_memfd_create+0x2d/0x40
[  879.674594][T23563]  do_syscall_64+0x2b/0x70
[  879.679134][T23563]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  879.685048][T23563] RIP: 0033:0x7fce157dc0e9
[  879.689458][T23563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  879.709085][T23563] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  879.717512][T23563] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
[  879.725485][T23563] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  879.733451][T23563] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  879.741416][T23563] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xc00000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  879.749431][T23563] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  879.757406][T23563]  </TASK>
[  879.780497][T23568] loop4: detected capacity change from 0 to 16383
[  879.808664][T23568] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
22:20:16 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 3)

22:20:16 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/252, 0xfc}], 0xa, &(0x7f0000000880)=""/230, 0xe6}, 0x3}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/95, 0x5f}], 0x6, &(0x7f0000002c80)=""/109, 0x6d}, 0xd2e}, {{&(0x7f0000002d00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003100)=[{0xfffffffffffffffe}, {&(0x7f0000002d80)=""/138, 0x8a}, {&(0x7f0000002e40)=""/170, 0xaa}, {&(0x7f0000002f00)=""/212, 0xd4}, {&(0x7f0000003000)=""/54, 0x36}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/42, 0x2a}, {&(0x7f00000030c0)=""/39, 0x27}], 0x8, &(0x7f0000003180)=""/12, 0xc}, 0x10000}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000031c0)=""/93, 0x5d}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x2, &(0x7f0000004280)=""/4096, 0x1000}, 0x6}], 0x4, 0x10000, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:16 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 5)

22:20:16 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = dup2(r1, r1)
dup2(r0, r2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x800})
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00000068bd7000fedbdf250264201ffc02c80800040000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20044044) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0)

22:20:16 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x9, 0x1)

[  879.934634][T23595] loop4: detected capacity change from 0 to 16383
[  879.938622][T23593] FAULT_INJECTION: forcing a failure.
[  879.938622][T23593] name failslab, interval 1, probability 0, space 0, times 0
[  879.953923][T23593] CPU: 1 PID: 23593 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  879.957330][T23595] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  879.964958][T23593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  879.964973][T23593] Call Trace:
[  879.964980][T23593]  <TASK>
[  879.964996][T23593]  dump_stack_lvl+0xd6/0x122
[  879.965026][T23593]  dump_stack+0x11/0x12
[  879.965045][T23593]  should_fail+0x230/0x240
[  880.000922][T23593]  ? __d_alloc+0x3d/0x380
[  880.005264][T23593]  __should_failslab+0x81/0x90
[  880.010029][T23593]  should_failslab+0x5/0x20
[  880.014596][T23593]  kmem_cache_alloc_lru+0x52/0x2b0
[  880.019757][T23593]  ? __init_rwsem+0x59/0x70
[  880.024261][T23593]  __d_alloc+0x3d/0x380
[  880.028414][T23593]  ? debug_smp_processor_id+0x13/0x20
[  880.033798][T23593]  ? prandom_u32+0x168/0x190
[  880.038482][T23593]  d_alloc_pseudo+0x1a/0x50
[  880.042983][T23593]  alloc_file_pseudo+0x73/0x140
[  880.047835][T23593]  __shmem_file_setup+0x13a/0x1c0
[  880.052925][T23593]  shmem_file_setup+0x37/0x40
[  880.057664][T23593]  __se_sys_memfd_create+0x1c1/0x330
[  880.063127][T23593]  __x64_sys_memfd_create+0x2d/0x40
[  880.068323][T23593]  do_syscall_64+0x2b/0x70
[  880.072744][T23593]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  880.078684][T23593] RIP: 0033:0x7fce157dc0e9
[  880.083093][T23593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  880.102744][T23593] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  880.111161][T23593] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
[  880.119139][T23593] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  880.127186][T23593] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  880.135157][T23593] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
[  880.143156][T23593] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  880.151122][T23593]  </TASK>
22:20:17 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x3, 0x14)
r2 = dup2(r1, r1)
dup2(r0, r2) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x800}) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00000068bd7000fedbdf250264201ffc02c80800040000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20044044)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0)

22:20:17 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, 0x0)
lseek(r0, 0x9, 0x1)

22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/252, 0xfc}], 0xa, &(0x7f0000000880)=""/230, 0xe6}, 0x3}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/95, 0x5f}], 0x6, &(0x7f0000002c80)=""/109, 0x6d}, 0xd2e}, {{&(0x7f0000002d00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003100)=[{0xfffffffffffffffe}, {&(0x7f0000002d80)=""/138, 0x8a}, {&(0x7f0000002e40)=""/170, 0xaa}, {&(0x7f0000002f00)=""/212, 0xd4}, {&(0x7f0000003000)=""/54, 0x36}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/42, 0x2a}, {&(0x7f00000030c0)=""/39, 0x27}], 0x8, &(0x7f0000003180)=""/12, 0xc}, 0x10000}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000031c0)=""/93, 0x5d}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x2, &(0x7f0000004280)=""/4096, 0x1000}, 0x6}], 0x4, 0x10000, 0x0) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:17 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 6)

22:20:17 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, 0x0)
lseek(r0, 0x9, 0x1)

22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async, rerun: 64)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/252, 0xfc}], 0xa, &(0x7f0000000880)=""/230, 0xe6}, 0x3}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/95, 0x5f}], 0x6, &(0x7f0000002c80)=""/109, 0x6d}, 0xd2e}, {{&(0x7f0000002d00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003100)=[{0xfffffffffffffffe}, {&(0x7f0000002d80)=""/138, 0x8a}, {&(0x7f0000002e40)=""/170, 0xaa}, {&(0x7f0000002f00)=""/212, 0xd4}, {&(0x7f0000003000)=""/54, 0x36}, {&(0x7f0000003040)=""/37, 0x25}, {&(0x7f0000003080)=""/42, 0x2a}, {&(0x7f00000030c0)=""/39, 0x27}], 0x8, &(0x7f0000003180)=""/12, 0xc}, 0x10000}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000031c0)=""/93, 0x5d}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x2, &(0x7f0000004280)=""/4096, 0x1000}, 0x6}], 0x4, 0x10000, 0x0) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  880.207148][T23608] loop4: detected capacity change from 0 to 16383
[  880.259028][T23612] FAULT_INJECTION: forcing a failure.
[  880.259028][T23612] name failslab, interval 1, probability 0, space 0, times 0
[  880.271708][T23612] CPU: 0 PID: 23612 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  880.282796][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  880.293005][T23612] Call Trace:
[  880.296353][T23612]  <TASK>
[  880.299278][T23612]  dump_stack_lvl+0xd6/0x122
[  880.303881][T23612]  dump_stack+0x11/0x12
[  880.308066][T23612]  should_fail+0x230/0x240
[  880.312489][T23612]  __should_failslab+0x81/0x90
[  880.317314][T23612]  ? __alloc_file+0x2e/0x150
[  880.321980][T23612]  should_failslab+0x5/0x20
[  880.326503][T23612]  kmem_cache_alloc+0x46/0x300
[  880.331265][T23612]  ? _raw_spin_unlock+0x2d/0x50
[  880.336144][T23612]  ? inode_doinit_with_dentry+0x339/0x770
[  880.341881][T23612]  __alloc_file+0x2e/0x150
[  880.346294][T23612]  alloc_empty_file+0xcd/0x1c0
[  880.351065][T23612]  alloc_file+0x3a/0x270
[  880.355331][T23612]  alloc_file_pseudo+0xf0/0x140
[  880.360188][T23612]  __shmem_file_setup+0x13a/0x1c0
[  880.365297][T23612]  shmem_file_setup+0x37/0x40
[  880.370003][T23612]  __se_sys_memfd_create+0x1c1/0x330
[  880.375285][T23612]  __x64_sys_memfd_create+0x2d/0x40
[  880.380535][T23612]  do_syscall_64+0x2b/0x70
[  880.384954][T23612]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  880.390847][T23612] RIP: 0033:0x7fce157dc0e9
[  880.391637][T23627] FAULT_INJECTION: forcing a failure.
[  880.391637][T23627] name failslab, interval 1, probability 0, space 0, times 0
[  880.395256][T23612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  880.395277][T23612] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  880.395298][T23612] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
[  880.395312][T23612] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  880.451738][T23612] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  880.459719][T23612] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
[  880.467868][T23612] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  880.476008][T23612]  </TASK>
[  880.479100][T23627] CPU: 1 PID: 23627 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  880.490124][T23627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  880.500170][T23627] Call Trace:
[  880.503579][T23627]  <TASK>
[  880.506498][T23627]  dump_stack_lvl+0xd6/0x122
[  880.511103][T23627]  dump_stack+0x11/0x12
[  880.515242][T23627]  should_fail+0x230/0x240
[  880.519644][T23627]  __should_failslab+0x81/0x90
[  880.524389][T23627]  ? getname_flags+0x82/0x350
[  880.529066][T23627]  should_failslab+0x5/0x20
[  880.533607][T23627]  kmem_cache_alloc+0x46/0x300
[  880.538444][T23627]  getname_flags+0x82/0x350
[  880.542981][T23627]  user_path_at_empty+0x28/0x110
[  880.548011][T23627]  __se_sys_mount+0x24d/0x2d0
[  880.552671][T23627]  ? fput+0x2d/0x130
[  880.556621][T23627]  __x64_sys_mount+0x63/0x70
[  880.561266][T23627]  do_syscall_64+0x2b/0x70
[  880.565671][T23627]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  880.571581][T23627] RIP: 0033:0x7f29122de0e9
[  880.575984][T23627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  880.595575][T23627] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  880.603990][T23627] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  880.611945][T23627] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  880.619976][T23627] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  880.627931][T23627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  880.635885][T23627] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  880.643932][T23627]  </TASK>
22:20:17 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 4)

22:20:17 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x140000, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x5, 0x1}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:17 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 7)

[  880.755496][ T3631] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  880.755795][T23634] FAULT_INJECTION: forcing a failure.
[  880.755795][T23634] name failslab, interval 1, probability 0, space 0, times 0
[  880.777997][T23634] CPU: 1 PID: 23634 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  880.789021][T23634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  880.799073][T23634] Call Trace:
[  880.802343][T23634]  <TASK>
[  880.805270][T23634]  dump_stack_lvl+0xd6/0x122
[  880.806654][T23636] loop4: detected capacity change from 0 to 16383
[  880.809871][T23634]  dump_stack+0x11/0x12
[  880.820406][T23634]  should_fail+0x230/0x240
[  880.824868][T23634]  __should_failslab+0x81/0x90
[  880.829631][T23634]  ? security_file_alloc+0x2e/0xf0
[  880.834861][T23634]  should_failslab+0x5/0x20
[  880.839363][T23634]  kmem_cache_alloc+0x46/0x300
[  880.844201][T23634]  ? kmem_cache_alloc+0x237/0x300
[  880.849227][T23634]  security_file_alloc+0x2e/0xf0
22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x5, 0x1}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x5, 0x1}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 32)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x5, 0x1}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x34, 0x4, @thr={&(0x7f00000001c0)="983fff993a40d09af3233f936c9557c2f9", &(0x7f0000000200)="7cf245711037358431dd13049c0db59c9e742365f12d000795fd48eee99c21288fafb16a358f30dae6354864be34aae7a0bbf1"}}, &(0x7f0000000280))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:17 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) (async)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x34, 0x4, @thr={&(0x7f00000001c0)="983fff993a40d09af3233f936c9557c2f9", &(0x7f0000000200)="7cf245711037358431dd13049c0db59c9e742365f12d000795fd48eee99c21288fafb16a358f30dae6354864be34aae7a0bbf1"}}, &(0x7f0000000280))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  880.854261][T23634]  __alloc_file+0x81/0x150
[  880.858739][T23634]  alloc_empty_file+0xcd/0x1c0
[  880.863576][T23634]  alloc_file+0x3a/0x270
[  880.867874][T23634]  alloc_file_pseudo+0xf0/0x140
[  880.872726][T23634]  __shmem_file_setup+0x13a/0x1c0
[  880.877817][T23634]  shmem_file_setup+0x37/0x40
[  880.882500][T23634]  __se_sys_memfd_create+0x1c1/0x330
[  880.887794][T23634]  __x64_sys_memfd_create+0x2d/0x40
[  880.892990][T23634]  do_syscall_64+0x2b/0x70
[  880.897403][T23634]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  880.903297][T23634] RIP: 0033:0x7fce157dc0e9
[  880.907731][T23634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  880.927409][T23634] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  880.935820][T23634] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157dc0e9
[  880.943790][T23634] RDX: 0000000000002c00 RSI: 0000000000000000 RDI: 00007fce158351ee
[  880.951853][T23634] RBP: 0000000000000004 R08: 0000000000001600 R09: 00007fce14f521d0
[  880.954808][T23663] FAULT_INJECTION: forcing a failure.
[  880.954808][T23663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  880.959817][T23634] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000
[  880.980779][T23634] R13: 0000000020000100 R14: 00000000007ffffe R15: 0000000020000040
[  880.988792][T23634]  </TASK>
[  880.991859][T23663] CPU: 0 PID: 23663 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  881.002923][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  881.013005][T23663] Call Trace:
[  881.016314][T23663]  <TASK>
[  881.019236][T23663]  dump_stack_lvl+0xd6/0x122
[  881.023831][T23663]  dump_stack+0x11/0x12
[  881.028025][T23663]  should_fail+0x230/0x240
[  881.032445][T23663]  should_fail_usercopy+0x16/0x20
[  881.037469][T23663]  strncpy_from_user+0x22/0x230
[  881.042317][T23663]  getname_flags+0xb0/0x350
[  881.046986][T23663]  user_path_at_empty+0x28/0x110
[  881.051934][T23663]  __se_sys_mount+0x24d/0x2d0
[  881.056617][T23663]  ? fput+0x2d/0x130
[  881.060510][T23663]  __x64_sys_mount+0x63/0x70
[  881.065160][T23663]  do_syscall_64+0x2b/0x70
[  881.069581][T23663]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  881.075507][T23663] RIP: 0033:0x7f29122de0e9
[  881.079923][T23663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  881.099536][T23663] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  881.108005][T23663] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  881.115987][T23663] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  881.123964][T23663] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  881.131936][T23663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.139939][T23663] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  881.147916][T23663]  </TASK>
22:20:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x2000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:18 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 8)

22:20:18 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) (async)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x34, 0x4, @thr={&(0x7f00000001c0)="983fff993a40d09af3233f936c9557c2f9", &(0x7f0000000200)="7cf245711037358431dd13049c0db59c9e742365f12d000795fd48eee99c21288fafb16a358f30dae6354864be34aae7a0bbf1"}}, &(0x7f0000000280)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:18 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, 0x0)
lseek(r0, 0x9, 0x1)

[  881.215718][T23668] FAULT_INJECTION: forcing a failure.
[  881.215718][T23668] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  881.229015][T23668] CPU: 1 PID: 23668 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  881.240039][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  881.250088][T23668] Call Trace:
[  881.253363][T23668]  <TASK>
[  881.256284][T23668]  dump_stack_lvl+0xd6/0x122
[  881.260880][T23668]  dump_stack+0x11/0x12
[  881.265038][T23668]  should_fail+0x230/0x240
[  881.269467][T23668]  __alloc_pages+0xf0/0x320
[  881.273971][T23668]  alloc_pages_vma+0x66d/0x7e0
[  881.278752][T23668]  shmem_alloc_and_acct_page+0x219/0x580
[  881.284439][T23668]  shmem_getpage_gfp+0x300/0x16c0
[  881.289543][T23668]  shmem_write_begin+0x84/0x110
[  881.294414][T23668]  generic_perform_write+0x1d6/0x3f0
[  881.299711][T23668]  __generic_file_write_iter+0xe3/0x280
[  881.305373][T23668]  ? generic_write_checks+0x256/0x290
[  881.310769][T23668]  generic_file_write_iter+0x75/0x130
[  881.316284][T23668]  vfs_write+0x71c/0x890
[  881.320540][T23668]  __x64_sys_pwrite64+0xf5/0x150
[  881.325516][T23668]  do_syscall_64+0x2b/0x70
[  881.329947][T23668]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  881.335829][T23668] RIP: 0033:0x7fce1578f0b7
[  881.340260][T23668] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  881.359849][T23668] RSP: 002b:00007fce14f51f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  881.368245][T23668] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f0b7
[  881.376198][T23668] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004
[  881.384151][T23668] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fce14f521d0
[  881.392105][T23668] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[  881.400060][T23668] R13: 0000000000000004 R14: 00000000200008c0 R15: 0000000000000000
[  881.408190][T23668]  </TASK>
22:20:18 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 5)

22:20:18 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
dup2(r3, r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$inet(0x2, 0x3, 0x14)
r8 = dup2(r7, r7)
dup2(r6, r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
r10 = socket$inet(0x2, 0x3, 0x14)
r11 = dup2(r10, r10)
dup2(r9, r11)
write$eventfd(r11, 0x0, 0x0)

22:20:18 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x140000, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x140000, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)

22:20:18 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
dup2(r3, r5) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff}) (async)
r7 = socket$inet(0x2, 0x3, 0x14)
r8 = dup2(r7, r7)
dup2(r6, r8) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff}) (async)
r10 = socket$inet(0x2, 0x3, 0x14)
r11 = dup2(r10, r10)
dup2(r9, r11) (async)
write$eventfd(r11, 0x0, 0x0)

[  881.444182][T23668] loop5: detected capacity change from 0 to 16383
[  881.477805][T23668] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  881.484547][T23675] loop4: detected capacity change from 0 to 16383
22:20:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(0xffffffffffffffff, 0x9, 0x1)

22:20:18 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
dup2(r3, r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$inet(0x2, 0x3, 0x14)
r8 = dup2(r7, r7)
dup2(r6, r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
r10 = socket$inet(0x2, 0x3, 0x14)
r11 = dup2(r10, r10)
dup2(r9, r11)
write$eventfd(r11, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r4, r4) (async)
dup2(r3, r5) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r7, r7) (async)
dup2(r6, r8) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r10, r10) (async)
dup2(r9, r11) (async)
write$eventfd(r11, 0x0, 0x0) (async)

22:20:18 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 9)

[  881.575664][T23693] FAULT_INJECTION: forcing a failure.
[  881.575664][T23693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  881.588880][T23693] CPU: 0 PID: 23693 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  881.600004][T23693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  881.610144][T23693] Call Trace:
[  881.613466][T23693]  <TASK>
[  881.616448][T23693]  dump_stack_lvl+0xd6/0x122
[  881.621106][T23693]  dump_stack+0x11/0x12
[  881.625265][T23693]  should_fail+0x230/0x240
[  881.628962][T23706] FAULT_INJECTION: forcing a failure.
[  881.628962][T23706] name failslab, interval 1, probability 0, space 0, times 0
[  881.629752][T23693]  should_fail_usercopy+0x16/0x20
[  881.647372][T23693]  copy_page_from_iter_atomic+0x3de/0xb80
[  881.653097][T23693]  ? shmem_write_begin+0x84/0x110
[  881.658118][T23693]  generic_perform_write+0x21a/0x3f0
[  881.663435][T23693]  __generic_file_write_iter+0xe3/0x280
[  881.668967][T23693]  ? generic_write_checks+0x256/0x290
[  881.674419][T23693]  generic_file_write_iter+0x75/0x130
[  881.679858][T23693]  vfs_write+0x71c/0x890
[  881.684148][T23693]  __x64_sys_pwrite64+0xf5/0x150
[  881.689174][T23693]  do_syscall_64+0x2b/0x70
[  881.693743][T23693]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  881.700055][T23693] RIP: 0033:0x7fce1578f0b7
[  881.704454][T23693] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  881.724117][T23693] RSP: 002b:00007fce14f51f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  881.732513][T23693] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f0b7
[  881.740478][T23693] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004
[  881.748513][T23693] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fce14f521d0
[  881.756501][T23693] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[  881.764461][T23693] R13: 0000000000000004 R14: 00000000200008c0 R15: 0000000000000000
[  881.772430][T23693]  </TASK>
[  881.775475][T23706] CPU: 1 PID: 23706 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  881.786525][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  881.796586][T23706] Call Trace:
[  881.799850][T23706]  <TASK>
[  881.802782][T23706]  dump_stack_lvl+0xd6/0x122
[  881.807393][T23706]  dump_stack+0x11/0x12
[  881.811534][T23706]  should_fail+0x230/0x240
[  881.815941][T23706]  __should_failslab+0x81/0x90
[  881.820692][T23706]  ? alloc_fs_context+0x44/0x4e0
[  881.825646][T23706]  should_failslab+0x5/0x20
[  881.830163][T23706]  kmem_cache_alloc_trace+0x4d/0x320
[  881.835443][T23706]  alloc_fs_context+0x44/0x4e0
[  881.840229][T23706]  ? strncmp+0x34/0x70
[  881.844288][T23706]  fs_context_for_mount+0x1d/0x20
[  881.849374][T23706]  do_new_mount+0xf3/0x650
[  881.853784][T23706]  path_mount+0x4b1/0xb60
[  881.858254][T23706]  __se_sys_mount+0x281/0x2d0
[  881.862996][T23706]  ? fput+0x2d/0x130
[  881.866947][T23706]  __x64_sys_mount+0x63/0x70
[  881.871520][T23706]  do_syscall_64+0x2b/0x70
[  881.875991][T23706]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  881.881881][T23706] RIP: 0033:0x7f29122de0e9
[  881.886282][T23706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  881.905973][T23706] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  881.914371][T23706] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
22:20:18 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x140000, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  881.922327][T23706] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  881.930358][T23706] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  881.938343][T23706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.946368][T23706] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  881.954328][T23706]  </TASK>
[  881.960550][T23693] loop5: detected capacity change from 0 to 16383
[  882.008446][ T3631] I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  882.074483][T23729] loop4: detected capacity change from 0 to 16383
22:20:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x4000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
timer_create(0x1, &(0x7f0000000180)={0x0, 0x15, 0x1}, &(0x7f00000001c0)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000280))
r5 = semget$private(0x0, 0x4, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:19 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r0, &(0x7f0000000140)=""/182, 0xb6)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x15, 0x1}, &(0x7f00000001c0)=<r2=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000280)) (async)
r5 = semget$private(0x0, 0x4, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  882.121245][T23693] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  882.135561][T23729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  882.150664][T23693] EXT4-fs (loop5): get root inode failed
[  882.156455][T23693] EXT4-fs (loop5): mount failed
22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x15, 0x1}, &(0x7f00000001c0)=<r2=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000280)) (async)
r5 = semget$private(0x0, 0x4, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:19 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 6)

22:20:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(0xffffffffffffffff, 0x9, 0x1)

22:20:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 10)

[  882.243924][T23753] FAULT_INJECTION: forcing a failure.
[  882.243924][T23753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  882.257056][T23753] CPU: 0 PID: 23753 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  882.268079][T23753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  882.278702][T23753] Call Trace:
[  882.282062][T23753]  <TASK>
[  882.284994][T23753]  dump_stack_lvl+0xd6/0x122
[  882.289589][T23753]  dump_stack+0x11/0x12
[  882.293748][T23753]  should_fail+0x230/0x240
[  882.298290][T23753]  should_fail_usercopy+0x16/0x20
[  882.303319][T23753]  copy_page_from_iter_atomic+0x3de/0xb80
[  882.309039][T23753]  ? shmem_write_begin+0x84/0x110
[  882.314087][T23753]  generic_perform_write+0x21a/0x3f0
[  882.319435][T23753]  __generic_file_write_iter+0xe3/0x280
[  882.325062][T23753]  ? generic_write_checks+0x256/0x290
[  882.330432][T23753]  generic_file_write_iter+0x75/0x130
[  882.335871][T23753]  vfs_write+0x71c/0x890
[  882.340125][T23753]  __x64_sys_pwrite64+0xf5/0x150
[  882.345091][T23753]  do_syscall_64+0x2b/0x70
[  882.349514][T23753]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  882.355463][T23753] RIP: 0033:0x7fce1578f0b7
[  882.359867][T23753] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  882.379569][T23753] RSP: 002b:00007fce14f51f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  882.387965][T23753] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f0b7
[  882.395963][T23753] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000004
[  882.403921][T23753] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fce14f521d0
[  882.411877][T23753] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004
[  882.419849][T23753] R13: 0000000000000004 R14: 00000000200008f0 R15: 0000000000000002
[  882.427829][T23753]  </TASK>
[  882.445182][T23757] FAULT_INJECTION: forcing a failure.
[  882.445182][T23757] name failslab, interval 1, probability 0, space 0, times 0
[  882.457861][T23757] CPU: 0 PID: 23757 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  882.468894][T23757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  882.478942][T23757] Call Trace:
[  882.482234][T23757]  <TASK>
[  882.485159][T23757]  dump_stack_lvl+0xd6/0x122
[  882.489759][T23757]  dump_stack+0x11/0x12
22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
timer_create(0x3, &(0x7f00000001c0)={0x0, 0x2f, 0x1, @tid=r3}, &(0x7f0000000200))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  882.493947][T23757]  should_fail+0x230/0x240
[  882.498364][T23757]  __should_failslab+0x81/0x90
[  882.503129][T23757]  ? init_pseudo+0x33/0xc0
[  882.507546][T23757]  should_failslab+0x5/0x20
[  882.512108][T23757]  kmem_cache_alloc_trace+0x4d/0x320
[  882.517394][T23757]  ? __rcu_read_unlock+0x4a/0x70
[  882.522390][T23757]  init_pseudo+0x33/0xc0
[  882.526641][T23757]  pipefs_init_fs_context+0x16/0x60
[  882.531914][T23757]  alloc_fs_context+0x3f5/0x4e0
[  882.536772][T23757]  fs_context_for_mount+0x1d/0x20
22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
timer_create(0x3, &(0x7f00000001c0)={0x0, 0x2f, 0x1, @tid=r3}, &(0x7f0000000200))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
timer_create(0x3, &(0x7f00000001c0)={0x0, 0x2f, 0x1, @tid=r3}, &(0x7f0000000200))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x1, @thr={&(0x7f0000000280)="b26b4716d69a11cc39107318897667279919548888d41b2f4e560eaa1bd314ec5c12cafaef6370b974af698a15911ca806adc92deaba8a6c7d5cef53ca939218cb5a", &(0x7f0000000300)="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"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f00000001c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f0000000240))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  882.541826][T23757]  do_new_mount+0xf3/0x650
[  882.546278][T23757]  path_mount+0x4b1/0xb60
[  882.550611][T23757]  __se_sys_mount+0x281/0x2d0
[  882.555303][T23757]  ? fput+0x2d/0x130
[  882.559200][T23757]  __x64_sys_mount+0x63/0x70
[  882.563809][T23757]  do_syscall_64+0x2b/0x70
[  882.568235][T23757]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  882.574130][T23757] RIP: 0033:0x7f29122de0e9
[  882.578543][T23757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  882.596172][T23753] loop5: detected capacity change from 0 to 16383
[  882.599566][T23757] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  882.614396][T23757] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  882.622366][T23757] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  882.630333][T23757] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  882.638304][T23757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  882.646261][T23757] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  882.654221][T23757]  </TASK>
[  882.674889][T23753] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  882.719847][T23777] loop4: detected capacity change from 0 to 16383
[  882.741965][T23753] EXT4-fs (loop5): get root inode failed
[  882.747721][T23753] EXT4-fs (loop5): mount failed
[  882.760280][T23777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
22:20:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x6000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x1, @thr={&(0x7f0000000280)="b26b4716d69a11cc39107318897667279919548888d41b2f4e560eaa1bd314ec5c12cafaef6370b974af698a15911ca806adc92deaba8a6c7d5cef53ca939218cb5a", &(0x7f0000000300)="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"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f00000001c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f0000000240))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x1, @thr={&(0x7f0000000280)="b26b4716d69a11cc39107318897667279919548888d41b2f4e560eaa1bd314ec5c12cafaef6370b974af698a15911ca806adc92deaba8a6c7d5cef53ca939218cb5a", &(0x7f0000000300)="c7c30be5cd97f7dd39acd95d11a0524c400361786aacaf17cc9d0761c0789f32983dcd1219a20182677b6fa9c1aefd18b82c4d949dea7e917f4ae64986f7b5f899f48d1d7eecd57c59ca615470f9820ca7a3629e5013174a6fb9b0ff608c6c604f4f65da48cb808f20337d67025cb49ecef577dc4d87af61937bb56516a4130a75fdb6f38f853e25064dbc95a8d0b10e0f1a5b72cb754e8a12a5ae6d94a60aa06058aed8e666e2ca1dd523c2171ee19b1aa5105c3274e64b59e31bc04b830be018476395807c6218386f1fb2b8bc27ee6a0ffefa36cd0f34787cab688eb4ad9f3667e6730b7eae717f1c816be02559e7cbcd0b0f24d565669169fcc703c565a8cafdca487398d51740894cad902a0d2b211a8e1bbac30826f99fee0d4448cc7f7a2e622f69b3f80d98dfa9e9ba1bb04e8e92b3bea814e997b14c0bb88afa008bafea0982b696ebbcf76a937c347f952042c78d5819173c1bfd3642710bc31057ecb37f416549db3f14db6670c2f0e000af391681b4da30a75ccfb326824a8c05d09d3ae5bc9f36c2344827468333d71f0824f8153992571c93ee83dcf14979de5660b32817c3d58384947caa6dd5159b6e25c6711eba763115fbc6cd26216edb3d05d4f929d71983f3670b85eb22e4b8921decb5373929435d0971e6a0fb1d77d89e698004b7e285a716b6cbd4007823dee9ecc1bd88aa73dc4f7b492fc994d86a9b17efb28c95bedf08a019c1bd277f1140af285bb864e626823cb8f5a600a83dee539e8ed24d7e8e20390861cdd1a09aaa7db93e13cfcb21843bbcb3b50a14be48076228332a7ab35952b882b8e5ba151c68667109617e4e1035ee22086e5de44dad5bf011f576c8d69353115d0f515b4d2ce9ee1460a8dd1b3d27e96122783e7c4c2f23b65d9723cb7875d5806244321d31d7d03b30b50d1b92ae3d382b7014954277010e0eb0e7f443f4d673562082b8ff033b2e0e453c3494dd37da3565ead4ff0e3c9f4997659263c929dbc03dd1b4e22281d938acfea8cd212afe2c59b548117c3b765e2f901a9f1ab751092d92331034f65241f52b55844a71dea0d87c8cc1d227a052c848001193681065ae7d7bf84a6499d7eea1fac9eb9dcd9d3fc675d62fa4bdd19d554534f4741d956bb83ce88a6c9e07c6fb3989c7bd0f6c0707811e8938ec854fe8a3f01ce10c9cd6e1ca572c378d9abce3b020557de760afb8e064dbfe4621a1089bbec618303390777269671ef837ee16b6e3d79cdedc8a7fbe7d959de621f9888705f8429ab0b00bf13bf4440d4d0ee32e84026fd60b112f3c9fe76ebcf7281fa097c62dd3596d37a1ee5b8e3e2a0ce629654eb7e7cb42d301fa644d176e2221a3a557cd17dbe59e0155b4e86d47a56719b9e513b6e190da0b9a9ec1b79c6df526ee5054011e347eae5e4a0e9293f11e14f7906430305f8e455b28f8cbd5c68aa700f11f87790ffd43fedf8c9ed268c40fcd38b4d7eca2b4527422217d1cca56ad80b40d82852f5db32b0e69ce002fa6c72cd5ef92946d0921bcec414f23aedcb1045dc835334af1f443dc11e360619e63ed1fe576e50772f9ba0ab8cc4c79c483cae212a46672ef6708bf94632d47244454b36d19d8717fcb11f83a6c77c60f4fbf45a56d7f7735fc78bba96cb1437dc343b9ad4caf6ff9125364286e88016736e706ba5490202d97a211f1cf3b4639558ebace9c303ebbe4fcde6d84b4f2e27a7d77acc7382790ffebe879aec04b3e5eca8fb8f0901962ea31796a45046a71df8e8f6575fa13ae0be26ad9f26ca98887d42c89807232cac1255f591d437ae66209cd04ba50b3188d499757061112fa1f8537cb55ec64e3fd513a7ed53637fa28d8f7147415bd569674f5fb5a2a1a7223cfabb23adc3b786e2f6684c7fe914945e1e327f9bf26a11a55b23f83444f0460fb763c680dafd7b2c66b7d63aba962b0f655304a2462826a431ea390bbee748d6f67afb0e42de8c697ac7d6500838d5939c8d0028490ad67557e96413372ff98167d54117587f95485b0a82ebb99e66de024c649229039503f8bf2c32a6bb1888b64ed1b0349009273a158127143e1f71ba7ea022ca7b0254c1bd6a472caa9c6521a568952b7e60d9588ce9aa748d244560c2968a19b0a9ddf7586b853e899f6e1fd6571872a4f4ef35127d01a8c4a1f4e02ffe3eea9d4b81cb49e84292aa44cb0c0b4d0fd24b412f297afc52932b6a076534fa73a8b6539b23aa7c57b9d50b40decadf505efc8f13435ad97c71f41617424add16e5aead6b93ef817b81ca640d6451458594d6cfd424d7e1549cff704521bfeb5780bf3d59152094fcb70b82fe9ab2d1cedd9b5f78d649bbf5a119bf5417ce935e041e113d4007b7e95a74ab92e295a64708eb16a5497cdbaf00f2404f6deb2885c677b3c30979308905afdd38dc69bab51948af35af8573e3ceeef7b6b9e09548ef3b109510704855a958835ab88c0c273ab73c21d87884e6a811a690cf788d50087b45ec83ff580de250c15fd0459d8d89aae5e0208e30ebabb1e81fc9c52f692b5c1f25fe521621654e1d9da1c9e2f21aa8ed196893852770ca422c35d88edf78d249ffb6b466f116891802f2f43e0c09c7696b21c80ac30ed7cdf437361a809b3fbab5b0e28194150a7158dfea41f03391c1036125c3c929e7eaf0eda00650b72dbb5949a53902744ee7c3c1e71eb195b09441010283f87c6989126fd2042d9446f29ed88bfc6dacd356ba0f3b6c57159af117a59c7790fdeec2c9d5622198a11a8071c941a1209f4701f7a3247c038341941a7adfa3fb2f20bf429bd10bf0ed4ffcd12fe88122db17b5ee31b4fed8276ba48b6cf6d0409e7eec1fe7b8b45532113c840b4c9bbc16a1a30e66109fe5dfadb3a0f716eb11ac492ed3ac44e7c6911ebeee9f4cb0d7a6b44aae5eab7553f92473493b7f792a5f84bfc80c41fcbd7d2cfdbed6d2eab1d21d3f73c19e6daa5de9aba28ca06edb8e3ace88d5998e47ccb3a560b39d5d494cae45edda8e5e9d25901effd83df42a68c70f5178de293c8d8f239c4d596866636ea2f70c2aafe89bf84cd4d435f7cc2dde464cf8cc5ac777f94bb7fb7d6a4ddd77aa67dd4f32532a235a45f9a2086e51b2ea98f4dc425205c30684f73708096b61ec372b1ae7c67f70eeb559ba964e100f9c33b79e7bfcc2b09ab94b1fdc6af6b22f49f57d9fd98c3cb8d32adbde224c9a6bcdbcd502f2e648a8f48314d02ab53a01dea58e0fbd4058b685f0e6eb9cbe56e100f99e96565d8360cd1a27afe0b179820b3d56f9f11f40545e6403208fc6ae7af49ee3f4549f09c993c973d52282e2ef785418792774a95ed6276bc992d378adfeec4efe762593d63f91d4ae412c5f9aaece732707e2a293c5eef488f8fb24be0fa2f9e779e944b60d41ee5f69787654a12b6bc033e57a988c2fd280e920a58ae8df9b0a28bae5f803993b370e4535e1494136c8648ed1547d7ff64069159b7be1adf7cfcd92e4d91b287b462d78d31bca8336cc85e3c6c677bacaf021f15662c9d7216b9ee42ada385a92bd1a8cf7d36e2ad64011bd56f19bbbcf1848d48fc49f2c09ab34108edb915f17397b0593446b09193c289de7504e810aa5de198803d730d726b0d7c0ca8fc7a2078ae3c05e942575921997e1adebacce22cf1160bc1ddc3957d7311c117446e5360b977c9cbca98dcc2bc03395269a99c463916ef2c721087dab48b13d5a12b317d0447687141f7c24ce13d944cd567ce64a8a5b2346e3a639c82691912302afdc2fad45d31cbb285de0ae6c8de18ccb18befe384e60e318194d60e3297f6f1a8452f660195c873d355812669884a3f806b54913cec6e2cf7e95183442180add3f8d175b89466ffc94f55da1d4b1491ca5aee488348498ac735a05075303c123215390a45d7ef4871a0797310fae6e526eeaf8c344dc3a859db80b090efd19160ce5c08ee7a1de5e6cc5577ac4d53367859b3de03c39475b6b41eb947c57859914114005cf2ef2189da621b686244a6de0179a70041622a17254ca329ae8fb7939297130bab19b6c12e413f9ef4c5015178296034a4981bc80a2647938183b6ac489ada34da85530b5bdf3ff373e40fe4fd627357780a2a5d2825184a66ee5066da7b41c5650addda759087afff536332f92de283a6200bf8cecfa6800576561ed9b91dda092795c4f8de6bfb940db38bd57db946f05ab75b35afbe8a63a5952393304e3b28d3a09c76147ac0a310c83c63ab1c56b3c3057667e3a13bf169f98862e2539295fe068e058c4ad9382d6420c42092b9d2d0a0ebfc4fd8f3498d99560a420da1c860302ea1c995f768ee3598f22813c6085a9ae2bffba3085fd5089850e7e49bacf7013d15f18a20c271275bb1567a2df96505da771c0fbeee0b6f7787d1f6dee2eec62b33fabcbce56a813b20da945cfd6cb36903372ff8b4e6399901d25ea7e4362cde52e89c4c7b922e148de11a18a7e7f8be18d8ece8f0ed04889239685d9ad0634cf7a63ff60433d17c57f18703a3299f5b4e86519ff36ea7c3ec71f7ad4e3ffcceb5d208f8e9af129c57efa84a4d19af707983f2419cc03e30901ce52a87e81c043c73440a60ca74facc39e283aa63363c1edf2d8df1cd0d8b3738084d226648e4804eac7f54bd1a8477456639a1c7809a6513bfe1d02ad6aa4f2a22278145a4f56c23b8613e880e05aa9c7ef90ff5571980250db77815c22d6968e0a72d0723e9389a18ee1cf1a06386986a2de537be36de6667bb5dd5a33d95bc9b521c42d6a654eb2c09a5d3315e26140543a28a47a2ace38bab8e77cb4f9728c80e7ae35280bf7ae37c4cea5e934ce0d5213b59ece0fc0b2f61c4d4236f288d3d0d07c971d22134404e2c96cc06013a39a9bfc4e789989ad0ed86bcc663146bfc321c59eace9d8d244665f5bf1fed4ca59c466a0706f5fc658a7c9f5b5a37322482cfa0250a50b8776525aca53c9303745e35b145452955bdaaf9b0314e760dff478d883eaccca68f2ce1540007b919bbae6d2e5e17b327ceb1f5aadbf43e941f7061378c7879d00e54ee83b6ab270970138139a0daa52aae1b06d3aba235f9d8a7cdaf91cd2dfbe5b0c7415126d886be946b327e8bccd9d6095816790245da2a002bebc5c4c3293f9fe9c1f6675d27756d22bd2dd3f52cde76973f293ca034b5cea3d2b8e96b42dbf39ac310bd78abefd16914c5127b628343525483ae7a307b82193c9702d1872cf2d2ec30d5c5a3ba37720ca4e9ef30f32f599b0e53d8f7191c9786f01a845457b65807f7e73da9c8fa9ed0c3ee05cc86d92c9f8ec0f14bf38ad2724859ef9149e11cabb4e93b524acb6ac75f3ee23ca067532a343876fb600f2e98fd3cec694cc2ddca2d893ffd10a2712de48c321e46829b8818ec78b0c70aed69fc14eabb20b760074733e3e7de6d8a11a705fc6b11ab142db446c80d34f8fb9e3edd4ee9340ee67bce78db187c820a04ecb0ad5a88d67ed5cd895ee1d4e1fab417ffd979582ac7739af047ac14ccc8ac862ad8820b10cabf6c4592804ff7b3c7b299f7ad8e1dfea644d4d81e2ec4c3fbeb380e79f954095cf17a2658531cd88cfdfdad93519f34f2b80a47e45d60b9d8727668384289c77529c69161f5d77949b2f8d41c3a98038bfa3567de3abba6de299cfe0f00e52d24578f0f05b842def1508269e949d3c48a32dba0c76d2ee3be5244651ef20db5401add76785f5194db9a8072238bccfe20313572afa420d3162296d7bc57d37ea32d41f53c302cfc5cfb811a5765"}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r0, 0x1, &(0x7f0000000200)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f0000000240)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:19 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r0, &(0x7f0000000140)=""/182, 0xb6)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f00000000c0)) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(0xffffffffffffffff, 0x9, 0x1)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x1, @thr={&(0x7f0000000280)="b26b4716d69a11cc39107318897667279919548888d41b2f4e560eaa1bd314ec5c12cafaef6370b974af698a15911ca806adc92deaba8a6c7d5cef53ca939218cb5a", &(0x7f0000000300)="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"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0}) (async)
clock_gettime(0x0, &(0x7f00000001c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000200)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f0000000240)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:19 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 7)

22:20:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 11)

22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="3d6c69a941e368330c932ebe18c94485db5f090b48b0b9573c87692b7fdc86a21a8f421059cbca26a72a4ed5a367d985671c7603542500fbe7d7f993806b934f0393d13154a157c4a5", &(0x7f0000000200)="aa487acdb1c6fb7455c81933f429c0955b83ca00e5edbe4f5717cad7839da9b5adf5fde571e5894c7f9c369fa8d82c4bbddd87ee06ce1894a71da825b392d2d82cc79a6a1dadde8e5fc894deda039aa83de2cf3bffd62157a303cce5ec2c9b284739ad0b1b49866b7bc124cc9211c4f9e615e08031b0d25e39c489b16653e5680d730a2d8ccc3ca6c431a6eb2e72b0da768a6bebbd36cefcbf4a014da030914b061b99522ca81e80bc4f5f825a3162470ba59ed1b0d3d4766ceefe345fdb24628cf2df43aa4c9a02a77dcfd17fce70f8eca10942967dd036efd5e2d89ebf22f2446b543769247dac0c6db685475f8b551d"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  882.905895][T23795] loop4: detected capacity change from 0 to 16383
[  882.932671][T23803] FAULT_INJECTION: forcing a failure.
[  882.932671][T23803] name fail_page_alloc, interval 1, probability 0, space 0, times 0
22:20:19 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x0, 0x1)

