L_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1577.535510] loop6: detected capacity change from 0 to 131072 [ 1577.553826] FAT-fs (loop6): bogus number of reserved sectors [ 1577.555216] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1577.556866] FAT-fs (loop5): bogus number of reserved sectors [ 1577.558246] FAT-fs (loop5): Can't find a valid FAT filesystem 01:12:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) (fail_nth: 27) [ 1577.586065] FAULT_INJECTION: forcing a failure. [ 1577.586065] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.588457] CPU: 0 PID: 9930 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1577.589901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.591607] Call Trace: [ 1577.592170] dump_stack+0x107/0x167 [ 1577.592950] should_fail.cold+0x5/0xa [ 1577.593788] ? security_inode_alloc+0x34/0x160 [ 1577.594768] ? security_inode_alloc+0x34/0x160 [ 1577.595774] should_failslab+0x5/0x20 [ 1577.596627] kmem_cache_alloc+0x5b/0x310 [ 1577.597476] security_inode_alloc+0x34/0x160 [ 1577.598394] inode_init_always+0xa4e/0xd10 [ 1577.599305] ? shmem_destroy_inode+0x70/0x70 [ 1577.600217] alloc_inode+0x84/0x240 [ 1577.601003] new_inode+0x23/0x250 [ 1577.601731] shmem_get_inode+0x15e/0xbc0 [ 1577.602606] __shmem_file_setup+0xb8/0x320 [ 1577.603471] ? _copy_from_user+0xfb/0x1b0 [ 1577.604327] __do_sys_memfd_create+0x275/0x450 [ 1577.605288] ? memfd_file_seals_ptr+0x170/0x170 [ 1577.606270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.607359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.608432] do_syscall_64+0x33/0x40 [ 1577.609231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.610317] RIP: 0033:0x7fe2f6eaab19 [ 1577.611178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.614966] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1577.616585] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1577.618075] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1577.619550] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1577.621016] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1577.622550] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1577.628959] FAULT_INJECTION: forcing a failure. [ 1577.628959] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.631303] CPU: 0 PID: 9932 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1577.632788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.634589] Call Trace: [ 1577.635145] dump_stack+0x107/0x167 [ 1577.635924] should_fail.cold+0x5/0xa [ 1577.636739] ? create_object.isra.0+0x3a/0xa20 [ 1577.637724] should_failslab+0x5/0x20 [ 1577.638550] kmem_cache_alloc+0x5b/0x310 [ 1577.639410] create_object.isra.0+0x3a/0xa20 [ 1577.640346] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1577.641459] kmem_cache_alloc+0x159/0x310 [ 1577.642367] ? trace_hardirqs_on+0x5b/0x180 [ 1577.643303] xas_alloc+0x336/0x440 [ 1577.644073] xas_create+0x60f/0x10d0 [ 1577.644891] xas_create_range+0x189/0x620 [ 1577.645820] shmem_add_to_page_cache+0x760/0x1130 [ 1577.646876] ? shmem_getattr+0x180/0x180 [ 1577.647785] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1577.648947] ? shmem_unuse_inode+0xf60/0xf60 [ 1577.649916] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1577.651021] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1577.652114] shmem_write_begin+0xf7/0x1d0 [ 1577.653013] generic_perform_write+0x20a/0x4f0 [ 1577.654034] ? page_cache_prev_miss+0x310/0x310 [ 1577.655029] ? evict_inodes+0x470/0x470 [ 1577.655878] ? generic_write_checks+0x2ad/0x390 [ 1577.656885] __generic_file_write_iter+0x39d/0x5d0 [ 1577.657957] generic_file_write_iter+0xdb/0x230 [ 1577.658946] ? iov_iter_init+0x3c/0x130 [ 1577.659805] new_sync_write+0x42c/0x660 [ 1577.660663] ? new_sync_read+0x6f0/0x6f0 [ 1577.661538] ? __x64_sys_pwrite64+0x201/0x260 [ 1577.662522] ? lock_release+0x680/0x680 [ 1577.663371] ? selinux_file_permission+0x92/0x520 [ 1577.664497] ? security_file_permission+0xb1/0xe0 [ 1577.665828] vfs_write+0x7c0/0xb10 [ 1577.666655] __x64_sys_pwrite64+0x201/0x260 [ 1577.667579] ? ksys_pwrite64+0x1b0/0x1b0 [ 1577.668442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.669571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.670698] do_syscall_64+0x33/0x40 [ 1577.671488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.672588] RIP: 0033:0x7f4b89d2fab7 [ 1577.673371] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1577.677309] RSP: 002b:00007f4b872f1f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1577.678925] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fab7 [ 1577.680438] RDX: 000000000000000c RSI: 0000000020010400 RDI: 0000000000000005 [ 1577.681975] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 1577.683510] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000005 [ 1577.685027] R13: 0000000000000005 R14: 0000000020000218 R15: 0000000000000001 [ 1577.703047] FAULT_INJECTION: forcing a failure. [ 1577.703047] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.705707] CPU: 0 PID: 9935 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1577.707184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.708943] Call Trace: [ 1577.709507] dump_stack+0x107/0x167 [ 1577.710311] should_fail.cold+0x5/0xa [ 1577.711158] ? __alloc_file+0x21/0x320 [ 1577.712026] should_failslab+0x5/0x20 [ 1577.712861] kmem_cache_alloc+0x5b/0x310 [ 1577.713731] __alloc_file+0x21/0x320 [ 1577.714534] alloc_empty_file+0x6d/0x170 [ 1577.715384] alloc_file+0x5e/0x5a0 [ 1577.716132] alloc_file_pseudo+0x16a/0x250 [ 1577.717014] ? alloc_file+0x5a0/0x5a0 [ 1577.717834] anon_inode_getfile+0xc8/0x1f0 [ 1577.718727] io_uring_setup+0x138b/0x2980 [ 1577.719602] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1577.720666] ? wait_for_completion_io+0x270/0x270 [ 1577.721692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.722806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.723891] do_syscall_64+0x33/0x40 [ 1577.724669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.725736] RIP: 0033:0x7eff19607b19 [ 1577.726530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.730391] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1577.731978] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1577.733468] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1577.735015] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1577.736591] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1577.738165] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1577.834469] loop7: detected capacity change from 0 to 131072 [ 1577.839850] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:12:16 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 19) 01:12:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000080)=""/29, 0x1d}], 0x8, 0x9, 0x0) 01:12:16 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 24) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:12:16 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:12:16 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 29) 01:12:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 7) 01:12:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:12:16 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1592.393437] loop3: detected capacity change from 0 to 262144 [ 1592.397106] FAULT_INJECTION: forcing a failure. [ 1592.397106] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.399554] CPU: 1 PID: 9958 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1592.400986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.402755] Call Trace: [ 1592.403314] dump_stack+0x107/0x167 [ 1592.404080] should_fail.cold+0x5/0xa [ 1592.404887] ? create_object.isra.0+0x3a/0xa20 [ 1592.405114] FAULT_INJECTION: forcing a failure. [ 1592.405114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.405844] should_failslab+0x5/0x20 [ 1592.405864] kmem_cache_alloc+0x5b/0x310 [ 1592.405887] create_object.isra.0+0x3a/0xa20 [ 1592.405912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.412125] kmem_cache_alloc+0x159/0x310 [ 1592.413004] __alloc_file+0x21/0x320 [ 1592.413787] alloc_empty_file+0x6d/0x170 [ 1592.414650] alloc_file+0x5e/0x5a0 [ 1592.415397] alloc_file_pseudo+0x16a/0x250 [ 1592.416281] ? alloc_file+0x5a0/0x5a0 [ 1592.417093] anon_inode_getfile+0xc8/0x1f0 [ 1592.417998] io_uring_setup+0x138b/0x2980 [ 1592.418885] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1592.419959] ? wait_for_completion_io+0x270/0x270 [ 1592.420996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.422094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.423187] do_syscall_64+0x33/0x40 [ 1592.423969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1592.425064] RIP: 0033:0x7eff19607b19 [ 1592.425864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.429849] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1592.431497] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1592.433034] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1592.434582] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1592.436120] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1592.437658] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1592.439237] CPU: 0 PID: 9963 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1592.440910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.442886] Call Trace: [ 1592.443523] dump_stack+0x107/0x167 [ 1592.444377] should_fail.cold+0x5/0xa [ 1592.445284] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1592.446610] ? shmem_write_begin+0xf7/0x1d0 [ 1592.447625] ? shmem_write_begin+0x100/0x1d0 [ 1592.448665] generic_perform_write+0x279/0x4f0 [ 1592.449752] ? page_cache_prev_miss+0x310/0x310 [ 1592.450866] ? evict_inodes+0x470/0x470 [ 1592.450885] FAULT_INJECTION: forcing a failure. [ 1592.450885] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.454347] ? generic_write_checks+0x2ad/0x390 [ 1592.455447] __generic_file_write_iter+0x39d/0x5d0 [ 1592.456608] generic_file_write_iter+0xdb/0x230 [ 1592.457686] ? iov_iter_init+0x3c/0x130 [ 1592.458645] new_sync_write+0x42c/0x660 [ 1592.459569] ? new_sync_read+0x6f0/0x6f0 [ 1592.460514] ? __x64_sys_pwrite64+0x201/0x260 [ 1592.461565] ? lock_release+0x680/0x680 [ 1592.462491] ? selinux_file_permission+0x92/0x520 [ 1592.463633] ? security_file_permission+0xb1/0xe0 [ 1592.464756] vfs_write+0x7c0/0xb10 [ 1592.465588] __x64_sys_pwrite64+0x201/0x260 [ 1592.466614] ? ksys_pwrite64+0x1b0/0x1b0 [ 1592.467557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.468779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.469971] do_syscall_64+0x33/0x40 [ 1592.470864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1592.472049] RIP: 0033:0x7f4b89d2fab7 [ 1592.472917] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1592.477188] RSP: 002b:00007f4b872f1f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1592.478983] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fab7 [ 1592.480682] RDX: 000000000000000c RSI: 0000000020010400 RDI: 0000000000000005 [ 1592.482406] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 1592.484077] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000005 [ 1592.485728] R13: 0000000000000005 R14: 0000000020000218 R15: 0000000000000001 [ 1592.487418] CPU: 1 PID: 9960 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1592.488929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.490706] Call Trace: [ 1592.491271] dump_stack+0x107/0x167 [ 1592.492043] should_fail.cold+0x5/0xa [ 1592.492855] ? create_object.isra.0+0x3a/0xa20 [ 1592.493827] should_failslab+0x5/0x20 [ 1592.494645] kmem_cache_alloc+0x5b/0x310 [ 1592.495518] create_object.isra.0+0x3a/0xa20 [ 1592.496448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.497528] kmem_cache_alloc+0x159/0x310 [ 1592.498425] security_inode_alloc+0x34/0x160 [ 1592.499365] inode_init_always+0xa4e/0xd10 [ 1592.500270] ? shmem_destroy_inode+0x70/0x70 [ 1592.501206] alloc_inode+0x84/0x240 [ 1592.501977] new_inode+0x23/0x250 [ 1592.502725] shmem_get_inode+0x15e/0xbc0 [ 1592.503596] __shmem_file_setup+0xb8/0x320 [ 1592.504496] ? _copy_from_user+0xfb/0x1b0 [ 1592.505378] __do_sys_memfd_create+0x275/0x450 [ 1592.506353] ? memfd_file_seals_ptr+0x170/0x170 [ 1592.507347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.508462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.509559] do_syscall_64+0x33/0x40 [ 1592.510360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1592.511448] RIP: 0033:0x7fe2f6eaab19 [ 1592.512236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.516151] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1592.517769] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1592.519310] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1592.520822] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1592.522349] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1592.523857] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1592.527086] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1592.527159] loop6: detected capacity change from 0 to 131072 [ 1592.530708] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1592.532344] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1592.533831] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1592.537602] FAULT_INJECTION: forcing a failure. [ 1592.537602] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.539557] CPU: 0 PID: 9961 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1592.540682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.542032] Call Trace: [ 1592.542483] dump_stack+0x107/0x167 [ 1592.543083] should_fail.cold+0x5/0xa [ 1592.543710] ? __kernfs_new_node+0xd4/0x860 [ 1592.544427] should_failslab+0x5/0x20 [ 1592.545052] kmem_cache_alloc+0x5b/0x310 [ 1592.545719] __kernfs_new_node+0xd4/0x860 [ 1592.546410] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1592.547174] ? kernfs_add_one+0x36e/0x4d0 [ 1592.547859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.548653] ? wait_for_completion_io+0x270/0x270 [ 1592.549451] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1592.550342] kernfs_new_node+0x18d/0x250 [ 1592.551015] __kernfs_create_file+0x51/0x350 [ 1592.551745] sysfs_add_file_mode_ns+0x221/0x560 [ 1592.552519] internal_create_group+0x324/0xb30 [ 1592.553288] ? sysfs_remove_group+0x170/0x170 [ 1592.554035] ? lockdep_init_map_type+0x2c7/0x780 [ 1592.554828] ? blk_queue_flag_set+0x22/0x30 [ 1592.555537] ? __loop_update_dio+0x2d2/0x690 [ 1592.556271] loop_configure+0x953/0x1410 [ 1592.556952] lo_ioctl+0xa57/0x16b0 [ 1592.557542] ? avc_has_extended_perms+0x7f1/0xf40 [ 1592.558350] ? loop_set_status_old+0x250/0x250 [ 1592.559114] ? avc_ss_reset+0x180/0x180 [ 1592.559775] ? find_held_lock+0x2c/0x110 [ 1592.560459] ? __lock_acquire+0xbb1/0x5b00 [ 1592.561216] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1592.562087] ? generic_block_fiemap+0x60/0x60 [ 1592.562831] ? lock_downgrade+0x6d0/0x6d0 [ 1592.563518] ? build_open_flags+0x6f0/0x6f0 [ 1592.564225] ? find_held_lock+0x2c/0x110 [ 1592.564895] ? loop_set_status_old+0x250/0x250 [ 1592.565641] blkdev_ioctl+0x291/0x710 [ 1592.566292] ? blkdev_common_ioctl+0x1930/0x1930 [ 1592.567080] ? selinux_file_ioctl+0xb6/0x270 [ 1592.567811] block_ioctl+0xf9/0x140 [ 1592.568415] ? blkdev_read_iter+0x1c0/0x1c0 [ 1592.569132] __x64_sys_ioctl+0x19a/0x210 [ 1592.569806] do_syscall_64+0x33/0x40 [ 1592.570431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1592.571282] RIP: 0033:0x7fae9488f8d7 [ 1592.571906] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.574981] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.576256] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1592.577460] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1592.578663] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1592.579859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1592.581061] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:12:16 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 25) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1592.586123] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1592.591627] EXT4-fs (loop3): get root inode failed [ 1592.592761] EXT4-fs (loop3): mount failed 01:12:16 executing program 1: ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0xffff, 0x3ff, 0x81}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1004) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000002c0)={0x6, 0x5, 0x6}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000013c0)={r2, 0x9, 0xd}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001400)='wlan1\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) [ 1592.640946] FAT-fs (loop5): bogus number of reserved sectors [ 1592.641329] FAT-fs (loop6): bogus number of reserved sectors [ 1592.642027] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1592.643651] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1592.647971] loop4: detected capacity change from 0 to 262144 [ 1592.686403] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1592.701865] FAULT_INJECTION: forcing a failure. [ 1592.701865] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.704090] CPU: 0 PID: 9976 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1592.705270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.706702] Call Trace: [ 1592.707156] dump_stack+0x107/0x167 [ 1592.707781] should_fail.cold+0x5/0xa [ 1592.708444] ? security_file_alloc+0x34/0x170 [ 1592.709214] should_failslab+0x5/0x20 [ 1592.709869] kmem_cache_alloc+0x5b/0x310 [ 1592.710594] security_file_alloc+0x34/0x170 [ 1592.711348] __alloc_file+0xb7/0x320 [ 1592.711979] alloc_empty_file+0x6d/0x170 [ 1592.712680] alloc_file+0x5e/0x5a0 [ 1592.713286] alloc_file_pseudo+0x16a/0x250 [ 1592.714008] ? alloc_file+0x5a0/0x5a0 [ 1592.714679] anon_inode_getfile+0xc8/0x1f0 [ 1592.715407] io_uring_setup+0x138b/0x2980 [ 1592.716130] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1592.717006] ? wait_for_completion_io+0x270/0x270 [ 1592.717862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.718776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.719662] do_syscall_64+0x33/0x40 [ 1592.720298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1592.721176] RIP: 0033:0x7eff19607b19 [ 1592.721813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.724979] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1592.726306] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1592.727525] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1592.728751] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1592.729970] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1592.731202] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1592.739792] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:12:16 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 01:12:16 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 30) 01:12:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40002, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:12:16 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1592.803109] loop7: detected capacity change from 0 to 131072 [ 1592.807740] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:12:16 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 20) [ 1592.855485] FAULT_INJECTION: forcing a failure. [ 1592.855485] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.857480] CPU: 0 PID: 9988 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1592.858666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.860088] Call Trace: [ 1592.860551] dump_stack+0x107/0x167 [ 1592.861175] should_fail.cold+0x5/0xa [ 1592.861836] ? create_object.isra.0+0x3a/0xa20 [ 1592.862635] should_failslab+0x5/0x20 [ 1592.863284] kmem_cache_alloc+0x5b/0x310 [ 1592.863992] create_object.isra.0+0x3a/0xa20 [ 1592.864746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.865615] kmem_cache_alloc+0x159/0x310 [ 1592.866356] __kernfs_new_node+0xd4/0x860 [ 1592.867083] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1592.867900] ? kernfs_add_one+0x36e/0x4d0 [ 1592.868616] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.869452] ? wait_for_completion_io+0x270/0x270 [ 1592.870295] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1592.871210] kernfs_new_node+0x18d/0x250 [ 1592.871921] __kernfs_create_file+0x51/0x350 [ 1592.872691] sysfs_add_file_mode_ns+0x221/0x560 [ 1592.873502] internal_create_group+0x324/0xb30 [ 1592.874317] ? sysfs_remove_group+0x170/0x170 [ 1592.875095] ? lockdep_init_map_type+0x2c7/0x780 [ 1592.875919] ? blk_queue_flag_set+0x22/0x30 [ 1592.876659] ? __loop_update_dio+0x2d2/0x690 [ 1592.877416] loop_configure+0x953/0x1410 [ 1592.878130] lo_ioctl+0xa57/0x16b0 [ 1592.878757] ? avc_has_extended_perms+0x7f1/0xf40 [ 1592.879581] ? loop_set_status_old+0x250/0x250 [ 1592.880367] ? avc_ss_reset+0x180/0x180 [ 1592.881043] ? find_held_lock+0x2c/0x110 [ 1592.881751] ? __lock_acquire+0xbb1/0x5b00 [ 1592.882547] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1592.883450] ? generic_block_fiemap+0x60/0x60 [ 1592.884220] ? lock_downgrade+0x6d0/0x6d0 [ 1592.884935] ? build_open_flags+0x6f0/0x6f0 [ 1592.885668] ? find_held_lock+0x2c/0x110 [ 1592.886391] ? loop_set_status_old+0x250/0x250 [ 1592.887166] blkdev_ioctl+0x291/0x710 [ 1592.887820] ? blkdev_common_ioctl+0x1930/0x1930 [ 1592.888630] ? selinux_file_ioctl+0xb6/0x270 [ 1592.889383] block_ioctl+0xf9/0x140 [ 1592.890004] ? blkdev_read_iter+0x1c0/0x1c0 [ 1592.890747] __x64_sys_ioctl+0x19a/0x210 [ 1592.891434] do_syscall_64+0x33/0x40 [ 1592.892077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1592.892962] RIP: 0033:0x7fae9488f8d7 [ 1592.893599] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.896771] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.898099] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1592.899337] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1592.900575] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1592.901805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1592.903041] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:12:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x7, 0x7ff, &(0x7f00000001c0)="a5e587c09748bff71b4a4e65df907b86d6db8aaa2b711c19defba6b9dc2904c679f2591d7d8e8c16c8f1d7c52f33e9cb3b37461116f55d94033f8f2d04779e488752c797215e2bf8d006df873a733505b09e2e967b33352eb7530e2d31e197ae69d7c075823b2870df5f", 0x6a, 0x2, 0x1, {0x0, r10}}, 0x40000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:12:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 8) 01:12:16 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 01:12:16 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 26) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1592.966861] FAT-fs (loop5): bogus number of reserved sectors [ 1592.968078] FAT-fs (loop5): Can't find a valid FAT filesystem 01:12:16 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1592.983716] FAULT_INJECTION: forcing a failure. [ 1592.983716] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.985825] CPU: 1 PID: 9997 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1592.987050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.988501] Call Trace: [ 1592.988980] dump_stack+0x107/0x167 [ 1592.989627] should_fail.cold+0x5/0xa [ 1592.990334] ? getname_flags.part.0+0x50/0x4f0 [ 1592.991151] should_failslab+0x5/0x20 [ 1592.991827] kmem_cache_alloc+0x5b/0x310 [ 1592.992542] ? new_sync_write+0x499/0x660 [ 1592.993272] getname_flags.part.0+0x50/0x4f0 [ 1592.994048] getname+0x8e/0xd0 [ 1592.994621] do_sys_openat2+0xf9/0x4d0 [ 