[  882.945947][T23803] CPU: 0 PID: 23803 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  882.954501][T23795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  882.957045][T23803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  882.957059][T23803] Call Trace:
[  882.957066][T23803]  <TASK>
[  882.981714][T23803]  dump_stack_lvl+0xd6/0x122
[  882.986409][T23803]  dump_stack+0x11/0x12
[  882.990570][T23803]  should_fail+0x230/0x240
[  882.995007][T23803]  __alloc_pages+0xf0/0x320
[  882.999560][T23803]  alloc_pages_vma+0x66d/0x7e0
[  883.004413][T23803]  shmem_alloc_and_acct_page+0x219/0x580
[  883.010061][T23803]  shmem_getpage_gfp+0x300/0x16c0
[  883.015168][T23803]  shmem_write_begin+0x84/0x110
[  883.020019][T23803]  generic_perform_write+0x1d6/0x3f0
[  883.025372][T23803]  __generic_file_write_iter+0xe3/0x280
[  883.030916][T23803]  ? generic_write_checks+0x256/0x290
[  883.036365][T23803]  generic_file_write_iter+0x75/0x130
[  883.041795][T23803]  vfs_write+0x71c/0x890
[  883.046128][T23803]  __x64_sys_pwrite64+0xf5/0x150
[  883.051132][T23803]  do_syscall_64+0x2b/0x70
22:20:19 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="3d6c69a941e368330c932ebe18c94485db5f090b48b0b9573c87692b7fdc86a21a8f421059cbca26a72a4ed5a367d985671c7603542500fbe7d7f993806b934f0393d13154a157c4a5", &(0x7f0000000200)="aa487acdb1c6fb7455c81933f429c0955b83ca00e5edbe4f5717cad7839da9b5adf5fde571e5894c7f9c369fa8d82c4bbddd87ee06ce1894a71da825b392d2d82cc79a6a1dadde8e5fc894deda039aa83de2cf3bffd62157a303cce5ec2c9b284739ad0b1b49866b7bc124cc9211c4f9e615e08031b0d25e39c489b16653e5680d730a2d8ccc3ca6c431a6eb2e72b0da768a6bebbd36cefcbf4a014da030914b061b99522ca81e80bc4f5f825a3162470ba59ed1b0d3d4766ceefe345fdb24628cf2df43aa4c9a02a77dcfd17fce70f8eca10942967dd036efd5e2d89ebf22f2446b543769247dac0c6db685475f8b551d"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="3d6c69a941e368330c932ebe18c94485db5f090b48b0b9573c87692b7fdc86a21a8f421059cbca26a72a4ed5a367d985671c7603542500fbe7d7f993806b934f0393d13154a157c4a5", &(0x7f0000000200)="aa487acdb1c6fb7455c81933f429c0955b83ca00e5edbe4f5717cad7839da9b5adf5fde571e5894c7f9c369fa8d82c4bbddd87ee06ce1894a71da825b392d2d82cc79a6a1dadde8e5fc894deda039aa83de2cf3bffd62157a303cce5ec2c9b284739ad0b1b49866b7bc124cc9211c4f9e615e08031b0d25e39c489b16653e5680d730a2d8ccc3ca6c431a6eb2e72b0da768a6bebbd36cefcbf4a014da030914b061b99522ca81e80bc4f5f825a3162470ba59ed1b0d3d4766ceefe345fdb24628cf2df43aa4c9a02a77dcfd17fce70f8eca10942967dd036efd5e2d89ebf22f2446b543769247dac0c6db685475f8b551d"}}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  883.055552][T23803]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  883.061446][T23803] RIP: 0033:0x7fce1578f0b7
[  883.065856][T23803] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  883.085458][T23803] RSP: 002b:00007fce14f51f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  883.093972][T23803] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f0b7
22:20:19 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r0, &(0x7f0000000140)=""/182, 0xb6)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

[  883.101948][T23803] RDX: 000000000000002e RSI: 0000000020000240 RDI: 0000000000000004
[  883.109991][T23803] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fce14f521d0
[  883.117964][T23803] R10: 0000000000001600 R11: 0000000000000293 R12: 0000000000000004
[  883.125944][T23803] R13: 0000000000000004 R14: 0000000020000908 R15: 0000000000000003
[  883.134097][T23803]  </TASK>
22:20:20 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="3d6c69a941e368330c932ebe18c94485db5f090b48b0b9573c87692b7fdc86a21a8f421059cbca26a72a4ed5a367d985671c7603542500fbe7d7f993806b934f0393d13154a157c4a5", &(0x7f0000000200)="aa487acdb1c6fb7455c81933f429c0955b83ca00e5edbe4f5717cad7839da9b5adf5fde571e5894c7f9c369fa8d82c4bbddd87ee06ce1894a71da825b392d2d82cc79a6a1dadde8e5fc894deda039aa83de2cf3bffd62157a303cce5ec2c9b284739ad0b1b49866b7bc124cc9211c4f9e615e08031b0d25e39c489b16653e5680d730a2d8ccc3ca6c431a6eb2e72b0da768a6bebbd36cefcbf4a014da030914b061b99522ca81e80bc4f5f825a3162470ba59ed1b0d3d4766ceefe345fdb24628cf2df43aa4c9a02a77dcfd17fce70f8eca10942967dd036efd5e2d89ebf22f2446b543769247dac0c6db685475f8b551d"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="3d6c69a941e368330c932ebe18c94485db5f090b48b0b9573c87692b7fdc86a21a8f421059cbca26a72a4ed5a367d985671c7603542500fbe7d7f993806b934f0393d13154a157c4a5", &(0x7f0000000200)="aa487acdb1c6fb7455c81933f429c0955b83ca00e5edbe4f5717cad7839da9b5adf5fde571e5894c7f9c369fa8d82c4bbddd87ee06ce1894a71da825b392d2d82cc79a6a1dadde8e5fc894deda039aa83de2cf3bffd62157a303cce5ec2c9b284739ad0b1b49866b7bc124cc9211c4f9e615e08031b0d25e39c489b16653e5680d730a2d8ccc3ca6c431a6eb2e72b0da768a6bebbd36cefcbf4a014da030914b061b99522ca81e80bc4f5f825a3162470ba59ed1b0d3d4766ceefe345fdb24628cf2df43aa4c9a02a77dcfd17fce70f8eca10942967dd036efd5e2d89ebf22f2446b543769247dac0c6db685475f8b551d"}}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x8000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  883.191348][T23803] loop5: detected capacity change from 0 to 16383
[  883.218710][T23832] loop4: detected capacity change from 0 to 16383
[  883.226067][T23834] FAULT_INJECTION: forcing a failure.
[  883.226067][T23834] name failslab, interval 1, probability 0, space 0, times 0
[  883.238736][T23834] CPU: 1 PID: 23834 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  883.249760][T23834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  883.259812][T23834] Call Trace:
[  883.263086][T23834]  <TASK>
[  883.266011][T23834]  dump_stack_lvl+0xd6/0x122
[  883.270680][T23834]  dump_stack+0x11/0x12
[  883.274834][T23834]  should_fail+0x230/0x240
[  883.279329][T23834]  __should_failslab+0x81/0x90
[  883.284096][T23834]  ? alloc_super+0x3a/0x500
22:20:20 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0xfffffffffffffed5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r2, &(0x7f0000000140)=""/182, 0xb6)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x1000})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0/file0\x00'})
sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  883.288613][T23834]  should_failslab+0x5/0x20
[  883.293196][T23834]  kmem_cache_alloc_trace+0x4d/0x320
[  883.298484][T23834]  alloc_super+0x3a/0x500
[  883.302824][T23834]  sget_fc+0x1b3/0x440
[  883.305626][T23803] EXT4-fs error (device loop5): __ext4_fill_super:5326: inode #2: comm syz-executor.5: iget: root inode unallocated
[  883.306909][T23834]  ? kill_litter_super+0x60/0x60
[  883.324003][T23834]  ? pseudo_fs_get_tree+0x20/0x20
[  883.329042][T23834]  get_tree_nodev+0x24/0xf0
[  883.333571][T23834]  pseudo_fs_get_tree+0x18/0x20
[  883.338437][T23834]  vfs_get_tree+0x49/0x190
[  883.342856][T23834]  do_new_mount+0x200/0x650
[  883.347393][T23834]  path_mount+0x4b1/0xb60
[  883.351785][T23834]  __se_sys_mount+0x281/0x2d0
[  883.356467][T23834]  ? fput+0x2d/0x130
[  883.356884][T23803] EXT4-fs (loop5): get root inode failed
[  883.360409][T23834]  __x64_sys_mount+0x63/0x70
[  883.360434][T23834]  do_syscall_64+0x2b/0x70
[  883.366067][T23803] EXT4-fs (loop5): mount failed
[  883.370643][T23834]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  883.385761][T23834] RIP: 0033:0x7f29122de0e9
[  883.390243][T23834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  883.409938][T23834] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  883.418354][T23834] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  883.426363][T23834] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  883.434510][T23834] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
22:20:20 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005b8bddd201b57e7568e7a262e81c17310268af10ed6122bf2cda4593c2658fe8ca20b0243e548c28524d14262e964572c3792c3270ef3a3d4a377d9a4aa472847799731cfe7e06cbe3b647b89c3d532a12e256a3a219953d45eaa6919011710deca5cf54d865fbd42772c8d903a8fff2533e1aaf1b5db2fb26f62772e986fc3b16d6403e307d986e7d8307832923a4c67041025bd2a55b90a44c24584b52739a0f2fd6819e05b91f47c13bc196ce517f9457c6a293cbcb3798c4677b64b8ed154c6b07c51f7834fddf410e82de37f376f3c881fb1491d1353b679616aa9bad108e9dd039b9564b37bed78337fd", @ANYRES16=r4, @ANYBLOB="010000000000000000000e0000000800010000000000"], 0x1c}}, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000240)={0x0, 0x13, 0x1, @thr={&(0x7f0000000180)="bf2224924933d1ff61067673bccba8", &(0x7f00000001c0)="e4e1abd4c6e7726656f0432fae641c509e3caaf93dad35d2a974b9aab8a3ecb7036f073dfe81df47401455b3d090781c01a0b998e270d97997d60dd72e0cf79ab708288e1bafad54a1b060368c608de0518191697c025edef1295d0f1bd93923aca741"}}, &(0x7f0000000280)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
timer_settime(r5, 0x0, &(0x7f0000000380)={{r6, r7+10000000}}, &(0x7f00000003c0))

[  883.442506][T23834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.450518][T23834] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  883.458494][T23834]  </TASK>
22:20:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 12)

[  883.486730][T23832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
22:20:20 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x0, 0x1)

[  883.568977][T23856] FAULT_INJECTION: forcing a failure.
[  883.568977][T23856] name failslab, interval 1, probability 0, space 0, times 0
[  883.581600][T23856] CPU: 0 PID: 23856 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  883.592682][T23856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  883.602816][T23856] Call Trace:
[  883.606091][T23856]  <TASK>
[  883.609027][T23856]  dump_stack_lvl+0xd6/0x122
[  883.613687][T23856]  dump_stack+0x11/0x12
[  883.617862][T23856]  should_fail+0x230/0x240
[  883.622279][T23856]  ? xas_create+0x40c/0xb20
[  883.626787][T23856]  __should_failslab+0x81/0x90
[  883.631565][T23856]  should_failslab+0x5/0x20
[  883.636061][T23856]  kmem_cache_alloc_lru+0x52/0x2b0
[  883.641173][T23856]  xas_create+0x40c/0xb20
[  883.645567][T23856]  xas_store+0x71/0xc90
[  883.649796][T23856]  ? __rcu_read_unlock+0x4a/0x70
[  883.654736][T23856]  ? xas_find_conflict+0x489/0x500
[  883.660803][T23856]  ? __cgroup_throttle_swaprate+0x111/0x200
[  883.666696][T23856]  shmem_add_to_page_cache+0x81c/0xaa0
[  883.672177][T23856]  shmem_getpage_gfp+0x802/0x16c0
[  883.677211][T23856]  shmem_write_begin+0x84/0x110
[  883.682067][T23856]  generic_perform_write+0x1d6/0x3f0
[  883.687354][T23856]  __generic_file_write_iter+0xe3/0x280
[  883.692898][T23856]  ? generic_write_checks+0x256/0x290
[  883.698317][T23856]  generic_file_write_iter+0x75/0x130
[  883.703694][T23856]  vfs_write+0x71c/0x890
[  883.708045][T23856]  __x64_sys_pwrite64+0xf5/0x150
[  883.713053][T23856]  do_syscall_64+0x2b/0x70
[  883.717531][T23856]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  883.723426][T23856] RIP: 0033:0x7fce1578f0b7
[  883.727827][T23856] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  883.747441][T23856] RSP: 002b:00007fce14f51f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  883.755842][T23856] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f0b7
22:20:20 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 8)

22:20:20 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005b8bddd201b57e7568e7a262e81c17310268af10ed6122bf2cda4593c2658fe8ca20b0243e548c28524d14262e964572c3792c3270ef3a3d4a377d9a4aa472847799731cfe7e06cbe3b647b89c3d532a12e256a3a219953d45eaa6919011710deca5cf54d865fbd42772c8d903a8fff2533e1aaf1b5db2fb26f62772e986fc3b16d6403e307d986e7d8307832923a4c67041025bd2a55b90a44c24584b52739a0f2fd6819e05b91f47c13bc196ce517f9457c6a293cbcb3798c4677b64b8ed154c6b07c51f7834fddf410e82de37f376f3c881fb1491d1353b679616aa9bad108e9dd039b9564b37bed78337fd", @ANYRES16=r4, @ANYBLOB="010000000000000000000e0000000800010000000000"], 0x1c}}, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000240)={0x0, 0x13, 0x1, @thr={&(0x7f0000000180)="bf2224924933d1ff61067673bccba8", &(0x7f00000001c0)="e4e1abd4c6e7726656f0432fae641c509e3caaf93dad35d2a974b9aab8a3ecb7036f073dfe81df47401455b3d090781c01a0b998e270d97997d60dd72e0cf79ab708288e1bafad54a1b060368c608de0518191697c025edef1295d0f1bd93923aca741"}}, &(0x7f0000000280)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
timer_settime(r5, 0x0, &(0x7f0000000380)={{r6, r7+10000000}}, &(0x7f00000003c0))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005b8bddd201b57e7568e7a262e81c17310268af10ed6122bf2cda4593c2658fe8ca20b0243e548c28524d14262e964572c3792c3270ef3a3d4a377d9a4aa472847799731cfe7e06cbe3b647b89c3d532a12e256a3a219953d45eaa6919011710deca5cf54d865fbd42772c8d903a8fff2533e1aaf1b5db2fb26f62772e986fc3b16d6403e307d986e7d8307832923a4c67041025bd2a55b90a44c24584b52739a0f2fd6819e05b91f47c13bc196ce517f9457c6a293cbcb3798c4677b64b8ed154c6b07c51f7834fddf410e82de37f376f3c881fb1491d1353b679616aa9bad108e9dd039b9564b37bed78337fd", @ANYRES16=r4, @ANYBLOB="010000000000000000000e0000000800010000000000"], 0x1c}}, 0x0) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
timer_create(0x4, &(0x7f0000000240)={0x0, 0x13, 0x1, @thr={&(0x7f0000000180)="bf2224924933d1ff61067673bccba8", &(0x7f00000001c0)="e4e1abd4c6e7726656f0432fae641c509e3caaf93dad35d2a974b9aab8a3ecb7036f073dfe81df47401455b3d090781c01a0b998e270d97997d60dd72e0cf79ab708288e1bafad54a1b060368c608de0518191697c025edef1295d0f1bd93923aca741"}}, &(0x7f0000000280)) (async)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300)) (async)
clock_gettime(0x0, &(0x7f0000000340)) (async)
timer_settime(r5, 0x0, &(0x7f0000000380)={{r6, r7+10000000}}, &(0x7f00000003c0)) (async)

22:20:20 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0xfffffffffffffed5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r2, &(0x7f0000000140)=""/182, 0xb6) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x1000}) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0/file0\x00'})
sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  883.763800][T23856] RDX: 000000000000002e RSI: 0000000020000240 RDI: 0000000000000004
[  883.771881][T23856] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fce14f521d0
[  883.779838][T23856] R10: 0000000000001600 R11: 0000000000000293 R12: 0000000000000004
[  883.787869][T23856] R13: 0000000000000004 R14: 0000000020000908 R15: 0000000000000003
[  883.795846][T23856]  </TASK>
22:20:20 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005b8bddd201b57e7568e7a262e81c17310268af10ed6122bf2cda4593c2658fe8ca20b0243e548c28524d14262e964572c3792c3270ef3a3d4a377d9a4aa472847799731cfe7e06cbe3b647b89c3d532a12e256a3a219953d45eaa6919011710deca5cf54d865fbd42772c8d903a8fff2533e1aaf1b5db2fb26f62772e986fc3b16d6403e307d986e7d8307832923a4c67041025bd2a55b90a44c24584b52739a0f2fd6819e05b91f47c13bc196ce517f9457c6a293cbcb3798c4677b64b8ed154c6b07c51f7834fddf410e82de37f376f3c881fb1491d1353b679616aa9bad108e9dd039b9564b37bed78337fd", @ANYRES16=r4, @ANYBLOB="010000000000000000000e0000000800010000000000"], 0x1c}}, 0x0) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
timer_create(0x4, &(0x7f0000000240)={0x0, 0x13, 0x1, @thr={&(0x7f0000000180)="bf2224924933d1ff61067673bccba8", &(0x7f00000001c0)="e4e1abd4c6e7726656f0432fae641c509e3caaf93dad35d2a974b9aab8a3ecb7036f073dfe81df47401455b3d090781c01a0b998e270d97997d60dd72e0cf79ab708288e1bafad54a1b060368c608de0518191697c025edef1295d0f1bd93923aca741"}}, &(0x7f0000000280)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
timer_settime(r5, 0x0, &(0x7f0000000380)={{r6, r7+10000000}}, &(0x7f00000003c0))

[  883.841038][T23856] loop5: detected capacity change from 0 to 16383
[  883.878146][T23856] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xc000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:20 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0xfffffffffffffed5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r2, &(0x7f0000000140)=""/182, 0xb6) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x1000})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0/file0\x00'})
sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  883.904163][T23856] EXT4-fs (loop5): get root inode failed
[  883.909837][T23856] EXT4-fs (loop5): mount failed
22:20:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 13)

[  883.964142][T23895] FAULT_INJECTION: forcing a failure.
[  883.964142][T23895] name failslab, interval 1, probability 0, space 0, times 0
[  883.976786][T23895] CPU: 0 PID: 23895 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  883.987810][T23895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  883.997861][T23895] Call Trace:
[  884.001172][T23895]  <TASK>
[  884.004130][T23895]  dump_stack_lvl+0xd6/0x122
[  884.008730][T23895]  dump_stack+0x11/0x12
22:20:20 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x26}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:20 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x26}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x26}, &(0x7f0000000180)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  884.012897][T23895]  should_fail+0x230/0x240
[  884.017316][T23895]  ? security_sb_alloc+0x3a/0x100
[  884.022395][T23895]  __should_failslab+0x81/0x90
[  884.027160][T23895]  should_failslab+0x5/0x20
[  884.031665][T23895]  __kmalloc+0x66/0x350
[  884.035818][T23895]  ? kmem_cache_alloc_trace+0x250/0x320
[  884.041372][T23895]  ? alloc_super+0x3a/0x500
[  884.045873][T23895]  security_sb_alloc+0x3a/0x100
[  884.050789][T23895]  alloc_super+0x102/0x500
[  884.055212][T23895]  sget_fc+0x1b3/0x440
[  884.059285][T23895]  ? kill_litter_super+0x60/0x60
[  884.064272][T23895]  ? pseudo_fs_get_tree+0x20/0x20
[  884.069302][T23895]  get_tree_nodev+0x24/0xf0
[  884.073861][T23895]  pseudo_fs_get_tree+0x18/0x20
[  884.078764][T23895]  vfs_get_tree+0x49/0x190
[  884.083189][T23895]  do_new_mount+0x200/0x650
[  884.087692][T23895]  path_mount+0x4b1/0xb60
[  884.092089][T23895]  __se_sys_mount+0x281/0x2d0
[  884.096761][T23895]  ? fput+0x2d/0x130
[  884.100673][T23895]  __x64_sys_mount+0x63/0x70
[  884.105327][T23895]  do_syscall_64+0x2b/0x70
[  884.109808][T23895]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  884.115747][T23895] RIP: 0033:0x7f29122de0e9
[  884.120164][T23895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  884.139773][T23895] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  884.142572][T23897] loop4: detected capacity change from 0 to 16383
[  884.148192][T23895] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  884.148210][T23895] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  884.170637][T23895] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  884.178660][T23895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.186632][T23895] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  884.194609][T23895]  </TASK>
[  884.199755][T23905] FAULT_INJECTION: forcing a failure.
[  884.199755][T23905] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  884.212957][T23905] CPU: 1 PID: 23905 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  884.224005][T23905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  884.234074][T23905] Call Trace:
[  884.237350][T23905]  <TASK>
[  884.240273][T23905]  dump_stack_lvl+0xd6/0x122
[  884.244872][T23905]  dump_stack+0x11/0x12
[  884.249099][T23905]  should_fail+0x230/0x240
[  884.253579][T23905]  should_fail_usercopy+0x16/0x20
[  884.258611][T23905]  copy_page_from_iter_atomic+0x3de/0xb80
[  884.264336][T23905]  ? shmem_write_begin+0x84/0x110
[  884.269425][T23905]  generic_perform_write+0x21a/0x3f0
[  884.274876][T23905]  __generic_file_write_iter+0xe3/0x280
[  884.280420][T23905]  ? generic_write_checks+0x256/0x290
[  884.285811][T23905]  generic_file_write_iter+0x75/0x130
[  884.291178][T23905]  vfs_write+0x71c/0x890
[  884.295473][T23905]  __x64_sys_pwrite64+0xf5/0x150
[  884.300463][T23905]  do_syscall_64+0x2b/0x70
[  884.304879][T23905]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  884.310797][T23905] RIP: 0033:0x7fce1578f0b7
[  884.315219][T23905] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  884.334822][T23905] RSP: 002b:00007fce14f51f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  884.343288][T23905] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f0b7
[  884.351259][T23905] RDX: 000000000000002e RSI: 0000000020000240 RDI: 0000000000000004
22:20:21 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x26}, &(0x7f0000000180)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  884.359226][T23905] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fce14f521d0
[  884.367193][T23905] R10: 0000000000001600 R11: 0000000000000293 R12: 0000000000000004
[  884.375158][T23905] R13: 0000000000000004 R14: 0000000020000908 R15: 0000000000000003
[  884.383201][T23905]  </TASK>
[  884.391617][T23905] loop5: detected capacity change from 0 to 16383
22:20:21 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="060000e200200000180c0000", @ANYRES32=<r3=>r2, @ANYBLOB="01552dacf0000000151c66496c6530001c71720aed2709420ef0fb3a68e3439b65f52fb2fe3c445307bee25c810abcf9e03b8780218e49b0c9c5c78918203bea7e6a40b723a0"])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x3, 0x14)
r6 = dup2(r5, r5)
dup2(r4, r6)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

22:20:21 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x0, 0x1)

[  884.417211][T23897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  884.479748][T23925] loop4: detected capacity change from 0 to 16383
[  884.500203][T23905] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  884.513963][T23905] EXT4-fs (loop5): get root inode failed
[  884.514661][T23925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
22:20:21 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 9)

22:20:21 executing program 0:
timer_create(0x3, &(0x7f0000000140)={0x0, 0x17, 0x2, @thr={&(0x7f0000000580)="faac46", &(0x7f0000000540)="fc6364eb4797a76216c40330"}}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x6, &(0x7f0000000000)={0x0, 0x3c, 0x2, @thr={&(0x7f00000003c0)="ecf914297b93fe0a90e50b54877f6e3bf3decc163b5595d9e26ac4cfd771f2b0bec3a7ed6baa907f344daf187fec78d9f4383b00a2", &(0x7f0000000700)="be036632986d7df8272bdce5a8fa5fc056880b2cd7958ec95ce9ae6b835245781c264de3f89aee82433e62c14d4f30146561d1c8f9aa412a2378e218426a328877efe230ae9c19e85031829f19eef52e587ef5e860a3e61bf12c89ecafd0559c2839827b2138cb44df8d689b670ecdbc25b20725e35481bff75161433716322b2f14b4b71f29aaeaec8b27e38bec4007322f8f84eb4c08e4f3c21b3c33ce06e5b3b4a72c97375d37a4a40e589ef02a4b657156e17b0a8a36a3ecaa"}}, &(0x7f0000000040)=<r0=>0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000280)=0x7fff, 0x4)
timer_create(0x1, &(0x7f00000001c0)={0x0, 0x3, 0x2, @thr={&(0x7f0000000500)="3aa568ba2cdfe22dfb81a8ae418c3c1c21149b5bc49b8d76127bf7d9235d24fdfefbc315f8d3776d6cb326e097308407e51b6bc36a43d32a", &(0x7f00000007c0)="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"}}, &(0x7f00000005c0))
clock_gettime(0x2, &(0x7f00000004c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x4, 0x32)
socketpair(0x5, 0x6, 0x5, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa)
semop(r3, &(0x7f0000000200)=[{0x2, 0x1, 0x800}, {0x1, 0x7, 0x1800}, {0x4, 0x7, 0x800}, {0x1, 0x0, 0x1000}], 0x4)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
clock_nanosleep(0x2, 0x0, &(0x7f0000000440)={r5, r6+10000000}, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080))

22:20:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x10000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:21 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x0, 0x0)

22:20:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 14)

[  884.519632][T23905] EXT4-fs (loop5): mount failed
[  884.582332][T23940] FAULT_INJECTION: forcing a failure.
[  884.582332][T23940] name failslab, interval 1, probability 0, space 0, times 0
[  884.595007][T23940] CPU: 0 PID: 23940 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  884.606153][T23940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  884.616208][T23940] Call Trace:
[  884.619484][T23940]  <TASK>
[  884.622417][T23940]  dump_stack_lvl+0xd6/0x122
[  884.627021][T23940]  dump_stack+0x11/0x12
[  884.631179][T23940]  should_fail+0x230/0x240
[  884.635670][T23940]  __should_failslab+0x81/0x90
[  884.640434][T23940]  ? getname_flags+0x82/0x350
[  884.645116][T23940]  should_failslab+0x5/0x20
[  884.649619][T23940]  kmem_cache_alloc+0x46/0x300
[  884.654382][T23940]  getname_flags+0x82/0x350
[  884.658928][T23940]  getname+0x15/0x20
[  884.662831][T23940]  do_sys_openat2+0x6d/0x2a0
[  884.667428][T23940]  __x64_sys_openat+0xef/0x110
[  884.672196][T23940]  do_syscall_64+0x2b/0x70
[  884.676693][T23940]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  884.682642][T23940] RIP: 0033:0x7fce1578f004
[  884.687054][T23940] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  884.702231][T23943] FAULT_INJECTION: forcing a failure.
[  884.702231][T23943] name failslab, interval 1, probability 0, space 0, times 0
[  884.706662][T23940] RSP: 002b:00007fce14f51eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  884.706686][T23940] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f004
[  884.735786][T23940] RDX: 0000000000000002 RSI: 00007fce14f51fe0 RDI: 00000000ffffff9c
[  884.743816][T23940] RBP: 00007fce14f51fe0 R08: 0000000000000000 R09: 00007fce14f521d0
[  884.751854][T23940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  884.759809][T23940] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  884.767798][T23940]  </TASK>
[  884.770803][T23943] CPU: 1 PID: 23943 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  884.781826][T23943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  884.791884][T23943] Call Trace:
[  884.795161][T23943]  <TASK>
[  884.798140][T23943]  dump_stack_lvl+0xd6/0x122
[  884.802860][T23943]  dump_stack+0x11/0x12
[  884.807017][T23943]  should_fail+0x230/0x240
[  884.811457][T23943]  ? __list_lru_init+0x6d/0x370
[  884.816309][T23943]  __should_failslab+0x81/0x90
[  884.821075][T23943]  should_failslab+0x5/0x20
[  884.825580][T23943]  __kmalloc+0x66/0x350
[  884.829761][T23943]  ? __kmalloc+0x290/0x350
[  884.834214][T23943]  __list_lru_init+0x6d/0x370
[  884.838889][T23943]  alloc_super+0x465/0x500
[  884.843401][T23943]  sget_fc+0x1b3/0x440
[  884.847467][T23943]  ? kill_litter_super+0x60/0x60
[  884.852413][T23943]  ? pseudo_fs_get_tree+0x20/0x20
[  884.857440][T23943]  get_tree_nodev+0x24/0xf0
[  884.861971][T23943]  pseudo_fs_get_tree+0x18/0x20
[  884.866825][T23943]  vfs_get_tree+0x49/0x190
[  884.871374][T23943]  do_new_mount+0x200/0x650
[  884.875878][T23943]  path_mount+0x4b1/0xb60
[  884.880212][T23943]  __se_sys_mount+0x281/0x2d0
[  884.885054][T23943]  ? fput+0x2d/0x130
[  884.888998][T23943]  __x64_sys_mount+0x63/0x70
[  884.893670][T23943]  do_syscall_64+0x2b/0x70
[  884.898096][T23943]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  884.904045][T23943] RIP: 0033:0x7f29122de0e9
[  884.908467][T23943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  884.928279][T23943] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  884.936696][T23943] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  884.944666][T23943] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  884.952638][T23943] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  884.960612][T23943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.968595][T23943] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  884.976566][T23943]  </TASK>
22:20:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 15)

[  884.980636][T23939] loop4: detected capacity change from 0 to 16383
[  885.005606][T23939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  885.017802][T23952] FAULT_INJECTION: forcing a failure.
[  885.017802][T23952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  885.030974][T23952] CPU: 1 PID: 23952 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  885.042003][T23952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.052109][T23952] Call Trace:
[  885.055385][T23952]  <TASK>
[  885.058310][T23952]  dump_stack_lvl+0xd6/0x122
[  885.062911][T23952]  dump_stack+0x11/0x12
[  885.067070][T23952]  should_fail+0x230/0x240
[  885.071491][T23952]  should_fail_usercopy+0x16/0x20
[  885.076523][T23952]  strncpy_from_user+0x22/0x230
[  885.081399][T23952]  getname_flags+0xb0/0x350
[  885.085927][T23952]  getname+0x15/0x20
[  885.089848][T23952]  do_sys_openat2+0x6d/0x2a0
[  885.094530][T23952]  __x64_sys_openat+0xef/0x110
[  885.099302][T23952]  do_syscall_64+0x2b/0x70
[  885.103805][T23952]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  885.109756][T23952] RIP: 0033:0x7fce1578f004
[  885.114168][T23952] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  885.133856][T23952] RSP: 002b:00007fce14f51eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  885.142344][T23952] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f004
22:20:21 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x0, 0x0)

22:20:22 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="060000e200200000180c0000", @ANYRES32=<r3=>r2, @ANYBLOB="01552dacf0000000151c66496c6530001c71720aed2709420ef0fb3a68e3439b65f52fb2fe3c445307bee25c810abcf9e03b8780218e49b0c9c5c78918203bea7e6a40b723a0"])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x3, 0x14)
r6 = dup2(r5, r5)
dup2(r4, r6) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

22:20:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 16)

22:20:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x18000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:22 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="060000e200200000180c0000", @ANYRES32=<r3=>r2, @ANYBLOB="01552dacf0000000151c66496c6530001c71720aed2709420ef0fb3a68e3439b65f52fb2fe3c445307bee25c810abcf9e03b8780218e49b0c9c5c78918203bea7e6a40b723a0"]) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x3, 0x14)
r6 = dup2(r5, r5)
dup2(r4, r6) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[  885.150323][T23952] RDX: 0000000000000002 RSI: 00007fce14f51fe0 RDI: 00000000ffffff9c
[  885.158292][T23952] RBP: 00007fce14f51fe0 R08: 0000000000000000 R09: 00007fce14f521d0
[  885.166362][T23952] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  885.174333][T23952] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  885.182308][T23952]  </TASK>
[  885.228045][T23961] FAULT_INJECTION: forcing a failure.
[  885.228045][T23961] name failslab, interval 1, probability 0, space 0, times 0
[  885.240724][T23961] CPU: 0 PID: 23961 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  885.251817][T23961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.261875][T23961] Call Trace:
[  885.265158][T23961]  <TASK>
[  885.268082][T23961]  dump_stack_lvl+0xd6/0x122
[  885.272681][T23961]  dump_stack+0x11/0x12
[  885.276833][T23961]  should_fail+0x230/0x240
[  885.281263][T23961]  __should_failslab+0x81/0x90
[  885.286028][T23961]  ? __alloc_file+0x2e/0x150
[  885.290616][T23961]  should_failslab+0x5/0x20
[  885.295117][T23961]  kmem_cache_alloc+0x46/0x300
[  885.299922][T23961]  ? debug_smp_processor_id+0x13/0x20
[  885.305292][T23961]  __alloc_file+0x2e/0x150
[  885.309711][T23961]  alloc_empty_file+0xcd/0x1c0
[  885.314549][T23961]  path_openat+0x65/0x1b30
[  885.318969][T23961]  ? copy_page_from_iter_atomic+0x566/0xb80
22:20:22 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 10)

[  885.324873][T23961]  ? folio_mapping+0xb2/0x120
[  885.329676][T23961]  ? noop_dirty_folio+0x45/0x60
[  885.334525][T23961]  ? folio_mark_dirty+0x7c/0xc0
[  885.339436][T23961]  ? folio_unlock+0x29/0x40
[  885.343970][T23961]  ? unlock_page+0x3b/0xe0
[  885.348451][T23961]  ? inode_to_bdi+0x43/0xa0
[  885.353027][T23961]  ? balance_dirty_pages_ratelimited+0x4c/0x7e0
[  885.359275][T23961]  ? generic_perform_write+0x391/0x3f0
[  885.364772][T23961]  do_filp_open+0x105/0x220
[  885.369285][T23961]  do_sys_openat2+0xb5/0x2a0
[  885.373950][T23961]  __x64_sys_openat+0xef/0x110
22:20:22 executing program 0:
timer_create(0x3, &(0x7f0000000140)={0x0, 0x17, 0x2, @thr={&(0x7f0000000580)="faac46", &(0x7f0000000540)="fc6364eb4797a76216c40330"}}, &(0x7f0000000180)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x6, &(0x7f0000000000)={0x0, 0x3c, 0x2, @thr={&(0x7f00000003c0)="ecf914297b93fe0a90e50b54877f6e3bf3decc163b5595d9e26ac4cfd771f2b0bec3a7ed6baa907f344daf187fec78d9f4383b00a2", &(0x7f0000000700)="be036632986d7df8272bdce5a8fa5fc056880b2cd7958ec95ce9ae6b835245781c264de3f89aee82433e62c14d4f30146561d1c8f9aa412a2378e218426a328877efe230ae9c19e85031829f19eef52e587ef5e860a3e61bf12c89ecafd0559c2839827b2138cb44df8d689b670ecdbc25b20725e35481bff75161433716322b2f14b4b71f29aaeaec8b27e38bec4007322f8f84eb4c08e4f3c21b3c33ce06e5b3b4a72c97375d37a4a40e589ef02a4b657156e17b0a8a36a3ecaa"}}, &(0x7f0000000040)=<r0=>0x0) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) (async)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000280)=0x7fff, 0x4) (async)
timer_create(0x1, &(0x7f00000001c0)={0x0, 0x3, 0x2, @thr={&(0x7f0000000500)="3aa568ba2cdfe22dfb81a8ae418c3c1c21149b5bc49b8d76127bf7d9235d24fdfefbc315f8d3776d6cb326e097308407e51b6bc36a43d32a", &(0x7f00000007c0)="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"}}, &(0x7f00000005c0))
clock_gettime(0x2, &(0x7f00000004c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x4, 0x32)
socketpair(0x5, 0x6, 0x5, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa)
semop(r3, &(0x7f0000000200)=[{0x2, 0x1, 0x800}, {0x1, 0x7, 0x1800}, {0x4, 0x7, 0x800}, {0x1, 0x0, 0x1000}], 0x4) (async)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
clock_nanosleep(0x2, 0x0, &(0x7f0000000440)={r5, r6+10000000}, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080))

22:20:22 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  885.378716][T23961]  do_syscall_64+0x2b/0x70
[  885.383215][T23961]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  885.389140][T23961] RIP: 0033:0x7fce1578f004
[  885.393549][T23961] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  885.413157][T23961] RSP: 002b:00007fce14f51eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  885.421601][T23961] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f004
[  885.429576][T23961] RDX: 0000000000000002 RSI: 00007fce14f51fe0 RDI: 00000000ffffff9c
[  885.437620][T23961] RBP: 00007fce14f51fe0 R08: 0000000000000000 R09: 00007fce14f521d0
[  885.445591][T23961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  885.453591][T23961] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  885.461657][T23961]  </TASK>
22:20:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1c000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:22 executing program 0:
timer_create(0x3, &(0x7f0000000140)={0x0, 0x17, 0x2, @thr={&(0x7f0000000580)="faac46", &(0x7f0000000540)="fc6364eb4797a76216c40330"}}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x6, &(0x7f0000000000)={0x0, 0x3c, 0x2, @thr={&(0x7f00000003c0)="ecf914297b93fe0a90e50b54877f6e3bf3decc163b5595d9e26ac4cfd771f2b0bec3a7ed6baa907f344daf187fec78d9f4383b00a2", &(0x7f0000000700)="be036632986d7df8272bdce5a8fa5fc056880b2cd7958ec95ce9ae6b835245781c264de3f89aee82433e62c14d4f30146561d1c8f9aa412a2378e218426a328877efe230ae9c19e85031829f19eef52e587ef5e860a3e61bf12c89ecafd0559c2839827b2138cb44df8d689b670ecdbc25b20725e35481bff75161433716322b2f14b4b71f29aaeaec8b27e38bec4007322f8f84eb4c08e4f3c21b3c33ce06e5b3b4a72c97375d37a4a40e589ef02a4b657156e17b0a8a36a3ecaa"}}, &(0x7f0000000040)=<r0=>0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) (async)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000280)=0x7fff, 0x4) (async)
timer_create(0x1, &(0x7f00000001c0)={0x0, 0x3, 0x2, @thr={&(0x7f0000000500)="3aa568ba2cdfe22dfb81a8ae418c3c1c21149b5bc49b8d76127bf7d9235d24fdfefbc315f8d3776d6cb326e097308407e51b6bc36a43d32a", &(0x7f00000007c0)="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"}}, &(0x7f00000005c0))
clock_gettime(0x2, &(0x7f00000004c0)={0x0, <r2=>0x0}) (async)
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x4, 0x32)
socketpair(0x5, 0x6, 0x5, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa) (async)
semop(r3, &(0x7f0000000200)=[{0x2, 0x1, 0x800}, {0x1, 0x7, 0x1800}, {0x4, 0x7, 0x800}, {0x1, 0x0, 0x1000}], 0x4) (async)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
clock_nanosleep(0x2, 0x0, &(0x7f0000000440)={r5, r6+10000000}, &(0x7f0000000480)) (async)
timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080))

22:20:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 17)

[  885.527256][T23979] loop4: detected capacity change from 0 to 16383
[  885.564566][T23983] FAULT_INJECTION: forcing a failure.
[  885.564566][T23983] name failslab, interval 1, probability 0, space 0, times 0
[  885.577242][T23983] CPU: 1 PID: 23983 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  885.588334][T23983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.598390][T23983] Call Trace:
[  885.601669][T23983]  <TASK>
[  885.604594][T23983]  dump_stack_lvl+0xd6/0x122
[  885.609205][T23983]  dump_stack+0x11/0x12
[  885.613434][T23983]  should_fail+0x230/0x240
[  885.617853][T23983]  ? __list_lru_init+0x6d/0x370
[  885.622724][T23983]  __should_failslab+0x81/0x90
[  885.627554][T23983]  should_failslab+0x5/0x20
[  885.632059][T23983]  __kmalloc+0x66/0x350
[  885.636276][T23983]  ? __list_lru_init+0x6d/0x370
[  885.641129][T23983]  __list_lru_init+0x6d/0x370
[  885.645806][T23983]  alloc_super+0x494/0x500
[  885.650236][T23983]  sget_fc+0x1b3/0x440
[  885.654373][T23983]  ? kill_litter_super+0x60/0x60
[  885.659386][T23983]  ? pseudo_fs_get_tree+0x20/0x20
[  885.664412][T23983]  get_tree_nodev+0x24/0xf0
[  885.668916][T23983]  pseudo_fs_get_tree+0x18/0x20
[  885.673771][T23983]  vfs_get_tree+0x49/0x190
[  885.678243][T23983]  do_new_mount+0x200/0x650
[  885.682779][T23983]  path_mount+0x4b1/0xb60
[  885.687104][T23983]  __se_sys_mount+0x281/0x2d0
[  885.691774][T23983]  ? fput+0x2d/0x130
[  885.695669][T23983]  __x64_sys_mount+0x63/0x70
[  885.700255][T23983]  do_syscall_64+0x2b/0x70
[  885.704670][T23983]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  885.710570][T23983] RIP: 0033:0x7f29122de0e9
[  885.715042][T23983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  885.734750][T23983] RSP: 002b:00007f2911a12168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  885.743167][T23983] RAX: ffffffffffffffda RBX: 00007f29123f1100 RCX: 00007f29122de0e9
[  885.751139][T23983] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  885.759112][T23983] RBP: 00007f2911a121d0 R08: 0000000000000000 R09: 0000000000000000
[  885.767088][T23983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  885.775139][T23983] R13: 00007ffe2b554a7f R14: 00007f2911a12300 R15: 0000000000022000
[  885.783130][T23983]  </TASK>
[  885.790971][T23979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  885.808670][T23987] FAULT_INJECTION: forcing a failure.
[  885.808670][T23987] name failslab, interval 1, probability 0, space 0, times 0
[  885.821386][T23987] CPU: 0 PID: 23987 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  885.832453][T23987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  885.842518][T23987] Call Trace:
[  885.845796][T23987]  <TASK>
[  885.848758][T23987]  dump_stack_lvl+0xd6/0x122
[  885.853351][T23987]  dump_stack+0x11/0x12
[  885.857568][T23987]  should_fail+0x230/0x240
[  885.862010][T23987]  __should_failslab+0x81/0x90
[  885.866882][T23987]  ? security_file_alloc+0x2e/0xf0
[  885.872004][T23987]  should_failslab+0x5/0x20
[  885.876505][T23987]  kmem_cache_alloc+0x46/0x300
[  885.881343][T23987]  ? kmem_cache_alloc+0x237/0x300
[  885.886353][T23987]  security_file_alloc+0x2e/0xf0
[  885.891287][T23987]  __alloc_file+0x81/0x150
[  885.895710][T23987]  alloc_empty_file+0xcd/0x1c0
[  885.900460][T23987]  path_openat+0x65/0x1b30
[  885.904860][T23987]  ? copy_page_from_iter_atomic+0x566/0xb80
[  885.910740][T23987]  ? folio_mapping+0xb2/0x120
[  885.915481][T23987]  ? noop_dirty_folio+0x45/0x60
[  885.920348][T23987]  ? folio_mark_dirty+0x7c/0xc0
[  885.925245][T23987]  ? folio_unlock+0x29/0x40
[  885.929813][T23987]  ? unlock_page+0x3b/0xe0
[  885.934225][T23987]  ? inode_to_bdi+0x43/0xa0
[  885.938719][T23987]  ? balance_dirty_pages_ratelimited+0x4c/0x7e0
[  885.944990][T23987]  ? generic_perform_write+0x391/0x3f0
[  885.950439][T23987]  do_filp_open+0x105/0x220
[  885.954933][T23987]  do_sys_openat2+0xb5/0x2a0
[  885.959600][T23987]  __x64_sys_openat+0xef/0x110
[  885.964354][T23987]  do_syscall_64+0x2b/0x70
[  885.968842][T23987]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  885.974759][T23987] RIP: 0033:0x7fce1578f004
[  885.979161][T23987] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  885.998756][T23987] RSP: 002b:00007fce14f51eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  886.007163][T23987] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce1578f004
[  886.015125][T23987] RDX: 0000000000000002 RSI: 00007fce14f51fe0 RDI: 00000000ffffff9c
22:20:22 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000180)=[{0x2, 0x7ff, 0x1000}, {0x0, 0x0, 0x1000}, {0x0, 0x8, 0x800}, {0x0, 0x8, 0x800}, {0x4, 0x2}, {0x0, 0x32db, 0x800}, {0x0, 0x1d4, 0xbc3a89dafc0e563b}, {0x1, 0x20, 0x1800}], 0x8)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:22 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])
lseek(r0, 0x0, 0x0)

22:20:22 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 32)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  886.023083][T23987] RBP: 00007fce14f51fe0 R08: 0000000000000000 R09: 00007fce14f521d0
[  886.031039][T23987] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  886.038994][T23987] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  886.046955][T23987]  </TASK>
22:20:22 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000180)=[{0x2, 0x7ff, 0x1000}, {0x0, 0x0, 0x1000}, {0x0, 0x8, 0x800}, {0x0, 0x8, 0x800}, {0x4, 0x2}, {0x0, 0x32db, 0x800}, {0x0, 0x1d4, 0xbc3a89dafc0e563b}, {0x1, 0x20, 0x1800}], 0x8)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:22 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000180)=[{0x2, 0x7ff, 0x1000}, {0x0, 0x0, 0x1000}, {0x0, 0x8, 0x800}, {0x0, 0x8, 0x800}, {0x4, 0x2}, {0x0, 0x32db, 0x800}, {0x0, 0x1d4, 0xbc3a89dafc0e563b}, {0x1, 0x20, 0x1800}], 0x8) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) (rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:22 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/sdio', 0x140, 0x1d2)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r1, 0x900, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x8000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0xb, &(0x7f0000000000)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000280)="a314f2a687ac3f4d5938ec158b24a9c2cbcc2a4c883d9e6cefe820ce03728f1d95c619e7b288a06fcbdab42770b1a79d0dbbefb75384541decb830215363a13a3a6a9f1bc2e15c4207d5c47804e8e7b2ef712620864365a33642f99ffcbc1ac5ba6fe360916f45c81db6b162a3ccae", &(0x7f0000000300)="1e9319c148e5d6016e807992d028bd585a7643c2933874431911cb5762cb1bc80a056a7803f1db0296fd0f0352d61d19012e87ee5431d2030acf8d43f5707dc6a3a2eda599c0ab386f6f3f1998580e3104e3ef4fbef1d8b3ced7cc005674220c8b064706718537835db5ce2cb0449d89"}}, &(0x7f0000000040)=<r5=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0})
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semget$private(0x0, 0x2, 0x110)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r8=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r9=>0x0})
timer_settime(r8, 0x1, &(0x7f0000000240)={{}, {0x0, r9+10000000}}, 0x0)
timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, &(0x7f00000001c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:23 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) (fail_nth: 11)

22:20:23 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 64)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 18)

22:20:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x2e000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:23 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/sdio', 0x140, 0x1d2) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r1, 0x900, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x8000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0xb, &(0x7f0000000000)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000280)="a314f2a687ac3f4d5938ec158b24a9c2cbcc2a4c883d9e6cefe820ce03728f1d95c619e7b288a06fcbdab42770b1a79d0dbbefb75384541decb830215363a13a3a6a9f1bc2e15c4207d5c47804e8e7b2ef712620864365a33642f99ffcbc1ac5ba6fe360916f45c81db6b162a3ccae", &(0x7f0000000300)="1e9319c148e5d6016e807992d028bd585a7643c2933874431911cb5762cb1bc80a056a7803f1db0296fd0f0352d61d19012e87ee5431d2030acf8d43f5707dc6a3a2eda599c0ab386f6f3f1998580e3104e3ef4fbef1d8b3ced7cc005674220c8b064706718537835db5ce2cb0449d89"}}, &(0x7f0000000040)=<r5=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0}) (async)
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
semget$private(0x0, 0x2, 0x110) (async)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r8=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r9=>0x0})
timer_settime(r8, 0x1, &(0x7f0000000240)={{}, {0x0, r9+10000000}}, 0x0) (async, rerun: 64)
timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, &(0x7f00000001c0)) (rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  886.242421][T24015] loop4: detected capacity change from 0 to 16383
[  886.263213][T24027] FAULT_INJECTION: forcing a failure.
[  886.263213][T24027] name failslab, interval 1, probability 0, space 0, times 0
[  886.275923][T24027] CPU: 1 PID: 24027 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  886.287000][T24027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  886.297086][T24027] Call Trace:
[  886.300358][T24027]  <TASK>
[  886.303329][T24027]  dump_stack_lvl+0xd6/0x122
[  886.307944][T24027]  dump_stack+0x11/0x12
[  886.312110][T24027]  should_fail+0x230/0x240
[  886.316528][T24027]  ? alloc_workqueue+0x125/0xad0
[  886.321467][T24027]  __should_failslab+0x81/0x90
[  886.326308][T24027]  should_failslab+0x5/0x20
[  886.330812][T24027]  __kmalloc+0x66/0x350
[  886.334987][T24027]  ? ilookup+0x17b/0x190
[  886.339278][T24027]  ? disk_block_events+0x82/0xc0
[  886.344240][T24027]  alloc_workqueue+0x125/0xad0
[  886.349043][T24027]  ? preempt_count_add+0x5e/0xa0
[  886.353983][T24027]  ? _raw_spin_unlock+0x2d/0x50
[  886.358831][T24027]  ? bd_prepare_to_claim+0x1ac/0x200
[  886.364123][T24027]  loop_configure+0x661/0xc90
[  886.368880][T24027]  ? terminate_walk+0x23d/0x250
[  886.373739][T24027]  lo_ioctl+0x617/0x11b0
[  886.377977][T24027]  ? avc_has_extended_perms+0x686/0x8a0
[  886.383532][T24027]  ? folio_mark_dirty+0x7c/0xc0
[  886.388474][T24027]  ? blkdev_common_ioctl+0x3ea/0x1090
[  886.392644][T24015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  886.393853][T24027]  ? do_vfs_ioctl+0x7b7/0x1390
[  886.407001][T24027]  ? lo_release+0x120/0x120
[  886.411507][T24027]  blkdev_ioctl+0x20e/0x440
[  886.416021][T24027]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  886.421532][T24027]  __se_sys_ioctl+0xcb/0x140
[  886.426253][T24027]  __x64_sys_ioctl+0x3f/0x50
[  886.430842][T24027]  do_syscall_64+0x2b/0x70
[  886.435317][T24027]  entry_SYSCALL_64_after_hwframe+0x44/0xae
22:20:23 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0xfffffffffffffd41, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
dup2(r2, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0504001b000000181a0000503778f2", @ANYRESOCT=r3, @ANYBLOB="00000000000000006b871f009f0e000085100000f8ffffff850000002f00000015010c0008000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x5, 0x2}, 0x10, 0x0, r5, 0x0, &(0x7f00000001c0)=[r1, r0, r1]}, 0x80)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x244, 0x4)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:23 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/sdio', 0x140, 0x1d2) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x3c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r1, 0x900, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x8000) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0xb, &(0x7f0000000000)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000280)="a314f2a687ac3f4d5938ec158b24a9c2cbcc2a4c883d9e6cefe820ce03728f1d95c619e7b288a06fcbdab42770b1a79d0dbbefb75384541decb830215363a13a3a6a9f1bc2e15c4207d5c47804e8e7b2ef712620864365a33642f99ffcbc1ac5ba6fe360916f45c81db6b162a3ccae", &(0x7f0000000300)="1e9319c148e5d6016e807992d028bd585a7643c2933874431911cb5762cb1bc80a056a7803f1db0296fd0f0352d61d19012e87ee5431d2030acf8d43f5707dc6a3a2eda599c0ab386f6f3f1998580e3104e3ef4fbef1d8b3ced7cc005674220c8b064706718537835db5ce2cb0449d89"}}, &(0x7f0000000040)=<r5=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0}) (async)
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
semget$private(0x0, 0x2, 0x110) (async)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r8=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r9=>0x0})
timer_settime(r8, 0x1, &(0x7f0000000240)={{}, {0x0, r9+10000000}}, 0x0) (async)
timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, &(0x7f00000001c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:23 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0)

[  886.441205][T24027] RIP: 0033:0x7fce157dbea7
[  886.445623][T24027] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  886.465226][T24027] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  886.473649][T24027] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  886.481622][T24027] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
22:20:23 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
r2 = semget$private(0x0, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r3, r4+60000000}}, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  886.489591][T24027] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  886.497568][T24027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  886.505633][T24027] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  886.513707][T24027]  </TASK>
22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0))
r2 = semget$private(0x0, 0x4, 0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0}) (rerun: 32)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r3, r4+60000000}}, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async, rerun: 64)
timer_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
r2 = semget$private(0x0, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r3, r4+60000000}}, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r3, r4+60000000}}, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000280)=[{0x0, 0xbb1b}, {0x2, 0x7, 0x1000}, {0x1, 0x22, 0x1000}], 0x3)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f0000000180))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000240)={{}, {0x0, r5+10000000}}, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000300)={{}, {r6, r7+60000000}}, &(0x7f0000000340))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000280)=[{0x0, 0xbb1b}, {0x2, 0x7, 0x1000}, {0x1, 0x22, 0x1000}], 0x3)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f0000000180)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000240)={{}, {0x0, r5+10000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000300)={{}, {r6, r7+60000000}}, &(0x7f0000000340)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 19)

22:20:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x3f000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0))
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f0000000280)=[{0x0, 0xbb1b}, {0x2, 0x7, 0x1000}, {0x1, 0x22, 0x1000}], 0x3) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) (async)
timer_gettime(r0, &(0x7f0000000180))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000240)={{}, {0x0, r5+10000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000300)={{}, {r6, r7+60000000}}, &(0x7f0000000340)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  886.926715][T24081] FAULT_INJECTION: forcing a failure.
[  886.926715][T24081] name failslab, interval 1, probability 0, space 0, times 0
[  886.939478][T24081] CPU: 1 PID: 24081 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  886.950553][T24081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  886.960606][T24081] Call Trace:
[  886.963877][T24081]  <TASK>
[  886.966808][T24081]  dump_stack_lvl+0xd6/0x122
[  886.971491][T24081]  dump_stack+0x11/0x12
[  886.975720][T24081]  should_fail+0x230/0x240
[  886.980136][T24081]  __should_failslab+0x81/0x90
[  886.984968][T24081]  ? alloc_workqueue+0x169/0xad0
[  886.989940][T24081]  should_failslab+0x5/0x20
[  886.994442][T24081]  kmem_cache_alloc_trace+0x4d/0x320
[  886.999770][T24081]  ? alloc_workqueue+0x125/0xad0
[  887.004718][T24081]  alloc_workqueue+0x169/0xad0
[  887.009545][T24081]  ? preempt_count_add+0x5e/0xa0
[  887.014491][T24081]  ? _raw_spin_unlock+0x2d/0x50
[  887.019344][T24081]  ? bd_prepare_to_claim+0x1ac/0x200
22:20:23 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0xfffffffffffffd41, 0x10, 0x0}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
dup2(r2, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0504001b000000181a0000503778f2", @ANYRESOCT=r3, @ANYBLOB="00000000000000006b871f009f0e000085100000f8ffffff850000002f00000015010c0008000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x5, 0x2}, 0x10, 0x0, r5, 0x0, &(0x7f00000001c0)=[r1, r0, r1]}, 0x80) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x244, 0x4) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:23 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1000}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xfff, 0xb9}}, './file0\x00'})

22:20:23 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2, 0x0)

[  887.024634][T24081]  loop_configure+0x661/0xc90
[  887.029312][T24081]  ? terminate_walk+0x23d/0x250
[  887.034255][T24081]  lo_ioctl+0x617/0x11b0
[  887.038543][T24081]  ? avc_has_extended_perms+0x686/0x8a0
[  887.044148][T24081]  ? folio_mark_dirty+0x7c/0xc0
[  887.049008][T24081]  ? blkdev_common_ioctl+0x3ea/0x1090
[  887.054451][T24081]  ? do_vfs_ioctl+0x7b7/0x1390
[  887.059235][T24081]  ? lo_release+0x120/0x120
[  887.063748][T24081]  blkdev_ioctl+0x20e/0x440
[  887.068339][T24081]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  887.073855][T24081]  __se_sys_ioctl+0xcb/0x140
[  887.078473][T24081]  __x64_sys_ioctl+0x3f/0x50
[  887.083071][T24081]  do_syscall_64+0x2b/0x70
[  887.087527][T24081]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  887.093411][T24081] RIP: 0033:0x7fce157dbea7
[  887.097819][T24081] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  887.117526][T24081] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
22:20:24 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:24 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1000}], 0x1) (async, rerun: 32)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xfff, 0xb9}}, './file0\x00'})

22:20:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 20)

[  887.126358][T24081] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  887.134343][T24081] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  887.142313][T24081] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  887.150284][T24081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  887.158252][T24081] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  887.166303][T24081]  </TASK>
22:20:24 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1000}], 0x1) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xfff, 0xb9}}, './file0\x00'})

[  887.229094][T24103] FAULT_INJECTION: forcing a failure.
[  887.229094][T24103] name failslab, interval 1, probability 0, space 0, times 0
[  887.241790][T24103] CPU: 1 PID: 24103 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  887.252845][T24103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  887.262896][T24103] Call Trace:
[  887.266168][T24103]  <TASK>
[  887.269092][T24103]  dump_stack_lvl+0xd6/0x122
[  887.273747][T24103]  dump_stack+0x11/0x12
22:20:24 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0xfffffffffffffd41, 0x10, 0x0}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x14)
r5 = dup2(r4, r4)
dup2(r2, r5) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0504001b000000181a0000503778f2", @ANYRESOCT=r3, @ANYBLOB="00000000000000006b871f009f0e000085100000f8ffffff850000002f00000015010c0008000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x5, 0x2}, 0x10, 0x0, r5, 0x0, &(0x7f00000001c0)=[r1, r0, r1]}, 0x80) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x244, 0x4) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

[  887.277903][T24103]  should_fail+0x230/0x240
[  887.282321][T24103]  ? apply_wqattrs_prepare+0x3f/0x650
[  887.287723][T24103]  __should_failslab+0x81/0x90
[  887.292575][T24103]  should_failslab+0x5/0x20
[  887.297088][T24103]  __kmalloc+0x66/0x350
[  887.301256][T24103]  ? fsnotify+0x358/0x1680
[  887.305685][T24103]  apply_wqattrs_prepare+0x3f/0x650
[  887.311010][T24103]  apply_workqueue_attrs+0xb8/0x4f0
[  887.316217][T24103]  alloc_workqueue+0x777/0xad0
[  887.320990][T24103]  ? preempt_count_add+0x5e/0xa0
22:20:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x578fa0340d9d8709, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3}]}]}, 0x1c}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x11c, r1, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc1e}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47d9c58a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x64}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8010)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  887.326036][T24103]  ? _raw_spin_unlock+0x2d/0x50
[  887.330891][T24103]  ? bd_prepare_to_claim+0x1ac/0x200
[  887.336204][T24103]  loop_configure+0x661/0xc90
[  887.340882][T24103]  ? terminate_walk+0x23d/0x250
[  887.345811][T24103]  lo_ioctl+0x617/0x11b0
[  887.350055][T24103]  ? avc_has_extended_perms+0x686/0x8a0
[  887.350206][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  887.355671][T24103]  ? folio_mark_dirty+0x7c/0xc0
[  887.355707][T24103]  ? blkdev_common_ioctl+0x3ea/0x1090
[  887.375172][T24103]  ? do_vfs_ioctl+0x7b7/0x1390
[  887.379944][T24103]  ? lo_release+0x120/0x120
[  887.384442][T24103]  blkdev_ioctl+0x20e/0x440
[  887.388971][T24103]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  887.394434][T24103]  __se_sys_ioctl+0xcb/0x140
[  887.399123][T24103]  __x64_sys_ioctl+0x3f/0x50
[  887.403753][T24103]  do_syscall_64+0x2b/0x70
[  887.408228][T24103]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  887.414150][T24103] RIP: 0033:0x7fce157dbea7
22:20:24 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x448, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0d0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="feafe96fcb9b79875ad7a35b93a1a71ac81ae4af013642d4acff74f3ee9080f6712e896a4c4d2cdaca439a85c24e0c4d6d6f291b11edab06241cd51524236635a1ee3c52935e6a5929fc38", &(0x7f0000000200)="c52b709dd80194bb044c2de89d863de7a594c9cc58bec9bc505ba74456e7db29c8ed2522d14ff74c1c5ecc11eaad99be6b4514006de39e33850fb560aa464b0bbe919c54ac9cddada2cb0946dc0352b8ee8a6b3f4aaf56bdab850e0dcdab4909509766d0126403357ddbaec3159a19fd9c55c2a0c0140097cbcc6e39e378cdef4ac5444ce3353e7d0c98077e550aa766e71a45c70520666659e812e3f303fcde5464c55a5d392384f39bea7695291d6ef38722de252b9c0ad6bf9e96c55962d2126a14b520bb668fa9b4"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  887.418560][T24103] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  887.438263][T24103] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  887.446683][T24103] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  887.454662][T24103] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  887.462708][T24103] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  887.470680][T24103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  887.478837][T24103] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  887.486853][T24103]  </TASK>
22:20:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x89000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:24 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x448, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0d0) (async, rerun: 64)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="feafe96fcb9b79875ad7a35b93a1a71ac81ae4af013642d4acff74f3ee9080f6712e896a4c4d2cdaca439a85c24e0c4d6d6f291b11edab06241cd51524236635a1ee3c52935e6a5929fc38", &(0x7f0000000200)="c52b709dd80194bb044c2de89d863de7a594c9cc58bec9bc505ba74456e7db29c8ed2522d14ff74c1c5ecc11eaad99be6b4514006de39e33850fb560aa464b0bbe919c54ac9cddada2cb0946dc0352b8ee8a6b3f4aaf56bdab850e0dcdab4909509766d0126403357ddbaec3159a19fd9c55c2a0c0140097cbcc6e39e378cdef4ac5444ce3353e7d0c98077e550aa766e71a45c70520666659e812e3f303fcde5464c55a5d392384f39bea7695291d6ef38722de252b9c0ad6bf9e96c55962d2126a14b520bb668fa9b4"}}, &(0x7f0000000140)) (rerun: 64)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0}) (async, rerun: 64)
r4 = semget$private(0x0, 0x4, 0x0) (rerun: 64)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:24 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x448, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0d0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="feafe96fcb9b79875ad7a35b93a1a71ac81ae4af013642d4acff74f3ee9080f6712e896a4c4d2cdaca439a85c24e0c4d6d6f291b11edab06241cd51524236635a1ee3c52935e6a5929fc38", &(0x7f0000000200)="c52b709dd80194bb044c2de89d863de7a594c9cc58bec9bc505ba74456e7db29c8ed2522d14ff74c1c5ecc11eaad99be6b4514006de39e33850fb560aa464b0bbe919c54ac9cddada2cb0946dc0352b8ee8a6b3f4aaf56bdab850e0dcdab4909509766d0126403357ddbaec3159a19fd9c55c2a0c0140097cbcc6e39e378cdef4ac5444ce3353e7d0c98077e550aa766e71a45c70520666659e812e3f303fcde5464c55a5d392384f39bea7695291d6ef38722de252b9c0ad6bf9e96c55962d2126a14b520bb668fa9b4"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000300), 0x448, 0x1) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0d0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="feafe96fcb9b79875ad7a35b93a1a71ac81ae4af013642d4acff74f3ee9080f6712e896a4c4d2cdaca439a85c24e0c4d6d6f291b11edab06241cd51524236635a1ee3c52935e6a5929fc38", &(0x7f0000000200)="c52b709dd80194bb044c2de89d863de7a594c9cc58bec9bc505ba74456e7db29c8ed2522d14ff74c1c5ecc11eaad99be6b4514006de39e33850fb560aa464b0bbe919c54ac9cddada2cb0946dc0352b8ee8a6b3f4aaf56bdab850e0dcdab4909509766d0126403357ddbaec3159a19fd9c55c2a0c0140097cbcc6e39e378cdef4ac5444ce3353e7d0c98077e550aa766e71a45c70520666659e812e3f303fcde5464c55a5d392384f39bea7695291d6ef38722de252b9c0ad6bf9e96c55962d2126a14b520bb668fa9b4"}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:24 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0))
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
timer_create(0x7, &(0x7f0000001280)={0x0, 0x30, 0x0, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="0b4adeffcdb2523129eaedbc4ceca7aaa086777aeccd7854e8ef7f817c72d828d4fe3bcbf75dfd7dde36f33a3704d4ec0d6875da552e9f70a9e09541261a5b7a8a36cfe9949d4112b1778c"}}, &(0x7f00000012c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:24 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x3, 0x0)

22:20:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 21)

22:20:24 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:24 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0)) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
timer_create(0x7, &(0x7f0000001280)={0x0, 0x30, 0x0, @thr={&(0x7f0000000200)="47ce320c8180d508369defb706bbefebf9a5706d02cf3cd8f0bb859fea63ac155231933d55506ddfd6f4d2b306c3556ffaad84a169eea201ef8f1b592c2acf547f4e5f89595cd893e8f07809caf0796953ba2631b5216846b7e60a21e6c6aa2017baf6ede7c1f031d9ec282fd90da38ce03090582b11e463132de0b48d3161a2a78bee5b9620f3b8b4e72285e19ed258563f0c47482ef2a34fdb0616035cb51bf34988f5666d1683254a061e0b421005f317ca1104e7750bf242535abb29eebc8f3bfa75ddf8d16678d0b803e9faa871ae3b1690131e9102d3302fc6315ec154fb4c63c784e87b5537f70eb679fddfbb4ca587c661c5bfe85d684cc69d042e4cf1f7ba17a0b0eb35eeda4de1418b3495d2d239715730d692b4bbabfc85b104f93c900b407f67d27255cc6948b4847daab1a7f334fe695004aba2620c967e9145b9bff2d1859e2d1f0e879799af37d2363b9a93278f79c23eedd1025cfdcdec57beb87f808eee44ed3a53d181b70fe419149fddd412135dfb07998abef53370769e4a454678e777730cc76571f3becaccfc9d5f772d04f7975060ad7ea82839670ac0121030b7b0cbea7b08daadb422350f1f0c713e3821d1b1ee09c03ca745f5979c5a6c2acc801b914b3ce31543085fc63bd0e326c100b9140ac3c6554adfb9f48a37f757dca4286e64703d6fffe49bb3d5a1e43201e9aa8740de2d5f494f07490b160f126f80c2c25c8c66b790ce3ed5c8fcb1544b246ec00a26c14ccb93dce1968d99389cb4ab1a369721e2b0e46238e244a4c388826bb4fb5bba8eb165dd1c779bd555b341a99b119520efd7b0f7637bb307df0deb3b64aaec1e7c8b1a19056da714a76482f9dcdc880818edb9e5fd2e268150cac635a8c0f2bbe46425364aa7dd32247ff234efda4d90824aa26a2423ecae351be967032821929cc313491a5c27b8d30598df87c96a776f21918c2131f1c73198fe68b1f49defa158d539f0050cf4322f69fbbed91ee3cedf33252628f5857e0e2f934872ffc91477e6afeab59666041a7ab5a1378fa56528a236f801d17f264a80f304757b7499251bd7e53bca085148850ef58d5fea6f704f431f131d1af6887b730515b74790a64d5e7acf3dd9aa26b19d3f790d0fbbf43c4217f826a1b8c99f87db49fcc980a305dfae9baac98d3fddb962c3b1d5b76d6cb283a33dfc9b149b9f11e7d833241d23a2ef1e9254b8ca43da15b28b2ea9b120edec3fdffe457ef736b587d90eba1de6f576096ea6e8223c1c021209a63f610ed7de3edbdb9c75839dd752e6e30e138f5c2a17f4714d623bf8ee9ac2d0c96ef94ee4ae83b731964486b18a2668455b794f44a0b17fb6768538bb827555fe8572e9d9ceda1e07902b7195489813163e56d2706c6e6d6df5813c5baee3f288df43e24c492cc36bfbb1cb154eb638cd9e8fadf60a110237d6156a6f0c4f2928bb5b2bf6f2ac0940731a36fdfe4e9b91b466e7df798047e777a40dbe41f8cc8b980514994ab3649baae0c6a70340625a9aad31cc4eef7d7e5cf20dec4c866bc9643eb8b55080dcca76e964fa41f0111f0774b5be9ab34f6c1bd75dfb9d4d8fc4f35bf86bebd0e7a0dd3904e43b73d8f93d8d028379d9189bf929116c4ca9bbbf9f801ed7baad322e6b8ef1175ecc9757a53f2a4e7914308ede1e1eaf6d73d6babf0bf3d8dd1ed37f399e9fa2dbb93f5ce388febc8bc22a1cb38f20623a933f55fe41767e6b22014a7dac2ef8ae3e5ab924bbbd91b700fe9efac41b4be2d81a5db9a87af55d1aa389565d85657d4080b59b285e3f740200c903db399580c625595f2ab0dee7d2439a353fc65f0dfbf082fdf54c3002e6df39a96fd80f1be11c7bc5da8c0fd5fffe55160bed80bd0b0d447147efc930b0b77e155f81fd37a8a58bfdd0a6339ece15c7fe50f68268c02091e43b24f38058d2255085def2592b60816e4a94c9dbb5aad8e78edc73b3e5dd361152d6c8a9c47a0e517a787ef14b2fcc367fa5faa91b92e13a81045b6916295fc47e2fba81843b710c24f0b4c9338404c358c3ce8b75af452a7d300687a098f3dd61fb116b32d79dc313b4522e0963f17dd1743e9c8907a913ea44a83c484e5c3cf4b780ec110b248799ae4001547dbcc7fb9afb6c929d7322989b6e32c6e72eec15d291eacf6806c44e4b20274e0aeeafea0d0cc22b33960e898cc4bce90b81d3af6f51906788b9206efa49d462fa76f4e7ce1a0b21ee6f651a0521a72ef85bd1974bf87e436cf4d753679b64b094ec88549439f5f41bb330e175d0b46f76441aaac7b045a005ecdc68c003d191e8dbec0f3116a0899845408682dd41f5bd15e7562a0d49239c227cf54d1e6b8070763b25ec207b0d6025ef18227bbe54a5ca7a684cf4ea2799efd4476d51e2d4df8d9e7c337f3b5e4eb15b711f32a4da528c7978165d81dbe1cb1c8879ce5417658c4fd6cce6e253d2b4d7c7f8f0c60603a17e8054ee17b42401d224579151f708eddd5bcc722d1f3f76b278b10c0d98ac23fcf24a130f9d217c92414708e20880a639e0eeb0b0bd4fa1a564f027da67abed76aea798ceed47e7252fecc657fb3e0ac24a2dda7492b105654e67a8872f1b1e32b278851b09c0e8348166e7f9c28cb2034c8da81322ccc2515cb8e5dce4662f15e694083bf5be1f8f6976f696dac9d66ecb89ae82883b3b2ba3c7cdffc214e6d0384034fc7fc342b518969ebe5e7182ef7465000c4878b32d69750b2a79c4e2bd2aee1cd0338b75857016592464e0a29b209bebc2ffef983fcbc9d6110266c4c9c270b3d80d849f363964785e045bc1d70d42f2122cb4c95af9fb2cb3324d76de259e76ab5c61242f4f45ea3bf5d33a21247bfe09a9965e82d780c0a87b57cc6b0c164ef668914c9ba32c7a40919d6f7bc0c1d688bfe34bf9c247cfa97afb5e0834f259e2885b12b559b61e303e5829beeaec4321d6965ad16ad7280fa6587bff7aca1aeb7fb7399f148e68fd05ebe31accade518b97de280d0ef98ade0f079c7d6dd77787c2890119d7ddf33e6d2161a22f357336e8bcca81b2d32dfa25b9c85de1d19150b415ba926ec9c30f93909cd9f534b56ebef295cba393ecdb7b9421a3b6ce343793d50069505d9bbbe654c375164e410ece7bb57fa41cac89ba8fb4d62d1e08cc8eccb0100ce9b68fadd52d4fbd8103d7053c425b916a56e1b194317011a8b15af4e31bea71867ad24a8889cca451a830b81503c51cb043ee1bf4ea26e186525a3986aa5f02862958709f5499f8b51ad451aecbdbad6d154931e16e8911d42b1698affd373909be60e064b35d51bd4acb53d32d9ad4a7c2534dfd6a913d804f745d7697f28fc2920179335d6ccecf8392bf66ab150209c01a928e8d664dfbd8239350f23c8d9d1a02e862a59b6868d35c71ecdf401c55746dfd448c4c1bac2447a56b1fc94e2852e1ead1ee7b2b991acc710a6a910cf74cc4b186bbb46246e5517d323aac2a233005969bd8ea8e480050f3b8eadbe7ae2bd22ee7a33cb5a9fdace0b7625cdf1d7a4917117c6d6105468c704176fc9cdcd5d7ce1ae8b1530d59001b208dcbb58d503df9e09b77d0127d48e627b9b34b243e0710766b38ae6164e0e8106c152aaf0681f845a6e3d59db65153cd8356ec63a64fb4cd2b7b953635e31e45126213334d6b054f5232a84306e6632e4f9cfa044ce3485e471d44bc7300ed96c821e978572f86e01fb2511e2ad8da35a40ffe8a4a477e4ff41ed1ae361ca77910ddecb612e9e19a3a8973b687c65852ed16b97834c9c8d8f5f4b0f691591d9d327ab20f5959e089333b104db98dbd5271cd4bdf22b8699ac98b1cca5116300b0ba3879cc79b72f3338682b3d27d2f954f39a5b5013f1d231936c205cfd2ea04c2c2a9eadc99038099d26228d0e669bb3925300d179002ef6f6e3f0265faa23ae3d5b65fdc79785af4dde6086c07f2a0fc316f9258dbc22b945246045a011de6810a00d6e0246be3eb7176ff70235cad801021c738b111ad1bc401ee6a352e03dd804092e35424d20cd90ca90d4b2f50a0b3dc7a14ff0f36cf63db699dfbd97f18b12364d6876bc21afb7eeced2b25f15be4e22d6673146116f138a378546f8494b69617d2cad6c2d9ecd3ec7297bb7354ce3b020f44cb50135c5daecd1066559a262077e9152e8c3647a20bc1f53c4b3817127452a7575b1a60cb5fc217045545019fdde0abfbb707885aa05d007cdb200dbd57b76a1a006981825ad775ce21d1ccc6bfb7f9a1b2be71afa56241bfc944ef182e48c9ed9fdca57e867086417974875d82eef261e15a9af759ced7051cdbe0ccf3149e00340f5724db69e94a2d5d2654afa7ef679b06129a46654dca08c268b83cb90f0c0f10a11b749c60eacefa5f3dac104fd29e0a8cd9587aea8695006a6d267ab16f0d935fd655a9287bad2c56313ca81eefaaae9f8658b27413832253e5517bf70dc70ac95cd3ddd53b92068693e8bf5eb8cb54ec9eef04cc11e2db811a4c678798024e7f1319df90dcddd577f1887d04841d82cb9f6495304eb5f2842a7d5b217375997af4251caf8bf46d219f7993e987670d6b8ee6389c5cb865338bea255eebefc5d93690bd04899db91cc3c031a8f44489dd380a213fc8bb488b34fb7980c2a7a77f78410e7fdef24406fe7178394310caecf338143dd8c346b066804b489d3b6c775548600ee200c0638d949e979143ba920af748998e8966f2db65eeb50270d1d8186a295f529cdb7c4384c5bc9f95d172d9fc5af61c13f43a6c454c133f41fc499f4f531d156a7ac6ca499fe30c63eb7968426dabc977ee9bf88a087a3a73fcf4a3d059c06a949d333ac575d7daf94881b8dd073a82cbb2385dcca9d10bd49f66daf92432dfff731c140d909c69a4db4b282054fee18d81a1e216877c4b43816e252d506eaf577715f8f0f4c6f38e610867e1403290e7d94f4f05fcb85a9e58461f074aa820e16efb5b6eb50c21c5cc99c5b9287877ee5bf42ec314fcf907a0e77c051a979562d169031e10a80d08ef597b3a363abb0719567b4118cf946d81964cc54f28831dc4d69e472c36ffa4b3c727b258ecda121e7dbb44fea897fac53cfce26d16bb50462da2935f8077c0f2717d7aabd918978be39a9c5eb35c6c4b50094a72ac7f90ab41cd4b47ae0499dcf3a36e266829f15b47c9eed7a0171bbb0044d23ba7c9169e433b906960154086874b092e23c93d0d456fe3d481d6fb9a63f6453de1f97d2aefd47e1c7c6f066178bf45e3aac7d059d0329ecf0fa9fcf4b1a0d148d09c0dd3b2de8a256726f9d307b6d7a173f1d1ab5c7764e8029dfe47cdec35b68bd4a76e7d280e54a583bf8af73523c36c9afc628947c2f64d0e7034efa3954a05465d565d7c9bd7990a8bd3304c1135694d97f70bd65e3f842d9673d37e97d9b22f2828a8d01f3aa036a1d9107c8561abd0e85150c0c3a60816c57dfa57d4c6e27a932ed24decfdf2fd21d80d471e2235d1f3eb8b292c1422282f406ab27bfa8adb5cae7a6512d5a1d417594e881d885b6fb65111c20883d4e97101324c036d0868ea54d8dc587678f3d1adb5f79d6bba21201969a91a557be0e718aef1646870b094a940da35a06427b87e6460514b5a05eda7872520814bce6b5000b80253090542971429d271db6385766d040e7d12488a99dc3ce7045fdb13ee86e810a81c188f04d621ed3cc2fbe68000aae360395786efcc39d1df508a131665f05956a35c0e188696e86f6fe1e9bb5d1008842b82c80f3863f41812ec8be9f86da", &(0x7f0000001200)="0b4adeffcdb2523129eaedbc4ceca7aaa086777aeccd7854e8ef7f817c72d828d4fe3bcbf75dfd7dde36f33a3704d4ec0d6875da552e9f70a9e09541261a5b7a8a36cfe9949d4112b1778c"}}, &(0x7f00000012c0)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xa1ffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x578fa0340d9d8709, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3}]}]}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x11c, r1, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc1e}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47d9c58a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x64}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8010) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  887.979383][T24152] FAULT_INJECTION: forcing a failure.
[  887.979383][T24152] name failslab, interval 1, probability 0, space 0, times 0
[  887.992179][T24152] CPU: 1 PID: 24152 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  888.003294][T24152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.013438][T24152] Call Trace:
[  888.016818][T24152]  <TASK>
[  888.019746][T24152]  dump_stack_lvl+0xd6/0x122
[  888.024343][T24152]  dump_stack+0x11/0x12
22:20:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x578fa0340d9d8709, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3}]}]}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x11c, r1, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc1e}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47d9c58a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x64}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8010) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  888.028535][T24152]  should_fail+0x230/0x240
[  888.033009][T24152]  __should_failslab+0x81/0x90
[  888.037777][T24152]  ? apply_wqattrs_prepare+0x64/0x650
[  888.043155][T24152]  should_failslab+0x5/0x20
[  888.047656][T24152]  kmem_cache_alloc_trace+0x4d/0x320
[  888.053059][T24152]  ? apply_wqattrs_prepare+0x3f/0x650
[  888.058459][T24152]  apply_wqattrs_prepare+0x64/0x650
[  888.063681][T24152]  apply_workqueue_attrs+0xb8/0x4f0
[  888.068894][T24152]  alloc_workqueue+0x777/0xad0
[  888.073669][T24152]  ? preempt_count_add+0x5e/0xa0
[  888.078672][T24152]  ? _raw_spin_unlock+0x2d/0x50
[  888.083577][T24152]  ? bd_prepare_to_claim+0x1ac/0x200
[  888.088883][T24152]  loop_configure+0x661/0xc90
[  888.093572][T24152]  ? terminate_walk+0x23d/0x250
[  888.098426][T24152]  lo_ioctl+0x617/0x11b0
[  888.102671][T24152]  ? avc_has_extended_perms+0x686/0x8a0
[  888.108255][T24152]  ? folio_mark_dirty+0x7c/0xc0
[  888.113114][T24152]  ? blkdev_common_ioctl+0x3ea/0x1090
[  888.118529][T24152]  ? do_vfs_ioctl+0x7b7/0x1390
[  888.123323][T24152]  ? lo_release+0x120/0x120
[  888.127833][T24152]  blkdev_ioctl+0x20e/0x440
[  888.132368][T24152]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  888.137834][T24152]  __se_sys_ioctl+0xcb/0x140
[  888.142531][T24152]  __x64_sys_ioctl+0x3f/0x50
[  888.147132][T24152]  do_syscall_64+0x2b/0x70
[  888.151690][T24152]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  888.157599][T24152] RIP: 0033:0x7fce157dbea7
[  888.162011][T24152] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  888.181623][T24152] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  888.190036][T24152] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  888.198045][T24152] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  888.206058][T24152] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  888.214032][T24152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  888.222079][T24152] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
22:20:25 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0)) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
timer_create(0x7, &(0x7f0000001280)={0x0, 0x30, 0x0, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="0b4adeffcdb2523129eaedbc4ceca7aaa086777aeccd7854e8ef7f817c72d828d4fe3bcbf75dfd7dde36f33a3704d4ec0d6875da552e9f70a9e09541261a5b7a8a36cfe9949d4112b1778c"}}, &(0x7f00000012c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:25 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x14)
dup2(r2, r2)
sendto$inet(r2, &(0x7f0000000240)="e3af8b4b", 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@mcast2, 0x4e22, 0x1, 0x4e20, 0x5, 0xa, 0x80, 0x80, 0x50}, {0x401, 0x9, 0x2, 0x6, 0x8, 0x1f, 0x8001, 0x80000000}, {0x6, 0x2, 0x5, 0x5f5b}, 0x3, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x6c}, 0x0, @in6=@private2, 0x3503, 0x2, 0x1, 0x9, 0x0, 0x3, 0x1ff}}, 0xe8)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
fcntl$addseals(r0, 0x409, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:25 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 22)

[  888.230130][T24152]  </TASK>
[  888.268990][T24186] FAULT_INJECTION: forcing a failure.
[  888.268990][T24186] name failslab, interval 1, probability 0, space 0, times 0
[  888.281660][T24186] CPU: 1 PID: 24186 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  888.292687][T24186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.302826][T24186] Call Trace:
[  888.306183][T24186]  <TASK>
[  888.309104][T24186]  dump_stack_lvl+0xd6/0x122
[  888.313831][T24186]  dump_stack+0x11/0x12
[  888.317985][T24186]  should_fail+0x230/0x240
[  888.322404][T24186]  __should_failslab+0x81/0x90
[  888.327167][T24186]  ? apply_wqattrs_prepare+0xc3/0x650
[  888.332566][T24186]  should_failslab+0x5/0x20
[  888.337063][T24186]  kmem_cache_alloc_trace+0x4d/0x320
[  888.342387][T24186]  ? apply_wqattrs_prepare+0x64/0x650
[  888.347825][T24186]  apply_wqattrs_prepare+0xc3/0x650
[  888.353032][T24186]  apply_workqueue_attrs+0xb8/0x4f0
[  888.358232][T24186]  alloc_workqueue+0x777/0xad0
[  888.362996][T24186]  ? preempt_count_add+0x5e/0xa0
[  888.367977][T24186]  ? _raw_spin_unlock+0x2d/0x50
[  888.372819][T24186]  ? bd_prepare_to_claim+0x1ac/0x200
[  888.378120][T24186]  loop_configure+0x661/0xc90
[  888.382872][T24186]  ? terminate_walk+0x23d/0x250
[  888.387781][T24186]  lo_ioctl+0x617/0x11b0
[  888.392031][T24186]  ? avc_has_extended_perms+0x686/0x8a0
[  888.397579][T24186]  ? folio_mark_dirty+0x7c/0xc0
[  888.402474][T24186]  ? blkdev_common_ioctl+0x3ea/0x1090
[  888.407845][T24186]  ? do_vfs_ioctl+0x7b7/0x1390
[  888.412638][T24186]  ? lo_release+0x120/0x120
[  888.417139][T24186]  blkdev_ioctl+0x20e/0x440
[  888.421646][T24186]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  888.427191][T24186]  __se_sys_ioctl+0xcb/0x140
[  888.431827][T24186]  __x64_sys_ioctl+0x3f/0x50
[  888.436480][T24186]  do_syscall_64+0x2b/0x70
[  888.440897][T24186]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  888.446794][T24186] RIP: 0033:0x7fce157dbea7
22:20:25 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x4, 0x0)

[  888.451199][T24186] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  888.470808][T24186] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  888.479249][T24186] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  888.487286][T24186] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  888.495261][T24186] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  888.503229][T24186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  888.511311][T24186] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  888.519287][T24186]  </TASK>
22:20:25 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

22:20:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xe4ffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:25 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x6, 0x0)

22:20:25 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x14)
dup2(r2, r2) (async)
sendto$inet(r2, &(0x7f0000000240)="e3af8b4b", 0x4, 0x0, 0x0, 0x0) (async)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@mcast2, 0x4e22, 0x1, 0x4e20, 0x5, 0xa, 0x80, 0x80, 0x50}, {0x401, 0x9, 0x2, 0x6, 0x8, 0x1f, 0x8001, 0x80000000}, {0x6, 0x2, 0x5, 0x5f5b}, 0x3, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x6c}, 0x0, @in6=@private2, 0x3503, 0x2, 0x1, 0x9, 0x0, 0x3, 0x1ff}}, 0xe8) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
fcntl$addseals(r0, 0x409, 0xb) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:25 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 23)

[  888.886225][T24204] FAULT_INJECTION: forcing a failure.
[  888.886225][T24204] name failslab, interval 1, probability 0, space 0, times 0
[  888.898979][T24204] CPU: 0 PID: 24204 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  888.910005][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.920061][T24204] Call Trace:
[  888.923338][T24204]  <TASK>
[  888.926265][T24204]  dump_stack_lvl+0xd6/0x122
[  888.930904][T24204]  dump_stack+0x11/0x12
[  888.935158][T24204]  should_fail+0x230/0x240
[  888.939591][T24204]  __should_failslab+0x81/0x90
[  888.944360][T24204]  should_failslab+0x5/0x20
[  888.948945][T24204]  kmem_cache_alloc_node+0x58/0x2c0
[  888.954146][T24204]  ? should_fail+0xd5/0x240
[  888.958708][T24204]  ? alloc_unbound_pwq+0x3d6/0x770
[  888.964019][T24204]  alloc_unbound_pwq+0x3d6/0x770
[  888.968963][T24204]  apply_wqattrs_prepare+0x218/0x650
[  888.974253][T24204]  apply_workqueue_attrs+0xb8/0x4f0
[  888.979458][T24204]  alloc_workqueue+0x777/0xad0
[  888.984298][T24204]  ? preempt_count_add+0x5e/0xa0
[  888.989238][T24204]  ? _raw_spin_unlock+0x2d/0x50
[  888.994087][T24204]  ? bd_prepare_to_claim+0x1ac/0x200
[  888.999379][T24204]  loop_configure+0x661/0xc90
[  889.004091][T24204]  ? terminate_walk+0x23d/0x250
[  889.008944][T24204]  lo_ioctl+0x617/0x11b0
[  889.013241][T24204]  ? avc_has_extended_perms+0x686/0x8a0
[  889.018784][T24204]  ? folio_mark_dirty+0x7c/0xc0
[  889.023662][T24204]  ? blkdev_common_ioctl+0x3ea/0x1090
[  889.029035][T24204]  ? do_vfs_ioctl+0x7b7/0x1390
[  889.033871][T24204]  ? lo_release+0x120/0x120
[  889.038370][T24204]  blkdev_ioctl+0x20e/0x440
[  889.042995][T24204]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  889.048454][T24204]  __se_sys_ioctl+0xcb/0x140
[  889.053047][T24204]  __x64_sys_ioctl+0x3f/0x50
[  889.057657][T24204]  do_syscall_64+0x2b/0x70
[  889.062076][T24204]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  889.067967][T24204] RIP: 0033:0x7fce157dbea7
[  889.072378][T24204] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  889.091979][T24204] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  889.100447][T24204] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  889.108426][T24204] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  889.116406][T24204] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  889.124440][T24204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
22:20:26 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 24)

22:20:26 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x14)
dup2(r2, r2)
sendto$inet(r2, &(0x7f0000000240)="e3af8b4b", 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@mcast2, 0x4e22, 0x1, 0x4e20, 0x5, 0xa, 0x80, 0x80, 0x50}, {0x401, 0x9, 0x2, 0x6, 0x8, 0x1f, 0x8001, 0x80000000}, {0x6, 0x2, 0x5, 0x5f5b}, 0x3, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x6c}, 0x0, @in6=@private2, 0x3503, 0x2, 0x1, 0x9, 0x0, 0x3, 0x1ff}}, 0xe8)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
fcntl$addseals(r0, 0x409, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x14) (async)
dup2(r2, r2) (async)
sendto$inet(r2, &(0x7f0000000240)="e3af8b4b", 0x4, 0x0, 0x0, 0x0) (async)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@mcast2, 0x4e22, 0x1, 0x4e20, 0x5, 0xa, 0x80, 0x80, 0x50}, {0x401, 0x9, 0x2, 0x6, 0x8, 0x1f, 0x8001, 0x80000000}, {0x6, 0x2, 0x5, 0x5f5b}, 0x3, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x6c}, 0x0, @in6=@private2, 0x3503, 0x2, 0x1, 0x9, 0x0, 0x3, 0x1ff}}, 0xe8) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
fcntl$addseals(r0, 0x409, 0xb) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async)

22:20:26 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)