1592.995301] ? build_open_flags+0x6f0/0x6f0 [ 1592.996072] ? rcu_read_lock_any_held+0x75/0xa0 [ 1592.996887] __x64_sys_openat+0x13f/0x1f0 [ 1592.997623] ? __ia32_sys_open+0x1c0/0x1c0 [ 1592.998392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.999317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.000226] do_syscall_64+0x33/0x40 [ 1593.000885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.001778] RIP: 0033:0x7f4b89d2fa04 [ 1593.002437] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1593.005650] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1593.006984] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1593.008213] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1593.009449] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1593.010691] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1593.011937] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1593.029736] loop6: detected capacity change from 0 to 131072 [ 1593.040021] FAT-fs (loop6): bogus number of reserved sectors [ 1593.041122] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1593.074590] FAULT_INJECTION: forcing a failure. [ 1593.074590] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.076667] CPU: 1 PID: 10003 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1593.077828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.079228] Call Trace: [ 1593.079676] dump_stack+0x107/0x167 [ 1593.080288] should_fail.cold+0x5/0xa [ 1593.080920] ? create_object.isra.0+0x3a/0xa20 [ 1593.081681] should_failslab+0x5/0x20 [ 1593.082326] kmem_cache_alloc+0x5b/0x310 [ 1593.083005] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1593.083918] create_object.isra.0+0x3a/0xa20 [ 1593.084637] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.085492] kmem_cache_alloc+0x159/0x310 [ 1593.086176] security_file_alloc+0x34/0x170 [ 1593.086906] __alloc_file+0xb7/0x320 [ 1593.087523] alloc_empty_file+0x6d/0x170 [ 1593.088193] alloc_file+0x5e/0x5a0 [ 1593.088787] alloc_file_pseudo+0x16a/0x250 [ 1593.089483] ? alloc_file+0x5a0/0x5a0 [ 1593.090118] anon_inode_getfile+0xc8/0x1f0 [ 1593.090837] io_uring_setup+0x138b/0x2980 [ 1593.091517] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1593.092356] ? wait_for_completion_io+0x270/0x270 [ 1593.093167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1593.094034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.094899] do_syscall_64+0x33/0x40 [ 1593.095511] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.096353] RIP: 0033:0x7eff19607b19 [ 1593.096960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.099990] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1593.101250] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1593.102436] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1593.103624] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1593.104791] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1593.105965] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1593.120239] FAULT_INJECTION: forcing a failure. [ 1593.120239] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.122791] CPU: 1 PID: 10006 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1593.123933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.125282] Call Trace: [ 1593.125705] dump_stack+0x107/0x167 [ 1593.126303] should_fail.cold+0x5/0xa [ 1593.126929] ? __d_alloc+0x2a/0x990 [ 1593.127525] should_failslab+0x5/0x20 [ 1593.128138] kmem_cache_alloc+0x5b/0x310 [ 1593.128789] ? trace_hardirqs_on+0x5b/0x180 [ 1593.129498] __d_alloc+0x2a/0x990 [ 1593.130066] d_alloc_pseudo+0x19/0x70 [ 1593.130678] alloc_file_pseudo+0xce/0x250 [ 1593.131342] ? alloc_file+0x5a0/0x5a0 [ 1593.131953] ? shmem_get_inode+0x55c/0xbc0 [ 1593.132640] __shmem_file_setup+0x144/0x320 [ 1593.133327] ? _copy_from_user+0xfb/0x1b0 [ 1593.133996] __do_sys_memfd_create+0x275/0x450 [ 1593.134744] ? memfd_file_seals_ptr+0x170/0x170 [ 1593.135499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1593.136362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.137196] do_syscall_64+0x33/0x40 [ 1593.137787] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.138619] RIP: 0033:0x7fe2f6eaab19 [ 1593.139217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.142171] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1593.143398] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1593.144531] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1593.145669] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1593.146821] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1593.147963] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 01:12:30 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 27) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:12:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40003, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:12:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 9) 01:12:30 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1606.976770] loop3: detected capacity change from 0 to 262144 01:12:30 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000080040000020b4a135e34e04749f35a34db0000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f00000000000000000100", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2}], 0x200000, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 01:12:30 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1606.989751] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 01:12:30 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 31) 01:12:30 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 21) [ 1607.008508] FAULT_INJECTION: forcing a failure. [ 1607.008508] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.011048] CPU: 0 PID: 10018 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1607.012495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.014220] Call Trace: [ 1607.014784] dump_stack+0x107/0x167 [ 1607.015543] should_fail.cold+0x5/0xa [ 1607.016346] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1607.017420] should_failslab+0x5/0x20 [ 1607.018211] kmem_cache_alloc_trace+0x55/0x320 [ 1607.019172] io_uring_alloc_task_context+0x99/0x6a0 [ 1607.020204] ? io_import_iovec+0x1120/0x1120 [ 1607.021117] ? lock_downgrade+0x6d0/0x6d0 [ 1607.021982] ? do_raw_spin_lock+0x121/0x260 [ 1607.022899] ? rwlock_bug.part.0+0x90/0x90 [ 1607.023790] __io_uring_add_tctx_node+0x2c6/0x520 [ 1607.024792] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1607.025882] ? alloc_fd+0x2e7/0x670 [ 1607.026650] io_uring_setup+0x1fbb/0x2980 [ 1607.027536] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1607.028609] ? wait_for_completion_io+0x270/0x270 [ 1607.029632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.030721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.031803] do_syscall_64+0x33/0x40 [ 1607.032578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.033643] RIP: 0033:0x7eff19607b19 [ 1607.034413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.038235] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1607.038280] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1607.039829] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1607.039842] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1607.039852] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1607.039863] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1607.039882] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1607.041791] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1607.051265] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1607.056139] FAULT_INJECTION: forcing a failure. [ 1607.056139] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.058552] CPU: 0 PID: 10024 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1607.059998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.061721] Call Trace: [ 1607.062272] dump_stack+0x107/0x167 [ 1607.063038] should_fail.cold+0x5/0xa [ 1607.063836] ? create_object.isra.0+0x3a/0xa20 [ 1607.064788] should_failslab+0x5/0x20 [ 1607.065582] kmem_cache_alloc+0x5b/0x310 [ 1607.066436] create_object.isra.0+0x3a/0xa20 [ 1607.067375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1607.068439] kmem_cache_alloc+0x159/0x310 [ 1607.069313] __d_alloc+0x2a/0x990 [ 1607.070038] d_alloc_pseudo+0x19/0x70 [ 1607.070844] alloc_file_pseudo+0xce/0x250 [ 1607.071703] ? alloc_file+0x5a0/0x5a0 [ 1607.072511] ? shmem_get_inode+0x55c/0xbc0 [ 1607.073406] __shmem_file_setup+0x144/0x320 [ 1607.074304] ? _copy_from_user+0xfb/0x1b0 [ 1607.075177] __do_sys_memfd_create+0x275/0x450 [ 1607.076133] ? memfd_file_seals_ptr+0x170/0x170 [ 1607.077104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.078193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.079277] do_syscall_64+0x33/0x40 [ 1607.080052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.081118] RIP: 0033:0x7fe2f6eaab19 [ 1607.081889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.085726] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1607.087329] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1607.088821] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1607.090313] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1607.091832] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1607.093361] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1607.103291] loop6: detected capacity change from 0 to 131072 [ 1607.108853] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1607.109490] FAULT_INJECTION: forcing a failure. [ 1607.109490] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.114036] CPU: 0 PID: 10031 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1607.115555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.117323] Call Trace: [ 1607.117882] dump_stack+0x107/0x167 [ 1607.118370] EXT4-fs (loop3): get root inode failed [ 1607.118657] should_fail.cold+0x5/0xa [ 1607.118677] ? create_object.isra.0+0x3a/0xa20 [ 1607.118704] should_failslab+0x5/0x20 [ 1607.119799] EXT4-fs (loop3): mount failed [ 1607.120557] kmem_cache_alloc+0x5b/0x310 [ 1607.120577] ? __generic_file_write_iter+0x1a4/0x5d0 [ 1607.120600] create_object.isra.0+0x3a/0xa20 [ 1607.126033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1607.127135] kmem_cache_alloc+0x159/0x310 [ 1607.128016] ? new_sync_write+0x499/0x660 [ 1607.128903] getname_flags.part.0+0x50/0x4f0 [ 1607.129840] getname+0x8e/0xd0 [ 1607.130527] do_sys_openat2+0xf9/0x4d0 [ 1607.131362] ? build_open_flags+0x6f0/0x6f0 [ 1607.132290] ? rcu_read_lock_any_held+0x75/0xa0 [ 1607.133283] __x64_sys_openat+0x13f/0x1f0 [ 1607.134163] ? __ia32_sys_open+0x1c0/0x1c0 01:12:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 28) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1607.135110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.136408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.137481] do_syscall_64+0x33/0x40 [ 1607.138254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.139341] RIP: 0033:0x7f4b89d2fa04 [ 1607.140116] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1607.143938] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1607.145524] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1607.147026] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1607.148521] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1607.150011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1607.151510] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1607.160017] FAT-fs (loop6): bogus number of reserved sectors [ 1607.161366] FAT-fs (loop6): Can't find a valid FAT filesystem 01:12:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 1607.169805] loop4: detected capacity change from 0 to 262144 [ 1607.174084] FAULT_INJECTION: forcing a failure. [ 