[  889.132412][T24204] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  889.140388][T24204]  </TASK>
[  889.181115][T24218] FAULT_INJECTION: forcing a failure.
[  889.181115][T24218] name failslab, interval 1, probability 0, space 0, times 0
[  889.193806][T24218] CPU: 1 PID: 24218 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  889.204872][T24218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  889.214995][T24218] Call Trace:
[  889.218274][T24218]  <TASK>
[  889.221198][T24218]  dump_stack_lvl+0xd6/0x122
[  889.225872][T24218]  dump_stack+0x11/0x12
[  889.230085][T24218]  should_fail+0x230/0x240
[  889.234506][T24218]  __should_failslab+0x81/0x90
[  889.239279][T24218]  ? kobject_uevent_env+0x19c/0x580
[  889.244494][T24218]  should_failslab+0x5/0x20
[  889.249069][T24218]  kmem_cache_alloc_trace+0x4d/0x320
[  889.254360][T24218]  kobject_uevent_env+0x19c/0x580
[  889.259465][T24218]  ? preempt_count_add+0x5e/0xa0
[  889.264410][T24218]  disk_force_media_change+0xe3/0x180
[  889.269893][T24218]  loop_configure+0x6a0/0xc90
[  889.274579][T24218]  ? terminate_walk+0x23d/0x250
[  889.279441][T24218]  lo_ioctl+0x617/0x11b0
[  889.283723][T24218]  ? avc_has_extended_perms+0x686/0x8a0
[  889.289269][T24218]  ? folio_mark_dirty+0x7c/0xc0
[  889.294131][T24218]  ? blkdev_common_ioctl+0x3ea/0x1090
[  889.299558][T24218]  ? do_vfs_ioctl+0x7b7/0x1390
[  889.304380][T24218]  ? lo_release+0x120/0x120
[  889.308879][T24218]  blkdev_ioctl+0x20e/0x440
[  889.313451][T24218]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  889.318961][T24218]  __se_sys_ioctl+0xcb/0x140
[  889.323562][T24218]  __x64_sys_ioctl+0x3f/0x50
[  889.328179][T24218]  do_syscall_64+0x2b/0x70
[  889.332605][T24218]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  889.338502][T24218] RIP: 0033:0x7fce157dbea7
[  889.342914][T24218] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  889.362525][T24218] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  889.370949][T24218] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  889.379028][T24218] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  889.386998][T24218] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  889.394969][T24218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  889.402937][T24218] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  889.410912][T24218]  </TASK>
[  889.415568][T24218] loop5: detected capacity change from 0 to 16383
[  889.472129][T24218] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  889.493446][T24218] EXT4-fs (loop5): get root inode failed
[  889.499162][T24218] EXT4-fs (loop5): mount failed
22:20:28 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xec000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:28 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x7, 0x0)

22:20:28 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b097cb593eb400ec7150cb00eaab180000000010000000010000061400000000000000ffffffc514"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000100)=""/166, 0x41000, 0xfd4fc19ae9af6e81, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, r3, r2]}, 0x80)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

22:20:28 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 25)

22:20:28 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)

[  891.267616][T24249] FAULT_INJECTION: forcing a failure.
[  891.267616][T24249] name failslab, interval 1, probability 0, space 0, times 0
[  891.280272][T24249] CPU: 0 PID: 24249 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  891.291295][T24249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  891.301424][T24249] Call Trace:
[  891.304709][T24249]  <TASK>
[  891.307633][T24249]  dump_stack_lvl+0xd6/0x122
[  891.312260][T24249]  dump_stack+0x11/0x12
22:20:28 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
r3 = semget$private(0x0, 0x4, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000000180)=""/4096)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  891.316417][T24249]  should_fail+0x230/0x240
[  891.320836][T24249]  ? kobject_get_path+0x87/0x120
[  891.325780][T24249]  __should_failslab+0x81/0x90
[  891.330546][T24249]  should_failslab+0x5/0x20
[  891.335051][T24249]  __kmalloc+0x66/0x350
[  891.339236][T24249]  ? kmem_cache_alloc_trace+0x250/0x320
[  891.344796][T24249]  kobject_get_path+0x87/0x120
[  891.349574][T24249]  kobject_uevent_env+0x1b7/0x580
[  891.354606][T24249]  ? preempt_count_add+0x5e/0xa0
[  891.359561][T24249]  disk_force_media_change+0xe3/0x180
[  891.364931][T24249]  loop_configure+0x6a0/0xc90
[  891.369608][T24249]  ? terminate_walk+0x23d/0x250
[  891.374543][T24249]  lo_ioctl+0x617/0x11b0
[  891.378825][T24249]  ? avc_has_extended_perms+0x686/0x8a0
[  891.384467][T24249]  ? folio_mark_dirty+0x7c/0xc0
[  891.389406][T24249]  ? blkdev_common_ioctl+0x3ea/0x1090
[  891.394783][T24249]  ? do_vfs_ioctl+0x7b7/0x1390
[  891.399547][T24249]  ? lo_release+0x120/0x120
[  891.404054][T24249]  blkdev_ioctl+0x20e/0x440
[  891.408567][T24249]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  891.414057][T24249]  __se_sys_ioctl+0xcb/0x140
[  891.418648][T24249]  __x64_sys_ioctl+0x3f/0x50
[  891.423325][T24249]  do_syscall_64+0x2b/0x70
[  891.427773][T24249]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  891.433674][T24249] RIP: 0033:0x7fce157dbea7
[  891.438098][T24249] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  891.457702][T24249] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
22:20:28 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
r3 = semget$private(0x0, 0x4, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000000180)=""/4096)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semget$private(0x0, 0x4, 0x0) (async)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000000180)=""/4096) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  891.466273][T24249] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  891.474297][T24249] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  891.482371][T24249] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  891.490398][T24249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  891.498368][T24249] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  891.506455][T24249]  </TASK>
22:20:28 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0) (async)
r3 = semget$private(0x0, 0x4, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000000180)=""/4096) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:28 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x82, 0x0)

22:20:28 executing program 0:
mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="34ec7af066ef8f1bc4e36e8a874d39c0e1954bc1221263ddf28aa05d384d79281ae935002dcece1db3f3faebc180359cad7afe29a1da1fc957e511dd8b6d2dbb59bfa0e4c617215e350e7d22a2b025ecf84547be915782f62757aad7cdc2562a35d14fdb845e86ec0e72c5edc22121d8d8c04d9f4e410979b85e3beec28ee15cbd1c8f0b111e387e3954d29c2ddbceeae54ffa1efe17a5f0466bb73517e4e137347e88af00ca5e270708b3c311e9607e1fcd", 0xb2, 0x2f1b, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:28 executing program 0:
mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="34ec7af066ef8f1bc4e36e8a874d39c0e1954bc1221263ddf28aa05d384d79281ae935002dcece1db3f3faebc180359cad7afe29a1da1fc957e511dd8b6d2dbb59bfa0e4c617215e350e7d22a2b025ecf84547be915782f62757aad7cdc2562a35d14fdb845e86ec0e72c5edc22121d8d8c04d9f4e410979b85e3beec28ee15cbd1c8f0b111e387e3954d29c2ddbceeae54ffa1efe17a5f0466bb73517e4e137347e88af00ca5e270708b3c311e9607e1fcd", 0xb2, 0x2f1b, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:28 executing program 0:
mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="34ec7af066ef8f1bc4e36e8a874d39c0e1954bc1221263ddf28aa05d384d79281ae935002dcece1db3f3faebc180359cad7afe29a1da1fc957e511dd8b6d2dbb59bfa0e4c617215e350e7d22a2b025ecf84547be915782f62757aad7cdc2562a35d14fdb845e86ec0e72c5edc22121d8d8c04d9f4e410979b85e3beec28ee15cbd1c8f0b111e387e3954d29c2ddbceeae54ffa1efe17a5f0466bb73517e4e137347e88af00ca5e270708b3c311e9607e1fcd", 0xb2, 0x2f1b, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="34ec7af066ef8f1bc4e36e8a874d39c0e1954bc1221263ddf28aa05d384d79281ae935002dcece1db3f3faebc180359cad7afe29a1da1fc957e511dd8b6d2dbb59bfa0e4c617215e350e7d22a2b025ecf84547be915782f62757aad7cdc2562a35d14fdb845e86ec0e72c5edc22121d8d8c04d9f4e410979b85e3beec28ee15cbd1c8f0b111e387e3954d29c2ddbceeae54ffa1efe17a5f0466bb73517e4e137347e88af00ca5e270708b3c311e9607e1fcd", 0xb2, 0x2f1b, &(0x7f0000000240)) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:28 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xf6ffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:28 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x4, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x1, @tid=r3}, &(0x7f00000001c0))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:28 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b097cb593eb400ec7150cb00eaab180000000010000000010000061400000000000000ffffffc514"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000100)=""/166, 0x41000, 0xfd4fc19ae9af6e81, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, r3, r2]}, 0x80)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
fcntl$setlease(r0, 0x400, 0x2) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b097cb593eb400ec7150cb00eaab180000000010000000010000061400000000000000ffffffc514"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000100)=""/166, 0x41000, 0xfd4fc19ae9af6e81, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, r3, r2]}, 0x80) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0) (async)

[  891.845255][T24249] loop5: detected capacity change from 0 to 16383
[  891.880017][T24249] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  891.966473][T24249] EXT4-fs (loop5): get root inode failed
[  891.972196][T24249] EXT4-fs (loop5): mount failed
22:20:28 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 26)

22:20:28 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)

22:20:28 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x4, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x1, @tid=r3}, &(0x7f00000001c0))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x4, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
getpid() (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x1, @tid=r3}, &(0x7f00000001c0)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  892.062526][T24338] FAULT_INJECTION: forcing a failure.
[  892.062526][T24338] name failslab, interval 1, probability 0, space 0, times 0
[  892.075211][T24338] CPU: 1 PID: 24338 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  892.086290][T24338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  892.096344][T24338] Call Trace:
[  892.099612][T24338]  <TASK>
[  892.102531][T24338]  dump_stack_lvl+0xd6/0x122
[  892.107117][T24338]  dump_stack+0x11/0x12
[  892.111259][T24338]  should_fail+0x230/0x240
[  892.115787][T24338]  __should_failslab+0x81/0x90
[  892.120630][T24338]  should_failslab+0x5/0x20
[  892.125127][T24338]  kmem_cache_alloc_node+0x58/0x2c0
[  892.130366][T24338]  ? vsnprintf+0xe2a/0xe80
[  892.134792][T24338]  ? __alloc_skb+0xfc/0x450
[  892.139310][T24338]  __alloc_skb+0xfc/0x450
[  892.143631][T24338]  alloc_uevent_skb+0x5b/0x120
[  892.148387][T24338]  kobject_uevent_net_broadcast+0x243/0x410
[  892.154315][T24338]  kobject_uevent_env+0x446/0x580
[  892.159337][T24338]  disk_force_media_change+0xe3/0x180
[  892.164798][T24338]  loop_configure+0x6a0/0xc90
[  892.169462][T24338]  ? terminate_walk+0x23d/0x250
[  892.174301][T24338]  lo_ioctl+0x617/0x11b0
[  892.178546][T24338]  ? avc_has_extended_perms+0x686/0x8a0
[  892.184094][T24338]  ? folio_mark_dirty+0x7c/0xc0
[  892.188970][T24338]  ? blkdev_common_ioctl+0x3ea/0x1090
[  892.194340][T24338]  ? do_vfs_ioctl+0x7b7/0x1390
[  892.199149][T24338]  ? lo_release+0x120/0x120
[  892.203642][T24338]  blkdev_ioctl+0x20e/0x440
[  892.208232][T24338]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  892.213685][T24338]  __se_sys_ioctl+0xcb/0x140
[  892.218274][T24338]  __x64_sys_ioctl+0x3f/0x50
[  892.222851][T24338]  do_syscall_64+0x2b/0x70
[  892.227258][T24338]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  892.233183][T24338] RIP: 0033:0x7fce157dbea7
[  892.237586][T24338] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
22:20:28 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x4, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x1, @tid=r3}, &(0x7f00000001c0)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  892.257218][T24338] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  892.265620][T24338] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  892.273576][T24338] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  892.281575][T24338] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  892.289552][T24338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  892.297606][T24338] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  892.305652][T24338]  </TASK>
22:20:29 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
fcntl$setlease(r0, 0x400, 0x2) (async)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b097cb593eb400ec7150cb00eaab180000000010000000010000061400000000000000ffffffc514"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000100)=""/166, 0x41000, 0xfd4fc19ae9af6e81, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, r3, r2]}, 0x80)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x660c, 0x0)

[  892.312106][T24338] loop5: detected capacity change from 0 to 16383
22:20:29 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x90, 0x0)

22:20:29 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x5, &(0x7f0000000280)={0x0, 0x3e}, &(0x7f00000002c0)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000300)={{r3, r4+60000000}, {0x0, 0x3938700}}, &(0x7f0000000340))
r5 = semget$private(0x0, 0x1, 0x2)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r6=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0)
timer_settime(r6, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000001c0))

22:20:29 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0xbffffffffffffffc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  892.340678][T24338] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  892.368300][T24338] EXT4-fs (loop5): get root inode failed
[  892.374018][T24338] EXT4-fs (loop5): mount failed
22:20:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 27)

[  892.433073][T24361] FAULT_INJECTION: forcing a failure.
[  892.433073][T24361] name failslab, interval 1, probability 0, space 0, times 0
[  892.445817][T24361] CPU: 0 PID: 24361 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  892.456851][T24361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  892.466908][T24361] Call Trace:
[  892.470186][T24361]  <TASK>
[  892.473132][T24361]  dump_stack_lvl+0xd6/0x122
[  892.477730][T24361]  dump_stack+0x11/0x12
[  892.482044][T24361]  should_fail+0x230/0x240
[  892.486465][T24361]  __should_failslab+0x81/0x90
[  892.491234][T24361]  should_failslab+0x5/0x20
[  892.495731][T24361]  kmem_cache_alloc_node_trace+0x58/0x300
[  892.501469][T24361]  ? kmem_cache_alloc_node+0x1e4/0x2c0
[  892.506926][T24361]  ? __alloc_skb+0x1a7/0x450
[  892.511545][T24361]  ? alloc_uevent_skb+0x5b/0x120
[  892.516646][T24361]  __alloc_skb+0x1a7/0x450
[  892.521062][T24361]  alloc_uevent_skb+0x5b/0x120
[  892.525828][T24361]  kobject_uevent_net_broadcast+0x243/0x410
[  892.531718][T24361]  kobject_uevent_env+0x446/0x580
[  892.536801][T24361]  disk_force_media_change+0xe3/0x180
[  892.542278][T24361]  loop_configure+0x6a0/0xc90
[  892.546954][T24361]  ? terminate_walk+0x23d/0x250
[  892.551838][T24361]  lo_ioctl+0x617/0x11b0
[  892.556111][T24361]  ? avc_has_extended_perms+0x686/0x8a0
[  892.561657][T24361]  ? folio_mark_dirty+0x7c/0xc0
[  892.566586][T24361]  ? blkdev_common_ioctl+0x3ea/0x1090
[  892.572094][T24361]  ? do_vfs_ioctl+0x7b7/0x1390
[  892.576855][T24361]  ? lo_release+0x120/0x120
[  892.581357][T24361]  blkdev_ioctl+0x20e/0x440
[  892.585892][T24361]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  892.591417][T24361]  __se_sys_ioctl+0xcb/0x140
[  892.596038][T24361]  __x64_sys_ioctl+0x3f/0x50
[  892.600627][T24361]  do_syscall_64+0x2b/0x70
[  892.605081][T24361]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  892.611053][T24361] RIP: 0033:0x7fce157dbea7
[  892.615464][T24361] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  892.635070][T24361] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  892.643481][T24361] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  892.651451][T24361] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  892.659417][T24361] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  892.667383][T24361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  892.675356][T24361] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  892.683334][T24361]  </TASK>
22:20:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfbffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:29 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  892.777980][T24361] loop5: detected capacity change from 0 to 16383
[  892.802003][T24361] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  892.816886][T24361] EXT4-fs (loop5): get root inode failed
[  892.822638][T24361] EXT4-fs (loop5): mount failed
22:20:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 28)

22:20:29 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0xbffffffffffffffc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0xbffffffffffffffc, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)

[  892.912408][T24370] FAULT_INJECTION: forcing a failure.
[  892.912408][T24370] name failslab, interval 1, probability 0, space 0, times 0
[  892.925115][T24370] CPU: 0 PID: 24370 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  892.936204][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  892.946305][T24370] Call Trace:
[  892.949738][T24370]  <TASK>
[  892.952669][T24370]  dump_stack_lvl+0xd6/0x122
[  892.957444][T24370]  dump_stack+0x11/0x12
[  892.961632][T24370]  should_fail+0x230/0x240
[  892.966064][T24370]  __should_failslab+0x81/0x90
[  892.970837][T24370]  ? skb_clone+0x12c/0x1e0
[  892.975315][T24370]  should_failslab+0x5/0x20
[  892.979917][T24370]  kmem_cache_alloc+0x46/0x300
[  892.984681][T24370]  skb_clone+0x12c/0x1e0
[  892.988928][T24370]  netlink_broadcast+0x4e9/0xb30
[  892.993864][T24370]  kobject_uevent_net_broadcast+0x2a9/0x410
[  892.999825][T24370]  kobject_uevent_env+0x446/0x580
[  893.004889][T24370]  disk_force_media_change+0xe3/0x180
[  893.010273][T24370]  loop_configure+0x6a0/0xc90
[  893.015000][T24370]  ? terminate_walk+0x23d/0x250
[  893.019915][T24370]  lo_ioctl+0x617/0x11b0
[  893.024161][T24370]  ? avc_has_extended_perms+0x686/0x8a0
[  893.029782][T24370]  ? folio_mark_dirty+0x7c/0xc0
[  893.034720][T24370]  ? blkdev_common_ioctl+0x3ea/0x1090
[  893.040110][T24370]  ? do_vfs_ioctl+0x7b7/0x1390
[  893.044875][T24370]  ? lo_release+0x120/0x120
[  893.049401][T24370]  blkdev_ioctl+0x20e/0x440
[  893.053905][T24370]  ? blkdev_compat_ptr_ioctl+0x80/0x80
22:20:29 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x204, 0x0)

[  893.059388][T24370]  __se_sys_ioctl+0xcb/0x140
[  893.064032][T24370]  __x64_sys_ioctl+0x3f/0x50
[  893.068624][T24370]  do_syscall_64+0x2b/0x70
[  893.073045][T24370]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  893.078949][T24370] RIP: 0033:0x7fce157dbea7
[  893.083362][T24370] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  893.102997][T24370] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  893.111413][T24370] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  893.119450][T24370] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  893.127478][T24370] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  893.135455][T24370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  893.143507][T24370] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  893.151484][T24370]  </TASK>
22:20:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfd110000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:30 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0xbffffffffffffffc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:30 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

22:20:30 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x300, 0x0)

[  893.556796][T24370] loop5: detected capacity change from 0 to 16383
[  893.587047][T24370] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  893.599701][T24370] EXT4-fs (loop5): get root inode failed
[  893.605379][T24370] EXT4-fs (loop5): mount failed
22:20:32 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
timer_create(0x5, &(0x7f0000000280)={0x0, 0x3e}, &(0x7f00000002c0)=<r1=>0x0) (rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000300)={{r3, r4+60000000}, {0x0, 0x3938700}}, &(0x7f0000000340))
r5 = semget$private(0x0, 0x1, 0x2)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
timer_settime(r0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) (rerun: 32)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r6=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0) (async)
timer_settime(r6, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000001c0))

22:20:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 29)

22:20:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfeffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:32 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000000), 0xffffffffffffff65)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240))
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x54d800, 0x5)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000880)={{r3}, "6d19e0f786157c540ab72e450ada7d0b7d701943dc571ba9b5c433cabedc3052d4fbe2048832b3630e0ff051ebb77d4de71065b1c5fae4499d9df949bd8bb2612d57112d49e111608a7f3ec76381f0be041fa23ce31319162268397daa952f192fb20f2f79312a8b98524b722842e722da20c52963fb2588e623d8f85029566693fd1ea11d3c1fdd78df6acedd838ee3d8e66631f6bea0aa4d5abf3b71211e8e51ec2316796e51881ced121e076e3b936f64a6751da7cfaefb487764ae606a1f12e1ead6fc5b1939d028b518eac86fcb7b9d063acfeea18fe4b06d7e1ae7e46b38d764b4c97724c79bdab317f850bac908db28b7e94efe6a6afac9e55d039d55e7c6b067e845bbc6e02648990850f7550f8b74fb6574853f0c5220a39c8130dad5403893cb24063ada86153f1775abf6b0abd264def33abad88c6c680d18037b297f1a389fade7628608a9bfc5502c0397cb9e41794ccd1373187fcb87b103cc13d013089f1f33e9a2810d0f7df37b48cb5b91e009a2696679acc274875736287a5f47095cb2f9f47255fc1364c315e9c165da5e8e1b7124ea386d37970afcdcafc9ee46a2e536e17f5680c8b4e5176854313ce30b23290c10a1e681678b142921ec289a2437307e97437f535ae0afca17877915a5d2dc93e06f465aa558909f2a510f4945e67b881ca9b4217a8ca0b5f84903a6ed5336ef492a87b073233f69f5db658889849ab5fcaafb43ade3d64958dedb84530a2479d31020021bf83030bd8a46739aeb1243ea5323621c4691b77db9fa0235781444db57f0f653bcfe061a0498b05b474b183779055100fa4493df4ca013978c53d04682b691b57354991d77c32457f6a1d7cba15d8aa604bd813d2c13ef5fbac9e9add54ccbecad465044ad5f1912bd0577766afead2b04a41d39df110d0440fb97926b9eb99f16244240d3932340a07cfca428ffd0b987c900fb5205d15abbfc5849b8d42b5de4fe471a6360b51535afc15e5b140ec34faeef4ae6168b964abf17a16f3cd07db04642c735299751c4b054724a3d23de333c698590830508e690c8e2dce42542991af1a11c5f7c143edc53dc5c498f1eafb7afce9b51822f583396fd740eaaa41802e92a42b4d8df6d43f4a188290bcb8bc3abcdc4c516623c7af7f357d13e4a01b1c98fe16ec3795a40b01e8e6fe8460d8507e243bb81ff59b1b613015e62549e502c5990b38959525334f68e1cbee1acc9632591732899dd36ad29eb44f90bd7df93c276c0de1466f5a370c215634197a4f6fb16113e0c4c77de04e2d30bc62e80ce9c5418b1baeba3819f3c2a6309cb1abc0ede140d6f0db3ef1423f48782bc54ddd00f5ba4f18da59ed957c8511ed82dc9a2ab436a577f9c296e21d09b65fa78284e92f0733d903f316c9e83a094929908a8a294b7b2c3e99b8de081d52eda10ec3373d625ea3fc70f1e63a4990b59016e23ddff6ba03e4aecf4c3deb01b33d9d99cf63676b960d7cada7dc8688a53e31970a4585aabbc002463e7e2ce635c2aedfddc0e0bfcddc497a1a8794ccaeab6a91392885b17b0498adaa63fe30c86777ae248cc44069a0ead610f450c452be7a80a351407937dcc2645169137b612dc87ee6c050e14ab2021004d4e613f9d8e5c4cbc78f65729aad0fb60b9681f409ebefa94c76c855865af570934d3060bc1601a3d68af3d0ebbe90455cddfd75e653734d2036c0410e57e9071ae9a8c3f3d9209e4feba5fba7752742523b4fe6528717602c456275cf612936dcffba00a17b108609ff4b43927d19d0a5722b6b8d5dadb3bc5d4572ebf8ec48cb13a5df7db0c3f384530e0e79711c7f28e017e0aa01bd1839314a04f00a84809d1a2ffc92223c0b381cdc07977793a164e4519d096aa4f993baa1f5b11736ea10bc002a0c5b07d80e116f18da5a77386cebbe5e4db57c6730f9d99f30326e724355e92c336451634cafc9d39300c226fb9e924481512eabf0df475d7716daf6e215cc27abeaa4bb382674a8ea31478d28b9863f1661e3eba80f25097d9c95f6a480075a4478002b616c6c6370e79b1b56c897156371bf0cec6c1029043b2782114ae8ca0c18ac8a7fa9c493abe0e6ad56bba716bd20008cac31321545ee7158988644ca25b24878840d1a39f3bfbf56779952a20d8b305201159e057bbc60dc76e61eed175e4b9f04935e20b1ed4b1b81433f7b1d4ab1b9add37be858670688f44addaabd343c715eeea933c786fca18a4379c77f271b5b026bf5dffaae317beb7e2d7b3d83e4de451ee6d09f69e53f0763a9b138cf92454a6cc55b89cc40a171fd915e653ff35c5deb0dbe3e0f8e9c5d450916b9cd23c4daa845c74040b89ead8433c086285b64319b8b075fbd555913c85b8ed67bb8659be7f440e2544bcf21e5682199b79b1c61598a29a21b46f9f4d5486ed1f2ac9cefb1c60d4e56f88f6c2b2b558fe415004d65a3eceb788c90958cbc06927aff6ceb60f48695bbe5cb837ab5700c71fbd80c11a3ccc255947cff2a8a4ea6155b84ef4c629084f9205293a7fa0eb80f3f16dcf4f689c40c01cdaa745bf5308a9b6bc5c4d46c78aaf455f53a0723543de901a553df236d8fa958c444212031c4a458c6b16478a4f0cdc99144442b329fad154a5daf984d148ee6fe06e9bad8eb47a12b8a91c2d97ba2b042bd332761fcb31698586b3edc964b799189de3b6022582c8da7e00db8c2901bb67d41ab48e5c85be1a6afdd4ee3e22d82ff214d2b2b21ff1ed3814c1e96a7661523f257e9de53c6770af0ceab698cb8aad043b5e7161edc164af8ba6c009d8a5fde017bd33365e93ca995691e007df41dfe6fbca6ae9015ef84b31b03c66f6eb661b467e1372637935009dec7dd490e7519a9cbd1f05d93d7211b2169685c490cf684dec6b640cce15bafd3881014872b3acd5d70770c2b82fd1e0ab4fb9e1318834e681ddd151b159a58804d5f484b119c40b45354ba9532d7692501dee841ef091e56e27a3d3865e0eb682864473552f3e651a672f1be3ae8631b44ade0f5dd0ce3f119147a4c3489bb43b0148733f38228507223a660fa1440c3a5d32f4fb47f349b7f9ca3a71b36dbb784b5642a6f2034c0d25440dac7d776aa8b805fcd9bb07a5ed11009671df5b410b603c5aec9cee52b277c13ae334c668a9aec0afea63c3eb8e5da726cb7140926c9faaceadf68f4bb48f6f830818270e5b9d6af1b8851cee5e50212c1a16a9c12d8592f833701f08ad3a9acb21f87a0fc3303ac6af3ed3b33737d0ccefd515acd4cb052511e456556c16343208eb758fe3a80af70a256805d419587598126ea0973418c239fd499d0d30d4a007c0a10fe3c332adbc5c71c5d264f2cb6a6e6a42b7aa65bd76c7957c47c4dff2c74d871706158b6eaed4cf2ae50e589deb321722727467b9b7a2902248ba470400108e623eea47a8c6dfaa58c8e6b254bb4c937ae534f3be393d5af665023f57a688faf80b8527ef56eb34b77508f799b38677fb3cf0a674dd4756b433a18b124f1afc88d8c58b4186c0ce64717ea92bc069e7b3320d655ac8884779eeb3e06f004a711c1e95a16535821043da11152d9d7315fbfc99bf4221aa9aefa110701319532b6baa97fcf34b73969ea59377013cd10464c55cfbc474b3793125982591319e61bc6cdda4ab22f1fc1388a374c8fda1420770ea884cd6f1203270bd1ab66ee4431edcfd2b03295543c7b180944dd5075e8d8db85319ff56f82fe4d83d303e7c2181d83d6ef58dde1481e7abd0ae07824ac099075dfe215aaaa73156d010ccbc12c2712b559842eb8911ff1a0cf85ea6999338336ff8c28beaef8d1490068231dee498d4b912afca23c81d09d5c5b5b43e7d7e4ff97d1e94504f1ea423db4739b82b461b000445ac8767467b464f5beace37892139ca79a845d686ace4b9cc04762210650260a2bbd1fe72b8ed51236e05ea6775d7485838ce1e691f1fc1ab14debeb3019699fd28508700a2a7e1f3749536cbe6f2e99039c5491666ce5a35023aae13860ce628379f078fccbff0037131cd5b17ab51a1b13db0a3f7267de024b09da4dadc41d1f3e07f8291e935cd17a570a46ef65e74485df0024b4bb6454f1721bec77f0357d20a3066b5a52d065329f54cde6280dae33481981cded99a7d122d69a3fe67238a5f7fc08acb69223a5da9f78aee8f958b899642d3ba13b8ffb67c566ae12b543350bd5380e0fa74ed74968efe912fd945466a8cfdfb9d123dcc44920abea752eebf365d77410e0d5f5b2aa0aed4b7a7d6cecf228d804760e94d0d22d0c9ffa924010ebc39019f065f7f5c5604243b9efcb23700b10f94da1d66106f8e652d338def442661b8d24722101aaf5a7674e154dd84298cb4f7fbeffd6dfc562878a95e9d37c8bf928ec41db56dbb78e0d46f6fb18dbb6f3cc03a748d5063fc7ce1d3b2f518c2b825c3f0f620ac37641dfdeb6be2828ff2a40388f8825008a06241d20be70284794d88884ab4dd7dba8cf4b7d10430c98c47d6cc670f96d3f08a8572d6f7bc240ce5db7adc858218f2efd55944bccf3cdb40394d665939a7228e17e4d8533a16d6208f1b168d4335aa84e0824d62359691b11e77966e4cd4fcf31f0eeec72e165dac031f5dfd654cf009e002fc96f08c2e880ecb2021cd56f64617a330e7cee92e86deeef97d854191c88c8b94148f224c3f83d1e54318301017d405c1c5cf40d577c548189be560690c83c283dc0ee8493c000b004e5735af5ebc2168bc23006fdb10e2ca27868f3521a221ef3524e4ad795e923b3fc6d2bed98390416e2346a9c15f2e405ef4c63a45d41aa2d05e37e17ad1d8cfb5d3aecefe1a253cf3e22437d497781d2e4e37fa8af27a9855fd6952d3838ac2f8c7638aa1b42b56d894fc887c4a48fe356bad7e422b36af879bb44b8ac6002a7a295cf433c0c839c33f6126100d51f3d7fea89d81026042c95586628c66df33384c0bb4addcb38d7dc9ea3bbfb872a18bba2b367ccd0342705f4bf4364680328b67084a572c6a627b567a5797ab4828c919574486dca32cc629a2a4423fdea476d4f022bc1dc0db5168100247b470457cd116c140f1194b2c51cd3b728a02155d2df01f105e7281ba3a852a58495f672aee050a670592f038deb180b63cfa2fd84a575935cac722fdf15de54d7fbd129796caf6f9777f43796fd5563d9b7c9551ce832b6878610ae6f6bff0b4c2f4e9e9642d2543df6f02c11c6fd92ed087758b2aa55f72335118cf1ebcfbe098a13f2fb440445e1124dde493033849b7bed54e9868296016de2bc84953da0f7bbc20d7b28e7af11f2cabbb5332052a9905d443e09f0adf530e47454ecfd3ea14b09410b60797a965adb7bd475531128b2081375eabb5bbeea4faff956c30d0b12305b4a459f720b1702732b832bb91e511a262713be55c6ab5f767dd00c3345d566ce8ab7e74033f6a2211e7fac121bf4ade9250ce0ae14edfe17a42af7a3e92e7007aa91df9ff125b087246680d382369813580e44c210a357abe220d375fa43677b519db20e5c05edcb1203e9c681e64012ac7a6e1cbff394412b9444c1b86b4187bb2378fae2bfc3e18cf40fbf0bfc242401f138ce164482b26c18b4be9109aaffc1a5fc6029323863cb3cc365a73d3e105027219c7ef5392002a3dc59777f81dca14d3adfe7ab8af8a002bcdabe74a71f385808c94175b1f8de08a069ca2b634227ada29fc59eb6445afa0a35774d6a85c7340a84cd5bc864bb9cfd27c5b8955ece4ddede1"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:32 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:32 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x36e, 0x0)

[  895.402433][T24417] FAULT_INJECTION: forcing a failure.
[  895.402433][T24417] name failslab, interval 1, probability 0, space 0, times 0
[  895.415086][T24417] CPU: 1 PID: 24417 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  895.426149][T24417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  895.436253][T24417] Call Trace:
[  895.439528][T24417]  <TASK>
[  895.442454][T24417]  dump_stack_lvl+0xd6/0x122
[  895.447050][T24417]  dump_stack+0x11/0x12
[  895.451289][T24417]  should_fail+0x230/0x240
[  895.455750][T24417]  __should_failslab+0x81/0x90
[  895.460515][T24417]  ? __kernfs_new_node+0x6a/0x330
[  895.465551][T24417]  should_failslab+0x5/0x20
[  895.470180][T24417]  kmem_cache_alloc+0x46/0x300
[  895.475012][T24417]  __kernfs_new_node+0x6a/0x330
[  895.479918][T24417]  ? selinux_sb_statfs+0xef/0x110
[  895.485010][T24417]  kernfs_create_dir_ns+0x5e/0x140
[  895.490203][T24417]  internal_create_group+0x14c/0x830
[  895.495526][T24417]  sysfs_create_group+0x1b/0x20
[  895.500416][T24417]  loop_configure+0xa90/0xc90
[  895.505098][T24417]  lo_ioctl+0x617/0x11b0
[  895.509367][T24417]  ? avc_has_extended_perms+0x686/0x8a0
[  895.514916][T24417]  ? folio_mark_dirty+0x7c/0xc0
[  895.519823][T24417]  ? blkdev_common_ioctl+0x3ea/0x1090
[  895.525229][T24417]  ? do_vfs_ioctl+0x7b7/0x1390
[  895.529996][T24417]  ? lo_release+0x120/0x120
[  895.534502][T24417]  blkdev_ioctl+0x20e/0x440
[  895.539013][T24417]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  895.544473][T24417]  __se_sys_ioctl+0xcb/0x140
[  895.549064][T24417]  __x64_sys_ioctl+0x3f/0x50
[  895.553667][T24417]  do_syscall_64+0x2b/0x70
[  895.558094][T24417]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  895.563991][T24417] RIP: 0033:0x7fce157dbea7
[  895.568407][T24417] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  895.588018][T24417] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
22:20:32 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000000), 0xffffffffffffff65) (async, rerun: 32)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (rerun: 32)
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)) (async, rerun: 32)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x54d800, 0x5) (rerun: 32)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000880)={{r3}, "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"}) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 32)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (rerun: 64)

22:20:32 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32)
timer_create(0x5, &(0x7f0000000280)={0x0, 0x3e}, &(0x7f00000002c0)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000300)={{r3, r4+60000000}, {0x0, 0x3938700}}, &(0x7f0000000340)) (async)
r5 = semget$private(0x0, 0x1, 0x2)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
timer_settime(r0, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r6=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0) (async)
timer_settime(r6, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000001c0))

[  895.596506][T24417] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  895.604474][T24417] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  895.612482][T24417] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  895.620450][T24417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  895.628473][T24417] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  895.636457][T24417]  </TASK>
[  895.639507][T24417] loop5: detected capacity change from 0 to 16383
22:20:32 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000200), &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x0, 0x3938700}}, 0x0)
clock_gettime(0x2, &(0x7f0000000280))

22:20:32 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000000), 0xffffffffffffff65)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240))
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x54d800, 0x5)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000880)={{r3}, "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"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000000), 0xffffffffffffff65) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011800)="020000000c0001022e000000020000000c", 0x11, 0x5400}], 0x0, &(0x7f0000000040)=ANY=[]) (async)
getdents64(r1, &(0x7f0000000140)=""/182, 0xb6) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0x54d800, 0x5) (async)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000880)={{r3}, "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"}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)

22:20:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 30)

[  895.676348][T24417] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  895.700523][T24417] EXT4-fs (loop5): get root inode failed
[  895.706305][T24417] EXT4-fs (loop5): mount failed
22:20:32 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async, rerun: 32)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r1=>0x0) (rerun: 32)
timer_settime(r1, 0x0, &(0x7f0000000200), &(0x7f0000000240)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async, rerun: 64)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async, rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f00000002c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x0, 0x3938700}}, 0x0)
clock_gettime(0x2, &(0x7f0000000280))

22:20:32 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async, rerun: 64)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r1=>0x0) (rerun: 64)
timer_settime(r1, 0x0, &(0x7f0000000200), &(0x7f0000000240)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0}) (rerun: 64)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000002c0)={<r5=>0x0, <r6=>0x0}) (rerun: 64)
timer_settime(r0, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x0, 0x3938700}}, 0x0) (async)
clock_gettime(0x2, &(0x7f0000000280))

22:20:32 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
write$binfmt_script(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65302074687265616465640020242e5d200a6ee645e19f52e211c748a2ca71d3145cbe8edde080d5af6e4e3804f40ed9ba08ceb67f8e0d03b2cb571589918158fcfec2020cb8bb6fa867a0b739d7bc25e438d14a20a107052286129f35ab9203da97a4681148fb5b4aa16ebf189f778204148469d8de4e85ba43ff14a991cfef027b12315535d9a87444c6a3ecd77283f58bb04d32fe11cbf93a6ed47212beb4c4b8b4935bde"], 0xb7)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x4, 0x2, 0x0, 0x698, 0x40008, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x80000001, 0x3f}, 0x1000, 0x400, 0x6, 0x4, 0x100, 0x401, 0xff, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x3f8, 0x61594f327c6a1297, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048804)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0x8, r3, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
flock(r2, 0x8)

[  895.785678][T24472] FAULT_INJECTION: forcing a failure.
[  895.785678][T24472] name failslab, interval 1, probability 0, space 0, times 0
[  895.798362][T24472] CPU: 1 PID: 24472 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  895.809385][T24472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  895.819458][T24472] Call Trace:
[  895.822727][T24472]  <TASK>
[  895.825654][T24472]  dump_stack_lvl+0xd6/0x122
[  895.830299][T24472]  dump_stack+0x11/0x12
[  895.834459][T24472]  should_fail+0x230/0x240
[  895.838880][T24472]  __should_failslab+0x81/0x90
[  895.843671][T24472]  ? radix_tree_node_alloc+0x142/0x200
[  895.849197][T24472]  should_failslab+0x5/0x20
[  895.853744][T24472]  kmem_cache_alloc+0x46/0x300
[  895.858552][T24472]  ? delay_tsc+0xc1/0xe0
[  895.862862][T24472]  radix_tree_node_alloc+0x142/0x200
[  895.868159][T24472]  idr_get_free+0x22a/0x5c0
[  895.872672][T24472]  ? avc_has_perm_noaudit+0x1c0/0x270
[  895.878044][T24472]  idr_alloc_cyclic+0xf4/0x2e0
[  895.882891][T24472]  __kernfs_new_node+0xb3/0x330
[  895.888007][T24472]  ? selinux_sb_statfs+0xef/0x110
[  895.893193][T24472]  kernfs_create_dir_ns+0x5e/0x140
[  895.898320][T24472]  internal_create_group+0x14c/0x830
[  895.903614][T24472]  sysfs_create_group+0x1b/0x20
[  895.908508][T24472]  loop_configure+0xa90/0xc90
[  895.913192][T24472]  lo_ioctl+0x617/0x11b0
[  895.917442][T24472]  ? avc_has_extended_perms+0x686/0x8a0
[  895.922997][T24472]  ? folio_mark_dirty+0x7c/0xc0
[  895.927864][T24472]  ? blkdev_common_ioctl+0x3ea/0x1090
[  895.933463][T24472]  ? do_vfs_ioctl+0x7b7/0x1390
[  895.938227][T24472]  ? lo_release+0x120/0x120
[  895.942728][T24472]  blkdev_ioctl+0x20e/0x440
[  895.947234][T24472]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  895.952746][T24472]  __se_sys_ioctl+0xcb/0x140
[  895.957374][T24472]  __x64_sys_ioctl+0x3f/0x50
[  895.961965][T24472]  do_syscall_64+0x2b/0x70
[  895.966381][T24472]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  895.972293][T24472] RIP: 0033:0x7fce157dbea7
[  895.976787][T24472] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  895.996387][T24472] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  896.004864][T24472] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  896.012821][T24472] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  896.020776][T24472] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  896.028733][T24472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  896.036863][T24472] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  896.044823][T24472]  </TASK>
[  896.090232][T24472] loop5: detected capacity change from 0 to 16383
[  896.098742][T24472] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  896.111779][T24472] EXT4-fs (loop5): get root inode failed
[  896.117571][T24472] EXT4-fs (loop5): mount failed
22:20:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffff8000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:33 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000001280)={{0x0, 0x989680}}, &(0x7f00000012c0))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1800}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x34, 0x7, @thr={&(0x7f00000001c0)="79f186c24c1792da9768308ffadd14533b4576ecf077cf344dd9ac518a8019b09f08a7071e492ad3bd446d0f17a3d8d6d1592fa6bd25477d832ff5d86ba647f822097751d2097ff4989ee83464a24aa49bfa8d372830f707b5112ee7f73f31aff163edda9e8ceaaf4ff2d8ae63274ccc904d9bfa439fc34ca3d2c93ec88f8e94056cf7d66a1a83460855d5af9951d303acdc89e91af04f081dca83455fcbdae1d668ca9239213bc1aff122622f81d670", &(0x7f0000000280)="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"}})

22:20:33 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 31)

22:20:33 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x37d, 0x0)

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000001280)={{0x0, 0x989680}}, &(0x7f00000012c0)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async, rerun: 32)
r2 = semget$private(0x0, 0x4, 0x0) (rerun: 32)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1800}], 0x1) (async, rerun: 64)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 64)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x34, 0x7, @thr={&(0x7f00000001c0)="79f186c24c1792da9768308ffadd14533b4576ecf077cf344dd9ac518a8019b09f08a7071e492ad3bd446d0f17a3d8d6d1592fa6bd25477d832ff5d86ba647f822097751d2097ff4989ee83464a24aa49bfa8d372830f707b5112ee7f73f31aff163edda9e8ceaaf4ff2d8ae63274ccc904d9bfa439fc34ca3d2c93ec88f8e94056cf7d66a1a83460855d5af9951d303acdc89e91af04f081dca83455fcbdae1d668ca9239213bc1aff122622f81d670", &(0x7f0000000280)="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"}})

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000001280)={{0x0, 0x989680}}, &(0x7f00000012c0))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1800}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x34, 0x7, @thr={&(0x7f00000001c0)="79f186c24c1792da9768308ffadd14533b4576ecf077cf344dd9ac518a8019b09f08a7071e492ad3bd446d0f17a3d8d6d1592fa6bd25477d832ff5d86ba647f822097751d2097ff4989ee83464a24aa49bfa8d372830f707b5112ee7f73f31aff163edda9e8ceaaf4ff2d8ae63274ccc904d9bfa439fc34ca3d2c93ec88f8e94056cf7d66a1a83460855d5af9951d303acdc89e91af04f081dca83455fcbdae1d668ca9239213bc1aff122622f81d670", &(0x7f0000000280)="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"}})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000001280)={{0x0, 0x989680}}, &(0x7f00000012c0)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b, 0x1800}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x34, 0x7, @thr={&(0x7f00000001c0)="79f186c24c1792da9768308ffadd14533b4576ecf077cf344dd9ac518a8019b09f08a7071e492ad3bd446d0f17a3d8d6d1592fa6bd25477d832ff5d86ba647f822097751d2097ff4989ee83464a24aa49bfa8d372830f707b5112ee7f73f31aff163edda9e8ceaaf4ff2d8ae63274ccc904d9bfa439fc34ca3d2c93ec88f8e94056cf7d66a1a83460855d5af9951d303acdc89e91af04f081dca83455fcbdae1d668ca9239213bc1aff122622f81d670", &(0x7f0000000280)="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"}}) (async)

22:20:33 executing program 0:
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000180)={0x81, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x2, 0x408)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:33 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
write$binfmt_script(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65302074687265616465640020242e5d200a6ee645e19f52e211c748a2ca71d3145cbe8edde080d5af6e4e3804f40ed9ba08ceb67f8e0d03b2cb571589918158fcfec2020cb8bb6fa867a0b739d7bc25e438d14a20a107052286129f35ab9203da97a4681148fb5b4aa16ebf189f778204148469d8de4e85ba43ff14a991cfef027b12315535d9a87444c6a3ecd77283f58bb04d32fe11cbf93a6ed47212beb4c4b8b4935bde"], 0xb7) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x4, 0x2, 0x0, 0x698, 0x40008, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x80000001, 0x3f}, 0x1000, 0x400, 0x6, 0x4, 0x100, 0x401, 0xff, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x3f8, 0x61594f327c6a1297, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048804)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0x8, r3, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)
flock(r2, 0x8)

22:20:33 executing program 0:
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000180)={0x81, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x2, 0x408)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:33 executing program 0:
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000180)={0x81, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x2, 0x408)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async, rerun: 32)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}, {r1, r2+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=<r5=>0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x18, 0x2, @tid=r5}, &(0x7f0000000200)=<r6=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000002c0)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r9 = semget$private(0x0, 0x4, 0x0)
semop(r9, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semctl$GETZCNT(r9, 0x0, 0xf, &(0x7f00000003c0)=""/69)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  896.699550][T24531] FAULT_INJECTION: forcing a failure.
[  896.699550][T24531] name failslab, interval 1, probability 0, space 0, times 0
[  896.712248][T24531] CPU: 1 PID: 24531 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  896.723317][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  896.733471][T24531] Call Trace:
[  896.736745][T24531]  <TASK>
[  896.739669][T24531]  dump_stack_lvl+0xd6/0x122
[  896.744264][T24531]  dump_stack+0x11/0x12
[  896.748420][T24531]  should_fail+0x230/0x240
[  896.752839][T24531]  __should_failslab+0x81/0x90
[  896.757646][T24531]  ? __kernfs_new_node+0x6a/0x330
[  896.762722][T24531]  should_failslab+0x5/0x20
[  896.767220][T24531]  kmem_cache_alloc+0x46/0x300
[  896.772021][T24531]  __kernfs_new_node+0x6a/0x330
[  896.776925][T24531]  ? idr_alloc_cyclic+0x26b/0x2e0
[  896.782023][T24531]  ? rb_insert_color+0x7e/0x2c0
[  896.786948][T24531]  kernfs_new_node+0x5b/0xd0
[  896.791542][T24531]  __kernfs_create_file+0x45/0x180
[  896.796659][T24531]  ? dev_attr_show+0x90/0x90
[  896.801273][T24531]  sysfs_add_file_mode_ns+0x10a/0x1d0
[  896.806715][T24531]  internal_create_group+0x2ed/0x830
[  896.812013][T24531]  sysfs_create_group+0x1b/0x20
[  896.816899][T24531]  loop_configure+0xa90/0xc90
[  896.821580][T24531]  lo_ioctl+0x617/0x11b0
[  896.825824][T24531]  ? avc_has_extended_perms+0x686/0x8a0
[  896.831373][T24531]  ? folio_mark_dirty+0x7c/0xc0
[  896.836230][T24531]  ? blkdev_common_ioctl+0x3ea/0x1090
[  896.841605][T24531]  ? do_vfs_ioctl+0x7b7/0x1390
[  896.846371][T24531]  ? lo_release+0x120/0x120
[  896.850915][T24531]  blkdev_ioctl+0x20e/0x440
[  896.855486][T24531]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  896.860972][T24531]  __se_sys_ioctl+0xcb/0x140
[  896.865570][T24531]  __x64_sys_ioctl+0x3f/0x50
[  896.870203][T24531]  do_syscall_64+0x2b/0x70
[  896.874697][T24531]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  896.880595][T24531] RIP: 0033:0x7fce157dbea7
[  896.885003][T24531] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  896.904613][T24531] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  896.913028][T24531] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  896.921118][T24531] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  896.929094][T24531] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  896.937083][T24531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  896.945049][T24531] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  896.953020][T24531]  </TASK>
[  896.957109][T24531] loop5: detected capacity change from 0 to 16383
22:20:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffffff7f)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000340)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}, {r1, r2+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0}) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=<r5=>0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x18, 0x2, @tid=r5}, &(0x7f0000000200)=<r6=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0) (async)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000002c0)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32)
r9 = semget$private(0x0, 0x4, 0x0) (rerun: 32)
semop(r9, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semctl$GETZCNT(r9, 0x0, 0xf, &(0x7f00000003c0)=""/69) (async, rerun: 32)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0) (rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:33 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
write$binfmt_script(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65302074687265616465640020242e5d200a6ee645e19f52e211c748a2ca71d3145cbe8edde080d5af6e4e3804f40ed9ba08ceb67f8e0d03b2cb571589918158fcfec2020cb8bb6fa867a0b739d7bc25e438d14a20a107052286129f35ab9203da97a4681148fb5b4aa16ebf189f778204148469d8de4e85ba43ff14a991cfef027b12315535d9a87444c6a3ecd77283f58bb04d32fe11cbf93a6ed47212beb4c4b8b4935bde"], 0xb7)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x4, 0x2, 0x0, 0x698, 0x40008, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x80000001, 0x3f}, 0x1000, 0x400, 0x6, 0x4, 0x100, 0x401, 0xff, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x3f8, 0x61594f327c6a1297, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048804) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0x8, r3, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)
flock(r2, 0x8)

[  897.012095][T24531] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  897.049196][T24531] EXT4-fs (loop5): get root inode failed
[  897.054904][T24531] EXT4-fs (loop5): mount failed
22:20:33 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 32)

22:20:33 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x402, 0x0)

22:20:33 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}, {r1, r2+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=<r5=>0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x18, 0x2, @tid=r5}, &(0x7f0000000200)=<r6=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000002c0)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r9 = semget$private(0x0, 0x4, 0x0)
semop(r9, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semctl$GETZCNT(r9, 0x0, 0xf, &(0x7f00000003c0)=""/69)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000340)) (async)
timer_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}, {r1, r2+60000000}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x18, 0x2, @tid=r5}, &(0x7f0000000200)) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r6, 0x1, &(0x7f0000000240)={{}, {0x0, r7+10000000}}, 0x0) (async)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000002c0)) (async)
timer_settime(r8, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r9, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
semctl$GETZCNT(r9, 0x0, 0xf, &(0x7f00000003c0)=""/69) (async)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:33 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10020, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/125)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:33 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  897.133610][T24557] FAULT_INJECTION: forcing a failure.
[  897.133610][T24557] name failslab, interval 1, probability 0, space 0, times 0
[  897.146278][T24557] CPU: 0 PID: 24557 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  897.157311][T24557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  897.167367][T24557] Call Trace:
[  897.170646][T24557]  <TASK>
[  897.173573][T24557]  dump_stack_lvl+0xd6/0x122
[  897.178171][T24557]  dump_stack+0x11/0x12
[  897.182417][T24557]  should_fail+0x230/0x240
[  897.186839][T24557]  __should_failslab+0x81/0x90
[  897.191621][T24557]  ? __kernfs_new_node+0x6a/0x330
[  897.196714][T24557]  should_failslab+0x5/0x20
[  897.201211][T24557]  kmem_cache_alloc+0x46/0x300
[  897.205975][T24557]  __kernfs_new_node+0x6a/0x330
[  897.210839][T24557]  ? up_write+0x25/0xc0
[  897.214996][T24557]  ? kernfs_activate+0x302/0x320
[  897.219936][T24557]  kernfs_new_node+0x5b/0xd0
[  897.224536][T24557]  __kernfs_create_file+0x45/0x180
[  897.229654][T24557]  ? dev_attr_show+0x90/0x90
[  897.234334][T24557]  sysfs_add_file_mode_ns+0x10a/0x1d0
[  897.239718][T24557]  internal_create_group+0x2ed/0x830
[  897.245011][T24557]  sysfs_create_group+0x1b/0x20
[  897.249871][T24557]  loop_configure+0xa90/0xc90
[  897.254549][T24557]  lo_ioctl+0x617/0x11b0
[  897.258786][T24557]  ? avc_has_extended_perms+0x686/0x8a0
[  897.264339][T24557]  ? folio_mark_dirty+0x7c/0xc0
[  897.269217][T24557]  ? blkdev_common_ioctl+0x3ea/0x1090
[  897.274592][T24557]  ? do_vfs_ioctl+0x7b7/0x1390
[  897.279357][T24557]  ? lo_release+0x120/0x120
[  897.283888][T24557]  blkdev_ioctl+0x20e/0x440
[  897.288400][T24557]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  897.293939][T24557]  __se_sys_ioctl+0xcb/0x140
[  897.298633][T24557]  __x64_sys_ioctl+0x3f/0x50
[  897.303280][T24557]  do_syscall_64+0x2b/0x70
[  897.307719][T24557]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  897.313751][T24557] RIP: 0033:0x7fce157dbea7
[  897.318211][T24557] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  897.337825][T24557] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  897.346277][T24557] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  897.354303][T24557] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  897.362276][T24557] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  897.370247][T24557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  897.378213][T24557] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  897.386193][T24557]  </TASK>
22:20:34 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffffffa1)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  897.612121][T24557] loop5: detected capacity change from 0 to 16383
[  897.653110][T24557] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:34 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10020, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/125)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10020, 0x0) (async)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/125) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)

[  897.698551][T24557] EXT4-fs (loop5): get root inode failed
[  897.704326][T24557] EXT4-fs (loop5): mount failed
22:20:34 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 33)

22:20:34 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x406, 0x0)

22:20:34 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10020, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/125)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10020, 0x0) (async)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/125) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)

[  897.973276][T24595] FAULT_INJECTION: forcing a failure.
[  897.973276][T24595] name failslab, interval 1, probability 0, space 0, times 0
[  897.985948][T24595] CPU: 1 PID: 24595 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  897.997045][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  898.007095][T24595] Call Trace:
[  898.010375][T24595]  <TASK>
[  898.013305][T24595]  dump_stack_lvl+0xd6/0x122
[  898.017956][T24595]  dump_stack+0x11/0x12
[  898.022131][T24595]  should_fail+0x230/0x240
[  898.026572][T24595]  __should_failslab+0x81/0x90
[  898.031344][T24595]  ? __kernfs_new_node+0x6a/0x330
[  898.036376][T24595]  should_failslab+0x5/0x20
[  898.040883][T24595]  kmem_cache_alloc+0x46/0x300
[  898.045645][T24595]  __kernfs_new_node+0x6a/0x330
[  898.050643][T24595]  ? up_write+0x25/0xc0
[  898.054875][T24595]  ? kernfs_activate+0x302/0x320
[  898.059954][T24595]  kernfs_new_node+0x5b/0xd0
[  898.064702][T24595]  __kernfs_create_file+0x45/0x180
[  898.070006][T24595]  ? dev_attr_show+0x90/0x90
[  898.074611][T24595]  sysfs_add_file_mode_ns+0x10a/0x1d0
[  898.080065][T24595]  internal_create_group+0x2ed/0x830
[  898.085357][T24595]  sysfs_create_group+0x1b/0x20
[  898.090260][T24595]  loop_configure+0xa90/0xc90
[  898.094950][T24595]  lo_ioctl+0x617/0x11b0
[  898.099193][T24595]  ? avc_has_extended_perms+0x686/0x8a0
[  898.104753][T24595]  ? folio_mark_dirty+0x7c/0xc0
[  898.109633][T24595]  ? blkdev_common_ioctl+0x3ea/0x1090
[  898.115019][T24595]  ? do_vfs_ioctl+0x7b7/0x1390
[  898.119861][T24595]  ? lo_release+0x120/0x120
[  898.124430][T24595]  blkdev_ioctl+0x20e/0x440
[  898.128940][T24595]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  898.134474][T24595]  __se_sys_ioctl+0xcb/0x140
[  898.139082][T24595]  __x64_sys_ioctl+0x3f/0x50
[  898.143693][T24595]  do_syscall_64+0x2b/0x70
[  898.148186][T24595]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  898.154123][T24595] RIP: 0033:0x7fce157dbea7
[  898.158538][T24595] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  898.178187][T24595] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  898.186605][T24595] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  898.194594][T24595] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  898.202630][T24595] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  898.210633][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
22:20:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffffffe4)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  898.218636][T24595] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  898.226629][T24595]  </TASK>
[  898.252712][T24595] loop5: detected capacity change from 0 to 16383
[  898.284592][T24595] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:35 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  898.342289][T24595] EXT4-fs (loop5): get root inode failed
[  898.348040][T24595] EXT4-fs (loop5): mount failed
22:20:35 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_direct_IO_enter\x00', r0}, 0x10)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:35 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 34)

[  898.694161][T24630] FAULT_INJECTION: forcing a failure.
[  898.694161][T24630] name failslab, interval 1, probability 0, space 0, times 0
[  898.706920][T24630] CPU: 1 PID: 24630 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  898.717943][T24630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  898.728002][T24630] Call Trace:
[  898.731280][T24630]  <TASK>
[  898.734208][T24630]  dump_stack_lvl+0xd6/0x122
[  898.738808][T24630]  dump_stack+0x11/0x12
22:20:35 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x600, 0x0)

[  898.742997][T24630]  should_fail+0x230/0x240
[  898.747479][T24630]  __should_failslab+0x81/0x90
[  898.752247][T24630]  ? __kernfs_new_node+0x6a/0x330
[  898.757276][T24630]  should_failslab+0x5/0x20
[  898.761780][T24630]  kmem_cache_alloc+0x46/0x300
[  898.766591][T24630]  __kernfs_new_node+0x6a/0x330
[  898.771448][T24630]  ? up_write+0x25/0xc0
[  898.775764][T24630]  ? kernfs_activate+0x302/0x320
[  898.780714][T24630]  kernfs_new_node+0x5b/0xd0
[  898.785308][T24630]  __kernfs_create_file+0x45/0x180
[  898.790433][T24630]  ? dev_attr_show+0x90/0x90
[  898.795125][T24630]  sysfs_add_file_mode_ns+0x10a/0x1d0
[  898.800556][T24630]  internal_create_group+0x2ed/0x830
[  898.805853][T24630]  sysfs_create_group+0x1b/0x20
[  898.810738][T24630]  loop_configure+0xa90/0xc90
[  898.815421][T24630]  lo_ioctl+0x617/0x11b0
[  898.819725][T24630]  ? avc_has_extended_perms+0x686/0x8a0
[  898.825348][T24630]  ? folio_mark_dirty+0x7c/0xc0
[  898.830238][T24630]  ? blkdev_common_ioctl+0x3ea/0x1090
[  898.835686][T24630]  ? do_vfs_ioctl+0x7b7/0x1390
[  898.840529][T24630]  ? lo_release+0x120/0x120
[  898.845037][T24630]  blkdev_ioctl+0x20e/0x440
[  898.849543][T24630]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  898.855007][T24630]  __se_sys_ioctl+0xcb/0x140
[  898.859685][T24630]  __x64_sys_ioctl+0x3f/0x50
[  898.864413][T24630]  do_syscall_64+0x2b/0x70
[  898.868835][T24630]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  898.874782][T24630] RIP: 0033:0x7fce157dbea7
[  898.879193][T24630] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  898.898804][T24630] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  898.907235][T24630] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  898.915206][T24630] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  898.923175][T24630] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  898.931144][T24630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  898.939290][T24630] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  898.947335][T24630]  </TASK>
[  899.072350][T24630] loop5: detected capacity change from 0 to 16383
[  899.092859][T24630] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  899.112202][T24630] EXT4-fs (loop5): get root inode failed
[  899.117869][T24630] EXT4-fs (loop5): mount failed
22:20:36 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:36 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x604, 0x0)

22:20:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfffffff6)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:36 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_direct_IO_enter\x00', r0}, 0x10) (async, rerun: 64)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 64)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 35)

22:20:36 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0) (async)
timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0}) (async)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  900.140883][T24643] FAULT_INJECTION: forcing a failure.
[  900.140883][T24643] name failslab, interval 1, probability 0, space 0, times 0
[  900.153569][T24643] CPU: 1 PID: 24643 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  900.164749][T24643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  900.174811][T24643] Call Trace:
[  900.178091][T24643]  <TASK>
[  900.181021][T24643]  dump_stack_lvl+0xd6/0x122
[  900.185701][T24643]  dump_stack+0x11/0x12
22:20:37 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_direct_IO_enter\x00', r0}, 0x10) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  900.189862][T24643]  should_fail+0x230/0x240
[  900.194288][T24643]  __should_failslab+0x81/0x90
[  900.199054][T24643]  ? __kernfs_new_node+0x6a/0x330
[  900.204147][T24643]  should_failslab+0x5/0x20
[  900.208650][T24643]  kmem_cache_alloc+0x46/0x300
[  900.213474][T24643]  __kernfs_new_node+0x6a/0x330
[  900.218335][T24643]  ? up_write+0x25/0xc0
[  900.222574][T24643]  ? kernfs_activate+0x302/0x320
[  900.227541][T24643]  kernfs_new_node+0x5b/0xd0
[  900.232147][T24643]  __kernfs_create_file+0x45/0x180
22:20:37 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0xbe)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x10001}, 0x5})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
r2 = gettid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  900.237335][T24643]  ? dev_attr_show+0x90/0x90
[  900.241977][T24643]  sysfs_add_file_mode_ns+0x10a/0x1d0
[  900.247359][T24643]  internal_create_group+0x2ed/0x830
[  900.252702][T24643]  sysfs_create_group+0x1b/0x20
[  900.257559][T24643]  loop_configure+0xa90/0xc90
[  900.262370][T24643]  lo_ioctl+0x617/0x11b0
[  900.266612][T24643]  ? avc_has_extended_perms+0x686/0x8a0
[  900.272184][T24643]  ? folio_mark_dirty+0x7c/0xc0
[  900.277084][T24643]  ? blkdev_common_ioctl+0x3ea/0x1090
[  900.282548][T24643]  ? do_vfs_ioctl+0x7b7/0x1390
[  900.287318][T24643]  ? lo_release+0x120/0x120
[  900.291836][T24643]  blkdev_ioctl+0x20e/0x440
[  900.296348][T24643]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  900.301847][T24643]  __se_sys_ioctl+0xcb/0x140
[  900.306477][T24643]  __x64_sys_ioctl+0x3f/0x50
[  900.311145][T24643]  do_syscall_64+0x2b/0x70
[  900.315570][T24643]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  900.321661][T24643] RIP: 0033:0x7fce157dbea7
[  900.326150][T24643] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  900.345855][T24643] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  900.354269][T24643] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  900.362242][T24643] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  900.370263][T24643] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  900.378236][T24643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  900.386209][T24643] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  900.394269][T24643]  </TASK>
[  900.402093][T24643] loop5: detected capacity change from 0 to 16383
[  900.427088][T24643] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  900.450409][T24643] EXT4-fs (loop5): get root inode failed
[  900.456132][T24643] EXT4-fs (loop5): mount failed
22:20:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 36)

[  900.528583][T24679] FAULT_INJECTION: forcing a failure.
[  900.528583][T24679] name failslab, interval 1, probability 0, space 0, times 0
[  900.541226][T24679] CPU: 1 PID: 24679 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  900.553995][T24679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  900.564286][T24679] Call Trace:
[  900.567572][T24679]  <TASK>
[  900.570604][T24679]  dump_stack_lvl+0xd6/0x122
[  900.575409][T24679]  dump_stack+0x11/0x12
[  900.579600][T24679]  should_fail+0x230/0x240
[  900.584048][T24679]  __should_failslab+0x81/0x90
[  900.588841][T24679]  ? __kernfs_new_node+0x6a/0x330
[  900.593888][T24679]  should_failslab+0x5/0x20
[  900.598527][T24679]  kmem_cache_alloc+0x46/0x300
[  900.603301][T24679]  __kernfs_new_node+0x6a/0x330
[  900.608227][T24679]  ? up_write+0x25/0xc0
[  900.612420][T24679]  ? kernfs_activate+0x302/0x320
[  900.617420][T24679]  kernfs_new_node+0x5b/0xd0
[  900.622067][T24679]  __kernfs_create_file+0x45/0x180
[  900.627306][T24679]  ? dev_attr_show+0x90/0x90
[  900.631906][T24679]  sysfs_add_file_mode_ns+0x10a/0x1d0
[  900.637294][T24679]  internal_create_group+0x2ed/0x830
[  900.642632][T24679]  sysfs_create_group+0x1b/0x20
[  900.647478][T24679]  loop_configure+0xa90/0xc90
[  900.652156][T24679]  lo_ioctl+0x617/0x11b0
[  900.656392][T24679]  ? avc_has_extended_perms+0x686/0x8a0
[  900.661944][T24679]  ? folio_mark_dirty+0x7c/0xc0
[  900.666811][T24679]  ? blkdev_common_ioctl+0x3ea/0x1090
[  900.672190][T24679]  ? do_vfs_ioctl+0x7b7/0x1390
[  900.677019][T24679]  ? lo_release+0x120/0x120
[  900.681530][T24679]  blkdev_ioctl+0x20e/0x440
[  900.686051][T24679]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  900.691597][T24679]  __se_sys_ioctl+0xcb/0x140
[  900.696283][T24679]  __x64_sys_ioctl+0x3f/0x50
[  900.700936][T24679]  do_syscall_64+0x2b/0x70
[  900.705431][T24679]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  900.711336][T24679] RIP: 0033:0x7fce157dbea7
[  900.715753][T24679] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  900.735503][T24679] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  900.743949][T24679] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  900.752031][T24679] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  900.760000][T24679] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  900.767978][T24679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
22:20:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfffffffb)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  900.775954][T24679] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  900.783936][T24679]  </TASK>
22:20:37 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:37 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0xbe)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x10001}, 0x5}) (async, rerun: 64)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async, rerun: 64)
r2 = gettid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (rerun: 64)

22:20:37 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x700, 0x0)

[  901.003533][T24679] loop5: detected capacity change from 0 to 16383
[  901.019860][T24679] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  901.095111][T24679] EXT4-fs (loop5): get root inode failed
[  901.100791][T24679] EXT4-fs (loop5): mount failed
22:20:40 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0xbe)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x10001}, 0x5}) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async)
r2 = gettid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:40 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0) (async)
timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfffffffe)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:40 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 37)

22:20:40 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x1020, 0x0)

22:20:40 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  903.219416][T24703] loop5: detected capacity change from 0 to 16383
[  903.245458][T24703] FAULT_INJECTION: forcing a failure.
[  903.245458][T24703] name failslab, interval 1, probability 0, space 0, times 0
[  903.258207][T24703] CPU: 0 PID: 24703 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  903.269237][T24703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  903.279292][T24703] Call Trace:
[  903.282576][T24703]  <TASK>
[  903.285515][T24703]  dump_stack_lvl+0xd6/0x122
[  903.290155][T24703]  dump_stack+0x11/0x12
[  903.294316][T24703]  should_fail+0x230/0x240
[  903.298760][T24703]  __should_failslab+0x81/0x90
[  903.303530][T24703]  ? kobject_uevent_env+0x19c/0x580
[  903.308800][T24703]  should_failslab+0x5/0x20
[  903.313317][T24703]  kmem_cache_alloc_trace+0x4d/0x320
[  903.318646][T24703]  ? set_capacity_and_notify+0x123/0x1d0
[  903.324298][T24703]  kobject_uevent_env+0x19c/0x580
[  903.329378][T24703]  ? set_capacity_and_notify+0x1ba/0x1d0
[  903.335064][T24703]  kobject_uevent+0x18/0x20
[  903.339568][T24703]  loop_set_size+0x64/0x70
[  903.344009][T24703]  loop_configure+0xb66/0xc90
[  903.348688][T24703]  lo_ioctl+0x617/0x11b0
[  903.352930][T24703]  ? avc_has_extended_perms+0x686/0x8a0
[  903.358498][T24703]  ? folio_mark_dirty+0x7c/0xc0
[  903.363364][T24703]  ? blkdev_common_ioctl+0x3ea/0x1090
[  903.368781][T24703]  ? do_vfs_ioctl+0x7b7/0x1390
[  903.373554][T24703]  ? lo_release+0x120/0x120
[  903.378063][T24703]  blkdev_ioctl+0x20e/0x440
[  903.382574][T24703]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  903.388033][T24703]  __se_sys_ioctl+0xcb/0x140
[  903.392630][T24703]  __x64_sys_ioctl+0x3f/0x50
[  903.397225][T24703]  do_syscall_64+0x2b/0x70
[  903.401685][T24703]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  903.407611][T24703] RIP: 0033:0x7fce157dbea7
[  903.412020][T24703] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  903.431637][T24703] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  903.440130][T24703] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  903.448104][T24703] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  903.456081][T24703] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
22:20:40 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  903.464056][T24703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  903.472042][T24703] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  903.480042][T24703]  </TASK>
22:20:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:40 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:40 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  903.836307][T24703] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  903.858442][T24703] EXT4-fs (loop5): get root inode failed
[  903.864146][T24703] EXT4-fs (loop5): mount failed
22:20:40 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 38)

22:20:40 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:40 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2010, 0x0)

[  903.983104][T24739] loop5: detected capacity change from 0 to 16383
[  904.012048][T24739] FAULT_INJECTION: forcing a failure.
[  904.012048][T24739] name failslab, interval 1, probability 0, space 0, times 0
[  904.024721][T24739] CPU: 1 PID: 24739 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  904.035831][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  904.045892][T24739] Call Trace:
[  904.049170][T24739]  <TASK>
[  904.052099][T24739]  dump_stack_lvl+0xd6/0x122
[  904.056700][T24739]  dump_stack+0x11/0x12
[  904.060939][T24739]  should_fail+0x230/0x240
[  904.065454][T24739]  ? kobject_get_path+0x87/0x120
[  904.070407][T24739]  __should_failslab+0x81/0x90
[  904.075255][T24739]  should_failslab+0x5/0x20
[  904.079885][T24739]  __kmalloc+0x66/0x350
[  904.084291][T24739]  ? kmem_cache_alloc_trace+0x250/0x320
[  904.089864][T24739]  kobject_get_path+0x87/0x120
[  904.094709][T24739]  kobject_uevent_env+0x1b7/0x580
[  904.099752][T24739]  ? set_capacity_and_notify+0x1ba/0x1d0
[  904.105426][T24739]  kobject_uevent+0x18/0x20
[  904.109952][T24739]  loop_set_size+0x64/0x70
[  904.114370][T24739]  loop_configure+0xb66/0xc90
[  904.119046][T24739]  lo_ioctl+0x617/0x11b0
[  904.123365][T24739]  ? avc_has_extended_perms+0x686/0x8a0
[  904.128914][T24739]  ? folio_mark_dirty+0x7c/0xc0
[  904.133778][T24739]  ? blkdev_common_ioctl+0x3ea/0x1090
[  904.139216][T24739]  ? do_vfs_ioctl+0x7b7/0x1390
[  904.143981][T24739]  ? lo_release+0x120/0x120
[  904.148483][T24739]  blkdev_ioctl+0x20e/0x440
[  904.153041][T24739]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  904.158515][T24739]  __se_sys_ioctl+0xcb/0x140
[  904.163117][T24739]  __x64_sys_ioctl+0x3f/0x50
[  904.167743][T24739]  do_syscall_64+0x2b/0x70
[  904.172221][T24739]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  904.178170][T24739] RIP: 0033:0x7fce157dbea7
[  904.182579][T24739] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  904.202259][T24739] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  904.210753][T24739] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  904.218791][T24739] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  904.226762][T24739] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  904.234762][T24739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  904.242741][T24739] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  904.250724][T24739]  </TASK>
[  904.402059][T24739] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  904.414720][T24739] EXT4-fs (loop5): get root inode failed
[  904.420400][T24739] EXT4-fs (loop5): mount failed
22:20:43 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={<r4=>r3, 0x7fff, 0x2, 0x7541, 0x99, 0x31, 0x400, 0x3, {r3, @in6={{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x0, 0x4, 0x13d6, 0x900000, 0xfffffffd}}, &(0x7f0000000340)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x0, 0x10, 0x0, 0x633}, &(0x7f0000000380)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r3}, 0x8)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r5=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0})
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:43 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
perf_event_open(0x0, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x4000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:43 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x3f00, 0x0)

22:20:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 39)

22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000000f9, 0x0, 0x0, 0x10000000, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:43 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) (async)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={<r4=>r3, 0x7fff, 0x2, 0x7541, 0x99, 0x31, 0x400, 0x3, {r3, @in6={{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x0, 0x4, 0x13d6, 0x900000, 0xfffffffd}}, &(0x7f0000000340)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x0, 0x10, 0x0, 0x633}, &(0x7f0000000380)=0x18) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r3}, 0x8) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r5=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0}) (async)
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  906.267281][T24756] loop5: detected capacity change from 0 to 16383
[  906.290680][T24756] FAULT_INJECTION: forcing a failure.
[  906.290680][T24756] name failslab, interval 1, probability 0, space 0, times 0
[  906.303351][T24756] CPU: 1 PID: 24756 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  906.314374][T24756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  906.324426][T24756] Call Trace:
[  906.327703][T24756]  <TASK>
[  906.330629][T24756]  dump_stack_lvl+0xd6/0x122
[  906.335305][T24756]  dump_stack+0x11/0x12
[  906.339535][T24756]  should_fail+0x230/0x240
[  906.343964][T24756]  __should_failslab+0x81/0x90
[  906.348738][T24756]  should_failslab+0x5/0x20
[  906.353243][T24756]  kmem_cache_alloc_node+0x58/0x2c0
[  906.358438][T24756]  ? vsnprintf+0xe2a/0xe80
[  906.362859][T24756]  ? __alloc_skb+0xfc/0x450
[  906.367404][T24756]  __alloc_skb+0xfc/0x450
[  906.371831][T24756]  alloc_uevent_skb+0x5b/0x120
[  906.376660][T24756]  kobject_uevent_net_broadcast+0x243/0x410
[  906.382555][T24756]  kobject_uevent_env+0x446/0x580
[  906.387590][T24756]  ? set_capacity_and_notify+0x1ba/0x1d0
[  906.393231][T24756]  kobject_uevent+0x18/0x20
[  906.397734][T24756]  loop_set_size+0x64/0x70
[  906.402155][T24756]  loop_configure+0xb66/0xc90
[  906.406866][T24756]  lo_ioctl+0x617/0x11b0
[  906.411109][T24756]  ? avc_has_extended_perms+0x686/0x8a0
22:20:43 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={<r4=>r3, 0x7fff, 0x2, 0x7541, 0x99, 0x31, 0x400, 0x3, {r3, @in6={{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x0, 0x4, 0x13d6, 0x900000, 0xfffffffd}}, &(0x7f0000000340)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x0, 0x10, 0x0, 0x633}, &(0x7f0000000380)=0x18) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r3}, 0x8)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r5=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r6=>0x0})
r7 = semget$private(0x0, 0x4, 0x0)
semop(r7, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r6+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  906.416729][T24756]  ? folio_mark_dirty+0x7c/0xc0
[  906.421592][T24756]  ? blkdev_common_ioctl+0x3ea/0x1090
[  906.426977][T24756]  ? do_vfs_ioctl+0x7b7/0x1390
[  906.431807][T24756]  ? lo_release+0x120/0x120
[  906.436312][T24756]  blkdev_ioctl+0x20e/0x440
[  906.440823][T24756]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  906.446331][T24756]  __se_sys_ioctl+0xcb/0x140
[  906.450929][T24756]  __x64_sys_ioctl+0x3f/0x50
[  906.455567][T24756]  do_syscall_64+0x2b/0x70
[  906.460060][T24756]  entry_SYSCALL_64_after_hwframe+0x44/0xae
22:20:43 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010101}, 0x10)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x5, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=r0}, &(0x7f0000000280)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/229)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
mq_timedsend(r4, &(0x7f00000002c0)="a84a283d51662a0e36f5e4ae7669a45b1eb6569856d05fb4cfe1db57440a6ea01e997c2856840c290be99dcfedf9d824d0ca9661ac2e0a80c783a666e30a1e41db694423d32eff969fbf6346e4b94f4fb91f8a183843d13f49b52aec155d5f00a2e9187cb741d965683d5db14236d5ea316b2f66c80eff3cba06e7af64f70f9a738e173d35274345c17559a5a91cee6682740bbff7a1e290d1335ffbb4bb95f4eba5ed77694da4d938b3c72492403f7a66b0a961", 0xb4, 0x8, &(0x7f0000000380))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:43 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010101}, 0x10)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x5, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=r0}, &(0x7f0000000280)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/229)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
mq_timedsend(r4, &(0x7f00000002c0)="a84a283d51662a0e36f5e4ae7669a45b1eb6569856d05fb4cfe1db57440a6ea01e997c2856840c290be99dcfedf9d824d0ca9661ac2e0a80c783a666e30a1e41db694423d32eff969fbf6346e4b94f4fb91f8a183843d13f49b52aec155d5f00a2e9187cb741d965683d5db14236d5ea316b2f66c80eff3cba06e7af64f70f9a738e173d35274345c17559a5a91cee6682740bbff7a1e290d1335ffbb4bb95f4eba5ed77694da4d938b3c72492403f7a66b0a961", 0xb4, 0x8, &(0x7f0000000380))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
getpid() (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
timer_create(0x5, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=r0}, &(0x7f0000000280)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/229) (async)
semctl$IPC_RMID(r3, 0x0, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) (async)
mq_timedsend(r4, &(0x7f00000002c0)="a84a283d51662a0e36f5e4ae7669a45b1eb6569856d05fb4cfe1db57440a6ea01e997c2856840c290be99dcfedf9d824d0ca9661ac2e0a80c783a666e30a1e41db694423d32eff969fbf6346e4b94f4fb91f8a183843d13f49b52aec155d5f00a2e9187cb741d965683d5db14236d5ea316b2f66c80eff3cba06e7af64f70f9a738e173d35274345c17559a5a91cee6682740bbff7a1e290d1335ffbb4bb95f4eba5ed77694da4d938b3c72492403f7a66b0a961", 0xb4, 0x8, &(0x7f0000000380)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  906.465956][T24756] RIP: 0033:0x7fce157dbea7
[  906.470374][T24756] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  906.490023][T24756] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  906.498472][T24756] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  906.506488][T24756] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
22:20:43 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x5, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=r0}, &(0x7f0000000280)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async)
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/229)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
mq_timedsend(r4, &(0x7f00000002c0)="a84a283d51662a0e36f5e4ae7669a45b1eb6569856d05fb4cfe1db57440a6ea01e997c2856840c290be99dcfedf9d824d0ca9661ac2e0a80c783a666e30a1e41db694423d32eff969fbf6346e4b94f4fb91f8a183843d13f49b52aec155d5f00a2e9187cb741d965683d5db14236d5ea316b2f66c80eff3cba06e7af64f70f9a738e173d35274345c17559a5a91cee6682740bbff7a1e290d1335ffbb4bb95f4eba5ed77694da4d938b3c72492403f7a66b0a961", 0xb4, 0x8, &(0x7f0000000380)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  906.514523][T24756] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  906.522549][T24756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  906.530621][T24756] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  906.538595][T24756]  </TASK>
[  906.571136][T24756] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  906.662149][T24756] EXT4-fs (loop5): get root inode failed
[  906.667904][T24756] EXT4-fs (loop5): mount failed
22:20:43 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 64)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
perf_event_open(0x0, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:43 executing program 0:
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x14, 0x1, @tid=r0}, &(0x7f0000000140))
timer_create(0x2, &(0x7f0000000080)={0x0, 0x9, 0x4, @tid=r0}, &(0x7f0000000500))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x14, 0x0, @thr={&(0x7f00000006c0)="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", &(0x7f0000000400)="d1eb92a9706693d0e475b79b5ba86429ec3e0e3ee20e3db797e365146ec093efa82cb0f9bd60c804555e0da725f7caf63912998b8353635c44f4cf759315e60e74d1daccd380dc7cb28eb37627a3b3f42158a6642190b6a433b5cdb4a2584681db5049e0579e330441d51ce72798bb4894ba0a76100f6ba251f71606c617a1340c2f58b2ad7793530fb681d02d5ab091fac7832e5eb761ac55a0558df9b714a385eb67761572a4188878ddeed3daf6f777fd8fd92e02e63753569d3c775393ce22479d0edf3d79831352cfa9a4eabb2e2fbd"}}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
timer_create(0x4, &(0x7f00000003c0)={0x0, 0x39, 0x1, @thr={&(0x7f0000000380)="e35dbbc0e49f60cc217450000e83ff9ae0e18f4755e4adb8a8454ade929363da450d97a62bd9e0e97ce3e0681bdde3f247f8d67d38949a7f3bbe", &(0x7f0000000540)="66c1b110916dbfa83b8ea1fa85b0b02b1872ddd1c7474eb07f332d481dc681c91df454ab581d773977f61e10ac7f2f38987e0f32fb785f22fde0ff1a8f70208f898027f3f5d03fbee3dfe3ea92926d43237d34ca0a9cea263423cf467c0140b40d2f1f7314ad1c9190d33d7fcda67abadc657f8432e7a159be37c039d441e5f9000193e3bde93f6e6a0283d041785a761c84053485d9407767f427ec092e6895cbde75"}}, &(0x7f0000000600)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000640)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000680)={{0x0, 0x989680}, {r5, r6+60000000}}, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semtimedop(r3, &(0x7f0000000180)=[{0x1, 0x9, 0x800}], 0x1, &(0x7f00000001c0)={0x77359400})
r7 = semget$private(0x0, 0x4, 0x0)
semtimedop(r7, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semctl$GETZCNT(r7, 0x0, 0xf, &(0x7f0000000200)=""/171)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semop(r3, &(0x7f0000000340)=[{0x0, 0x3}], 0x1)

22:20:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 40)

22:20:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x10000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:43 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x4000, 0x0)

22:20:43 executing program 0:
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x14, 0x1, @tid=r0}, &(0x7f0000000140)) (async)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x9, 0x4, @tid=r0}, &(0x7f0000000500)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x14, 0x0, @thr={&(0x7f00000006c0)="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", &(0x7f0000000400)="d1eb92a9706693d0e475b79b5ba86429ec3e0e3ee20e3db797e365146ec093efa82cb0f9bd60c804555e0da725f7caf63912998b8353635c44f4cf759315e60e74d1daccd380dc7cb28eb37627a3b3f42158a6642190b6a433b5cdb4a2584681db5049e0579e330441d51ce72798bb4894ba0a76100f6ba251f71606c617a1340c2f58b2ad7793530fb681d02d5ab091fac7832e5eb761ac55a0558df9b714a385eb67761572a4188878ddeed3daf6f777fd8fd92e02e63753569d3c775393ce22479d0edf3d79831352cfa9a4eabb2e2fbd"}}, &(0x7f0000000040)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async)
r3 = semget$private(0x0, 0x4, 0x0) (async)
timer_create(0x4, &(0x7f00000003c0)={0x0, 0x39, 0x1, @thr={&(0x7f0000000380)="e35dbbc0e49f60cc217450000e83ff9ae0e18f4755e4adb8a8454ade929363da450d97a62bd9e0e97ce3e0681bdde3f247f8d67d38949a7f3bbe", &(0x7f0000000540)="66c1b110916dbfa83b8ea1fa85b0b02b1872ddd1c7474eb07f332d481dc681c91df454ab581d773977f61e10ac7f2f38987e0f32fb785f22fde0ff1a8f70208f898027f3f5d03fbee3dfe3ea92926d43237d34ca0a9cea263423cf467c0140b40d2f1f7314ad1c9190d33d7fcda67abadc657f8432e7a159be37c039d441e5f9000193e3bde93f6e6a0283d041785a761c84053485d9407767f427ec092e6895cbde75"}}, &(0x7f0000000600)=<r4=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000640)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000680)={{0x0, 0x989680}, {r5, r6+60000000}}, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
semtimedop(r3, &(0x7f0000000180)=[{0x1, 0x9, 0x800}], 0x1, &(0x7f00000001c0)={0x77359400}) (async)
r7 = semget$private(0x0, 0x4, 0x0)
semtimedop(r7, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semctl$GETZCNT(r7, 0x0, 0xf, &(0x7f0000000200)=""/171)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semop(r3, &(0x7f0000000340)=[{0x0, 0x3}], 0x1)

22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:43 executing program 0:
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x14, 0x1, @tid=r0}, &(0x7f0000000140)) (async)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x9, 0x4, @tid=r0}, &(0x7f0000000500))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x14, 0x0, @thr={&(0x7f00000006c0)="4e68158e87146c89e53a060faac2dae2b9a809df2c55e0ee0112a21ebd312dd66308d5062ac6192c2c54d502b3fb5dd4df7f960b4c83d89f451af169e6f6cc950a92d05d766a4cd5ce67e6b3c9012d7e06277d5690b03557e0407fc18cd37e247ea69eb68c049cc0fd75a83fdce0a21b75049b45fd323d42725d5a4318656b094c809baf9ec849bef12ae0e8d34c339136565ffe35af6f74961d42c74c2a05efefa07338c14aa497d26b43ab93e988fe91392146e167e7c685e79935d94197f7744139818503a18edd6e8ea694eb813647f0aa36ddc0a818ed6ee2bcabb8ca82c1afabaa2a5f46b601587276aa08002b68f2d012433ff9d8854126fcf3bc8e41520002000009d471660e5d8e2cea11f0de42143064d01ec2880e728cba2a784b2c7205dfcdca996695228b71683039cf8ca4fab984125d17f5e384b8d25ab737e30e2e3b0000000000000000004bab7fa4f1db9a03efe0cd320905aeade6eae78164346fa30e7c816dd628bcbf8cada73e1cc78be587d0e7221f51244605192bc818750442b5431133", &(0x7f0000000400)="d1eb92a9706693d0e475b79b5ba86429ec3e0e3ee20e3db797e365146ec093efa82cb0f9bd60c804555e0da725f7caf63912998b8353635c44f4cf759315e60e74d1daccd380dc7cb28eb37627a3b3f42158a6642190b6a433b5cdb4a2584681db5049e0579e330441d51ce72798bb4894ba0a76100f6ba251f71606c617a1340c2f58b2ad7793530fb681d02d5ab091fac7832e5eb761ac55a0558df9b714a385eb67761572a4188878ddeed3daf6f777fd8fd92e02e63753569d3c775393ce22479d0edf3d79831352cfa9a4eabb2e2fbd"}}, &(0x7f0000000040)=<r1=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async, rerun: 64)
r3 = semget$private(0x0, 0x4, 0x0)
timer_create(0x4, &(0x7f00000003c0)={0x0, 0x39, 0x1, @thr={&(0x7f0000000380)="e35dbbc0e49f60cc217450000e83ff9ae0e18f4755e4adb8a8454ade929363da450d97a62bd9e0e97ce3e0681bdde3f247f8d67d38949a7f3bbe", &(0x7f0000000540)="66c1b110916dbfa83b8ea1fa85b0b02b1872ddd1c7474eb07f332d481dc681c91df454ab581d773977f61e10ac7f2f38987e0f32fb785f22fde0ff1a8f70208f898027f3f5d03fbee3dfe3ea92926d43237d34ca0a9cea263423cf467c0140b40d2f1f7314ad1c9190d33d7fcda67abadc657f8432e7a159be37c039d441e5f9000193e3bde93f6e6a0283d041785a761c84053485d9407767f427ec092e6895cbde75"}}, &(0x7f0000000600)=<r4=>0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000640)={<r5=>0x0, <r6=>0x0}) (rerun: 32)
timer_settime(r4, 0x1, &(0x7f0000000680)={{0x0, 0x989680}, {r5, r6+60000000}}, 0x0) (async)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semtimedop(r3, &(0x7f0000000180)=[{0x1, 0x9, 0x800}], 0x1, &(0x7f00000001c0)={0x77359400}) (async)
r7 = semget$private(0x0, 0x4, 0x0)
semtimedop(r7, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semctl$GETZCNT(r7, 0x0, 0xf, &(0x7f0000000200)=""/171) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
semop(r3, &(0x7f0000000340)=[{0x0, 0x3}], 0x1)

[  906.921522][T24833] loop5: detected capacity change from 0 to 16383
[  906.944319][T24833] FAULT_INJECTION: forcing a failure.
[  906.944319][T24833] name failslab, interval 1, probability 0, space 0, times 0
[  906.956980][T24833] CPU: 1 PID: 24833 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  906.968010][T24833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  906.978082][T24833] Call Trace:
[  906.981359][T24833]  <TASK>
[  906.984290][T24833]  dump_stack_lvl+0xd6/0x122
[  906.988889][T24833]  dump_stack+0x11/0x12
[  906.993083][T24833]  should_fail+0x230/0x240
[  906.997511][T24833]  __should_failslab+0x81/0x90
[  907.002278][T24833]  should_failslab+0x5/0x20
[  907.006834][T24833]  kmem_cache_alloc_node+0x58/0x2c0
[  907.012034][T24833]  ? vsnprintf+0xe2a/0xe80
[  907.016571][T24833]  ? __alloc_skb+0xfc/0x450
22:20:43 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 32)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async, rerun: 32)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
perf_event_open(0x0, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (rerun: 64)