1607.174084] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.176609] CPU: 0 PID: 10029 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1607.178080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.179861] Call Trace: [ 1607.180424] dump_stack+0x107/0x167 [ 1607.181204] should_fail.cold+0x5/0xa [ 1607.182020] ? __kernfs_new_node+0xd4/0x860 [ 1607.182950] should_failslab+0x5/0x20 [ 1607.183757] kmem_cache_alloc+0x5b/0x310 [ 1607.184633] __kernfs_new_node+0xd4/0x860 [ 1607.185521] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1607.186529] ? kernfs_add_one+0x36e/0x4d0 [ 1607.187430] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1607.188460] ? wait_for_completion_io+0x270/0x270 [ 1607.189494] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1607.190616] kernfs_new_node+0x18d/0x250 [ 1607.191497] __kernfs_create_file+0x51/0x350 [ 1607.192438] sysfs_add_file_mode_ns+0x221/0x560 [ 1607.193442] internal_create_group+0x324/0xb30 [ 1607.194423] ? sysfs_remove_group+0x170/0x170 [ 1607.195397] ? lockdep_init_map_type+0x2c7/0x780 [ 1607.196407] ? blk_queue_flag_set+0x22/0x30 [ 1607.197322] ? __loop_update_dio+0x2d2/0x690 [ 1607.198264] loop_configure+0x953/0x1410 [ 1607.199150] lo_ioctl+0xa57/0x16b0 [ 1607.199907] ? avc_has_extended_perms+0x7f1/0xf40 [ 1607.200932] ? loop_set_status_old+0x250/0x250 [ 1607.201910] ? avc_ss_reset+0x180/0x180 [ 1607.202756] ? find_held_lock+0x2c/0x110 [ 1607.203645] ? __lock_acquire+0xbb1/0x5b00 [ 1607.204593] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1607.205707] ? generic_block_fiemap+0x60/0x60 [ 1607.206658] ? lock_downgrade+0x6d0/0x6d0 [ 1607.207546] ? build_open_flags+0x6f0/0x6f0 [ 1607.208453] ? find_held_lock+0x2c/0x110 [ 1607.209342] ? loop_set_status_old+0x250/0x250 [ 1607.210296] blkdev_ioctl+0x291/0x710 [ 1607.211101] ? blkdev_common_ioctl+0x1930/0x1930 [ 1607.212094] ? selinux_file_ioctl+0xb6/0x270 [ 1607.213030] block_ioctl+0xf9/0x140 [ 1607.213793] ? blkdev_read_iter+0x1c0/0x1c0 [ 1607.214697] __x64_sys_ioctl+0x19a/0x210 [ 1607.215580] do_syscall_64+0x33/0x40 [ 1607.216364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.217436] RIP: 0033:0x7fae9488f8d7 [ 1607.218220] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.222091] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.223692] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1607.225205] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1607.226703] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1607.228244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1607.229746] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:12:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1607.242582] loop7: detected capacity change from 0 to 131072 [ 1607.256613] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1607.272351] FAT-fs (loop5): bogus number of reserved sectors [ 1607.273625] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1607.283766] FAULT_INJECTION: forcing a failure. [ 1607.283766] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.286127] CPU: 0 PID: 10041 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1607.287592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.289333] Call Trace: [ 1607.289890] dump_stack+0x107/0x167 [ 1607.290661] should_fail.cold+0x5/0xa [ 1607.291637] ? create_object.isra.0+0x3a/0xa20 [ 1607.292612] should_failslab+0x5/0x20 [ 1607.293409] kmem_cache_alloc+0x5b/0x310 [ 1607.294258] create_object.isra.0+0x3a/0xa20 [ 1607.295192] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1607.295614] loop3: detected capacity change from 0 to 262144 [ 1607.296252] kmem_cache_alloc_trace+0x151/0x320 [ 1607.296281] io_uring_alloc_task_context+0x99/0x6a0 [ 1607.299507] ? io_import_iovec+0x1120/0x1120 [ 1607.300427] ? lock_downgrade+0x6d0/0x6d0 [ 1607.301290] ? do_raw_spin_lock+0x121/0x260 [ 1607.302195] ? rwlock_bug.part.0+0x90/0x90 [ 1607.303093] __io_uring_add_tctx_node+0x2c6/0x520 [ 1607.303368] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1607.304105] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1607.306721] ? alloc_fd+0x2e7/0x670 [ 1607.307501] io_uring_setup+0x1fbb/0x2980 [ 1607.308371] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1607.309429] ? wait_for_completion_io+0x270/0x270 [ 1607.310457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.311555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.312639] do_syscall_64+0x33/0x40 [ 1607.313418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.314488] RIP: 0033:0x7eff19607b19 [ 1607.315278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.319160] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1607.320751] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1607.322239] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1607.323744] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1607.325225] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1607.326712] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1607.332723] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1607.334365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1607.346230] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1607.348265] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1607.350187] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:12:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 10) 01:12:31 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000", 0x30}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:12:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f00000006c0)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f00000000000000010000000100e0f4655fe0f4655f01001b8253ef010001000000dff4839023254f03e3b4ff8d6506209209655f000000000000000001000000000000000b0000000001", 0x5b, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x2f}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) pipe(&(0x7f0000000000)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1607.401037] EXT4-fs: failed to create workqueue [ 1607.402082] EXT4-fs (loop3): mount failed [ 1607.439236] FAULT_INJECTION: forcing a failure. [ 1607.439236] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.441675] CPU: 1 PID: 10055 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1607.443156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.444915] Call Trace: [ 1607.445480] dump_stack+0x107/0x167 01:12:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x80c, r1) fcntl$dupfd(r0, 0x0, r2) [ 1607.446257] should_fail.cold+0x5/0xa [ 1607.447229] ? __alloc_file+0x21/0x320 [ 1607.448081] should_failslab+0x5/0x20 [ 1607.448892] kmem_cache_alloc+0x5b/0x310 [ 1607.449749] __alloc_file+0x21/0x320 [ 1607.450528] alloc_empty_file+0x6d/0x170 [ 1607.451396] alloc_file+0x5e/0x5a0 [ 1607.452142] alloc_file_pseudo+0x16a/0x250 [ 1607.453028] ? alloc_file+0x5a0/0x5a0 [ 1607.453835] ? shmem_get_inode+0x55c/0xbc0 [ 1607.454733] __shmem_file_setup+0x144/0x320 [ 1607.455650] ? _copy_from_user+0xfb/0x1b0 [ 1607.456526] __do_sys_memfd_create+0x275/0x450 [ 1607.457485] ? memfd_file_seals_ptr+0x170/0x170 [ 1607.458477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.459587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.460672] do_syscall_64+0x33/0x40 [ 1607.461455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.462531] RIP: 0033:0x7fe2f6eaab19 01:12:31 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 32) [ 1607.463323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.467328] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1607.468927] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1607.470424] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1607.471938] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1607.473438] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1607.474940] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1607.477455] loop6: detected capacity change from 0 to 131072 [ 1607.483412] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 01:12:31 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 22) [ 1607.518477] FAT-fs (loop6): Directory bread(block 64) failed [ 1607.520969] FAT-fs (loop6): Directory bread(block 65) failed [ 1607.522306] FAT-fs (loop6): Directory bread(block 66) failed [ 1607.523650] FAT-fs (loop6): Directory bread(block 67) failed [ 1607.524959] FAT-fs (loop6): Directory bread(block 68) failed [ 1607.526269] FAT-fs (loop6): Directory bread(block 69) failed [ 1607.527849] FAT-fs (loop6): Directory bread(block 70) failed [ 1607.529295] FAT-fs (loop6): Directory bread(block 71) failed [ 1607.530621] FAT-fs (loop6): Directory bread(block 72) failed [ 1607.532090] FAT-fs (loop6): Directory bread(block 73) failed 01:12:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40005, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:12:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 01:12:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1, 0x4, &(0x7f0000000340)=[{&(0x7f00000001c0)="c62636a7cafb8f4ecc587458282d4bc87251d3148b01034f8585a6ce158f715789deed82209dcc212ecaf677f9f70af7ea3cdaf92e52df44465d70bdc97b1b9f1640a4966131ed726bc50f9a9d1c63dcc0094856148503004b14bd3f39413f1e5c2a66", 0x63, 0x2}, {&(0x7f0000000240)="a947da515b613b15a62112d7e89c6829d6150551e4e921841f3349fbe183e5560cb17aff9ad8d999a94384056bed9d66ed5abc39d3fc830e4591336cab6d329f2213443b0ee65dfb86d354623b6e", 0x4e, 0x1}, {&(0x7f0000000140)="e65403b93fa18c0e8f01ab50795a8605", 0x10, 0x5}, {&(0x7f00000002c0)="11bcde71b5c19c0309fcc875febe1a20d77ea4c6aa11a17c77dd70a58850ba81b7741231e1f12be2cff34558a4319bfc9a030c26f375a39a2852e7e1ac08469a9ce7672c448e09a393", 0x49, 0x7f}], 0x920400, &(0x7f00000003c0)={[{@huge_never}], [{@dont_measure}, {@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}]}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder-control\x00', 0x2, 0x0) dup2(r0, r1) unlinkat(r0, &(0x7f0000000400)='./file0\x00', 0x200) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) creat(&(0x7f0000000480)='./file0\x00', 0x159) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000001100000000001b000000070021006141"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x2f}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "21754a8f3c6da7c03f4a8ef6926e7c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 01:12:31 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1607.582019] FAULT_INJECTION: forcing a failure. [ 1607.582019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1607.584655] CPU: 1 PID: 10061 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1607.586115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.587875] Call Trace: [ 1607.588440] dump_stack+0x107/0x167 [ 1607.589213] should_fail.cold+0x5/0xa [ 1607.590024] strncpy_from_user+0x34/0x470 [ 1607.590915] getname_flags.part.0+0x95/0x4f0 [ 1607.591845] getname+0x8e/0xd0 [ 1607.592523] do_sys_openat2+0xf9/0x4d0 [ 1607.593354] ? build_open_flags+0x6f0/0x6f0 [ 1607.594290] ? rcu_read_lock_any_held+0x75/0xa0 [ 1607.595283] __x64_sys_openat+0x13f/0x1f0 [ 1607.596159] ? __ia32_sys_open+0x1c0/0x1c0 [ 1607.597060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1607.598165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1607.599263] do_syscall_64+0x33/0x40 [ 1607.600047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.601129] RIP: 0033:0x7f4b89d2fa04 [ 1607.601918] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1607.605812] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1607.607425] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1607.608929] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1607.610436] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1607.611964] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1607.613467] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1607.664220] FAULT_INJECTION: forcing a failure. [ 1607.664220] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.666640] CPU: 0 PID: 10067 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1607.668115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.669861] Call Trace: [ 1607.670418] dump_stack+0x107/0x167 [ 1607.671197] should_fail.cold+0x5/0xa [ 1607.672002] ? create_object.isra.0+0x3a/0xa20 [ 1607.672967] should_failslab+0x5/0x20 [ 1607.673769] kmem_cache_alloc+0x5b/0x310 [ 1607.674632] create_object.isra.0+0x3a/0xa20 [ 1607.675575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1607.676653] kmem_cache_alloc+0x159/0x310 [ 1607.677543] __kernfs_new_node+0xd4/0x860 [ 1607.678426] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1607.679428] ? kernfs_add_one+0x36e/0x4d0 [ 1607.680313] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1607.681345] ? wait_for_completion_io+0x270/0x270 [ 1607.682373] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1607.683493] kernfs_new_node+0x18d/0x250 [ 1607.684357] __kernfs_create_file+0x51/0x350 [ 1607.685290] sysfs_add_file_mode_ns+0x221/0x560 [ 1607.686284] internal_create_group+0x324/0xb30 [ 1607.687268] ? sysfs_remove_group+0x170/0x170 [ 1607.688214] ? lockdep_init_map_type+0x2c7/0x780 [ 1607.689215] ? blk_queue_flag_set+0x22/0x30 [ 1607.690127] ? __loop_update_dio+0x2d2/0x690 [ 1607.691067] loop_configure+0x953/0x1410 [ 1607.691932] lo_ioctl+0xa57/0x16b0 [ 1607.692684] ? avc_has_extended_perms+0x7f1/0xf40 [ 1607.693703] ? loop_set_status_old+0x250/0x250 [ 1607.694668] ? avc_ss_reset+0x180/0x180 [ 1607.695513] ? find_held_lock+0x2c/0x110 [ 1607.696382] ? __lock_acquire+0xbb1/0x5b00 [ 1607.697317] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1607.698427] ? generic_block_fiemap+0x60/0x60 [ 1607.699382] ? lock_downgrade+0x6d0/0x6d0 [ 1607.700254] ? build_open_flags+0x6f0/0x6f0 [ 1607.701158] ? find_held_lock+0x2c/0x110 [ 1607.702018] ? loop_set_status_old+0x250/0x250 [ 1607.702986] blkdev_ioctl+0x291/0x710 [ 1607.703788] ? blkdev_common_ioctl+0x1930/0x1930 [ 1607.704799] ? selinux_file_ioctl+0xb6/0x270 [ 1607.705728] block_ioctl+0xf9/0x140 [ 1607.706493] ? blkdev_read_iter+0x1c0/0x1c0 [ 1607.707412] __x64_sys_ioctl+0x19a/0x210 [ 1607.708268] do_syscall_64+0x33/0x40 [ 1607.709054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1607.710131] RIP: 0033:0x7fae9488f8d7 [ 1607.710925] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.714822] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.716438] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1607.717940] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1607.719451] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1607.720957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1607.722455] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1607.757004] loop3: detected capacity change from 0 to 262144 [ 1607.775273] FAT-fs (loop5): bogus number of reserved sectors [ 1607.776634] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1607.778357] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1607.782849] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1607.784786] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1607.786791] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1607.790641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1607.793584] EXT4-fs (loop3): get root inode failed [ 1607.794709] EXT4-fs (loop3): mount failed [ 1607.821030] loop3: detected capacity change from 0 to 262144 [ 1607.828245] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1607.830824] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1607.833062] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1607.835002] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1607.837715] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1607.840605] EXT4-fs (loop3): get root inode failed [ 1607.841758] EXT4-fs (loop3): mount failed 01:12:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40006, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:12:46 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 29) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:12:46 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 33) [ 1622.923865] FAULT_INJECTION: forcing a failure. [ 1622.923865] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.925212] CPU: 0 PID: 10089 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1622.926000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.926961] Call Trace: [ 1622.927267] dump_stack+0x107/0x167 [ 1622.927695] should_fail.cold+0x5/0xa [ 1622.928130] ? create_object.isra.0+0x3a/0xa20 [ 1622.928651] should_failslab+0x5/0x20 [ 1622.929089] kmem_cache_alloc+0x5b/0x310 [ 1622.929552] create_object.isra.0+0x3a/0xa20 [ 1622.930049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1622.930631] kmem_cache_alloc+0x159/0x310 [ 1622.931104] __alloc_file+0x21/0x320 [ 1622.931538] alloc_empty_file+0x6d/0x170 [ 1622.932001] alloc_file+0x5e/0x5a0 [ 1622.932404] alloc_file_pseudo+0x16a/0x250 [ 1622.932879] ? alloc_file+0x5a0/0x5a0 [ 1622.933319] ? shmem_get_inode+0x55c/0xbc0 [ 1622.933803] __shmem_file_setup+0x144/0x320 [ 1622.934292] ? _copy_from_user+0xfb/0x1b0 [ 1622.934766] __do_sys_memfd_create+0x275/0x450 [ 1622.935285] ? memfd_file_seals_ptr+0x170/0x170 [ 1622.935827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1622.936424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1622.937006] do_syscall_64+0x33/0x40 01:12:46 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:12:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:12:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 11) [ 1622.937428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1622.938206] RIP: 0033:0x7fe2f6eaab19 [ 1622.938632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.940743] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1622.941611] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1622.942427] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1622.943236] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1622.943635] loop3: detected capacity change from 0 to 262144 [ 1622.944052] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1622.944072] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1622.958965] FAULT_INJECTION: forcing a failure. [ 1622.958965] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.960308] CPU: 0 PID: 10087 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1622.961095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.962037] Call Trace: [ 1622.962341] dump_stack+0x107/0x167 [ 1622.962756] should_fail.cold+0x5/0xa [ 1622.963196] ? create_object.isra.0+0x3a/0xa20 [ 1622.963730] should_failslab+0x5/0x20 [ 1622.964169] kmem_cache_alloc+0x5b/0x310 [ 1622.964635] create_object.isra.0+0x3a/0xa20 [ 1622.965141] kmemleak_alloc_percpu+0xa0/0x100 [ 1622.965654] pcpu_alloc+0x4e2/0x1240 [ 1622.966089] __percpu_counter_init+0x10d/0x2d0 [ 1622.966616] io_uring_alloc_task_context+0xcc/0x6a0 [ 1622.967190] ? io_import_iovec+0x1120/0x1120 [ 1622.967703] ? lock_downgrade+0x6d0/0x6d0 [ 1622.968176] ? do_raw_spin_lock+0x121/0x260 [ 1622.968662] ? rwlock_bug.part.0+0x90/0x90 [ 1622.969150] __io_uring_add_tctx_node+0x2c6/0x520 [ 1622.969726] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1622.970343] ? alloc_fd+0x2e7/0x670 [ 1622.970766] io_uring_setup+0x1fbb/0x2980 [ 1622.971248] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1622.971882] ? wait_for_completion_io+0x270/0x270 [ 1622.972444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1622.973040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1622.973632] do_syscall_64+0x33/0x40 [ 1622.974059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1622.974654] RIP: 0033:0x7eff19607b19 [ 1622.975097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.977207] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1622.978078] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1622.978890] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1622.979717] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1622.980529] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1622.981343] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1622.984784] FAULT_INJECTION: forcing a failure. [ 1622.984784] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.986151] CPU: 0 PID: 10097 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1622.986951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.987898] Call Trace: [ 1622.988194] dump_stack+0x107/0x167 [ 1622.988606] should_fail.cold+0x5/0xa [ 1622.989040] ? __alloc_file+0x21/0x320 [ 1622.989489] should_failslab+0x5/0x20 [ 1622.989928] kmem_cache_alloc+0x5b/0x310 [ 1622.990391] __alloc_file+0x21/0x320 [ 1622.990818] alloc_empty_file+0x6d/0x170 [ 1622.991285] path_openat+0xe6/0x2770 [ 1622.991719] ? __lock_acquire+0x1657/0x5b00 [ 1622.992230] ? path_lookupat+0x860/0x860 [ 1622.992694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1622.993292] ? lock_acquire+0x197/0x470 [ 1622.993748] ? find_held_lock+0x2c/0x110 [ 1622.994232] do_filp_open+0x190/0x3e0 [ 1622.994669] ? may_open_dev+0xf0/0xf0 [ 1622.995108] ? alloc_fd+0x2e7/0x670 [ 1622.995539] ? lock_downgrade+0x6d0/0x6d0 [ 1622.996014] ? do_raw_spin_lock+0x121/0x260 [ 1622.996524] ? rwlock_bug.part.0+0x90/0x90 [ 1622.997011] ? _raw_spin_unlock+0x1a/0x30 [ 1622.997481] ? alloc_fd+0x2e7/0x670 [ 1622.997900] do_sys_openat2+0x171/0x4d0 [ 1622.998373] ? build_open_flags+0x6f0/0x6f0 [ 1622.998877] ? rcu_read_lock_any_held+0x75/0xa0 [ 1622.999416] __x64_sys_openat+0x13f/0x1f0 [ 1622.999889] ? __ia32_sys_open+0x1c0/0x1c0 [ 1623.000377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.000976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1623.001564] do_syscall_64+0x33/0x40 [ 1623.001987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.002578] RIP: 0033:0x7f4b89d2fa04 [ 1623.003004] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1623.005120] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1623.005993] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1623.006809] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1623.007634] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1623.008453] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1623.009268] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1623.015114] FAULT_INJECTION: forcing a failure. [ 1623.015114] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.017572] CPU: 1 PID: 10090 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1623.018989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.020708] Call Trace: [ 1623.021250] dump_stack+0x107/0x167 [ 1623.022012] should_fail.cold+0x5/0xa [ 1623.022786] ? __kernfs_new_node+0xd4/0x860 [ 1623.023695] should_failslab+0x5/0x20 [ 1623.024488] kmem_cache_alloc+0x5b/0x310 [ 1623.025322] __kernfs_new_node+0xd4/0x860 [ 1623.026173] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1623.027143] ? kernfs_add_one+0x36e/0x4d0 [ 1623.028010] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1623.029022] ? wait_for_completion_io+0x270/0x270 [ 1623.030017] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1623.031109] kernfs_new_node+0x18d/0x250 [ 1623.031942] __kernfs_create_file+0x51/0x350 [ 1623.032858] sysfs_add_file_mode_ns+0x221/0x560 [ 1623.033810] internal_create_group+0x324/0xb30 [ 1623.034749] ? sysfs_remove_group+0x170/0x170 [ 1623.035700] ? lockdep_init_map_type+0x2c7/0x780 [ 1623.036679] ? blk_queue_flag_set+0x22/0x30 [ 1623.037557] ? __loop_update_dio+0x2d2/0x690 [ 1623.038479] loop_configure+0x953/0x1410 [ 1623.039314] lo_ioctl+0xa57/0x16b0 [ 1623.040058] ? avc_has_extended_perms+0x7f1/0xf40 [ 1623.041054] ? loop_set_status_old+0x250/0x250 01:12:46 