[  907.021072][T24833]  __alloc_skb+0xfc/0x450
[  907.025399][T24833]  alloc_uevent_skb+0x5b/0x120
[  907.030167][T24833]  kobject_uevent_net_broadcast+0x243/0x410
[  907.036095][T24833]  kobject_uevent_env+0x446/0x580
[  907.041208][T24833]  ? set_capacity_and_notify+0x1ba/0x1d0
[  907.046898][T24833]  kobject_uevent+0x18/0x20
[  907.051402][T24833]  loop_set_size+0x64/0x70
[  907.055819][T24833]  loop_configure+0xb66/0xc90
[  907.060494][T24833]  lo_ioctl+0x617/0x11b0
[  907.064839][T24833]  ? avc_has_extended_perms+0x686/0x8a0
22:20:43 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  907.070398][T24833]  ? folio_mark_dirty+0x7c/0xc0
[  907.075289][T24833]  ? blkdev_common_ioctl+0x3ea/0x1090
[  907.080669][T24833]  ? do_vfs_ioctl+0x7b7/0x1390
[  907.085434][T24833]  ? lo_release+0x120/0x120
[  907.089936][T24833]  blkdev_ioctl+0x20e/0x440
[  907.094490][T24833]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  907.100013][T24833]  __se_sys_ioctl+0xcb/0x140
[  907.104607][T24833]  __x64_sys_ioctl+0x3f/0x50
[  907.109207][T24833]  do_syscall_64+0x2b/0x70
[  907.113709][T24833]  entry_SYSCALL_64_after_hwframe+0x44/0xae
22:20:44 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
timer_create(0x6, &(0x7f00000002c0)={0x0, 0x1, 0x2, @thr={&(0x7f0000000180)="6a744f5a9d07a701e52b65adc27bb7b429a8e7ae044dfc01fb608b1f7f8e84219127d06bfdb2583e8ec2475dadede443522b66e1668396c266ea4a5e3e2079b47426a47752d47e3eefc77965b0b2fb91f8b9baf67f9acaf943f53dfae0751725167e346cad18ca263d777a7e25111205b006dac557fa155c2ed05261fe73453146e1024082a78fe0044ccd7944c0457ab97de1f17d6344", &(0x7f0000000240)="c23b478d24d91a0d60a03774b90ea970f9d59aef1950162f13e5980e693d565a589bb066ba5a6b669d11fea65741e5fe0a81142b59c14b6eea6d5fab7caa1a4a27c6f1e6506ab1627529908edac46cf40baa37426b6200a4731e2588aba72b33f149339bfa68"}}, &(0x7f0000000300))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  907.119652][T24833] RIP: 0033:0x7fce157dbea7
[  907.124072][T24833] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  907.143697][T24833] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  907.152110][T24833] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  907.160096][T24833] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:44 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
timer_create(0x6, &(0x7f00000002c0)={0x0, 0x1, 0x2, @thr={&(0x7f0000000180)="6a744f5a9d07a701e52b65adc27bb7b429a8e7ae044dfc01fb608b1f7f8e84219127d06bfdb2583e8ec2475dadede443522b66e1668396c266ea4a5e3e2079b47426a47752d47e3eefc77965b0b2fb91f8b9baf67f9acaf943f53dfae0751725167e346cad18ca263d777a7e25111205b006dac557fa155c2ed05261fe73453146e1024082a78fe0044ccd7944c0457ab97de1f17d6344", &(0x7f0000000240)="c23b478d24d91a0d60a03774b90ea970f9d59aef1950162f13e5980e693d565a589bb066ba5a6b669d11fea65741e5fe0a81142b59c14b6eea6d5fab7caa1a4a27c6f1e6506ab1627529908edac46cf40baa37426b6200a4731e2588aba72b33f149339bfa68"}}, &(0x7f0000000300))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
timer_create(0x6, &(0x7f00000002c0)={0x0, 0x1, 0x2, @thr={&(0x7f0000000180)="6a744f5a9d07a701e52b65adc27bb7b429a8e7ae044dfc01fb608b1f7f8e84219127d06bfdb2583e8ec2475dadede443522b66e1668396c266ea4a5e3e2079b47426a47752d47e3eefc77965b0b2fb91f8b9baf67f9acaf943f53dfae0751725167e346cad18ca263d777a7e25111205b006dac557fa155c2ed05261fe73453146e1024082a78fe0044ccd7944c0457ab97de1f17d6344", &(0x7f0000000240)="c23b478d24d91a0d60a03774b90ea970f9d59aef1950162f13e5980e693d565a589bb066ba5a6b669d11fea65741e5fe0a81142b59c14b6eea6d5fab7caa1a4a27c6f1e6506ab1627529908edac46cf40baa37426b6200a4731e2588aba72b33f149339bfa68"}}, &(0x7f0000000300)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  907.168113][T24833] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  907.176127][T24833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  907.184094][T24833] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  907.192064][T24833]  </TASK>
[  907.240289][T24833] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  907.263974][T24833] EXT4-fs (loop5): get root inode failed
[  907.269666][T24833] EXT4-fs (loop5): mount failed
22:20:44 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 41)

22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:44 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x6e03, 0x0)

22:20:44 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
timer_create(0x6, &(0x7f00000002c0)={0x0, 0x1, 0x2, @thr={&(0x7f0000000180)="6a744f5a9d07a701e52b65adc27bb7b429a8e7ae044dfc01fb608b1f7f8e84219127d06bfdb2583e8ec2475dadede443522b66e1668396c266ea4a5e3e2079b47426a47752d47e3eefc77965b0b2fb91f8b9baf67f9acaf943f53dfae0751725167e346cad18ca263d777a7e25111205b006dac557fa155c2ed05261fe73453146e1024082a78fe0044ccd7944c0457ab97de1f17d6344", &(0x7f0000000240)="c23b478d24d91a0d60a03774b90ea970f9d59aef1950162f13e5980e693d565a589bb066ba5a6b669d11fea65741e5fe0a81142b59c14b6eea6d5fab7caa1a4a27c6f1e6506ab1627529908edac46cf40baa37426b6200a4731e2588aba72b33f149339bfa68"}}, &(0x7f0000000300)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)

22:20:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x20000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:44 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
r3 = semget$private(0x0, 0x4, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/139)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
semctl$SETVAL(r3, 0x4, 0x10, &(0x7f0000000240)=0xf2)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:44 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 64)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
r3 = semget$private(0x0, 0x4, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0) (async)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/139)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
semctl$SETVAL(r3, 0x4, 0x10, &(0x7f0000000240)=0xf2) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:44 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  907.662292][T24900] loop5: detected capacity change from 0 to 16383
[  907.668801][T24900] FAULT_INJECTION: forcing a failure.
[  907.668801][T24900] name failslab, interval 1, probability 0, space 0, times 0
[  907.681473][T24900] CPU: 1 PID: 24900 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  907.692501][T24900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  907.702565][T24900] Call Trace:
[  907.705903][T24900]  <TASK>
[  907.708836][T24900]  dump_stack_lvl+0xd6/0x122
[  907.713509][T24900]  dump_stack+0x11/0x12
[  907.717671][T24900]  should_fail+0x230/0x240
[  907.722089][T24900]  __should_failslab+0x81/0x90
[  907.726865][T24900]  ? skb_clone+0x12c/0x1e0
[  907.731322][T24900]  should_failslab+0x5/0x20
[  907.735843][T24900]  kmem_cache_alloc+0x46/0x300
[  907.740614][T24900]  skb_clone+0x12c/0x1e0
[  907.744919][T24900]  netlink_broadcast+0x4e9/0xb30
[  907.749931][T24900]  kobject_uevent_net_broadcast+0x2a9/0x410
[  907.755826][T24900]  kobject_uevent_env+0x446/0x580
[  907.760863][T24900]  ? set_capacity_and_notify+0x1ba/0x1d0
[  907.766559][T24900]  kobject_uevent+0x18/0x20
[  907.771059][T24900]  loop_set_size+0x64/0x70
[  907.775503][T24900]  loop_configure+0xb66/0xc90
[  907.780184][T24900]  lo_ioctl+0x617/0x11b0
[  907.784559][T24900]  ? avc_has_extended_perms+0x686/0x8a0
[  907.790186][T24900]  ? folio_mark_dirty+0x7c/0xc0
[  907.795059][T24900]  ? blkdev_common_ioctl+0x3ea/0x1090
[  907.800515][T24900]  ? do_vfs_ioctl+0x7b7/0x1390
[  907.805312][T24900]  ? lo_release+0x120/0x120
[  907.809823][T24900]  blkdev_ioctl+0x20e/0x440
[  907.814401][T24900]  ? blkdev_compat_ptr_ioctl+0x80/0x80
[  907.819931][T24900]  __se_sys_ioctl+0xcb/0x140
[  907.824541][T24900]  __x64_sys_ioctl+0x3f/0x50
[  907.829158][T24900]  do_syscall_64+0x2b/0x70
[  907.833598][T24900]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  907.839505][T24900] RIP: 0033:0x7fce157dbea7
[  907.843922][T24900] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  907.863668][T24900] RSP: 002b:00007fce14f51f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  907.872092][T24900] RAX: ffffffffffffffda RBX: 00007fce15825a20 RCX: 00007fce157dbea7
[  907.880149][T24900] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  907.888129][T24900] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fce14f521d0
[  907.896117][T24900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  907.904095][T24900] R13: 0000000000000004 R14: 0000000020000920 R15: 0000000000000004
[  907.912073][T24900]  </TASK>
[  908.114035][T24900] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  908.133256][T24900] EXT4-fs (loop5): get root inode failed
[  908.138910][T24900] EXT4-fs (loop5): mount failed
22:20:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 42)

22:20:45 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0) (async, rerun: 64)
r3 = semget$private(0x0, 0x4, 0x0) (rerun: 64)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async, rerun: 32)
semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000180)=""/139) (rerun: 32)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
semctl$SETVAL(r3, 0x4, 0x10, &(0x7f0000000240)=0xf2) (async, rerun: 32)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x0, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x0, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x80ffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:45 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x7d03, 0x0)

22:20:45 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x7, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f0000001400)="4addbea310451e59e17e8b1c", &(0x7f0000001440)="8d046b6ecc31d87965ccafe02252461af88791126f6dd97379ae0283c87d71f08edba09ddac9bc9b4304e7dce02eb5c1430245ccac7b304bfe706a0b74f217a0d6301123b510de"}}, &(0x7f0000001500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000001540)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001580))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
clock_gettime(0x5, &(0x7f0000001780))
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_create(0x1, &(0x7f0000001640)={0x0, 0x23, 0x2, @thr={&(0x7f00000015c0)="0077b90a0999cf38", &(0x7f0000001600)="be1a625df4fbbaa985a6f807e37c6b79a913d9e40a7cefa3f62c447a5f"}}, &(0x7f0000001680)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f00000016c0)={{0x0, 0x3938700}}, &(0x7f0000001700))
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x27, 0x1}, &(0x7f00000001c0))
timer_create(0x1, &(0x7f0000001300)={0x0, 0x8, 0x2, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="bba9e588c7bad19eb387721d8eb0c8b6dc4fce17018fff9054fd7efcf1fe1cc201e641b217939dc61336f21438e83d244b1e6273210923f4fc928056a6dfa6c1e005dd4294ecd8fb3d54ed30f11771057e22cc508645f2297a6d6647fa93d721d085ebdff6300b8e911a831697126d487f405b2b973248b4851bfb5daad9e53781d108fc530626b65e95a571a49f3d8eb5d3978f3339562117aab7267fdc767e28de038495e61c89cd21afbff5bac76ad2a5cf6c5807dff885c2ebbd9a6d6f1a8b81674bfda863e72ce7997198f706480a9f2742341c2b1d361c8defa6bc4890e0825344ad8c4aeddde094c53bfa232578e8"}}, &(0x7f0000001340)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000001380), &(0x7f00000013c0))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001740)=@IORING_OP_NOP={0x0, 0x5}, 0x7fff)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  908.228662][T24914] loop5: detected capacity change from 0 to 16383
[  908.246726][T24914] FAULT_INJECTION: forcing a failure.
[  908.246726][T24914] name failslab, interval 1, probability 0, space 0, times 0
[  908.259449][T24914] CPU: 1 PID: 24914 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  908.270560][T24914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  908.280614][T24914] Call Trace:
[  908.283921][T24914]  <TASK>
[  908.286841][T24914]  dump_stack_lvl+0xd6/0x122
[  908.291494][T24914]  dump_stack+0x11/0x12
[  908.295701][T24914]  should_fail+0x230/0x240
[  908.300122][T24914]  __should_failslab+0x81/0x90
[  908.304911][T24914]  ? getname_flags+0x82/0x350
[  908.309735][T24914]  should_failslab+0x5/0x20
[  908.314241][T24914]  kmem_cache_alloc+0x46/0x300
[  908.319001][T24914]  ? xfd_validate_state+0x4e/0xf0
[  908.324034][T24914]  getname_flags+0x82/0x350
[  908.328544][T24914]  __x64_sys_mkdirat+0x3f/0x60
[  908.333353][T24914]  do_syscall_64+0x2b/0x70
[  908.337784][T24914]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  908.343688][T24914] RIP: 0033:0x7fce157db1f7
[  908.348133][T24914] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  908.367807][T24914] RSP: 002b:00007fce14f51f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102
[  908.376222][T24914] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157db1f7
[  908.384200][T24914] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
[  908.392175][T24914] RBP: 00007fce14f521d0 R08: 0000000000000000 R09: 00007fce14f521d0
[  908.400146][T24914] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  908.408112][T24914] R13: 0000000020000100 R14: 00007fce14f51fe0 R15: 0000000020000040
[  908.416092][T24914]  </TASK>
22:20:45 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x7, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f0000001400)="4addbea310451e59e17e8b1c", &(0x7f0000001440)="8d046b6ecc31d87965ccafe02252461af88791126f6dd97379ae0283c87d71f08edba09ddac9bc9b4304e7dce02eb5c1430245ccac7b304bfe706a0b74f217a0d6301123b510de"}}, &(0x7f0000001500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000001540)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001580)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async)
clock_gettime(0x5, &(0x7f0000001780)) (async)
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_create(0x1, &(0x7f0000001640)={0x0, 0x23, 0x2, @thr={&(0x7f00000015c0)="0077b90a0999cf38", &(0x7f0000001600)="be1a625df4fbbaa985a6f807e37c6b79a913d9e40a7cefa3f62c447a5f"}}, &(0x7f0000001680)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f00000016c0)={{0x0, 0x3938700}}, &(0x7f0000001700)) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x27, 0x1}, &(0x7f00000001c0)) (async)
timer_create(0x1, &(0x7f0000001300)={0x0, 0x8, 0x2, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="bba9e588c7bad19eb387721d8eb0c8b6dc4fce17018fff9054fd7efcf1fe1cc201e641b217939dc61336f21438e83d244b1e6273210923f4fc928056a6dfa6c1e005dd4294ecd8fb3d54ed30f11771057e22cc508645f2297a6d6647fa93d721d085ebdff6300b8e911a831697126d487f405b2b973248b4851bfb5daad9e53781d108fc530626b65e95a571a49f3d8eb5d3978f3339562117aab7267fdc767e28de038495e61c89cd21afbff5bac76ad2a5cf6c5807dff885c2ebbd9a6d6f1a8b81674bfda863e72ce7997198f706480a9f2742341c2b1d361c8defa6bc4890e0825344ad8c4aeddde094c53bfa232578e8"}}, &(0x7f0000001340)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000001380), &(0x7f00000013c0))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001740)=@IORING_OP_NOP={0x0, 0x5}, 0x7fff) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x0, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:45 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x7, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f0000001400)="4addbea310451e59e17e8b1c", &(0x7f0000001440)="8d046b6ecc31d87965ccafe02252461af88791126f6dd97379ae0283c87d71f08edba09ddac9bc9b4304e7dce02eb5c1430245ccac7b304bfe706a0b74f217a0d6301123b510de"}}, &(0x7f0000001500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000001540)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001580))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
clock_gettime(0x5, &(0x7f0000001780))
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_create(0x1, &(0x7f0000001640)={0x0, 0x23, 0x2, @thr={&(0x7f00000015c0)="0077b90a0999cf38", &(0x7f0000001600)="be1a625df4fbbaa985a6f807e37c6b79a913d9e40a7cefa3f62c447a5f"}}, &(0x7f0000001680)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f00000016c0)={{0x0, 0x3938700}}, &(0x7f0000001700))
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x27, 0x1}, &(0x7f00000001c0))
timer_create(0x1, &(0x7f0000001300)={0x0, 0x8, 0x2, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="bba9e588c7bad19eb387721d8eb0c8b6dc4fce17018fff9054fd7efcf1fe1cc201e641b217939dc61336f21438e83d244b1e6273210923f4fc928056a6dfa6c1e005dd4294ecd8fb3d54ed30f11771057e22cc508645f2297a6d6647fa93d721d085ebdff6300b8e911a831697126d487f405b2b973248b4851bfb5daad9e53781d108fc530626b65e95a571a49f3d8eb5d3978f3339562117aab7267fdc767e28de038495e61c89cd21afbff5bac76ad2a5cf6c5807dff885c2ebbd9a6d6f1a8b81674bfda863e72ce7997198f706480a9f2742341c2b1d361c8defa6bc4890e0825344ad8c4aeddde094c53bfa232578e8"}}, &(0x7f0000001340)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000001380), &(0x7f00000013c0))
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001740)=@IORING_OP_NOP={0x0, 0x5}, 0x7fff)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_create(0x7, &(0x7f00000014c0)={0x0, 0x19, 0x0, @thr={&(0x7f0000001400)="4addbea310451e59e17e8b1c", &(0x7f0000001440)="8d046b6ecc31d87965ccafe02252461af88791126f6dd97379ae0283c87d71f08edba09ddac9bc9b4304e7dce02eb5c1430245ccac7b304bfe706a0b74f217a0d6301123b510de"}}, &(0x7f0000001500)) (async)
timer_settime(r0, 0x1, &(0x7f0000001540)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001580)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
clock_gettime(0x5, &(0x7f0000001780)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_create(0x1, &(0x7f0000001640)={0x0, 0x23, 0x2, @thr={&(0x7f00000015c0)="0077b90a0999cf38", &(0x7f0000001600)="be1a625df4fbbaa985a6f807e37c6b79a913d9e40a7cefa3f62c447a5f"}}, &(0x7f0000001680)) (async)
timer_settime(r4, 0x1, &(0x7f00000016c0)={{0x0, 0x3938700}}, &(0x7f0000001700)) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x27, 0x1}, &(0x7f00000001c0)) (async)
timer_create(0x1, &(0x7f0000001300)={0x0, 0x8, 0x2, @thr={&(0x7f0000000200)="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", &(0x7f0000001200)="bba9e588c7bad19eb387721d8eb0c8b6dc4fce17018fff9054fd7efcf1fe1cc201e641b217939dc61336f21438e83d244b1e6273210923f4fc928056a6dfa6c1e005dd4294ecd8fb3d54ed30f11771057e22cc508645f2297a6d6647fa93d721d085ebdff6300b8e911a831697126d487f405b2b973248b4851bfb5daad9e53781d108fc530626b65e95a571a49f3d8eb5d3978f3339562117aab7267fdc767e28de038495e61c89cd21afbff5bac76ad2a5cf6c5807dff885c2ebbd9a6d6f1a8b81674bfda863e72ce7997198f706480a9f2742341c2b1d361c8defa6bc4890e0825344ad8c4aeddde094c53bfa232578e8"}}, &(0x7f0000001340)) (async)
timer_settime(r5, 0x0, &(0x7f0000001380), &(0x7f00000013c0)) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x8000000) (async)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001740)=@IORING_OP_NOP={0x0, 0x5}, 0x7fff) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x0, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:45 executing program 0:
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d00000008005d000000000008005d000000000008005d000000000008005d000000000008005d000000000008005d0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4000081)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 43)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x0, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:45 executing program 0:
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d00000008005d000000000008005d000000000008005d000000000008005d000000000008005d000000000008005d0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4000081)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xc0000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x0, 0x1, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  908.781470][T24944] loop5: detected capacity change from 0 to 16383
[  908.813006][T24944] FAULT_INJECTION: forcing a failure.
[  908.813006][T24944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  908.826091][T24944] CPU: 1 PID: 24944 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  908.837112][T24944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  908.847165][T24944] Call Trace:
[  908.850441][T24944]  <TASK>
[  908.853364][T24944]  dump_stack_lvl+0xd6/0x122
[  908.858062][T24944]  dump_stack+0x11/0x12
[  908.862274][T24944]  should_fail+0x230/0x240
[  908.866742][T24944]  should_fail_usercopy+0x16/0x20
[  908.871771][T24944]  strncpy_from_user+0x22/0x230
[  908.876703][T24944]  getname_flags+0xb0/0x350
[  908.881302][T24944]  __x64_sys_mkdirat+0x3f/0x60
[  908.886110][T24944]  do_syscall_64+0x2b/0x70
[  908.890638][T24944]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  908.896580][T24944] RIP: 0033:0x7fce157db1f7
[  908.900991][T24944] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  908.920611][T24944] RSP: 002b:00007fce14f51f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102
[  908.929029][T24944] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157db1f7
[  908.937005][T24944] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
[  908.944980][T24944] RBP: 00007fce14f521d0 R08: 0000000000000000 R09: 00007fce14f521d0
[  908.952947][T24944] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  908.960916][T24944] R13: 0000000020000100 R14: 00007fce14f51fe0 R15: 0000000020000040
[  908.969041][T24944]  </TASK>
22:20:45 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x8200, 0x0)

22:20:45 executing program 0:
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d00000008005d000000000008005d000000000008005d000000000008005d000000000008005d000000000008005d0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4000081)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d00000008005d000000000008005d000000000008005d000000000008005d000000000008005d000000000008005d0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4000081) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:45 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x0, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 44)

22:20:45 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
clock_gettime(0x0, &(0x7f0000000180)={<r0=>0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {r0, r1+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:45 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
clock_gettime(0x0, &(0x7f0000000180)={<r0=>0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {r0, r1+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0}) (async)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  909.093351][T24961] loop5: detected capacity change from 0 to 16383
[  909.100750][T24961] FAULT_INJECTION: forcing a failure.
[  909.100750][T24961] name failslab, interval 1, probability 0, space 0, times 0
[  909.113424][T24961] CPU: 1 PID: 24961 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  909.124451][T24961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  909.134510][T24961] Call Trace:
[  909.137807][T24961]  <TASK>
22:20:46 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
clock_gettime(0x0, &(0x7f0000000180)={<r0=>0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {r0, r1+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {r0, r1+60000000}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  909.140741][T24961]  dump_stack_lvl+0xd6/0x122
[  909.145342][T24961]  dump_stack+0x11/0x12
[  909.149499][T24961]  should_fail+0x230/0x240
[  909.153962][T24961]  ? __d_alloc+0x3d/0x380
[  909.158294][T24961]  __should_failslab+0x81/0x90
[  909.163069][T24961]  should_failslab+0x5/0x20
[  909.167631][T24961]  kmem_cache_alloc_lru+0x52/0x2b0
[  909.172808][T24961]  ? __d_lookup+0x3a6/0x3d0
[  909.177377][T24961]  __d_alloc+0x3d/0x380
[  909.181550][T24961]  d_alloc+0x2a/0x100
[  909.185552][T24961]  __lookup_hash+0x8f/0x180
[  909.190116][T24961]  filename_create+0x147/0x2b0
[  909.194931][T24961]  do_mkdirat+0x63/0x280
[  909.199173][T24961]  __x64_sys_mkdirat+0x4c/0x60
[  909.203936][T24961]  do_syscall_64+0x2b/0x70
[  909.208357][T24961]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  909.214321][T24961] RIP: 0033:0x7fce157db1f7
[  909.218736][T24961] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
22:20:46 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x0, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:46 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000180)=[{0x4, 0x3, 0x1000}, {0x3, 0x5, 0x3000}], 0x2)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
semop(r2, &(0x7f0000000140)=[{0x2, 0x1, 0x1000}], 0x1)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  909.238347][T24961] RSP: 002b:00007fce14f51f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102
[  909.246760][T24961] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157db1f7
[  909.254815][T24961] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
[  909.262794][T24961] RBP: 00007fce14f521d0 R08: 0000000000000000 R09: 00007fce14f521d0
[  909.270763][T24961] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  909.278732][T24961] R13: 0000000020000100 R14: 00007fce14f51fe0 R15: 0000000020000040
[  909.286704][T24961]  </TASK>
22:20:46 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x0, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x100000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:46 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000180)=[{0x4, 0x3, 0x1000}, {0x3, 0x5, 0x3000}], 0x2)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0) (async)
timer_settime(r3, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240)) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
semop(r2, &(0x7f0000000140)=[{0x2, 0x1, 0x1000}], 0x1) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:46 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x9000, 0x0)

22:20:46 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:46 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000180)=[{0x4, 0x3, 0x1000}, {0x3, 0x5, 0x3000}], 0x2) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x0, r4+10000000}}, 0x0) (async)
timer_settime(r3, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240))
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
semop(r2, &(0x7f0000000140)=[{0x2, 0x1, 0x1000}], 0x1) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 45)

22:20:46 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:46 executing program 0:
timer_create(0x2, &(0x7f0000000080)={0x0, 0x3b}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000200)="a0c84d2fbeae0516f20567dd63c4c592f802ce2385970a57ce", &(0x7f0000000240)="83f54abee0872281efb74986f3e366905fbe6a954cfa634f732174d5f1b7cc78144cb6e07a81ea65583a27463084ba724f1b06e53f32db79fdc3699b162e2b66472a3df02bfd79a1d724fc27c1b0454cd5fbdc2b1b87db00fd7bc00dcb7fcc463fd68a4f6d2696126ce75c4e2afd427aa185c9a27f743294442340fc60b5a558b04e39a2e0739c4568b57523e020360832e2974e5f7e53026ba4769ff050f54870a29cf065e2785ab6325a2e3c8501472885a8"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xfbdf, 0x1800}, {0x0, 0x1ff, 0x1000}, {0x0, 0x6, 0x1000}, {0x3, 0x101, 0x1800}, {0x1, 0x3, 0x1000}, {0x3, 0x0, 0x1000}], 0x6, &(0x7f00000001c0)={0x0, 0x989680})

22:20:46 executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

[  909.709322][T25014] loop5: detected capacity change from 0 to 16383
[  909.730474][T25014] FAULT_INJECTION: forcing a failure.
[  909.730474][T25014] name failslab, interval 1, probability 0, space 0, times 0
[  909.743290][T25014] CPU: 1 PID: 25014 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
22:20:46 executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

[  909.754315][T25014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  909.764370][T25014] Call Trace:
[  909.767642][T25014]  <TASK>
[  909.770572][T25014]  dump_stack_lvl+0xd6/0x122
[  909.775198][T25014]  dump_stack+0x11/0x12
[  909.779387][T25014]  should_fail+0x230/0x240
[  909.783825][T25014]  ? ext4_alloc_inode+0x23/0x1b0
[  909.788844][T25014]  __should_failslab+0x81/0x90
[  909.793637][T25014]  should_failslab+0x5/0x20
[  909.798143][T25014]  kmem_cache_alloc_lru+0x52/0x2b0
[  909.803289][T25014]  ? __rcu_read_unlock+0x4a/0x70
22:20:46 executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

[  909.808276][T25014]  ext4_alloc_inode+0x23/0x1b0
[  909.813046][T25014]  ? ext4_unregister_li_request+0xd0/0xd0
[  909.818778][T25014]  alloc_inode+0x38/0x150
[  909.823109][T25014]  new_inode+0x21/0x140
[  909.827302][T25014]  __ext4_new_inode+0xd4/0x1de0
[  909.832157][T25014]  ? __dquot_initialize+0x13c/0x760
[  909.837378][T25014]  ext4_mkdir+0x1d5/0x5e0
[  909.841737][T25014]  vfs_mkdir+0x216/0x320
[  909.846037][T25014]  do_mkdirat+0x105/0x280
[  909.850394][T25014]  __x64_sys_mkdirat+0x4c/0x60
[  909.855178][T25014]  do_syscall_64+0x2b/0x70
22:20:46 executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

[  909.859600][T25014]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  909.865505][T25014] RIP: 0033:0x7fce157db1f7
[  909.869922][T25014] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  909.889530][T25014] RSP: 002b:00007fce14f51f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102
[  909.897944][T25014] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157db1f7
[  909.905918][T25014] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
[  909.913942][T25014] RBP: 00007fce14f521d0 R08: 0000000000000000 R09: 00007fce14f521d0
[  909.921915][T25014] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  909.929886][T25014] R13: 0000000020000100 R14: 00007fce14f51fe0 R15: 0000000020000040
[  909.937859][T25014]  </TASK>
22:20:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x200000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:46 executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:47 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0xedc0, 0x0)

22:20:47 executing program 0:
timer_create(0x2, &(0x7f0000000080)={0x0, 0x3b}, &(0x7f0000000180)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000200)="a0c84d2fbeae0516f20567dd63c4c592f802ce2385970a57ce", &(0x7f0000000240)="83f54abee0872281efb74986f3e366905fbe6a954cfa634f732174d5f1b7cc78144cb6e07a81ea65583a27463084ba724f1b06e53f32db79fdc3699b162e2b66472a3df02bfd79a1d724fc27c1b0454cd5fbdc2b1b87db00fd7bc00dcb7fcc463fd68a4f6d2696126ce75c4e2afd427aa185c9a27f743294442340fc60b5a558b04e39a2e0739c4568b57523e020360832e2974e5f7e53026ba4769ff050f54870a29cf065e2785ab6325a2e3c8501472885a8"}}, &(0x7f0000000040)=<r0=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (rerun: 64)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xfbdf, 0x1800}, {0x0, 0x1ff, 0x1000}, {0x0, 0x6, 0x1000}, {0x3, 0x101, 0x1800}, {0x1, 0x3, 0x1000}, {0x3, 0x0, 0x1000}], 0x6, &(0x7f00000001c0)={0x0, 0x989680})

22:20:47 executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="36060efa75337adc117a37a0b263236cb31f7cc641c7f424294192151042c75affd9b3ea74f47104afb3eb9bb87ae434db169af7790a423b7aa1042e53f0e9e5aab3ba3086d1e4b444d0e7430fd32c2756b7e1c0ccdc3cfd418925703c74106020b998fb9a78640b51d626e0cebee8b2a8505815d0717d661acad5d8873c44e3fa5c4b595abb8adedb65e3d10b4f2fa9d58ccf87240a5920643683fbcf120515c2c141f6522c4197959f557ae3c27fb3607e341307c03229b0299ba2fd2d408e72a7a7850468bf390c2d9b24cdc6095294e23e516d79b5436ef469a5f5a87202c41eb1e8e02dd53ce77cacc631bda1937b1798575d92d7db63", &(0x7f0000000440)=""/224}, 0x20)

22:20:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 46)

22:20:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x400000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:47 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000440)=""/224}, 0x20)

22:20:47 executing program 0:
timer_create(0x2, &(0x7f0000000080)={0x0, 0x3b}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000200)="a0c84d2fbeae0516f20567dd63c4c592f802ce2385970a57ce", &(0x7f0000000240)="83f54abee0872281efb74986f3e366905fbe6a954cfa634f732174d5f1b7cc78144cb6e07a81ea65583a27463084ba724f1b06e53f32db79fdc3699b162e2b66472a3df02bfd79a1d724fc27c1b0454cd5fbdc2b1b87db00fd7bc00dcb7fcc463fd68a4f6d2696126ce75c4e2afd427aa185c9a27f743294442340fc60b5a558b04e39a2e0739c4568b57523e020360832e2974e5f7e53026ba4769ff050f54870a29cf065e2785ab6325a2e3c8501472885a8"}}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xfbdf, 0x1800}, {0x0, 0x1ff, 0x1000}, {0x0, 0x6, 0x1000}, {0x3, 0x101, 0x1800}, {0x1, 0x3, 0x1000}, {0x3, 0x0, 0x1000}], 0x6, &(0x7f00000001c0)={0x0, 0x989680})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x3b}, &(0x7f0000000180)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000200)="a0c84d2fbeae0516f20567dd63c4c592f802ce2385970a57ce", &(0x7f0000000240)="83f54abee0872281efb74986f3e366905fbe6a954cfa634f732174d5f1b7cc78144cb6e07a81ea65583a27463084ba724f1b06e53f32db79fdc3699b162e2b66472a3df02bfd79a1d724fc27c1b0454cd5fbdc2b1b87db00fd7bc00dcb7fcc463fd68a4f6d2696126ce75c4e2afd427aa185c9a27f743294442340fc60b5a558b04e39a2e0739c4568b57523e020360832e2974e5f7e53026ba4769ff050f54870a29cf065e2785ab6325a2e3c8501472885a8"}}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xfbdf, 0x1800}, {0x0, 0x1ff, 0x1000}, {0x0, 0x6, 0x1000}, {0x3, 0x101, 0x1800}, {0x1, 0x3, 0x1000}, {0x3, 0x0, 0x1000}], 0x6, &(0x7f00000001c0)={0x0, 0x989680}) (async)

[  910.469283][T25047] loop5: detected capacity change from 0 to 16383
[  910.514618][T25047] FAULT_INJECTION: forcing a failure.
[  910.514618][T25047] name failslab, interval 1, probability 0, space 0, times 0
[  910.527298][T25047] CPU: 1 PID: 25047 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  910.538323][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  910.548442][T25047] Call Trace:
[  910.551716][T25047]  <TASK>
[  910.554707][T25047]  dump_stack_lvl+0xd6/0x122
[  910.559311][T25047]  dump_stack+0x11/0x12
[  910.563461][T25047]  should_fail+0x230/0x240
[  910.567882][T25047]  __should_failslab+0x81/0x90
[  910.572644][T25047]  ? security_inode_alloc+0x2e/0xf0
[  910.577926][T25047]  should_failslab+0x5/0x20
[  910.582574][T25047]  kmem_cache_alloc+0x46/0x300
[  910.587408][T25047]  ? __rcu_read_unlock+0x4a/0x70
[  910.592355][T25047]  security_inode_alloc+0x2e/0xf0
[  910.597408][T25047]  inode_init_always+0x22b/0x400
[  910.602365][T25047]  ? ext4_unregister_li_request+0xd0/0xd0
[  910.608093][T25047]  alloc_inode+0x77/0x150
[  910.612480][T25047]  new_inode+0x21/0x140
[  910.616642][T25047]  __ext4_new_inode+0xd4/0x1de0
[  910.621758][T25047]  ? __dquot_initialize+0x13c/0x760
[  910.627089][T25047]  ext4_mkdir+0x1d5/0x5e0
[  910.631430][T25047]  vfs_mkdir+0x216/0x320
[  910.635697][T25047]  do_mkdirat+0x105/0x280
[  910.640053][T25047]  __x64_sys_mkdirat+0x4c/0x60
[  910.644820][T25047]  do_syscall_64+0x2b/0x70
[  910.649272][T25047]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  910.655170][T25047] RIP: 0033:0x7fce157db1f7
[  910.659604][T25047] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  910.679252][T25047] RSP: 002b:00007fce14f51f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102
[  910.687672][T25047] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157db1f7
[  910.695647][T25047] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
[  910.703674][T25047] RBP: 00007fce14f521d0 R08: 0000000000000000 R09: 00007fce14f521d0
22:20:47 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f00000001c0)=[{0x1, 0x401, 0x1000}, {0x0, 0x81}, {0x4, 0x6, 0x800}, {0x3, 0x20, 0x1000}, {0x3, 0x9, 0x800}, {0x3, 0x26ca, 0x1800}], 0x6)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:47 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000440)=""/224}, 0x20)

22:20:47 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f00000001c0)=[{0x1, 0x401, 0x1000}, {0x0, 0x81}, {0x4, 0x6, 0x800}, {0x3, 0x20, 0x1000}, {0x3, 0x9, 0x800}, {0x3, 0x26ca, 0x1800}], 0x6)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  910.711693][T25047] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  910.719698][T25047] R13: 0000000020000100 R14: 00007fce14f51fe0 R15: 0000000020000040
[  910.727672][T25047]  </TASK>
22:20:47 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semop(r1, &(0x7f00000001c0)=[{0x1, 0x401, 0x1000}, {0x0, 0x81}, {0x4, 0x6, 0x800}, {0x3, 0x20, 0x1000}, {0x3, 0x9, 0x800}, {0x3, 0x26ca, 0x1800}], 0x6) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:47 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000440)=""/224}, 0x20)

22:20:48 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0xff03, 0x0)

22:20:48 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe1, 0x9, 0x40, 0x8, 0x0, 0x100, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x4, 0xaa}, 0x86, 0x200, 0x8001, 0x2, 0x200, 0x8000, 0x9, 0x0, 0x2, 0x0, 0xaf6a}, r0, 0x6, 0xffffffffffffffff, 0xe)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:48 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000440)=""/224}, 0x20)

22:20:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x600000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 47)

22:20:48 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  911.183042][T25087] loop5: detected capacity change from 0 to 16383
[  911.197424][T25087] FAULT_INJECTION: forcing a failure.
[  911.197424][T25087] name failslab, interval 1, probability 0, space 0, times 0
[  911.210215][T25087] CPU: 1 PID: 25087 Comm: syz-executor.5 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  911.221238][T25087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
22:20:48 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe1, 0x9, 0x40, 0x8, 0x0, 0x100, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x4, 0xaa}, 0x86, 0x200, 0x8001, 0x2, 0x200, 0x8000, 0x9, 0x0, 0x2, 0x0, 0xaf6a}, r0, 0x6, 0xffffffffffffffff, 0xe) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:48 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe1, 0x9, 0x40, 0x8, 0x0, 0x100, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x4, 0xaa}, 0x86, 0x200, 0x8001, 0x2, 0x200, 0x8000, 0x9, 0x0, 0x2, 0x0, 0xaf6a}, r0, 0x6, 0xffffffffffffffff, 0xe) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x4, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)

[  911.231291][T25087] Call Trace:
[  911.234606][T25087]  <TASK>
[  911.237531][T25087]  dump_stack_lvl+0xd6/0x122
[  911.242130][T25087]  dump_stack+0x11/0x12
[  911.246288][T25087]  should_fail+0x230/0x240
[  911.250714][T25087]  __should_failslab+0x81/0x90
[  911.255481][T25087]  ? jbd2__journal_start+0xa1/0x290
[  911.260687][T25087]  should_failslab+0x5/0x20
[  911.265215][T25087]  kmem_cache_alloc+0x46/0x300
[  911.270032][T25087]  ? __find_get_block+0x54e/0x6c0
[  911.275149][T25087]  jbd2__journal_start+0xa1/0x290
22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r3=>0x0)
timer_gettime(r3, &(0x7f0000000200))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  911.280179][T25087]  __ext4_journal_start_sb+0x10f/0x280
[  911.285652][T25087]  __ext4_new_inode+0xaca/0x1de0
[  911.290636][T25087]  ext4_mkdir+0x1d5/0x5e0
[  911.294974][T25087]  vfs_mkdir+0x216/0x320
[  911.299253][T25087]  do_mkdirat+0x105/0x280
[  911.303630][T25087]  __x64_sys_mkdirat+0x4c/0x60
[  911.308390][T25087]  do_syscall_64+0x2b/0x70
[  911.312806][T25087]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  911.318706][T25087] RIP: 0033:0x7fce157db1f7
[  911.323142][T25087] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  911.342752][T25087] RSP: 002b:00007fce14f51f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102
[  911.351235][T25087] RAX: ffffffffffffffda RBX: 00000000200008c0 RCX: 00007fce157db1f7
[  911.359206][T25087] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c
[  911.367181][T25087] RBP: 00007fce14f521d0 R08: 0000000000000000 R09: 00007fce14f521d0
[  911.375203][T25087] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async, rerun: 64)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r3=>0x0)
timer_gettime(r3, &(0x7f0000000200))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  911.383175][T25087] R13: 0000000020000100 R14: 00007fce14f51fe0 R15: 0000000020000040
[  911.391151][T25087]  </TASK>
[  911.394305][T25087] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory
22:20:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfbffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r3=>0x0)
timer_gettime(r3, &(0x7f0000000200)) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)

22:20:48 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x40000, 0x0)

22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x800000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:48 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0)

22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
r2 = semget$private(0x0, 0x3, 0x540)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
clock_gettime(0x3, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+60000000}}, &(0x7f0000000200))
clock_gettime(0x0, &(0x7f0000000240)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000280)={{r5, r6+60000000}}, &(0x7f00000002c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @bcast, @null, @default, @remote, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/45, 0x2d}], 0x7}, 0x4}, {{&(0x7f0000000780), 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/117, 0x75}], 0x1, &(0x7f00000008c0)=""/105, 0x69}, 0x9}], 0x2, 0x40000000, &(0x7f00000009c0))

22:20:48 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)) (async, rerun: 32)
r2 = semget$private(0x0, 0x3, 0x540) (rerun: 32)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
clock_gettime(0x3, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+60000000}}, &(0x7f0000000200)) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000240)={<r5=>0x0, <r6=>0x0}) (rerun: 32)
timer_settime(r0, 0x0, &(0x7f0000000280)={{r5, r6+60000000}}, &(0x7f00000002c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @bcast, @null, @default, @remote, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/45, 0x2d}], 0x7}, 0x4}, {{&(0x7f0000000780), 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/117, 0x75}], 0x1, &(0x7f00000008c0)=""/105, 0x69}, 0x9}], 0x2, 0x40000000, &(0x7f00000009c0))

[  912.068045][T25138] loop5: detected capacity change from 0 to 16383
[  912.104720][T25138] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
r2 = semget$private(0x0, 0x3, 0x540)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
clock_gettime(0x3, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+60000000}}, &(0x7f0000000200))
clock_gettime(0x0, &(0x7f0000000240)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000280)={{r5, r6+60000000}}, &(0x7f00000002c0)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @bcast, @null, @default, @remote, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/45, 0x2d}], 0x7}, 0x4}, {{&(0x7f0000000780), 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/117, 0x75}], 0x1, &(0x7f00000008c0)=""/105, 0x69}, 0x9}], 0x2, 0x40000000, &(0x7f00000009c0))

[  912.133220][T25138] EXT4-fs (loop5): get root inode failed
[  912.138906][T25138] EXT4-fs (loop5): mount failed
22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
r3 = semget$private(0x0, 0x4, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000240)={{}, {0x0, r5+10000000}}, 0x0)
timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000])
semop(r3, &(0x7f0000000180)=[{0x1, 0x0, 0xc00}, {0x0, 0x2, 0x1000}], 0x2)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:49 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  912.238478][T25161] loop5: detected capacity change from 0 to 16383
[  912.298409][T25161] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  912.350481][T25161] EXT4-fs (loop5): get root inode failed
[  912.356212][T25161] EXT4-fs (loop5): mount failed
22:20:49 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x80000, 0x0)

22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
r3 = semget$private(0x0, 0x4, 0x0) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0) (rerun: 32)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000240)={{}, {0x0, r5+10000000}}, 0x0)
timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semop(r3, &(0x7f0000000180)=[{0x1, 0x0, 0xc00}, {0x0, 0x2, 0x1000}], 0x2) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xc00000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:49 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 32)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
r3 = semget$private(0x0, 0x4, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000240)={{}, {0x0, r5+10000000}}, 0x0) (async)
timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x0, 0xf7ff}], 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x1000]) (async)
semop(r3, &(0x7f0000000180)=[{0x1, 0x0, 0xc00}, {0x0, 0x2, 0x1000}], 0x2)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  912.647857][T25172] loop5: detected capacity change from 0 to 16383
22:20:49 executing program 4:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
r2 = semget$private(0x0, 0x3, 0x540)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
clock_gettime(0x3, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+60000000}}, &(0x7f0000000200))
clock_gettime(0x0, &(0x7f0000000240)={<r5=>0x0, <r6=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000280)={{r5, r6+60000000}}, &(0x7f00000002c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @bcast, @null, @default, @remote, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/45, 0x2d}], 0x7}, 0x4}, {{&(0x7f0000000780), 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/117, 0x75}], 0x1, &(0x7f00000008c0)=""/105, 0x69}, 0x9}], 0x2, 0x40000000, &(0x7f00000009c0))