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 01:12:46 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 23) [ 1623.041984] ? avc_ss_reset+0x180/0x180 [ 1623.043179] ? find_held_lock+0x2c/0x110 [ 1623.044042] ? __lock_acquire+0xbb1/0x5b00 [ 1623.044964] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1623.046040] ? generic_block_fiemap+0x60/0x60 [ 1623.046950] ? lock_downgrade+0x6d0/0x6d0 01:12:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x107) umount2(&(0x7f0000000140)='./file0\x00', 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x91, &(0x7f0000000240)="714144da59742c5f5250692b5c3d13040db34c639a848426aa9502d3f68840b50a5f48191bf0b756bad936ac4ed3d32cc78fc6202eef9f2678b837a48c07f12bf4cbe5195077c7416a4b9bb3015a7e9071354117313fa60b73649755d1381caf9c4b0b9ada354a13dc4ed2d2bd62e846d5a33200d02b988b623b9d4ad79b6be160aafebfc90fa5c69fece3161218d60f83", 0x0, 0x0, &(0x7f0000000300)}) r3 = io_uring_setup(0x4e26, &(0x7f00000003c0)={0x0, 0x4c3b, 0x8, 0x1, 0x355, 0x0, r0}) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) setpgid(0x0, r2) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x40, 0x1, 0x64, 0x0, 0xfff, 0x40901, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000080), 0x6}, 0x20c0, 0x42b, 0x5, 0x6, 0x8, 0x7, 0x8727, 0x0, 0x3, 0x0, 0x6}, r2, 0x7, 0xffffffffffffffff, 0x2) [ 1623.047815] ? build_open_flags+0x6f0/0x6f0 [ 1623.048808] ? find_held_lock+0x2c/0x110 [ 1623.049658] ? loop_set_status_old+0x250/0x250 01:12:46 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 30) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1623.050601] blkdev_ioctl+0x291/0x710 [ 1623.051490] ? blkdev_common_ioctl+0x1930/0x1930 [ 1623.052464] ? selinux_file_ioctl+0xb6/0x270 [ 1623.053363] block_ioctl+0xf9/0x140 [ 1623.054102] ? blkdev_read_iter+0x1c0/0x1c0 [ 1623.054996] __x64_sys_ioctl+0x19a/0x210 [ 1623.055844] do_syscall_64+0x33/0x40 [ 1623.056602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.057658] RIP: 0033:0x7fae9488f8d7 [ 1623.058422] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.062187] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1623.063766] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1623.065213] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1623.066666] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1623.068148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1623.069600] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:12:46 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 24) 01:12:47 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1623.109917] FAT-fs (loop5): bogus number of reserved sectors [ 1623.110723] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1623.110807] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1623.113452] loop6: detected capacity change from 0 to 131072 [ 1623.115634] loop4: detected capacity change from 0 to 262144 [ 1623.116915] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1623.118824] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1623.120702] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1623.145130] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1623.155292] FAULT_INJECTION: forcing a failure. [ 1623.155292] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.156208] FAT-fs (loop6): bogus number of reserved sectors [ 1623.156715] CPU: 0 PID: 10110 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1623.157829] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1623.158570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.158574] Call Trace: [ 1623.158593] dump_stack+0x107/0x167 [ 1623.158610] should_fail.cold+0x5/0xa [ 1623.161867] ? create_object.isra.0+0x3a/0xa20 [ 1623.162394] should_failslab+0x5/0x20 [ 1623.162839] kmem_cache_alloc+0x5b/0x310 [ 1623.163311] create_object.isra.0+0x3a/0xa20 [ 1623.163836] kmemleak_alloc_percpu+0xa0/0x100 [ 1623.164348] pcpu_alloc+0x4e2/0x1240 [ 1623.164778] __percpu_counter_init+0x10d/0x2d0 [ 1623.165300] io_uring_alloc_task_context+0xcc/0x6a0 [ 1623.165871] ? io_import_iovec+0x1120/0x1120 [ 1623.166376] ? lock_downgrade+0x6d0/0x6d0 [ 1623.166851] ? do_raw_spin_lock+0x121/0x260 [ 1623.167347] ? rwlock_bug.part.0+0x90/0x90 [ 1623.167838] __io_uring_add_tctx_node+0x2c6/0x520 [ 1623.168387] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1623.168989] ? alloc_fd+0x2e7/0x670 [ 1623.169414] io_uring_setup+0x1fbb/0x2980 [ 1623.169639] FAULT_INJECTION: forcing a failure. [ 1623.169639] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.169894] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1623.172704] ? wait_for_completion_io+0x270/0x270 [ 1623.173267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.173864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1623.174450] do_syscall_64+0x33/0x40 [ 1623.174873] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.175464] RIP: 0033:0x7eff19607b19 [ 1623.175890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.177978] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1623.178843] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1623.179662] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1623.180469] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1623.181283] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1623.182093] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1623.182927] CPU: 1 PID: 10113 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1623.184359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.185713] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1623.186047] Call Trace: [ 1623.186073] dump_stack+0x107/0x167 [ 1623.186093] should_fail.cold+0x5/0xa [ 1623.189199] ? create_object.isra.0+0x3a/0xa20 [ 1623.190218] should_failslab+0x5/0x20 [ 1623.190988] kmem_cache_alloc+0x5b/0x310 [ 1623.191827] create_object.isra.0+0x3a/0xa20 [ 1623.192712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1623.193750] kmem_cache_alloc+0x159/0x310 [ 1623.194599] __alloc_file+0x21/0x320 [ 1623.195374] alloc_empty_file+0x6d/0x170 [ 1623.196202] path_openat+0xe6/0x2770 [ 1623.196952] ? __lock_acquire+0x1657/0x5b00 [ 1623.197840] ? path_lookupat+0x860/0x860 [ 1623.198674] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1623.199744] ? lock_acquire+0x197/0x470 [ 1623.200551] ? find_held_lock+0x2c/0x110 01:12:47 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 34) [ 1623.201385] do_filp_open+0x190/0x3e0 [ 1623.202235] ? may_open_dev+0xf0/0xf0 [ 1623.203040] ? alloc_fd+0x2e7/0x670 [ 1623.203801] ? lock_downgrade+0x6d0/0x6d0 [ 1623.204697] ? do_raw_spin_lock+0x121/0x260 [ 1623.205575] ? rwlock_bug.part.0+0x90/0x90 [ 1623.206452] ? _raw_spin_unlock+0x1a/0x30 [ 1623.207299] ? alloc_fd+0x2e7/0x670 [ 1623.208065] do_sys_openat2+0x171/0x4d0 01:12:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 12) [ 1623.208888] ? build_open_flags+0x6f0/0x6f0 [ 1623.209881] ? rcu_read_lock_any_held+0x75/0xa0 [ 1623.210941] __x64_sys_openat+0x13f/0x1f0 [ 1623.211880] ? __ia32_sys_open+0x1c0/0x1c0 [ 1623.212831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.214005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1623.215150] do_syscall_64+0x33/0x40 [ 1623.215985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.217130] RIP: 0033:0x7f4b89d2fa04 [ 1623.217941] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1623.222015] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1623.223736] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1623.225348] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1623.226939] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1623.228550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1623.230146] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1623.248889] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 01:12:47 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1623.266486] EXT4-fs (loop3): get root inode failed [ 1623.267630] EXT4-fs (loop3): mount failed [ 1623.288852] FAULT_INJECTION: forcing a failure. [ 1623.288852] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.290206] CPU: 0 PID: 10122 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1623.291004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.291968] Call Trace: [ 1623.292278] dump_stack+0x107/0x167 [ 1623.292697] should_fail.cold+0x5/0xa [ 1623.293137] ? security_file_alloc+0x34/0x170 [ 1623.293658] should_failslab+0x5/0x20 [ 1623.294101] kmem_cache_alloc+0x5b/0x310 [ 1623.294564] security_file_alloc+0x34/0x170 [ 1623.295057] __alloc_file+0xb7/0x320 [ 1623.295499] alloc_empty_file+0x6d/0x170 [ 1623.295963] alloc_file+0x5e/0x5a0 [ 1623.296369] alloc_file_pseudo+0x16a/0x250 [ 1623.296848] ? alloc_file+0x5a0/0x5a0 [ 1623.297285] ? shmem_get_inode+0x55c/0xbc0 [ 1623.297770] __shmem_file_setup+0x144/0x320 [ 1623.298263] ? _copy_from_user+0xfb/0x1b0 [ 1623.298739] __do_sys_memfd_create+0x275/0x450 [ 1623.299259] ? memfd_file_seals_ptr+0x170/0x170 [ 1623.299808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.300408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1623.300987] do_syscall_64+0x33/0x40 [ 1623.301412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.302001] RIP: 0033:0x7fe2f6eaab19 [ 1623.302426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.304535] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1623.305401] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1623.306209] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1623.307017] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1623.307835] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1623.308647] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1623.348512] FAULT_INJECTION: forcing a failure. [ 1623.348512] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.352021] CPU: 1 PID: 10123 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1623.353484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.355186] Call Trace: [ 1623.355743] dump_stack+0x107/0x167 [ 1623.356551] should_fail.cold+0x5/0xa [ 1623.357397] ? create_object.isra.0+0x3a/0xa20 [ 1623.358398] should_failslab+0x5/0x20 [ 1623.359241] kmem_cache_alloc+0x5b/0x310 [ 1623.360136] create_object.isra.0+0x3a/0xa20 [ 1623.361115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1623.362258] kmem_cache_alloc+0x159/0x310 [ 1623.363164] __kernfs_new_node+0xd4/0x860 [ 1623.364114] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1623.365146] ? kernfs_add_one+0x36e/0x4d0 [ 1623.366056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1623.367125] ? wait_for_completion_io+0x270/0x270 [ 1623.368230] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1623.369405] kernfs_new_node+0x18d/0x250 [ 1623.370322] __kernfs_create_file+0x51/0x350 [ 1623.371298] sysfs_add_file_mode_ns+0x221/0x560 [ 1623.372334] internal_create_group+0x324/0xb30 [ 1623.373352] ? sysfs_remove_group+0x170/0x170 [ 1623.374332] ? lockdep_init_map_type+0x2c7/0x780 [ 1623.375390] ? blk_queue_flag_set+0x22/0x30 [ 1623.376351] ? __loop_update_dio+0x2d2/0x690 [ 1623.377344] loop_configure+0x953/0x1410 [ 1623.378265] lo_ioctl+0xa57/0x16b0 [ 1623.379075] ? avc_has_extended_perms+0x7f1/0xf40 [ 1623.380185] ? loop_set_status_old+0x250/0x250 [ 1623.381212] ? avc_ss_reset+0x180/0x180 [ 1623.382089] ? find_held_lock+0x2c/0x110 [ 1623.382988] ? __lock_acquire+0xbb1/0x5b00 [ 1623.383978] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1623.385119] ? generic_block_fiemap+0x60/0x60 [ 1623.386111] ? lock_downgrade+0x6d0/0x6d0 [ 1623.387004] ? build_open_flags+0x6f0/0x6f0 [ 1623.387977] ? find_held_lock+0x2c/0x110 [ 1623.388883] ? loop_set_status_old+0x250/0x250 [ 1623.389888] blkdev_ioctl+0x291/0x710 [ 1623.390721] ? blkdev_common_ioctl+0x1930/0x1930 [ 1623.391785] ? selinux_file_ioctl+0xb6/0x270 [ 1623.392741] block_ioctl+0xf9/0x140 [ 