22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)) (async)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  912.688859][T25172] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  912.720950][T25172] EXT4-fs (loop5): get root inode failed
[  912.726716][T25172] EXT4-fs (loop5): mount failed
22:20:49 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:49 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x15}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x1, 0x0, @thr={&(0x7f0000000200)="53eca8eab25c0b687256cd21512d61973e61d53a55105e20b4678ac8878a54e69c1ffe7a9d41a559d39ec14fa7948d8bd9414d7bdc7cd4bdacc183b4eec858805d243ebd526c6d0cc29b10cc70764f168fa15fbbf67cf2cd950fbe7d50d6b76831e262c346f8a85aecb0c38034429b379578e4a3b6e0cbb59aafacadee291f21ae16dd7fa0101d11298c00ca17fe02b497b21d1397a43070d999c15a106d30f10b19ac", &(0x7f0000000340)="0b6ec595fd5c27d87913c088141612ff65c60114cd6009f5baae50dddcad62218ac73e952601c013a317ca0963233e5517c4c2908942e344ff5c747826cfb2e3dcc75b40e6476a8ad8bbec6469564341dbbb2ae1a646ac232b5d2fa04465bbfc87c4066c6c6e8e0c1be70000000000000000000000acedf1700135e29d80"}}, &(0x7f00000001c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  912.791928][T25197] loop5: detected capacity change from 0 to 16383
[  912.822043][T25197] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:49 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1}, 0x20)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80, 0x2)
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x42240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x2, 0x3, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x5}, @alu={0x4, 0x1, 0x8, 0x0, 0x1, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd0, &(0x7f0000000440)=""/208, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3, r4]}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0)

[  912.856431][T25197] EXT4-fs (loop5): get root inode failed
[  912.862115][T25197] EXT4-fs (loop5): mount failed
22:20:50 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x80040, 0x0)

22:20:50 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1000000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  913.268984][T25219] loop5: detected capacity change from 0 to 16383
[  913.301328][T25219] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:50 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  913.335547][T25219] EXT4-fs (loop5): get root inode failed
[  913.341223][T25219] EXT4-fs (loop5): mount failed
22:20:50 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (fail_nth: 1)

[  913.395625][T25227] loop5: detected capacity change from 0 to 16383
[  913.432390][T25227] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  913.468949][T25227] EXT4-fs (loop5): get root inode failed
[  913.474698][T25227] EXT4-fs (loop5): mount failed
[  913.506625][T25231] FAULT_INJECTION: forcing a failure.
[  913.506625][T25231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  913.519704][T25231] CPU: 0 PID: 25231 Comm: syz-executor.4 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  913.530775][T25231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  913.540903][T25231] Call Trace:
[  913.544236][T25231]  <TASK>
[  913.547165][T25231]  dump_stack_lvl+0xd6/0x122
[  913.551847][T25231]  dump_stack+0x11/0x12
[  913.556035][T25231]  should_fail+0x230/0x240
[  913.560461][T25231]  should_fail_usercopy+0x16/0x20
[  913.565574][T25231]  _copy_from_user+0x1a/0xc0
[  913.570173][T25231]  __sys_bpf+0x1b5/0x600
[  913.574428][T25231]  __x64_sys_bpf+0x3f/0x50
[  913.578849][T25231]  do_syscall_64+0x2b/0x70
[  913.583276][T25231]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  913.589174][T25231] RIP: 0033:0x7f8d68d2e0e9
[  913.593585][T25231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  913.613193][T25231] RSP: 002b:00007f8d684a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  913.621609][T25231] RAX: ffffffffffffffda RBX: 00007f8d68e40f60 RCX: 00007f8d68d2e0e9
[  913.629585][T25231] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000004
[  913.637595][T25231] RBP: 00007f8d684a41d0 R08: 0000000000000000 R09: 0000000000000000
[  913.645571][T25231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  913.653550][T25231] R13: 00007ffc3a7ff5ff R14: 00007f8d684a4300 R15: 0000000000022000
[  913.661595][T25231]  </TASK>
22:20:50 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (fail_nth: 2)

22:20:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1800000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:50 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  913.730115][T25233] FAULT_INJECTION: forcing a failure.
[  913.730115][T25233] name failslab, interval 1, probability 0, space 0, times 0
[  913.742783][T25233] CPU: 1 PID: 25233 Comm: syz-executor.4 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  913.753887][T25233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  913.763954][T25233] Call Trace:
[  913.767238][T25233]  <TASK>
[  913.770175][T25233]  dump_stack_lvl+0xd6/0x122
[  913.774778][T25233]  dump_stack+0x11/0x12
[  913.778946][T25233]  should_fail+0x230/0x240
[  913.783417][T25233]  __should_failslab+0x81/0x90
[  913.788190][T25233]  should_failslab+0x5/0x20
[  913.792726][T25233]  kmem_cache_alloc_node_trace+0x58/0x300
[  913.798536][T25233]  ? vmemdup_user+0x3e/0x1a0
[  913.803139][T25233]  vmemdup_user+0x3e/0x1a0
[  913.807603][T25233]  map_get_next_key+0x194/0x340
[  913.812527][T25233]  __sys_bpf+0x2e5/0x600
[  913.816792][T25233]  __x64_sys_bpf+0x3f/0x50
[  913.821281][T25233]  do_syscall_64+0x2b/0x70
[  913.825729][T25233]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  913.831721][T25233] RIP: 0033:0x7f8d68d2e0e9
[  913.836209][T25233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  913.855886][T25233] RSP: 002b:00007f8d684a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  913.864386][T25233] RAX: ffffffffffffffda RBX: 00007f8d68e40f60 RCX: 00007f8d68d2e0e9
[  913.872358][T25233] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000004
[  913.880361][T25233] RBP: 00007f8d684a41d0 R08: 0000000000000000 R09: 0000000000000000
[  913.888339][T25233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  913.896315][T25233] R13: 00007ffc3a7ff5ff R14: 00007f8d684a4300 R15: 0000000000022000
[  913.904297][T25233]  </TASK>
[  913.910799][T25236] loop5: detected capacity change from 0 to 16383
[  913.938278][T25236] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  913.957413][T25236] EXT4-fs (loop5): get root inode failed
[  913.963114][T25236] EXT4-fs (loop5): mount failed
22:20:50 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  914.059239][T25242] loop5: detected capacity change from 0 to 16383
[  914.095545][T25242] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  914.172274][T25242] EXT4-fs (loop5): get root inode failed
[  914.177945][T25242] EXT4-fs (loop5): mount failed
22:20:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x1c00000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:52 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x15}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x1, 0x0, @thr={&(0x7f0000000200)="53eca8eab25c0b687256cd21512d61973e61d53a55105e20b4678ac8878a54e69c1ffe7a9d41a559d39ec14fa7948d8bd9414d7bdc7cd4bdacc183b4eec858805d243ebd526c6d0cc29b10cc70764f168fa15fbbf67cf2cd950fbe7d50d6b76831e262c346f8a85aecb0c38034429b379578e4a3b6e0cbb59aafacadee291f21ae16dd7fa0101d11298c00ca17fe02b497b21d1397a43070d999c15a106d30f10b19ac", &(0x7f0000000340)="0b6ec595fd5c27d87913c088141612ff65c60114cd6009f5baae50dddcad62218ac73e952601c013a317ca0963233e5517c4c2908942e344ff5c747826cfb2e3dcc75b40e6476a8ad8bbec6469564341dbbb2ae1a646ac232b5d2fa04465bbfc87c4066c6c6e8e0c1be70000000000000000000000acedf1700135e29d80"}}, &(0x7f00000001c0)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:52 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (fail_nth: 3)

22:20:52 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x1fffff, 0x0)

22:20:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  915.841728][T25256] FAULT_INJECTION: forcing a failure.
[  915.841728][T25256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  915.853421][T25260] loop5: detected capacity change from 0 to 16383
[  915.854857][T25256] CPU: 0 PID: 25256 Comm: syz-executor.4 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  915.872224][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  915.882335][T25256] Call Trace:
[  915.885615][T25256]  <TASK>
22:20:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x2e00000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:52 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x15}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x1, 0x0, @thr={&(0x7f0000000200)="53eca8eab25c0b687256cd21512d61973e61d53a55105e20b4678ac8878a54e69c1ffe7a9d41a559d39ec14fa7948d8bd9414d7bdc7cd4bdacc183b4eec858805d243ebd526c6d0cc29b10cc70764f168fa15fbbf67cf2cd950fbe7d50d6b76831e262c346f8a85aecb0c38034429b379578e4a3b6e0cbb59aafacadee291f21ae16dd7fa0101d11298c00ca17fe02b497b21d1397a43070d999c15a106d30f10b19ac", &(0x7f0000000340)="0b6ec595fd5c27d87913c088141612ff65c60114cd6009f5baae50dddcad62218ac73e952601c013a317ca0963233e5517c4c2908942e344ff5c747826cfb2e3dcc75b40e6476a8ad8bbec6469564341dbbb2ae1a646ac232b5d2fa04465bbfc87c4066c6c6e8e0c1be70000000000000000000000acedf1700135e29d80"}}, &(0x7f00000001c0))
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x15}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
timer_create(0x1, &(0x7f0000000180)={0x0, 0x1, 0x0, @thr={&(0x7f0000000200)="53eca8eab25c0b687256cd21512d61973e61d53a55105e20b4678ac8878a54e69c1ffe7a9d41a559d39ec14fa7948d8bd9414d7bdc7cd4bdacc183b4eec858805d243ebd526c6d0cc29b10cc70764f168fa15fbbf67cf2cd950fbe7d50d6b76831e262c346f8a85aecb0c38034429b379578e4a3b6e0cbb59aafacadee291f21ae16dd7fa0101d11298c00ca17fe02b497b21d1397a43070d999c15a106d30f10b19ac", &(0x7f0000000340)="0b6ec595fd5c27d87913c088141612ff65c60114cd6009f5baae50dddcad62218ac73e952601c013a317ca0963233e5517c4c2908942e344ff5c747826cfb2e3dcc75b40e6476a8ad8bbec6469564341dbbb2ae1a646ac232b5d2fa04465bbfc87c4066c6c6e8e0c1be70000000000000000000000acedf1700135e29d80"}}, &(0x7f00000001c0)) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  915.888553][T25256]  dump_stack_lvl+0xd6/0x122
[  915.893224][T25256]  dump_stack+0x11/0x12
[  915.897393][T25256]  should_fail+0x230/0x240
[  915.901819][T25256]  should_fail_usercopy+0x16/0x20
[  915.907035][T25256]  _copy_from_user+0x1a/0xc0
[  915.911652][T25256]  vmemdup_user+0x12a/0x1a0
[  915.916173][T25256]  map_get_next_key+0x194/0x340
[  915.921077][T25256]  __sys_bpf+0x2e5/0x600
[  915.925422][T25256]  __x64_sys_bpf+0x3f/0x50
[  915.929844][T25256]  do_syscall_64+0x2b/0x70
[  915.934340][T25256]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  915.940373][T25256] RIP: 0033:0x7f8d68d2e0e9
[  915.944795][T25256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  915.964426][T25256] RSP: 002b:00007f8d684a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  915.972836][T25256] RAX: ffffffffffffffda RBX: 00007f8d68e40f60 RCX: 00007f8d68d2e0e9
[  915.980806][T25256] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000004
[  915.988778][T25256] RBP: 00007f8d684a41d0 R08: 0000000000000000 R09: 0000000000000000
[  915.996748][T25256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.004815][T25256] R13: 00007ffc3a7ff5ff R14: 00007f8d684a4300 R15: 0000000000022000
[  916.012791][T25256]  </TASK>
[  916.033626][T25260] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  916.126384][T25260] EXT4-fs (loop5): get root inode failed
[  916.132101][T25260] EXT4-fs (loop5): mount failed
22:20:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:53 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (fail_nth: 4)

[  916.200577][T25279] FAULT_INJECTION: forcing a failure.
[  916.200577][T25279] name failslab, interval 1, probability 0, space 0, times 0
[  916.213223][T25279] CPU: 0 PID: 25279 Comm: syz-executor.4 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  916.224370][T25279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  916.234429][T25279] Call Trace:
[  916.237719][T25279]  <TASK>
[  916.240760][T25279]  dump_stack_lvl+0xd6/0x122
[  916.245360][T25279]  dump_stack+0x11/0x12
22:20:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x3f00000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  916.249605][T25279]  should_fail+0x230/0x240
[  916.254027][T25279]  __should_failslab+0x81/0x90
[  916.258798][T25279]  should_failslab+0x5/0x20
[  916.263300][T25279]  kmem_cache_alloc_node_trace+0x58/0x300
[  916.269027][T25279]  ? kmem_cache_alloc_node_trace+0x1fc/0x300
[  916.275027][T25279]  ? should_fail+0xd5/0x240
[  916.279533][T25279]  ? kvmalloc_node+0x6e/0x140
[  916.284244][T25279]  kvmalloc_node+0x6e/0x140
[  916.288748][T25279]  map_get_next_key+0x1f1/0x340
[  916.293657][T25279]  __sys_bpf+0x2e5/0x600
[  916.297905][T25279]  __x64_sys_bpf+0x3f/0x50
[  916.302408][T25279]  do_syscall_64+0x2b/0x70
[  916.306839][T25279]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  916.312789][T25279] RIP: 0033:0x7f8d68d2e0e9
[  916.317207][T25279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  916.336919][T25279] RSP: 002b:00007f8d684a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  916.345333][T25279] RAX: ffffffffffffffda RBX: 00007f8d68e40f60 RCX: 00007f8d68d2e0e9
[  916.353405][T25279] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000004
[  916.361386][T25279] RBP: 00007f8d684a41d0 R08: 0000000000000000 R09: 0000000000000000
[  916.369360][T25279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.377330][T25279] R13: 00007ffc3a7ff5ff R14: 00007f8d684a4300 R15: 0000000000022000
[  916.385410][T25279]  </TASK>
[  916.395347][T25285] loop5: detected capacity change from 0 to 16383
22:20:53 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (fail_nth: 5)

[  916.434639][T25285] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  916.464451][T25285] EXT4-fs (loop5): get root inode failed
[  916.470173][T25285] EXT4-fs (loop5): mount failed
[  916.524508][T25289] FAULT_INJECTION: forcing a failure.
[  916.524508][T25289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  916.537629][T25289] CPU: 1 PID: 25289 Comm: syz-executor.4 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  916.548721][T25289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  916.558783][T25289] Call Trace:
[  916.562063][T25289]  <TASK>
[  916.564992][T25289]  dump_stack_lvl+0xd6/0x122
[  916.569595][T25289]  dump_stack+0x11/0x12
[  916.573839][T25289]  should_fail+0x230/0x240
[  916.578292][T25289]  should_fail_usercopy+0x16/0x20
[  916.583316][T25289]  _copy_to_user+0x1a/0x90
[  916.587737][T25289]  simple_read_from_buffer+0xab/0x120
[  916.593116][T25289]  proc_fail_nth_read+0x10d/0x150
[  916.598159][T25289]  ? proc_fault_inject_write+0x230/0x230
[  916.603863][T25289]  vfs_read+0x1a1/0x6a0
[  916.608060][T25289]  ? __fget_files+0x1d2/0x210
[  916.612742][T25289]  ksys_read+0xe8/0x1a0
[  916.616897][T25289]  __x64_sys_read+0x3e/0x50
[  916.621408][T25289]  do_syscall_64+0x2b/0x70
[  916.625841][T25289]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  916.631794][T25289] RIP: 0033:0x7f8d68ce0c9c
[  916.636209][T25289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  916.655829][T25289] RSP: 002b:00007f8d684a4160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  916.664273][T25289] RAX: ffffffffffffffda RBX: 00007f8d68e40f60 RCX: 00007f8d68ce0c9c
22:20:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  916.672260][T25289] RDX: 000000000000000f RSI: 00007f8d684a41e0 RDI: 0000000000000004
[  916.680234][T25289] RBP: 00007f8d684a41d0 R08: 0000000000000000 R09: 0000000000000000
[  916.688220][T25289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.696189][T25289] R13: 00007ffc3a7ff5ff R14: 00007f8d684a4300 R15: 0000000000022000
[  916.704166][T25289]  </TASK>
22:20:53 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x1000000, 0x0)

22:20:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x8900000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  916.734475][T25291] loop5: detected capacity change from 0 to 16383
[  916.798607][T25291] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  916.830514][T25291] EXT4-fs (loop5): get root inode failed
[  916.836222][T25291] EXT4-fs (loop5): mount failed
22:20:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:53 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  916.927768][T25302] loop5: detected capacity change from 0 to 16383
[  916.962825][T25302] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:53 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  917.015527][T25302] EXT4-fs (loop5): get root inode failed
[  917.021197][T25302] EXT4-fs (loop5): mount failed
22:20:53 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:55 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x5, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:55 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2000000, 0x0)

22:20:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xa1ffffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:55 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x4, 0x1, @tid=r3}, &(0x7f00000001c0))

22:20:55 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x8080)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0xa02})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0, <r6=>0x0, 0x0, ""/16, ""/16, ""/16, <r7=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f00000014c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r4, @ANYBLOB="76bcdb0275d15006ea9c016c473784d8ae000033caecd8e3e2688f5393919f5ff6290ab52056d80da774c911f4e52ec7868d658c2999d7b20401b7b653c1cf31bfd3c86a127a7b"]}, @devid})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000000c0)={{<r8=>r4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000001, 0xffffffff, 0x4}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000058480)={<r9=>0x0, <r10=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059480)={0x5, [{}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r9}], 0x6, "0573d56b2ec365"})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:55 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x6, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:55 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x4, 0x1, @tid=r3}, &(0x7f00000001c0))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
getpid() (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x4, 0x1, @tid=r3}, &(0x7f00000001c0)) (async)

[  918.925682][T25316] loop5: detected capacity change from 0 to 16383
22:20:55 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x7, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:55 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x4, 0x1, @tid=r3}, &(0x7f00000001c0))

[  918.972872][T25316] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:55 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x3, 0x22)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:55 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x8, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:55 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x9, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  919.033472][T25316] EXT4-fs (loop5): get root inode failed
[  919.039148][T25316] EXT4-fs (loop5): mount failed
22:20:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  919.125433][T25358] loop5: detected capacity change from 0 to 16383
[  919.169634][T25358] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  919.252161][T25358] EXT4-fs (loop5): get root inode failed
[  919.257837][T25358] EXT4-fs (loop5): mount failed
22:20:56 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2040000, 0x0)

22:20:56 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0xa, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x3, 0x22)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xa1ffffffffffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:56 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x8080)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0xa02}) (async, rerun: 32)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0, <r6=>0x0, 0x0, ""/16, ""/16, ""/16, <r7=>0x0}) (rerun: 32)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f00000014c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r4, @ANYBLOB="76bcdb0275d15006ea9c016c473784d8ae000033caecd8e3e2688f5393919f5ff6290ab52056d80da774c911f4e52ec7868d658c2999d7b20401b7b653c1cf31bfd3c86a127a7b"]}, @devid})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000000c0)={{<r8=>r4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000001, 0xffffffff, 0x4}}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000058480)={<r9=>0x0, <r10=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059480)={0x5, [{}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r9}], 0x6, "0573d56b2ec365"}) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x3, 0x22)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:56 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0xb, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:56 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, &(0x7f0000000240)=""/185, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x8080) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0xa02}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0, <r6=>0x0, 0x0, ""/16, ""/16, ""/16, <r7=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f00000014c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r4, @ANYBLOB="76bcdb0275d15006ea9c016c473784d8ae000033caecd8e3e2688f5393919f5ff6290ab52056d80da774c911f4e52ec7868d658c2999d7b20401b7b653c1cf31bfd3c86a127a7b"]}, @devid}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000000c0)={{<r8=>r4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000001, 0xffffffff, 0x4}}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000058480)={<r9=>0x0, <r10=>0x0, "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", "6baf6b986fed9afa4621b19794defe7dd14d5485dacc0a89e4f86de5802fd9f92cec91801b2245672db76e79ce05f3a2461411a67879948664500faa08b97f9727d10d7d0c5bc8ba169ff22339c41e339347d0106ac4840d04dc9add0cf389cf63bd41eaaeeecc199337726019acabc2feb01e5bdae5ee088ca8bec796db440a63e8e67965c056b9008e257d91a9664e0e3c72b413f8a9478d3a3e2ddd655e4c76dd1c40309086e603ff248c8c815dc825052c0c2695ff8ee92de4542b8d5bd230bad7e1fd0401d63e2a774ef4176dde49126166ac7fa6bd930550f2de51f8d28ffa70e431b7978683ba74f91b94eefb19d91e0c54ce46e18550cfd4daf4d249fbc4ae238f4d7355a99fd0727ff36a5b35ea04da17cb855608d4a3ee47340980bf0ff253b19375c5dac5595c57f772fb411dae036c56d8e9fa6908fba13fe7b2e02ec55b280ff484c7178f4eafc2f1da975516d32df75078c0d93cb80a7122445b8eff4aba3ae90f9af0d185c36f918057d16bc5d326bcd39b61b5d4dd52c602ae3651d31e0407a116f6d32b0b1a9fed32a22199a7f40bfd8e609a8c54b5aebece2bf38a53fe5c64a2bc4f7aef263ab2f6e4d6d64b769c8e9636ff58f9f1ceddcf15b2a5f818c988afd3cabfe53898e4cca6c0d3368d14c6815202a5e4fa14edb971e1079bfc7134da2965d83302d2ac7ac70b73088196e71d610e7b176d410a31480fdb9bbf9fe7935314dda5a13486380e026ee82c391cf705a74b938d3096780a54a8f8d8269e29b679957fb1314f08b2070b51201327af54952de92e3d88ffec68d86843c71f9412a7444a8c155efe9b9b2bb453d304054cea167cd6cf5c8a03ee86c1c7f296997271d09708eef491af13da17c5c3ce0807d651b59c69be6ce85187e7198eea8b0ada84d9d0f50c16c0ddc94cb38b6bf226a1dce58ab1c6be3f202df470af219c8083d35072e841069f3c5e4ed70b60413c9a5c6d78f69d7038cf85c5189030c509961804a4b3cd8ded708d8ae62155316e9a609b2942fbcdb31f25938d461554a6cf934e4a49222a2b26f4004544fe6f1857433d924e488a96083b048f679ae642ed9afd7536660f5d5436719b4e881578a83f6a0173644010f00072e90377476f549c62016b7aa8d97101289e96b9a47aa958e67783c04a799639c3e8a797e2234eb1c2d82957611ef8bda7af244d7064e681381cd61123adbe2a7928a87da4d6bf6909e63204478edd0652471efa6b3c60b804a189ae038403c56d8d8a9d9462632e492798aadb1aebbedec003885493057cc3c182d53bdb1c05d9413753838174519ed664491cd5134e2545e86ffbd9398d4473b743cf05eaf79838e7a55112c15dcbfff84d6edcfda2ac81ec2b917bdd746bcaa66204dec18e929188374c0599a57b3a16749eee4dc7199e8ad476ef322349fc09184e1db67af25ca9e6bbbe9246697745452d606d54b2a11dfdd0e59ae68bcc52057bc2024c4e3a24fd5bdf388d7703e6400b01e3278d87af84ca4a14389677ef25eb89e10cfe99d370e30952dc5ab824fe8855ed9fba59cfc4f8f09f651e04e25b9f71fa947d4696b7a084418c226da20f20261ba756b345a0824b2252f6397daa0f9b37d6df78e647b0e4d1df6a36f191600b8f54e681b53af229904d5c87af989744f25401a5df989afbd84f09d9208170d607d159ad463d9f6d97f1276d33ee4c0b5bd51618dc82e26ca9d196336748f3e3df01bc5b07f0ac276376fa34bd6536c063e5bc3a6c78356c00b74460d6bd22e1a80e411dfd7a5deee17e302d01d5b4bf1c4237c8c02755fac28396313e0fb78b7c0551febcea22561a00be6015b67efce6326d42d1e30767fe9e8b3f9ae0f2ec508d336f90556bf640d3b7baffb3f42a2776b4d39c042a99de6283e09a1951127ee251429842893a4c906fa901ae959090f22e21f3b606e68b9ddb546bf2b8f4a76b2fcbcfac3048c3ac8d96d1e31f10268e90592b8c0fd6e7855362b42584809d607575328ac1593cb857eef63b0bf744533d8d18975e40db532586de11b69002990426f24ffc817c116be0ea432e2f0081f9022aea145ed6a0d85a727a7d2a11ad1d341247bf4225ae721fe26bcdf6a94d8f47f99b521055ad9d92df997f227e42a5bfc2c00b3ae8c478c73611993ee78150797080fbd23f7f5595761eaac80d42872038bb008e8807f74d750d15a182143d38a30efce4b3e6ffb7ad83927b9f92b4596d635fe5db6a6931a19ebeb47be21fbca7dd5a059cbb0ece2f9ea241f140153ea713f35dbc275e8cf8e837078c703efb2954011c80b608b5ef2e0f02e443934c1ec49ca1cd17692e59e6b5bb41f6a653c92b8b68d63baf73d7dce40237b3153fdef5d7230e7efc42889faf658c9bf948e51593133697707bed7f90f896feac0d511087fea6f95708e17e82b0247fe09ade92d33d0d9f7e0eef0a694ad657343fa2ac3537b0cdda55058116b400f026037bc32c912290e463b143765c4b8fce4481ebc5e35db2344d2a77de727680e784575dbbe389f29d9848a6e8a10f412e96b70fee93c367ed8983c329069e235a63a21a28aa601e3b5f9568f1f4a23f7044295035605aad1bbd1ce443f6615bcc20d1a3cf5f9c20cb40eec37f67c2bdff1c3604cb3c83cde810a3e35dbf832909d565fc0db6e152599d9baf74b30cde6efbe64caa1c1c3f161d6b6d2bf5355185652f262b9a405857030e4cd30549756637a93422cc3c8df5ae27cb070b79ec87b243088eb585915e965cd9b22d48dedd928a6f4fe0a4a6407229820f21ebc51f9fc358f7139b824ec2fa9a732a1b534baf470edb97e99b3650f10f1b8fd866b15fccb2831dbd04308e7a8902b3157566598d3d1d6949797fdb9fbc3abbb0881ce7dbe02ca0368338135ee107e00b7aa6d9d453de38f5f5d288dc77d6e82209435880cc6ec5339bc1600301ed3bb3bb586dab625d4e58d23d1dca625f9a42328669e07c608b0df740fb579b06c238061b8fe1dddeb82315e70152870267e91237709d32d70bbcd9625f2e4eac6b020b494291668b95bdd89fceaab150f7c84a171209e3305e021cf6c4a1fde9ca87e9abf3c88f0b0704a98af8a1cd004ee868310d140439bf874a5c244cca0cf94c8f2a2ec536664bdde41e567f93e03f9e86d907e68c8bd097ac5b2fa03985f4647e113e645ff9c42a04b0a8a9b056b421c1a714dbd277b1d2990f0d2dd6125243eea68f55a3d5929bb946b82e2aef8e4e0ebe4c6f21515300baf46c5a2fb4d1b95c956ef862ded39a8d8c1a91e1912b60ec15846ca891ecd87303c29245c1ad3f5748e605b6041f920ef0c6e11ab6ee2bdabed331d7f37fde3d36ee6141bfab2a11760855a55fbe3d42456b72350d7d421f8b72ec9dc168aac1ae30a83a2911a818a8ef808cc59a72a962e62257544a8f5d6fec5cba10ebb3f93735379ca5f336398f40633f438a0c1ed912a9e5f44a26540a7d9698eea728d0ea78bc2135c20be8856712e040bd8c705bff08aa8a90225665902bd3ec489e3681ba05f447ed1d0c82bf5391a8a80faec9c69dcc2eba46eae4416490fa3a1c8208bff47cb5a02987f95048fd9eb33ec84837d835e28b3ecaa1ea97e3595b23f950a391e157376d2ca149bbbe01f5fa402c1eee6a519f97d9fc59c7ef767955e85087b5040cad7fab9b5c93473f7b880ec4f5d1add59a14f0b7149888d3c123c39d6b4fe3cdcb6491334c114e413cf85d19d6ab9bfd6f3346f851e8824696427655a34d791619f8e8f95fc6cbd5b65d7d498aa77e234b1aeb7029bbee51f935330966e710920806e7cb1a4eba0869bef11702989737e825bca26fbcc3ca51824c1a30aeafa72c5041e4eb5a745112bc0fd13c00be881ed543582399e9ebfc96eed0894db5158c9b6c98f6f7b768aa203e052c6b56eb1037341f8ca283efabc406736bc48696b6a4f2ddadd07097ffe3a67aa98cf5cb9e085b940d5482bc26fe9aed9501e52e2e1b69f96720fe2f36404150cf377220f5be463388d5478f99a25570cd57745fb61ea91860b8c1b3a17e0690f9370cb92d6f26bf772f0af81214971bf1cbe3001889ba800cb86d1a6f7a6a7bcc953f721cda22dea26d62a241f7edca7405606cb6ccc9b5f0b4c655e024ce91e685dfa576050e6d650858b8ae2a613fdcd0692b62a363d176dfbf0de40726f9eb809effbee2c5bbfcf24139e7a7f5e07844584261f99bc4f8141c820893c7b88c66bc2dea4cdbb4d0891bdcfcd46a40797629cf31367e32d8af5f845ea6f9d4f2e0a200a4ea0a59f5b107a31ca458733cc910492249c67582cbe60efcca9d191c50b8d0bc0bae6f7346bf17bfcfcd1f36cbc2b8d7868ec2a7ee94404897599af63f8c76518580fa243a0d46cd6cc1fb56c47e5f3d02400687197def9e476b1b0d99862ea6a003ea7df0b3fbd02386c58576edace3b468760874cebd37da5dcef426ad6f3fe32aa417f011c93e69cb0d0daded76df497b6c99616f589c82240bb8df57ff0390c8227cdf2a40abc8745546eb918c2421a16b00ad47d340bcee561189a50440535a7869ffb38131a7a59249cf4e6963501611cc4b337e3145c0cb8b1341c876a8f1ecad7a5bb2c47fe86b05067cd625d3453b7a9c5ed23a791ef5e8f89975ea1ca7a8eec70158ba91b05fbb0373aa068cb525a7afba71610dbb5b0cd400f96fdeec35324696389049e4cec7ccf7e421fdef9acae897d2d4cfa00a20f454e08d1adeb15c91da91d73767e2e8ab551812bd1d77f1dba2b8670b71ee67acaf8f967222cca80a0929b3a4bad7df94303dd3997db1bbed88b2df769d30527a418bb43e4976cb8a31f5bcd2c8f2d0da55dc8aa8dc91c5161f470980b99b447fcde334267d0341e0f008faf2f3f1632d3e0d1eaca929db3d92cbbeb1596e8d53a5bffc4be1189a0aa55ae8d8d8df22f589be8dfad36630d71a22fc9b23712888426a43862eb97e2eed74751e0f34d1eb80f8943f5de1a174d03bd79310cff0e4acf3db3340ab43d3540cfc9bb9fac55124fc184eee1d88aed5e560e08b9be05a02318dcb47b217e9e8a11857ee349f641662f20aa3e44a4ec89fcb5801703484f9e231fdb1c023e5c594a73f101a804ac485160c4cb761bb153837d00b5ac38aabfa031c171328f97ebe5cbf7faeb777f6d1d85ce8a4988f1805f351bdd7279864ec488109f0f77b054881ad96d4fb143219114201f16560cb7a8c166dbe315c50a6610ba200ccd35dedb3cb7c0f5fc3de0be6752c041dbfcf8f50660d008bea5be5ad229726198e3962ef4477dee47aff887365c2e98d69c8dd3545a7cc06cf65c8a1b89feb5741a1598cc7a9301e15ff22b4bff2c71bee878af7992ac81329eb84885c61dac0cbb47c044be957bb8271"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059480)={0x5, [{}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r9}], 0x6, "0573d56b2ec365"})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {r1, r2+60000000}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0})
r5 = semget$private(0x0, 0x4, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  919.493736][T25371] loop5: detected capacity change from 0 to 16383
[  919.531255][T25371] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:56 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0xc, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:56 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3, 0x1, 0x9, 0x4, 0x0, 0x99c, 0x4841, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0xd802, 0x87a, 0x4, 0x4, 0x301, 0x4, 0x1f, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x2, r2, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1806274ae65200"/16], &(0x7f00000000c0)='syzkaller\x00', 0x222, 0x8d, &(0x7f0000000100)=""/141, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x8001, 0xe41}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r3, r0, r2, r1, 0xffffffffffffffff, r4, r5]}, 0x80)

[  919.562109][T25371] EXT4-fs (loop5): get root inode failed
[  919.567854][T25371] EXT4-fs (loop5): mount failed
22:20:56 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x3000000, 0x0)

22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 64)
timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r0=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {r1, r2+60000000}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0}) (async, rerun: 64)
r5 = semget$private(0x0, 0x4, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:56 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0xd, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xe4ffffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:56 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3, 0x1, 0x9, 0x4, 0x0, 0x99c, 0x4841, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0xd802, 0x87a, 0x4, 0x4, 0x301, 0x4, 0x1f, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x2, r2, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1806274ae65200"/16], &(0x7f00000000c0)='syzkaller\x00', 0x222, 0x8d, &(0x7f0000000100)=""/141, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x8001, 0xe41}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r3, r0, r2, r1, 0xffffffffffffffff, r4, r5]}, 0x80)

22:20:56 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0xe, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:56 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3, 0x1, 0x9, 0x4, 0x0, 0x99c, 0x4841, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0xd802, 0x87a, 0x4, 0x4, 0x301, 0x4, 0x1f, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x2, r2, 0x1) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600), 0x20) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1806274ae65200"/16], &(0x7f00000000c0)='syzkaller\x00', 0x222, 0x8d, &(0x7f0000000100)=""/141, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x8001, 0xe41}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r3, r0, r2, r1, 0xffffffffffffffff, r4, r5]}, 0x80)

22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {r1, r2+60000000}}, &(0x7f0000000280)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0}) (async)
r5 = semget$private(0x0, 0x4, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async, rerun: 32)
timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r4+60000000}}, 0x0) (async, rerun: 32)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  920.007641][T25412] loop5: detected capacity change from 0 to 16383
[  920.036044][T25412] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f0000000280))
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000200))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:56 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0xf, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:56 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async, rerun: 32)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f0000000280))
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000200))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  920.064190][T25412] EXT4-fs (loop5): get root inode failed
[  920.069867][T25412] EXT4-fs (loop5): mount failed
[  920.122257][T25438] ==================================================================
[  920.130362][T25438] BUG: KCSAN: data-race in do_timer_create / do_timer_create
[  920.137731][T25438] 
[  920.140048][T25438] write to 0xffff888138f6a504 of 4 bytes by task 25440 on cpu 0:
[  920.147931][T25438]  do_timer_create+0x359/0xa90
[  920.152688][T25438]  __x64_sys_timer_create+0xb7/0xe0
[  920.157879][T25438]  do_syscall_64+0x2b/0x70
[  920.162292][T25438]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  920.168183][T25438] 
[  920.170497][T25438] read to 0xffff888138f6a504 of 4 bytes by task 25438 on cpu 1:
[  920.178116][T25438]  do_timer_create+0x1c0/0xa90
[  920.182883][T25438]  __x64_sys_timer_create+0xb7/0xe0
[  920.188076][T25438]  do_syscall_64+0x2b/0x70
[  920.192493][T25438]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  920.198387][T25438] 
[  920.200727][T25438] value changed: 0x00000024 -> 0x00000027
[  920.206433][T25438] 
[  920.208746][T25438] Reported by Kernel Concurrency Sanitizer on:
[  920.214884][T25438] CPU: 1 PID: 25438 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller-00424-gb2da7df52e16-dirty #0
[  920.225898][T25438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  920.235944][T25438] ==================================================================
22:20:57 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x6000000, 0x0)

22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x10, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:57 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0xffffffffffffff35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:57 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000200))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xec00000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x11, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x12, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  920.492510][T25450] loop5: detected capacity change from 0 to 16383
22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x13, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  920.541510][T25450] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x14, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  920.660720][T25450] EXT4-fs (loop5): get root inode failed
[  920.666493][T25450] EXT4-fs (loop5): mount failed
22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:57 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x6040000, 0x0)

22:20:57 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0xffffffffffffff35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xf6ffffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x16, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000000c0))
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x17, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000000c0))
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r0, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  920.981495][T25492] loop5: detected capacity change from 0 to 16383
22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x18, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000000c0))
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r0, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

[  921.058009][T25492] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:57 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x19, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:57 executing program 0:
timer_create(0x2, &(0x7f0000000080)={0x0, 0x12, 0x2, @thr={&(0x7f0000000380)="99909cd9fb77195da934366e2714336e8b5e631d956ed1cdf3987d0c3b72c20408b781e63116380bc9e979818aac3dcf62d4d40819a122918787330d3b2edcd8c946b4dde5217e10a93279bc5eb488acdd69e53e5fbce09385c8d08e8480664937ee671e9d24fd22324764c49403c1fd5f87e7aecf0beace359ebafebb5278aeeebb81f1fb4053e6b2717893dc226c471810f8dc404cab3b680ad5b61c17d7a8e1a2e1d768a44a488863b968e9f32df2f29c656b1e6ee2b1276766d019b25c282091b6dd1bd6f3d5a336620a69d1b1d3479ad1b972d9", &(0x7f0000000480)="ad79aafe9f36cbc86205699e29fd0d966606c2f874b379fb445ab52ec8ca4321929e6031d6d9a8288aad20d809b5c8bd902f9d53670f2f5d1a0eeaac4b06d2d5aa75d02e30a0dc59e70165f4b8e8243aa5ec39e803413cf89889d5480bda1fb9740a787f720ba683289f6baa0c30b2a44a3962fa7b8cb095ed2b773f4e3622918943a65e5df09856d54b7e73db1f1668069f98126306f1d24c54c4c3486d00ae142a860912a95457ea686578a1cc38168232d2d3d6c4dc3a1cba7d6dcd6decb4375a219a8cca427bb312c768c8504c97fee985a422f2e98431e3dc92950756227c0b174102"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x80000001, 0x3f, 0x1, 0x9, 0x5, 0x1, 0xfffffffffffffffb, 0x4}, &(0x7f00000001c0)={0x2, 0x40, 0x0, 0x100000001, 0x8, 0x2, 0x1f, 0x1}, &(0x7f0000000200)={0x9, 0x5, 0xff, 0x7f, 0xfff, 0x7fffffff, 0xfffffffffffffffc}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8001]}, 0x8})
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000005c0)={{0x77359400}, {r2, r3+60000000}}, 0x0)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
futex(&(0x7f0000000600)=0x2, 0x2, 0x1, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680), 0x0)
semtimedop(r4, &(0x7f0000000300)=[{0x4, 0x400, 0x1000}, {0x4, 0x2, 0x800}, {0x4, 0x7, 0x1800}, {0x4, 0x40, 0x1000}, {0x0, 0x1, 0x800}, {0x3, 0x81, 0x800}], 0x6, &(0x7f0000000340))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  921.106369][T25492] EXT4-fs (loop5): get root inode failed
[  921.112117][T25492] EXT4-fs (loop5): mount failed
22:20:58 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x7000000, 0x0)

22:20:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x1a, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  921.237166][T25535] loop5: detected capacity change from 0 to 16383
[  921.276490][T25535] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  921.315241][T25535] EXT4-fs (loop5): get root inode failed
[  921.320921][T25535] EXT4-fs (loop5): mount failed
22:20:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfbffffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:58 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0xffffffffffffff35) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:58 executing program 0:
timer_create(0x2, &(0x7f0000000080)={0x0, 0x12, 0x2, @thr={&(0x7f0000000380)="99909cd9fb77195da934366e2714336e8b5e631d956ed1cdf3987d0c3b72c20408b781e63116380bc9e979818aac3dcf62d4d40819a122918787330d3b2edcd8c946b4dde5217e10a93279bc5eb488acdd69e53e5fbce09385c8d08e8480664937ee671e9d24fd22324764c49403c1fd5f87e7aecf0beace359ebafebb5278aeeebb81f1fb4053e6b2717893dc226c471810f8dc404cab3b680ad5b61c17d7a8e1a2e1d768a44a488863b968e9f32df2f29c656b1e6ee2b1276766d019b25c282091b6dd1bd6f3d5a336620a69d1b1d3479ad1b972d9", &(0x7f0000000480)="ad79aafe9f36cbc86205699e29fd0d966606c2f874b379fb445ab52ec8ca4321929e6031d6d9a8288aad20d809b5c8bd902f9d53670f2f5d1a0eeaac4b06d2d5aa75d02e30a0dc59e70165f4b8e8243aa5ec39e803413cf89889d5480bda1fb9740a787f720ba683289f6baa0c30b2a44a3962fa7b8cb095ed2b773f4e3622918943a65e5df09856d54b7e73db1f1668069f98126306f1d24c54c4c3486d00ae142a860912a95457ea686578a1cc38168232d2d3d6c4dc3a1cba7d6dcd6decb4375a219a8cca427bb312c768c8504c97fee985a422f2e98431e3dc92950756227c0b174102"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x80000001, 0x3f, 0x1, 0x9, 0x5, 0x1, 0xfffffffffffffffb, 0x4}, &(0x7f00000001c0)={0x2, 0x40, 0x0, 0x100000001, 0x8, 0x2, 0x1f, 0x1}, &(0x7f0000000200)={0x9, 0x5, 0xff, 0x7f, 0xfff, 0x7fffffff, 0xfffffffffffffffc}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8001]}, 0x8})
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000005c0)={{0x77359400}, {r2, r3+60000000}}, 0x0)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
futex(&(0x7f0000000600)=0x2, 0x2, 0x1, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680), 0x0)
semtimedop(r4, &(0x7f0000000300)=[{0x4, 0x400, 0x1000}, {0x4, 0x2, 0x800}, {0x4, 0x7, 0x1800}, {0x4, 0x40, 0x1000}, {0x0, 0x1, 0x800}, {0x3, 0x81, 0x800}], 0x6, &(0x7f0000000340))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x12, 0x2, @thr={&(0x7f0000000380)="99909cd9fb77195da934366e2714336e8b5e631d956ed1cdf3987d0c3b72c20408b781e63116380bc9e979818aac3dcf62d4d40819a122918787330d3b2edcd8c946b4dde5217e10a93279bc5eb488acdd69e53e5fbce09385c8d08e8480664937ee671e9d24fd22324764c49403c1fd5f87e7aecf0beace359ebafebb5278aeeebb81f1fb4053e6b2717893dc226c471810f8dc404cab3b680ad5b61c17d7a8e1a2e1d768a44a488863b968e9f32df2f29c656b1e6ee2b1276766d019b25c282091b6dd1bd6f3d5a336620a69d1b1d3479ad1b972d9", &(0x7f0000000480)="ad79aafe9f36cbc86205699e29fd0d966606c2f874b379fb445ab52ec8ca4321929e6031d6d9a8288aad20d809b5c8bd902f9d53670f2f5d1a0eeaac4b06d2d5aa75d02e30a0dc59e70165f4b8e8243aa5ec39e803413cf89889d5480bda1fb9740a787f720ba683289f6baa0c30b2a44a3962fa7b8cb095ed2b773f4e3622918943a65e5df09856d54b7e73db1f1668069f98126306f1d24c54c4c3486d00ae142a860912a95457ea686578a1cc38168232d2d3d6c4dc3a1cba7d6dcd6decb4375a219a8cca427bb312c768c8504c97fee985a422f2e98431e3dc92950756227c0b174102"}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
pselect6(0x40, &(0x7f0000000180)={0x80000001, 0x3f, 0x1, 0x9, 0x5, 0x1, 0xfffffffffffffffb, 0x4}, &(0x7f00000001c0)={0x2, 0x40, 0x0, 0x100000001, 0x8, 0x2, 0x1f, 0x1}, &(0x7f0000000200)={0x9, 0x5, 0xff, 0x7f, 0xfff, 0x7fffffff, 0xfffffffffffffffc}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8001]}, 0x8}) (async)
clock_gettime(0x0, &(0x7f0000000580)) (async)
timer_settime(r0, 0x1, &(0x7f00000005c0)={{0x77359400}, {r2, r3+60000000}}, 0x0) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
futex(&(0x7f0000000600)=0x2, 0x2, 0x1, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680), 0x0) (async)
semtimedop(r4, &(0x7f0000000300)=[{0x4, 0x400, 0x1000}, {0x4, 0x2, 0x800}, {0x4, 0x7, 0x1800}, {0x4, 0x40, 0x1000}, {0x0, 0x1, 0x800}, {0x3, 0x81, 0x800}], 0x6, &(0x7f0000000340)) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x1b, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x22, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x1c, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:58 executing program 0:
timer_create(0x2, &(0x7f0000000080)={0x0, 0x12, 0x2, @thr={&(0x7f0000000380)="99909cd9fb77195da934366e2714336e8b5e631d956ed1cdf3987d0c3b72c20408b781e63116380bc9e979818aac3dcf62d4d40819a122918787330d3b2edcd8c946b4dde5217e10a93279bc5eb488acdd69e53e5fbce09385c8d08e8480664937ee671e9d24fd22324764c49403c1fd5f87e7aecf0beace359ebafebb5278aeeebb81f1fb4053e6b2717893dc226c471810f8dc404cab3b680ad5b61c17d7a8e1a2e1d768a44a488863b968e9f32df2f29c656b1e6ee2b1276766d019b25c282091b6dd1bd6f3d5a336620a69d1b1d3479ad1b972d9", &(0x7f0000000480)="ad79aafe9f36cbc86205699e29fd0d966606c2f874b379fb445ab52ec8ca4321929e6031d6d9a8288aad20d809b5c8bd902f9d53670f2f5d1a0eeaac4b06d2d5aa75d02e30a0dc59e70165f4b8e8243aa5ec39e803413cf89889d5480bda1fb9740a787f720ba683289f6baa0c30b2a44a3962fa7b8cb095ed2b773f4e3622918943a65e5df09856d54b7e73db1f1668069f98126306f1d24c54c4c3486d00ae142a860912a95457ea686578a1cc38168232d2d3d6c4dc3a1cba7d6dcd6decb4375a219a8cca427bb312c768c8504c97fee985a422f2e98431e3dc92950756227c0b174102"}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x80000001, 0x3f, 0x1, 0x9, 0x5, 0x1, 0xfffffffffffffffb, 0x4}, &(0x7f00000001c0)={0x2, 0x40, 0x0, 0x100000001, 0x8, 0x2, 0x1f, 0x1}, &(0x7f0000000200)={0x9, 0x5, 0xff, 0x7f, 0xfff, 0x7fffffff, 0xfffffffffffffffc}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8001]}, 0x8})
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000005c0)={{0x77359400}, {r2, r3+60000000}}, 0x0) (async, rerun: 64)
r4 = semget$private(0x0, 0x4, 0x0) (rerun: 64)
semop(r4, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
futex(&(0x7f0000000600)=0x2, 0x2, 0x1, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680), 0x0) (async)
semtimedop(r4, &(0x7f0000000300)=[{0x4, 0x400, 0x1000}, {0x4, 0x2, 0x800}, {0x4, 0x7, 0x1800}, {0x4, 0x40, 0x1000}, {0x0, 0x1, 0x800}, {0x3, 0x81, 0x800}], 0x6, &(0x7f0000000340))
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  921.477167][T25548] loop5: detected capacity change from 0 to 16383
22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x1d, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:58 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0x1, 0x4)
r3 = dup2(r2, r2)
dup2(r1, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet(0x2, 0x3, 0x14)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x2})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  921.518295][T25548] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  921.530950][T25548] EXT4-fs (loop5): get root inode failed
[  921.536654][T25548] EXT4-fs (loop5): mount failed
22:20:58 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x20100000, 0x0)

22:20:58 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000180)=[{0x0, 0xbb1f, 0xc00}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x1e, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfd11000000000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x25, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:58 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 32)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}) (async, rerun: 64)
r2 = socket$inet(0x2, 0x1, 0x4) (rerun: 64)
r3 = dup2(r2, r2)
dup2(r1, r3) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 64)
socket$inet(0x2, 0x3, 0x14) (async, rerun: 64)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x2}) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x21, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:58 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000180)=[{0x0, 0xbb1f, 0xc00}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0) (async)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r4, &(0x7f0000000180)=[{0x0, 0xbb1f, 0xc00}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:20:58 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}) (async)
r2 = socket$inet(0x2, 0x1, 0x4)
r3 = dup2(r2, r2)
dup2(r1, r3) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet(0x2, 0x3, 0x14)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x2})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:58 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x22, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:58 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000240)={{}, {0x0, r3+10000000}}, 0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) (async)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f0000000180)=[{0x0, 0xbb1f, 0xc00}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:58 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffff3a, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x36, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

[  921.843889][T25602] loop5: detected capacity change from 0 to 16383
[  921.881557][T25602] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  921.903012][T25602] EXT4-fs (loop5): get root inode failed
[  921.908688][T25602] EXT4-fs (loop5): mount failed
22:20:59 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x3f000000, 0x0)

22:20:59 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x23, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000180)=""/45)
semop(r2, &(0x7f0000000000)=[{0x1, 0xbb1d}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:59 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x26, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:59 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffff3a, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x36, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)

22:20:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xfeffffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000180)=""/45)
semop(r2, &(0x7f0000000000)=[{0x1, 0xbb1d}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:59 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x777ec7feef5f, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  922.309986][T25646] loop5: detected capacity change from 0 to 16383
[  922.346167][T25646] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000180)=""/45)
semop(r2, &(0x7f0000000000)=[{0x1, 0xbb1d}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:59 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0, 0x2}, 0x20)

22:20:59 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffff3a, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x36, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffff3a, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x36, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)

22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1012}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  922.359935][T25646] EXT4-fs (loop5): get root inode failed
[  922.365646][T25646] EXT4-fs (loop5): mount failed
22:20:59 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x40000000, 0x0)

22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1012}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0}) (async)
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:59 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0, 0x1000000}, 0x20)

22:20:59 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:20:59 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0xd0935cdfe02b0eab)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0xbff7ffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000380), &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0]}, 0x80)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5})
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

22:20:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffffff7f00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1012}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = semget$private(0x0, 0x4, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:59 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0, 0x2000000}, 0x20)

22:20:59 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0xd0935cdfe02b0eab) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0xbff7ffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000380), &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0]}, 0x80) (async)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5}) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)

[  922.758249][T25688] loop5: detected capacity change from 0 to 16383
22:20:59 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4}, &(0x7f00000001c0)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x0, 0x314)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000200))
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:20:59 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0, 0x100000000000000}, 0x20)

22:20:59 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0xd0935cdfe02b0eab)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0xbff7ffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000380), &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0]}, 0x80)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5})
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0xd0935cdfe02b0eab) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0xbff7ffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x3c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000380), &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0]}, 0x80) (async)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5}) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async)

[  922.807309][T25688] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  922.835264][T25688] EXT4-fs (loop5): get root inode failed
[  922.840944][T25688] EXT4-fs (loop5): mount failed
22:21:00 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x40000800, 0x0)

22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0, 0x200000000000000}, 0x20)

22:21:00 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4}, &(0x7f00000001c0)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = semget$private(0x0, 0x0, 0x314)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000200))
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4}, &(0x7f00000001c0)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x0, 0x314) (async)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000200)) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:21:00 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x71, 0x20, 0x1f, 0xa0, 0x0, 0x8, 0x2, 0x15, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100, 0x8, 0x8, 0x4, 0x1000, 0xff, 0x401, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r2, 0x1)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12)

22:21:00 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:21:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffffffff00000000)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x90)

22:21:00 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4}, &(0x7f00000001c0)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r2=>0x0}) (async)
r3 = semget$private(0x0, 0x0, 0x314)
semop(r3, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000200)) (async)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  923.208632][T25750] loop5: detected capacity change from 0 to 16383
22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x7ffffffff000)

[  923.252577][T25750] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:21:00 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x203b, 0x4, @thr={&(0x7f00000001c0)="12c290505cfad97cbc22ca3d87ec82e49f52ba8bc010d4816809816497e73f4627b96e51411fd91078dffaf0310050ca10e4c33b0e0c36804e1097223e77e3c809ec744941134546886e7706656648eddac2a7e228d371aaaba143cad4788da3805ec98d48e09d5e27740f4663ec4f6a683679620ba48681ff75ad24a1f8a933c6a9a75a9df899a298e0978e528fdfee90ff2d411b9a1e64b3fe408fe8ea2d1a4a3a9e5276a7fd81789853ef115fd213d071a21e2d263b8cc08199f69a15b36390dc5951d8d522fa4e90a4cded4e47d7da13473c8f126edaac8d4d1486ec2caf51c8c6fda6e8fadd6c3df30ad4636aa86a2895f360425f90afc050ecbdaef0b9d49ca56f2ef94f23bc22c9eacbc79f3a93361d38055719a537cec743c9159edf80b89a30f1f77cc7046bfef4a9b100f23c1ffecbfb2aa24790bc0dac5d7b8a744f0f1c6435b5b2cc03c69ea49befe133f3f18e11cfd9cdd0547e115ae6a49f0135df5ac674e4247cbff53ec50839bcb2cf655b4707f91beecaffb7f5ca4823d1ffc346295815dae095914cf521a3a08e70fadcf196631f58ee0b56898ce364fcb60982c158128aad240a2f78305dded30b599391e2e3b1ab998460c09be020ffc1d4430f0af83ae56109595f04118f23b1dde09b666953edc85f445ed2990389d38916fa50efd192862070e7088618cb7040c5222370a51304c1d24579244ae0d0deca36468228c4752424833eac6c7ff1825c8517e1f0146c8a56070d5c24bfe3cbd2ca6d57280be3b157b311e5da18bca08b8aac305c4c1381fef5da4e16964b9992721741466d45ce4dc26ee9080e742d6d72dd4592dbadea7412add719f4f58442eb0ca85589f31fbc994669883f54ef6b1bd749668c854059d5ad477fe46c3eb79d67e10a93cec5efe9f61a1333b5c2fe55368e9529f12cb38a6d056caa7ae4431d05dcaaa7c66611bbefd5d13ebf5decaa95c9bd364e68d503f0be005e31d5e6db717f41d920a9cbc4adea4b88363b364fb3907a395b0f2dfa58ae4556cd58387d94000beccd5fee96edb188938900ca32946f548591c6b059d236a063050f933cca20f11eac57b0e4a54b371a5173fdf85d810fe9450e1bbf98f210fc5c4bd3355b39dc3fa4115743555534ffd22a0861dddc32d59931c5de9f3e952ce1839e3172a60ec88a078cd35845f780bee18cf2b477d1f62e95bb0a705fa3ddaa199c9c6b2d684efe77d440d94c11ad2a12bd4843254e8d57bb6386aee54909f8ef205c1254116af884350387ad39bc036a0ab3c709299a4fdc724c65808e6242d226340be85b98ef8fd04f7a4f385f9c09f613f6d2adfe26d8c0f7608fd7061e1a24618fb9467c2b8d2ddd3dad71d0c48c1deed48d6e0cd8d89f950cd0bb4a4b7d648f648e700fcaa8054f9df83cb650a94acee0b358f9f723e87b7951ae3e9d0bc223441e1d788fc03ee1b7b009abbc99a0751f7ccc8ba30d184cc5c54bf9ef958207f1976771f39f6e20d02815c1d93ce63a9eae26a49fe86f2add59df0788e8245950ae6fb8f60a19ce64b809066ca7a6c1a217b912895d4c05f7a225c75e8917d375dd3c461b5219f9b6dcde955f069fb47e5c41d5d9557ee29dfe0cf578fddd2aa06c31323eaf6e756c89fd06a98379cc8d6fa124ecf7790f519d43855595dc21f40e776e699c9ee1366e8f0290b04404799dc4098264a17d2693432ee3def503bb4c5ca11de2710761e8ce2bf68935fcaaf646ccbd8562da24bc91dd0e7b2984d0df203dd1c7c196b01f03710d4ad29b1df9b7623b7e33735409a3b79a94c64fab8b5b1f6008dfd8514b906d9c89b657ed01556ce065c42f9fb80f3b81a27511f46155ed356ed1c536104d813526e535986bd1c2812099c6ce167ee21a11b97b3aa99af4048e7e5ddb66ec6908531bb9c8a434007ea663ec04041b0f1500e471e2943565693a41f2502fbd773b5b81755584c682553612b1ebc6d83ae0333cfaee5a9be6e63199d338d1fdde1f815ebb07d241ca63048d0eb302b5df8948b5ec729b372b2c78cad254481d0266e1879199c605a50424a70e40d94b3a1c2d4caf31e2ecc28056a47bca38406e41a02738290ad9b35c806920ecaaf1c61b16e54850bb613f51f288e9885e799448192ff18ef9797019431426173e824644347edd837892a6f10ccdadc28c693fc091a7bd22598982f721003f672851af88c1ea4610337d81f90e4201dc1088d3c79e904a9f636d2dc5d504de95f25b98fe9ab54ac4087a9c6b867036bf0bcccf8c65e09a2f93a39218ed09f8ae8aa48a75cb765fd8e61dc4c1bd871b9d0eb0d7a8b57504edaf20d873828607b79b28ac0dbd63730cbcf5b921c356e3da0088b277c76edaa915ff3bce555b762c17d986c744daae6a768b37d47dd2f1c6bc082286300a58042cadc188797dc1757a107c8b7eb4fc6ed60c20f81d1d5deb1e6eab41bbe1ca0b73b7c518ff394179d62db96b1fcbc7a55a3c1863cbf5d5a9eab09b4a94e373b8f1e04d36ca02da87cbe3ce2a243b23000668e20db7244a94a64113f78838f77a4781150b928af44006ba4d1db595630a7efaa7656928612736544838bebd953c57ff3b065ce867be6dee974ff1226129bfa03ff5866bb4fe996468e3d135d2437b6bb61a9ef9c44062c2676353b58c258bb3039af7c55b433ff841142b2263612d52fd2985ec27d3ac49317a1ec76a65429c55474447bd18041d5ed3f2f3fbdede7f76daba8925f958e3a3c43042a983440904c94db237dc1981e1d9e2fea3539e770ade3869d7f6e2cc1e226ba1ecec3a9217fbca6bcef132f14bd70df30981355862560ace0823c4594edf7db6d025a7599df6b1d2711376b54d3acadad39ae624a01cf0daa9d75ec93ae40080550eef1d0cc5009d5723a4ce4ab0b1b6d4ea05ab6c07b4c66523e0e15d4043386ad9660a026caf0e542c8174fbee45eebe6de4325728ce89150b19fc705e1e060e509d96502d8f4670c5370236b07fe3b15aa230b98309ad82f280dfa89d61aeb84bd6225cc2e84bbc51aaa183f80a10d7e6ae0dab249b362d8495ee8002ff713397deaf4b0c6b87c9385c8011d00b6866cdd370612a4b22dcb0739d1cf8883cb704597aeafd4af14930c5276f08a5ca723c27d621f1d24661c181a4f6ad5042d689706239c8665306e5a7b975d4976f8f9c0c12059982d2226a19dffe093a8000c676ef7925adeea809ac76d1154d575fe525e228f35127ff88ecfd7c921579444a261ef91deee2a066e080506aee588582bcb1a68543c212d1332059c964ae24aaf626a4892412b284918b2218220e44dd902c2201a5f1872b5a3be01bba0c9318aafc95231ea33300bcb547044291bf0031ebcc1b306acd3ca9052c5beba2e3b7c3853e71a85342293494d631d5592900cdeb2def4ddd8cc20cf8bf398d6e1b55e15672144dfc5e63d8de273ec094ae8a971ab6a7f4d2453726f4d003f26c91266d1265e895ff207614dc80ed2d5b80336f0f9588f70f32abf32c8bc2bd31f0fdf02a7119b62d8aa1b9c2b821cfb4a304db6e8cbfb58d27b32fd934939b01d5d238625a49e13fea268777b2f0fd355fdf46edca34afd2e701ed4f3b0158f6dba3ee29ab75a689041909ced65f90b8cce3c130fc3287c5d98232fea3bb0bdb45bf14d4ac71f011b344c27ff867bd6e305903597cae582d3676dee06ba0cef234eb372e22d3d41604fee0a775abf58da77a3d4a1886fdc77b91caf699478597a0af1d3db1cdb9878d710af4b5de11c08ce9622f8cf3380d77220a91d51a694033900acf57ddfda10a0e3708e604274cdbff88397e419e62087860483d4645cee44c21e84845ee65987d3a5da54fe6a4c7345727956e9518f2a155bd79e19ce5a65656cbd27ed4b361dc4d762595d395189f0b9b4e0c4fe4b1209039c5b793034c82b3277af8467ec6833441a93ffc02cea8429a8ca66cbeef5dc4a3703b2db539b85a31ea1425f803ad295c58e0ccca33027a101a7ebc074a86bd007b27a166413d46fbf962858eab803ca7d23a2b9b7752d21a6e2f43137bcd24c08933e8bd35a6497d7f2a9d0136e2edaff5b8f82ed859ce5f2174fbd49ff0fb5d398a2439d7ce98376807689e2d5b121a6088a00a1a5c60c4c3f48fcb58c19264bd1a8d366b830f06b9b105ea9108ae2daaf729ad1ec4bc2dd1fdce85cd64491823a011bb6486fb1d5c9ce5d163c52ea74d7fd804ce1537ed0478afbba2428366b891f2c95b8aba95993dc2d74127352cee4f3ac5e5744283ba1f5c60766dd40cb0b304eeeaf9f57eb09c09ae488afeb877864b428ee39c69cf6fcb8cb5ec7705449cab8e293cbaa78222a58c34043a44919d96ade8a9c7f0bae22458a4f6dab41f1512bcc7242deb29d1ac46a9044976224adc456b1dacd2baaef0ac41db5a703b6e3c006dafb42c634f6e2d3a0345d7b18669479d7b9413b12efc8403233128b04dafd3d2c68279d5c7fdffeda9bfd2bdc943f11c99ff9569efcc41205f59b5d66c63e6c92e310d35b40642101a408acc7b89bd906edd8cb511de3b616fe819cd79ea5d9955f2de00a513d383ad0cbfc3182eb936a2d014a35a6460632dbbc8efd31678b3ec53e8bbbdff3d2dad363945ca517fb2beba4789d14a39f94cb80a47588f6e56f0449a60b8c1666eae76bb11d8ffdfee733274bf4efe1227a9d33bfebd54308eafcbe4afbdd4630af0491c542a4073c281645016173a982e8ac1b4262d823d043f74996e8e958534f16dff4af3aa2a5bd2bf7cf879b55e663a3e0e2db54e28c71e4426ca012cb630761c04af37710ba8af4941d2d00d5e8bfea6b512de3ba3fff7ac7f28d72700322c8089097d18e3d64cd79cf891cf4885aba93afa5f30852e6394f8f8ef7d78c25d072cf00107da389b499f3c78c7821034dac9beb439be64d9eb5cb65313151d4e1eded2c5a8c2b767b51453fc79b3c37f0b454ae8520687cfda381b0cf891bc76471c508fde31d513b017dd4a8857febf12f453d200bd03c1c573f98ebcdb42a87963027006ad32121d15972f3d8ecbb8c6995c22936466e9908e10a42062d7555021bad6c12346c69dcf5c5f7977a58d5602ad47f49cfd7d17fd8ed8ee7cbf63b6af0361f368b247c22fb9cbee0cf309fe1db24ee2952450506f180227fee965f2b69479f8dc0b63881495958de2a3a77b61a05bc59a476357cc64785c4262c5433852a98c244cc7e767614c2fccf60ce1a09f1c39df070438016ea4d8794cce21cb85d6a49ba2db354ea6e89cbf541dcd439a2c02748aedc8aceeaba60285550b8c5027fcd63af8ec9d8bb3d716394f77ce2c81997a8939e18adb50fc675c8252c80f8dda6f9f86644327e84d19f1152b1e88b475a85f0620e5cbe38d98713e4ade6fdd8f902be14d7b85d8c91d4a2ac146ddedce9f0324f11ebaab02c13bd7778ab28adbca0636fe34e97504838f931d40f5d14e74109aae588d5b9ca624dcc69cccffc7a65ab8c4a0cfd812e8c8786efd0792cf4959f6e123e77a315dba69c40ff6b12ed00956c510bd17154fa7bda0f073e9a9878bd74737d16af997d2ecc4d08be1cf881cacb46ee39f118acc23796a65d5e79063c06156f5f7d264bd640b2b944a4794b2c780317a23023eb38add4f81d3ff6bbae701004fd39fcc3570217d7b0b37aa24d42f9a7cfc0931002c0a1e6a8ccafccee7771475b3b30a42bad9814b446570c761d6d91bab99821205bd4c273f1309d2347e5c33a4601076f9421c20908eae44a8a55c5e93659dcd4c080893", &(0x7f00000011c0)="69173d04ce98ede76b6909930b85b08507b838441b335ec640471cc17304916299e16e1940e106c0f9d7af6ecfd3022388c0b18ba315b29a6636d01a6eccbccb681f2bbe2e8bb4549041dc706e0d40015c770b78532408fd1580032031891594ba9ae5d6b4dd79eda4f8de5bc6340df04d29a7a4964ae29f2529ef71187f7dcd0533a94247d21bd1ee82d37dcb583e99d726ef1a21e403c66dbb82be7a76e06be503369833a222eca4a54072c879af0bce42fc9795ddb64273b0d1c2d941a67f0e7ca09313d93e6bf744645dc8f6b016c3b54ed961a47fa916245b799d85246d74ff62447df324e55134d04222cbdbb6e40883"}}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000012c0)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000001300))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r5=>0x0})
r6 = semget$private(0x0, 0x4, 0x0)
semop(r6, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="69bbfa37c1d1d7e308662a94e1e5fe78b9d7c199439d189130c167200f56d1350b54a08df5e68e8b5006fb28a044fc5df747d9d41b759272acfbe11d97a31df3bc07691c435ddb2ed3c7bcc1932ee056b6a7f2d2ca9cdb395679b7f42c1049e439c1f2464fed273040aec91f3aff2fd239e13b397615cbf12309deab481a3183809f50462d4c1f63300d01c115ca849f394d3c3f4993df287b38fc1055fe55c6ab898a9e3d6cf874e6533c602380bb", &(0x7f0000000100)=""/13}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="69bbfa37c1d1d7e308662a94e1e5fe78b9d7c199439d189130c167200f56d1350b54a08df5e68e8b5006fb28a044fc5df747d9d41b759272acfbe11d97a31df3bc07691c435ddb2ed3c7bcc1932ee056b6a7f2d2ca9cdb395679b7f42c1049e439c1f2464fed273040aec91f3aff2fd239e13b397615cbf12309deab481a3183809f50462d4c1f63300d01c115ca849f394d3c3f4993df287b38fc1055fe55c6ab898a9e3d6cf874e6533c602380bb", &(0x7f0000000100)=""/13}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  923.322795][T25750] EXT4-fs (loop5): get root inode failed
[  923.328470][T25750] EXT4-fs (loop5): mount failed
22:21:00 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x6e030000, 0x0)

22:21:00 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="69bbfa37c1d1d7e308662a94e1e5fe78b9d7c199439d189130c167200f56d1350b54a08df5e68e8b5006fb28a044fc5df747d9d41b759272acfbe11d97a31df3bc07691c435ddb2ed3c7bcc1932ee056b6a7f2d2ca9cdb395679b7f42c1049e439c1f2464fed273040aec91f3aff2fd239e13b397615cbf12309deab481a3183809f50462d4c1f63300d01c115ca849f394d3c3f4993df287b38fc1055fe55c6ab898a9e3d6cf874e6533c602380bb", &(0x7f0000000100)=""/13}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48) (async)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="69bbfa37c1d1d7e308662a94e1e5fe78b9d7c199439d189130c167200f56d1350b54a08df5e68e8b5006fb28a044fc5df747d9d41b759272acfbe11d97a31df3bc07691c435ddb2ed3c7bcc1932ee056b6a7f2d2ca9cdb395679b7f42c1049e439c1f2464fed273040aec91f3aff2fd239e13b397615cbf12309deab481a3183809f50462d4c1f63300d01c115ca849f394d3c3f4993df287b38fc1055fe55c6ab898a9e3d6cf874e6533c602380bb", &(0x7f0000000100)=""/13}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (async)

22:21:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffa1)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:21:00 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x71, 0x20, 0x1f, 0xa0, 0x0, 0x8, 0x2, 0x15, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100, 0x8, 0x8, 0x4, 0x1000, 0xff, 0x401, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r2, 0x1)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x71, 0x20, 0x1f, 0xa0, 0x0, 0x8, 0x2, 0x15, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100, 0x8, 0x8, 0x4, 0x1000, 0xff, 0x401, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r2, 0x1) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async)
write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12) (async)

22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x14c}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  923.750155][T25784] loop5: detected capacity change from 0 to 16383
[  923.776708][T25784] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x14c}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

22:21:00 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

[  923.802334][T25784] EXT4-fs (loop5): get root inode failed
[  923.808015][T25784] EXT4-fs (loop5): mount failed
22:21:00 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x14c}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)

[  923.871539][T25820] loop5: detected capacity change from 0 to 16383
[  923.914761][T25820] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  923.934120][T25820] EXT4-fs (loop5): get root inode failed
[  923.939853][T25820] EXT4-fs (loop5): mount failed
22:21:03 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x203b, 0x4, @thr={&(0x7f00000001c0)="12c290505cfad97cbc22ca3d87ec82e49f52ba8bc010d4816809816497e73f4627b96e51411fd91078dffaf0310050ca10e4c33b0e0c36804e1097223e77e3c809ec744941134546886e7706656648eddac2a7e228d371aaaba143cad4788da3805ec98d48e09d5e27740f4663ec4f6a683679620ba48681ff75ad24a1f8a933c6a9a75a9df899a298e0978e528fdfee90ff2d411b9a1e64b3fe408fe8ea2d1a4a3a9e5276a7fd81789853ef115fd213d071a21e2d263b8cc08199f69a15b36390dc5951d8d522fa4e90a4cded4e47d7da13473c8f126edaac8d4d1486ec2caf51c8c6fda6e8fadd6c3df30ad4636aa86a2895f360425f90afc050ecbdaef0b9d49ca56f2ef94f23bc22c9eacbc79f3a93361d38055719a537cec743c9159edf80b89a30f1f77cc7046bfef4a9b100f23c1ffecbfb2aa24790bc0dac5d7b8a744f0f1c6435b5b2cc03c69ea49befe133f3f18e11cfd9cdd0547e115ae6a49f0135df5ac674e4247cbff53ec50839bcb2cf655b4707f91beecaffb7f5ca4823d1ffc346295815dae095914cf521a3a08e70fadcf196631f58ee0b56898ce364fcb60982c158128aad240a2f78305dded30b599391e2e3b1ab998460c09be020ffc1d4430f0af83ae56109595f04118f23b1dde09b666953edc85f445ed2990389d38916fa50efd192862070e7088618cb7040c5222370a51304c1d24579244ae0d0deca36468228c4752424833eac6c7ff1825c8517e1f0146c8a56070d5c24bfe3cbd2ca6d57280be3b157b311e5da18bca08b8aac305c4c1381fef5da4e16964b9992721741466d45ce4dc26ee9080e742d6d72dd4592dbadea7412add719f4f58442eb0ca85589f31fbc994669883f54ef6b1bd749668c854059d5ad477fe46c3eb79d67e10a93cec5efe9f61a1333b5c2fe55368e9529f12cb38a6d056caa7ae4431d05dcaaa7c66611bbefd5d13ebf5decaa95c9bd364e68d503f0be005e31d5e6db717f41d920a9cbc4adea4b88363b364fb3907a395b0f2dfa58ae4556cd58387d94000beccd5fee96edb188938900ca32946f548591c6b059d236a063050f933cca20f11eac57b0e4a54b371a5173fdf85d810fe9450e1bbf98f210fc5c4bd3355b39dc3fa4115743555534ffd22a0861dddc32d59931c5de9f3e952ce1839e3172a60ec88a078cd35845f780bee18cf2b477d1f62e95bb0a705fa3ddaa199c9c6b2d684efe77d440d94c11ad2a12bd4843254e8d57bb6386aee54909f8ef205c1254116af884350387ad39bc036a0ab3c709299a4fdc724c65808e6242d226340be85b98ef8fd04f7a4f385f9c09f613f6d2adfe26d8c0f7608fd7061e1a24618fb9467c2b8d2ddd3dad71d0c48c1deed48d6e0cd8d89f950cd0bb4a4b7d648f648e700fcaa8054f9df83cb650a94acee0b358f9f723e87b7951ae3e9d0bc223441e1d788fc03ee1b7b009abbc99a0751f7ccc8ba30d184cc5c54bf9ef958207f1976771f39f6e20d02815c1d93ce63a9eae26a49fe86f2add59df0788e8245950ae6fb8f60a19ce64b809066ca7a6c1a217b912895d4c05f7a225c75e8917d375dd3c461b5219f9b6dcde955f069fb47e5c41d5d9557ee29dfe0cf578fddd2aa06c31323eaf6e756c89fd06a98379cc8d6fa124ecf7790f519d43855595dc21f40e776e699c9ee1366e8f0290b04404799dc4098264a17d2693432ee3def503bb4c5ca11de2710761e8ce2bf68935fcaaf646ccbd8562da24bc91dd0e7b2984d0df203dd1c7c196b01f03710d4ad29b1df9b7623b7e33735409a3b79a94c64fab8b5b1f6008dfd8514b906d9c89b657ed01556ce065c42f9fb80f3b81a27511f46155ed356ed1c536104d813526e535986bd1c2812099c6ce167ee21a11b97b3aa99af4048e7e5ddb66ec6908531bb9c8a434007ea663ec04041b0f1500e471e2943565693a41f2502fbd773b5b81755584c682553612b1ebc6d83ae0333cfaee5a9be6e63199d338d1fdde1f815ebb07d241ca63048d0eb302b5df8948b5ec729b372b2c78cad254481d0266e1879199c605a50424a70e40d94b3a1c2d4caf31e2ecc28056a47bca38406e41a02738290ad9b35c806920ecaaf1c61b16e54850bb613f51f288e9885e799448192ff18ef9797019431426173e824644347edd837892a6f10ccdadc28c693fc091a7bd22598982f721003f672851af88c1ea4610337d81f90e4201dc1088d3c79e904a9f636d2dc5d504de95f25b98fe9ab54ac4087a9c6b867036bf0bcccf8c65e09a2f93a39218ed09f8ae8aa48a75cb765fd8e61dc4c1bd871b9d0eb0d7a8b57504edaf20d873828607b79b28ac0dbd63730cbcf5b921c356e3da0088b277c76edaa915ff3bce555b762c17d986c744daae6a768b37d47dd2f1c6bc082286300a58042cadc188797dc1757a107c8b7eb4fc6ed60c20f81d1d5deb1e6eab41bbe1ca0b73b7c518ff394179d62db96b1fcbc7a55a3c1863cbf5d5a9eab09b4a94e373b8f1e04d36ca02da87cbe3ce2a243b23000668e20db7244a94a64113f78838f77a4781150b928af44006ba4d1db595630a7efaa7656928612736544838bebd953c57ff3b065ce867be6dee974ff1226129bfa03ff5866bb4fe996468e3d135d2437b6bb61a9ef9c44062c2676353b58c258bb3039af7c55b433ff841142b2263612d52fd2985ec27d3ac49317a1ec76a65429c55474447bd18041d5ed3f2f3fbdede7f76daba8925f958e3a3c43042a983440904c94db237dc1981e1d9e2fea3539e770ade3869d7f6e2cc1e226ba1ecec3a9217fbca6bcef132f14bd70df30981355862560ace0823c4594edf7db6d025a7599df6b1d2711376b54d3acadad39ae624a01cf0daa9d75ec93ae40080550eef1d0cc5009d5723a4ce4ab0b1b6d4ea05ab6c07b4c66523e0e15d4043386ad9660a026caf0e542c8174fbee45eebe6de4325728ce89150b19fc705e1e060e509d96502d8f4670c5370236b07fe3b15aa230b98309ad82f280dfa89d61aeb84bd6225cc2e84bbc51aaa183f80a10d7e6ae0dab249b362d8495ee8002ff713397deaf4b0c6b87c9385c8011d00b6866cdd370612a4b22dcb0739d1cf8883cb704597aeafd4af14930c5276f08a5ca723c27d621f1d24661c181a4f6ad5042d689706239c8665306e5a7b975d4976f8f9c0c12059982d2226a19dffe093a8000c676ef7925adeea809ac76d1154d575fe525e228f35127ff88ecfd7c921579444a261ef91deee2a066e080506aee588582bcb1a68543c212d1332059c964ae24aaf626a4892412b284918b2218220e44dd902c2201a5f1872b5a3be01bba0c9318aafc95231ea33300bcb547044291bf0031ebcc1b306acd3ca9052c5beba2e3b7c3853e71a85342293494d631d5592900cdeb2def4ddd8cc20cf8bf398d6e1b55e15672144dfc5e63d8de273ec094ae8a971ab6a7f4d2453726f4d003f26c91266d1265e895ff207614dc80ed2d5b80336f0f9588f70f32abf32c8bc2bd31f0fdf02a7119b62d8aa1b9c2b821cfb4a304db6e8cbfb58d27b32fd934939b01d5d238625a49e13fea268777b2f0fd355fdf46edca34afd2e701ed4f3b0158f6dba3ee29ab75a689041909ced65f90b8cce3c130fc3287c5d98232fea3bb0bdb45bf14d4ac71f011b344c27ff867bd6e305903597cae582d3676dee06ba0cef234eb372e22d3d41604fee0a775abf58da77a3d4a1886fdc77b91caf699478597a0af1d3db1cdb9878d710af4b5de11c08ce9622f8cf3380d77220a91d51a694033900acf57ddfda10a0e3708e604274cdbff88397e419e62087860483d4645cee44c21e84845ee65987d3a5da54fe6a4c7345727956e9518f2a155bd79e19ce5a65656cbd27ed4b361dc4d762595d395189f0b9b4e0c4fe4b1209039c5b793034c82b3277af8467ec6833441a93ffc02cea8429a8ca66cbeef5dc4a3703b2db539b85a31ea1425f803ad295c58e0ccca33027a101a7ebc074a86bd007b27a166413d46fbf962858eab803ca7d23a2b9b7752d21a6e2f43137bcd24c08933e8bd35a6497d7f2a9d0136e2edaff5b8f82ed859ce5f2174fbd49ff0fb5d398a2439d7ce98376807689e2d5b121a6088a00a1a5c60c4c3f48fcb58c19264bd1a8d366b830f06b9b105ea9108ae2daaf729ad1ec4bc2dd1fdce85cd64491823a011bb6486fb1d5c9ce5d163c52ea74d7fd804ce1537ed0478afbba2428366b891f2c95b8aba95993dc2d74127352cee4f3ac5e5744283ba1f5c60766dd40cb0b304eeeaf9f57eb09c09ae488afeb877864b428ee39c69cf6fcb8cb5ec7705449cab8e293cbaa78222a58c34043a44919d96ade8a9c7f0bae22458a4f6dab41f1512bcc7242deb29d1ac46a9044976224adc456b1dacd2baaef0ac41db5a703b6e3c006dafb42c634f6e2d3a0345d7b18669479d7b9413b12efc8403233128b04dafd3d2c68279d5c7fdffeda9bfd2bdc943f11c99ff9569efcc41205f59b5d66c63e6c92e310d35b40642101a408acc7b89bd906edd8cb511de3b616fe819cd79ea5d9955f2de00a513d383ad0cbfc3182eb936a2d014a35a6460632dbbc8efd31678b3ec53e8bbbdff3d2dad363945ca517fb2beba4789d14a39f94cb80a47588f6e56f0449a60b8c1666eae76bb11d8ffdfee733274bf4efe1227a9d33bfebd54308eafcbe4afbdd4630af0491c542a4073c281645016173a982e8ac1b4262d823d043f74996e8e958534f16dff4af3aa2a5bd2bf7cf879b55e663a3e0e2db54e28c71e4426ca012cb630761c04af37710ba8af4941d2d00d5e8bfea6b512de3ba3fff7ac7f28d72700322c8089097d18e3d64cd79cf891cf4885aba93afa5f30852e6394f8f8ef7d78c25d072cf00107da389b499f3c78c7821034dac9beb439be64d9eb5cb65313151d4e1eded2c5a8c2b767b51453fc79b3c37f0b454ae8520687cfda381b0cf891bc76471c508fde31d513b017dd4a8857febf12f453d200bd03c1c573f98ebcdb42a87963027006ad32121d15972f3d8ecbb8c6995c22936466e9908e10a42062d7555021bad6c12346c69dcf5c5f7977a58d5602ad47f49cfd7d17fd8ed8ee7cbf63b6af0361f368b247c22fb9cbee0cf309fe1db24ee2952450506f180227fee965f2b69479f8dc0b63881495958de2a3a77b61a05bc59a476357cc64785c4262c5433852a98c244cc7e767614c2fccf60ce1a09f1c39df070438016ea4d8794cce21cb85d6a49ba2db354ea6e89cbf541dcd439a2c02748aedc8aceeaba60285550b8c5027fcd63af8ec9d8bb3d716394f77ce2c81997a8939e18adb50fc675c8252c80f8dda6f9f86644327e84d19f1152b1e88b475a85f0620e5cbe38d98713e4ade6fdd8f902be14d7b85d8c91d4a2ac146ddedce9f0324f11ebaab02c13bd7778ab28adbca0636fe34e97504838f931d40f5d14e74109aae588d5b9ca624dcc69cccffc7a65ab8c4a0cfd812e8c8786efd0792cf4959f6e123e77a315dba69c40ff6b12ed00956c510bd17154fa7bda0f073e9a9878bd74737d16af997d2ecc4d08be1cf881cacb46ee39f118acc23796a65d5e79063c06156f5f7d264bd640b2b944a4794b2c780317a23023eb38add4f81d3ff6bbae701004fd39fcc3570217d7b0b37aa24d42f9a7cfc0931002c0a1e6a8ccafccee7771475b3b30a42bad9814b446570c761d6d91bab99821205bd4c273f1309d2347e5c33a4601076f9421c20908eae44a8a55c5e93659dcd4c080893", &(0x7f00000011c0)="69173d04ce98ede76b6909930b85b08507b838441b335ec640471cc17304916299e16e1940e106c0f9d7af6ecfd3022388c0b18ba315b29a6636d01a6eccbccb681f2bbe2e8bb4549041dc706e0d40015c770b78532408fd1580032031891594ba9ae5d6b4dd79eda4f8de5bc6340df04d29a7a4964ae29f2529ef71187f7dcd0533a94247d21bd1ee82d37dcb583e99d726ef1a21e403c66dbb82be7a76e06be503369833a222eca4a54072c879af0bce42fc9795ddb64273b0d1c2d941a67f0e7ca09313d93e6bf744645dc8f6b016c3b54ed961a47fa916245b799d85246d74ff62447df324e55134d04222cbdbb6e40883"}}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000012c0)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000001300)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r5=>0x0})
r6 = semget$private(0x0, 0x4, 0x0)
semop(r6, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)

22:21:03 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x71, 0x20, 0x1f, 0xa0, 0x0, 0x8, 0x2, 0x15, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100, 0x8, 0x8, 0x4, 0x1000, 0xff, 0x401, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r2, 0x1) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) (async)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async, rerun: 64)
write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12)

22:21:03 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_idx={0x18, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf5, &(0x7f00000001c0)=""/245, 0x0, 0x14, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r4, 0xffffffffffffffff]}, 0x80)

22:21:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x68, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:21:03 executing program 1:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7fff, 0x421}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r2, &(0x7f0000000080), 0xfffffe7d)
unlink(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f00000000c0)='./file0\x00', 0x4c)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

22:21:03 executing program 3:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e)
unlink(&(0x7f0000000000)='./file1\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x7d030000, 0x0)

22:21:03 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_idx={0x18, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf5, &(0x7f00000001c0)=""/245, 0x0, 0x14, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r4, 0xffffffffffffffff]}, 0x80)

[  926.333759][T25836] loop5: detected capacity change from 0 to 16383
[  926.363728][T25836] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
22:21:03 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x5, 0x40008, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@tcp}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_idx={0x18, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf5, &(0x7f00000001c0)=""/245, 0x0, 0x14, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r4, 0xffffffffffffffff]}, 0x80)

[  926.384375][T25836] EXT4-fs (loop5): get root inode failed
[  926.390049][T25836] EXT4-fs (loop5): mount failed
22:21:03 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1b, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button', 0x200, 0x84)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x3, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0x100, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x26, r1, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x2, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r0, r2, r0, r0, r0, r0]}, 0x80)

22:21:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c, 0x4, &(0x7f00000008c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000240)="ed41000000040000def4655fdff4655fdff4655fb89ce983065d26d3c30000000000000400040000000000000005", 0x2e, 0x1600}], 0x0, &(0x7f0000000040)=ANY=[])

22:21:03 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1b, 0x5, 0x40008, 0x1}, 0x48) (async)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button', 0x200, 0x84) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x3, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0x100, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x26, r1, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x2, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r0, r2, r0, r0, r0, r0]}, 0x80)

22:21:03 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1b, 0x5, 0x40008, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button', 0x200, 0x84) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x3, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0x100, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x26, r1, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x2, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r0, r2, r0, r0, r0, r0]}, 0x80)

[  926.478490][T25860] loop5: detected capacity change from 0 to 16383
[  926.554515][T25860] EXT4-fs error (device loop5): __ext4_iget:4970: inode #2: block 1280: comm syz-executor.5: invalid block
[  926.589827][T25860] EXT4-fs (loop5): get root inode failed
[  926.595517][T25860] EXT4-fs (loop5): mount failed
22:21:06 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x203b, 0x4, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="69173d04ce98ede76b6909930b85b08507b838441b335ec640471cc17304916299e16e1940e106c0f9d7af6ecfd3022388c0b18ba315b29a6636d01a6eccbccb681f2bbe2e8bb4549041dc706e0d40015c770b78532408fd1580032031891594ba9ae5d6b4dd79eda4f8de5bc6340df04d29a7a4964ae29f2529ef71187f7dcd0533a94247d21bd1ee82d37dcb583e99d726ef1a21e403c66dbb82be7a76e06be503369833a222eca4a54072c879af0bce42fc9795ddb64273b0d1c2d941a67f0e7ca09313d93e6bf744645dc8f6b016c3b54ed961a47fa916245b799d85246d74ff62447df324e55134d04222cbdbb6e40883"}}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r1=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000012c0)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000001300))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r5=>0x0})
r6 = semget$private(0x0, 0x4, 0x0)
semop(r6, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1)
timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+60000000}}, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x203b, 0x4, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="69173d04ce98ede76b6909930b85b08507b838441b335ec640471cc17304916299e16e1940e106c0f9d7af6ecfd3022388c0b18ba315b29a6636d01a6eccbccb681f2bbe2e8bb4549041dc706e0d40015c770b78532408fd1580032031891594ba9ae5d6b4dd79eda4f8de5bc6340df04d29a7a4964ae29f2529ef71187f7dcd0533a94247d21bd1ee82d37dcb583e99d726ef1a21e403c66dbb82be7a76e06be503369833a222eca4a54072c879af0bce42fc9795ddb64273b0d1c2d941a67f0e7ca09313d93e6bf744645dc8f6b016c3b54ed961a47fa916245b799d85246d74ff62447df324e55134d04222cbdbb6e40883"}}, &(0x7f0000000140)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000080)) (async)
timer_settime(r0, 0x1, &(0x7f00000012c0)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000001300)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
semget$private(0x0, 0x4, 0x0) (async)
semop(r6, &(0x7f0000000000)=[{0x0, 0xbb1b}], 0x1) (async)
timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+60000000}}, 0x0) (async)
write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async)

22:21:06 executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xb, 0x5, 0x40008, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>0x0, 0x0, 0x1, 0x25, 0x5, 0x60, @mcast2, @private0, 0xcf6084c89a4dd2eb, 0x7, 0x2, 0x81}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x8, 0x7, 0x1, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x3c}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000600)={'rose0\x00', {0x2, 0x4e24, @loopback}})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18572006000000000000000004000000000000000000000944a3953456a100"], &(0x7f0000000400)='syzkaller\x00', 0xd, 0x84, &(0x7f0000000440)=""/132, 0x41100, 0x1c, '\x00', r5, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x3, 0x2, 0xf67}, 0x10, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x363, 0x0, 0x0, 0x41000, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r2]}, 0x80)

22:21:06 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
r8 = socket$inet(0x2, 0x3, 0x14)
r9 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)="6c7203c4de1dcb36c004b6323cbd416874601d7632abf3a03cb9974c76392e1164e35bc402491e536574f4520f4570312cfb9be5df57d0417d21ba448bd296071fc409f5c9b9db069742b60f53704a2a4a17b95d713205feebc75daffbcaba365b20f4b7c1e122308dd3f773b773a27cd267f22375d873d1", 0x78}, {&(0x7f0000000240)="55425f435b9f82afb4b6523941924b7b5f", 0x11}, {&(0x7f0000000440)="59fdba5841c4ac39d67a405af4643d4c92bda4b04ef77321c457710ff4de75ae0b2dce8e699d12e22d9c922296762f3333383cc423f963e3f8df640aa0a47bbe6b33ad4e7449d5828ce94259ca108070e4ead760a9bc3038c2", 0x59}, {&(0x7f00000004c0)="f3a5571f8bfa40db83bd99b7087e2435892fb