1623.393537] ? blkdev_read_iter+0x1c0/0x1c0 [ 1623.394488] __x64_sys_ioctl+0x19a/0x210 [ 1623.395400] do_syscall_64+0x33/0x40 [ 1623.396215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.397326] RIP: 0033:0x7fae9488f8d7 [ 1623.398145] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.402178] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1623.403897] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1623.405502] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1623.407087] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1623.408681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1623.410302] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1623.420029] loop7: detected capacity change from 0 to 131072 [ 1623.426823] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1623.434968] FAT-fs (loop5): bogus number of reserved sectors [ 1623.436548] FAT-fs (loop5): Can't find a valid FAT filesystem 01:13:02 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 35) 01:13:02 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 25) 01:13:02 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 01:13:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x40) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x44010) truncate(&(0x7f0000000480)='./file0\x00', 0xffffffff) readlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/133, 0x85) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x101) r1 = socket$packet(0x11, 0x2, 0x300) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r2, 0xee01) readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/42, 0x2a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x421b, 0x4) 01:13:02 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 31) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:13:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 13) 01:13:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40007, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:13:02 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1638.468704] FAULT_INJECTION: forcing a failure. [ 1638.468704] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.471686] CPU: 1 PID: 10145 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1638.473507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.474047] FAULT_INJECTION: forcing a failure. [ 1638.474047] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.475616] Call Trace: [ 1638.475645] dump_stack+0x107/0x167 [ 1638.475671] should_fail.cold+0x5/0xa [ 1638.480516] ? create_object.isra.0+0x3a/0xa20 [ 1638.481708] should_failslab+0x5/0x20 [ 1638.482671] kmem_cache_alloc+0x5b/0x310 [ 1638.483702] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1638.485126] create_object.isra.0+0x3a/0xa20 [ 1638.486305] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1638.487823] kmem_cache_alloc+0x159/0x310 [ 1638.488937] security_file_alloc+0x34/0x170 [ 1638.489959] __alloc_file+0xb7/0x320 [ 1638.490915] alloc_empty_file+0x6d/0x170 [ 1638.491944] alloc_file+0x5e/0x5a0 [ 1638.492796] alloc_file_pseudo+0x16a/0x250 [ 1638.493821] ? alloc_file+0x5a0/0x5a0 [ 1638.494811] ? shmem_get_inode+0x55c/0xbc0 [ 1638.495791] __shmem_file_setup+0x144/0x320 [ 1638.496754] ? _copy_from_user+0xfb/0x1b0 [ 1638.497660] __do_sys_memfd_create+0x275/0x450 [ 1638.498635] ? memfd_file_seals_ptr+0x170/0x170 [ 1638.499657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1638.500812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1638.501942] do_syscall_64+0x33/0x40 [ 1638.502757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1638.503884] RIP: 0033:0x7fe2f6eaab19 [ 1638.504704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.508744] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1638.510408] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 00007fe2f6eaab19 [ 1638.512007] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007fe2f6f040fb [ 1638.513600] RBP: 0000000000000003 R08: 0000000000002100 R09: ffffffffffffffff [ 1638.515167] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1638.516751] R13: 0000000020000040 R14: 0000000000040004 R15: 00000000200004c0 [ 1638.518354] CPU: 0 PID: 10148 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1638.520221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.522363] Call Trace: [ 1638.523058] dump_stack+0x107/0x167 [ 1638.523530] loop3: detected capacity change from 0 to 262144 [ 1638.524015] should_fail.cold+0x5/0xa [ 1638.524046] ? security_file_alloc+0x34/0x170 [ 1638.527406] should_failslab+0x5/0x20 [ 1638.528415] kmem_cache_alloc+0x5b/0x310 [ 1638.529475] security_file_alloc+0x34/0x170 [ 1638.530595] __alloc_file+0xb7/0x320 [ 1638.531561] alloc_empty_file+0x6d/0x170 [ 1638.532632] path_openat+0xe6/0x2770 [ 1638.533599] ? __lock_acquire+0x1657/0x5b00 [ 1638.534734] ? path_lookupat+0x860/0x860 [ 1638.535792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1638.537154] ? lock_acquire+0x197/0x470 [ 1638.538239] ? find_held_lock+0x2c/0x110 [ 1638.539304] do_filp_open+0x190/0x3e0 [ 1638.540284] ? may_open_dev+0xf0/0xf0 [ 1638.541276] ? alloc_fd+0x2e7/0x670 [ 1638.542197] ? lock_downgrade+0x6d0/0x6d0 [ 1638.543259] ? do_raw_spin_lock+0x121/0x260 [ 1638.544354] ? rwlock_bug.part.0+0x90/0x90 [ 1638.545245] ? _raw_spin_unlock+0x1a/0x30 [ 1638.546107] ? alloc_fd+0x2e7/0x670 [ 1638.546880] do_sys_openat2+0x171/0x4d0 [ 1638.547701] ? build_open_flags+0x6f0/0x6f0 [ 1638.548626] ? rcu_read_lock_any_held+0x75/0xa0 [ 1638.549601] __x64_sys_openat+0x13f/0x1f0 [ 1638.550467] ? __ia32_sys_open+0x1c0/0x1c0 [ 1638.551355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1638.552456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1638.553546] do_syscall_64+0x33/0x40 [ 1638.554324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1638.555398] RIP: 0033:0x7f4b89d2fa04 [ 1638.555703] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1638.556189] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1638.556199] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1638.556228] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1638.564665] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1638.566146] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1638.567637] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1638.569127] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 01:13:02 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x80}], 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES16=r0]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1638.581457] loop4: detected capacity change from 0 to 262144 [ 1638.581679] FAULT_INJECTION: forcing a failure. [ 1638.581679] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.583858] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1638.585680] CPU: 1 PID: 10147 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1638.587375] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1638.588834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.588841] Call Trace: [ 1638.588871] dump_stack+0x107/0x167 [ 1638.590716] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1638.592603] should_fail.cold+0x5/0xa [ 1638.592638] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1638.598138] should_failslab+0x5/0x20 [ 1638.598959] kmem_cache_alloc_trace+0x55/0x320 [ 1638.599966] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1638.601051] ? io_import_iovec+0x1120/0x1120 [ 1638.601990] ? lock_downgrade+0x6d0/0x6d0 [ 1638.602870] ? do_raw_spin_lock+0x121/0x260 [ 1638.603785] ? rwlock_bug.part.0+0x90/0x90 [ 1638.604714] __io_uring_add_tctx_node+0x2c6/0x520 [ 1638.605740] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1638.606851] ? alloc_fd+0x2e7/0x670 [ 1638.607644] io_uring_setup+0x1fbb/0x2980 [ 1638.608556] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1638.609667] ? wait_for_completion_io+0x270/0x270 [ 1638.610715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1638.611830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1638.612934] do_syscall_64+0x33/0x40 [ 1638.613726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1638.614835] RIP: 0033:0x7eff19607b19 [ 1638.615633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.619560] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1638.621192] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1638.622712] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1638.624235] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1638.625762] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1638.627284] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:13:02 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, 0x0, 0x0) [ 1638.636139] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1638.642013] loop6: detected capacity change from 0 to 131072 [ 1638.648848] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1638.652651] FAT-fs (loop6): bogus number of reserved sectors [ 1638.653947] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1638.670257] EXT4-fs (loop3): get root inode failed [ 1638.671384] EXT4-fs (loop3): mount failed [ 1638.678925] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1638.692870] FAULT_INJECTION: forcing a failure. [ 1638.692870] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.695283] CPU: 0 PID: 10149 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1638.696744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.698482] Call Trace: [ 1638.699036] dump_stack+0x107/0x167 [ 1638.699798] should_fail.cold+0x5/0xa [ 1638.700621] ? __kernfs_new_node+0xd4/0x860 [ 1638.701529] should_failslab+0x5/0x20 [ 1638.702332] kmem_cache_alloc+0x5b/0x310 [ 1638.703202] __kernfs_new_node+0xd4/0x860 [ 1638.704090] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1638.705089] ? kernfs_add_one+0x36e/0x4d0 [ 1638.705966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1638.706979] ? wait_for_completion_io+0x270/0x270 [ 1638.708010] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1638.709110] kernfs_new_node+0x18d/0x250 [ 1638.709965] __kernfs_create_file+0x51/0x350 [ 1638.710900] sysfs_add_file_mode_ns+0x221/0x560 [ 1638.711901] internal_create_group+0x324/0xb30 [ 1638.712864] ? sysfs_remove_group+0x170/0x170 [ 1638.713813] ? lockdep_init_map_type+0x2c7/0x780 [ 1638.714812] ? blk_queue_flag_set+0x22/0x30 [ 1638.715719] ? __loop_update_dio+0x2d2/0x690 [ 1638.716650] loop_configure+0x953/0x1410 [ 1638.717515] lo_ioctl+0xa57/0x16b0 [ 1638.718275] ? avc_has_extended_perms+0x7f1/0xf40 [ 1638.719291] ? loop_set_status_old+0x250/0x250 [ 1638.720266] ? avc_ss_reset+0x180/0x180 [ 1638.721098] ? find_held_lock+0x2c/0x110 [ 1638.721966] ? __lock_acquire+0xbb1/0x5b00 [ 1638.722911] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1638.724021] ? generic_block_fiemap+0x60/0x60 [ 1638.724962] ? lock_downgrade+0x6d0/0x6d0 [ 1638.725839] ? build_open_flags+0x6f0/0x6f0 [ 1638.726747] ? find_held_lock+0x2c/0x110 [ 1638.727599] ? loop_set_status_old+0x250/0x250 [ 1638.728569] blkdev_ioctl+0x291/0x710 [ 1638.729366] ? blkdev_common_ioctl+0x1930/0x1930 [ 1638.730371] ? selinux_file_ioctl+0xb6/0x270 [ 1638.731296] block_ioctl+0xf9/0x140 [ 1638.732076] ? blkdev_read_iter+0x1c0/0x1c0 [ 1638.732986] __x64_sys_ioctl+0x19a/0x210 [ 1638.733847] do_syscall_64+0x33/0x40 [ 1638.734628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1638.735702] RIP: 0033:0x7fae9488f8d7 [ 1638.736486] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.740597] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1638.742255] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1638.743804] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1638.745378] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1638.746769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1638.748179] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1638.768359] FAT-fs (loop5): bogus number of reserved sectors [ 1638.769735] FAT-fs (loop5): Can't find a valid FAT filesystem 01:13:17 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 26) 01:13:17 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 32) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:13:17 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 36) 01:13:17 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, 0x0, 0x0) 01:13:17 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000", 0x18}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:13:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 14) 01:13:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40008, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1653.640875] loop3: detected capacity change from 0 to 262144 [ 1653.649632] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1653.652285] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1653.654788] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1653.656271] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1653.657815] FAULT_INJECTION: forcing a failure. [ 1653.657815] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.660556] CPU: 1 PID: 10179 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1653.661890] FAULT_INJECTION: forcing a failure. [ 1653.661890] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.662066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.662076] Call Trace: [ 1653.666017] dump_stack+0x107/0x167 [ 1653.666805] should_fail.cold+0x5/0xa [ 1653.667633] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1653.668776] should_failslab+0x5/0x20 [ 1653.669602] kmem_cache_alloc_trace+0x55/0x320 [ 1653.670593] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1653.671689] ? io_import_iovec+0x1120/0x1120 [ 1653.672654] ? lock_downgrade+0x6d0/0x6d0 [ 1653.673558] ? do_raw_spin_lock+0x121/0x260 [ 1653.674488] ? rwlock_bug.part.0+0x90/0x90 [ 1653.675425] __io_uring_add_tctx_node+0x2c6/0x520 [ 1653.676474] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1653.677604] ? alloc_fd+0x2e7/0x670 [ 1653.678406] io_uring_setup+0x1fbb/0x2980 [ 1653.679316] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1653.680475] ? wait_for_completion_io+0x270/0x270 [ 1653.681553] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.682689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.683816] do_syscall_64+0x33/0x40 [ 1653.684625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.685733] RIP: 0033:0x7eff19607b19 [ 1653.686545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.690541] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1653.692185] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1653.693736] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1653.695290] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1653.696847] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1653.698407] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1653.699991] CPU: 0 PID: 10180 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1653.701012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.702223] Call Trace: [ 1653.702608] dump_stack+0x107/0x167 [ 1653.703134] should_fail.cold+0x5/0xa [ 1653.703683] ? create_object.isra.0+0x3a/0xa20 [ 1653.704347] should_failslab+0x5/0x20 [ 1653.704900] kmem_cache_alloc+0x5b/0x310 [ 1653.705494] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1653.706288] create_object.isra.0+0x3a/0xa20 [ 1653.706926] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1653.707668] kmem_cache_alloc+0x159/0x310 [ 1653.708285] security_file_alloc+0x34/0x170 [ 1653.708924] __alloc_file+0xb7/0x320 [ 1653.709461] alloc_empty_file+0x6d/0x170 [ 1653.710044] path_openat+0xe6/0x2770 [ 1653.710584] ? __lock_acquire+0x1657/0x5b00 [ 1653.711208] ? path_lookupat+0x860/0x860 [ 1653.711793] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1653.712550] ? lock_acquire+0x197/0x470 [ 1653.713124] ? find_held_lock+0x2c/0x110 [ 1653.713712] do_filp_open+0x190/0x3e0 [ 1653.714257] ? may_open_dev+0xf0/0xf0 [ 1653.714805] ? alloc_fd+0x2e7/0x670 [ 1653.715327] ? lock_downgrade+0x6d0/0x6d0 [ 1653.715919] ? do_raw_spin_lock+0x121/0x260 [ 1653.716542] ? rwlock_bug.part.0+0x90/0x90 [ 1653.717159] ? _raw_spin_unlock+0x1a/0x30 [ 1653.717753] ? alloc_fd+0x2e7/0x670 [ 1653.718287] do_sys_openat2+0x171/0x4d0 [ 1653.718866] ? build_open_flags+0x6f0/0x6f0 [ 1653.719511] ? rcu_read_lock_any_held+0x75/0xa0 [ 1653.720187] __x64_sys_openat+0x13f/0x1f0 [ 1653.720789] ? __ia32_sys_open+0x1c0/0x1c0 [ 1653.721412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.722171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.722910] do_syscall_64+0x33/0x40 [ 1653.723454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.724188] RIP: 0033:0x7f4b89d2fa04 01:13:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) recvfrom$unix(0xffffffffffffffff, &(0x7f00000001c0)=""/148, 0x94, 0x10020, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1653.724834] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1653.727518] RSP: 002b:00007f4b872f1ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1653.728617] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d2fa04 [ 1653.729648] RDX: 0000000000000002 RSI: 00007f4b872f2000 RDI: 00000000ffffff9c [ 1653.730676] RBP: 00007f4b872f2000 R08: 0000000000000000 R09: ffffffffffffffff [ 1653.731705] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1653.732739] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 01:13:17 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 33) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1653.746436] FAULT_INJECTION: forcing a failure. [ 1653.746436] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.748171] CPU: 0 PID: 10178 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1653.749207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.750408] Call Trace: [ 1653.750790] dump_stack+0x107/0x167 [ 1653.751318] should_fail.cold+0x5/0xa [ 1653.751877] ? create_object.isra.0+0x3a/0xa20 [ 1653.752547] should_failslab+0x5/0x20 [ 1653.753097] kmem_cache_alloc+0x5b/0x310 [ 1653.753689] create_object.isra.0+0x3a/0xa20 [ 1653.754330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1653.755071] kmem_cache_alloc+0x159/0x310 [ 1653.755696] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1653.756518] idr_get_free+0x4b5/0x8f0 [ 1653.757080] idr_alloc_u32+0x170/0x2d0 [ 1653.757657] ? __fprop_inc_percpu_max+0x130/0x130 [ 1653.758359] ? lock_acquire+0x197/0x470 [ 1653.758935] ? __kernfs_new_node+0xff/0x860 [ 1653.759570] idr_alloc_cyclic+0x102/0x230 [ 1653.760172] ? idr_alloc+0x130/0x130 [ 1653.760723] ? rwlock_bug.part.0+0x90/0x90 [ 1653.761347] __kernfs_new_node+0x117/0x860 [ 1653.761963] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1653.762645] ? kernfs_add_one+0x36e/0x4d0 [ 1653.763257] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1653.763954] ? wait_for_completion_io+0x270/0x270 [ 1653.764670] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1653.765429] kernfs_new_node+0x18d/0x250 [ 1653.766024] __kernfs_create_file+0x51/0x350 [ 1653.766671] sysfs_add_file_mode_ns+0x221/0x560 [ 1653.767350] internal_create_group+0x324/0xb30 [ 1653.768013] ? sysfs_remove_group+0x170/0x170 [ 1653.768675] ? lockdep_init_map_type+0x2c7/0x780 [ 1653.769362] ? blk_queue_flag_set+0x22/0x30 [ 1653.769985] ? __loop_update_dio+0x2d2/0x690 [ 1653.770631] loop_configure+0x953/0x1410 [ 1653.771228] lo_ioctl+0xa57/0x16b0 [ 1653.771743] ? avc_has_extended_perms+0x7f1/0xf40 [ 1653.772448] ? loop_set_status_old+0x250/0x250 [ 1653.773116] ? avc_ss_reset+0x180/0x180 [ 1653.773695] ? find_held_lock+0x2c/0x110 [ 1653.774291] ? __lock_acquire+0xbb1/0x5b00 [ 1653.774955] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1653.775709] ? generic_block_fiemap+0x60/0x60 [ 1653.776354] ? lock_downgrade+0x6d0/0x6d0 [ 1653.776956] ? build_open_flags+0x6f0/0x6f0 [ 1653.777575] ? find_held_lock+0x2c/0x110 [ 1653.778164] ? loop_set_status_old+0x250/0x250 [ 1653.778819] blkdev_ioctl+0x291/0x710 [ 1653.779372] ? blkdev_common_ioctl+0x1930/0x1930 [ 1653.780065] ? selinux_file_ioctl+0xb6/0x270 [ 1653.780710] block_ioctl+0xf9/0x140 [ 1653.781239] ? blkdev_read_iter+0x1c0/0x1c0 [ 1653.781860] __x64_sys_ioctl+0x19a/0x210 [ 1653.782449] do_syscall_64+0x33/0x40 [ 1653.782987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.783732] RIP: 0033:0x7fae9488f8d7 [ 1653.784266] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.786939] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.788034] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1653.789076] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1653.790104] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1653.791151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1653.792178] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1653.799352] FAULT_INJECTION: forcing a failure. [ 1653.799352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1653.801964] CPU: 1 PID: 10187 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1653.803470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.805293] Call Trace: [ 1653.805868] dump_stack+0x107/0x167 [ 1653.806664] should_fail.cold+0x5/0xa [ 1653.807506] __alloc_pages_nodemask+0x182/0x600 [ 1653.808543] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1653.809849] ? lock_downgrade+0x6d0/0x6d0 [ 1653.810750] ? lock_acquire+0x197/0x470 [ 1653.811637] alloc_pages_vma+0xbb/0x410 [ 1653.812513] shmem_alloc_page+0x10f/0x1e0 [ 1653.813410] ? shmem_init_inode+0x20/0x20 [ 1653.814335] ? percpu_counter_add_batch+0x8b/0x140 [ 1653.815404] ? __vm_enough_memory+0x184/0x360 [ 1653.816380] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1653.817568] ? shmem_unuse_inode+0xf60/0xf60 [ 1653.818523] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1653.819638] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1653.820758] shmem_write_begin+0xf7/0x1d0 [ 1653.821669] generic_perform_write+0x20a/0x4f0 [ 1653.822671] ? page_cache_prev_miss+0x310/0x310 [ 1653.823679] ? evict_inodes+0x470/0x470 [ 1653.824554] ? generic_write_checks+0x2ad/0x390 [ 1653.825571] __generic_file_write_iter+0x39d/0x5d0 [ 1653.826657] generic_file_write_iter+0xdb/0x230 [ 1653.827665] ? iov_iter_init+0x3c/0x130 [ 1653.828543] new_sync_write+0x42c/0x660 [ 1653.829413] ? new_sync_read+0x6f0/0x6f0 [ 1653.830297] ? __x64_sys_pwrite64+0x201/0x260 [ 1653.831271] ? lock_release+0x680/0x680 [ 1653.832136] ? selinux_file_permission+0x92/0x520 [ 1653.833188] ? security_file_permission+0xb1/0xe0 [ 1653.834242] vfs_write+0x7c0/0xb10 [ 1653.835020] __x64_sys_pwrite64+0x201/0x260 [ 1653.835969] ? ksys_pwrite64+0x1b0/0x1b0 [ 1653.836855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.837977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.839090] do_syscall_64+0x33/0x40 [ 1653.839893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.841004] RIP: 0033:0x7fe2f6e5dab7 [ 1653.841803] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1653.845783] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1653.847427] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1653.848980] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004 [ 1653.850521] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1653.852082] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1653.853635] R13: 0000000000000004 R14: 00000000200006c0 R15: 0000000000000000 [ 1653.862751] FAT-fs (loop5): bogus number of reserved sectors [ 1653.863640] FAT-fs (loop5): Can't find a valid FAT filesystem 01:13:17 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, 0x0, 0x0) [ 1653.871618] loop7: detected capacity change from 0 to 131072 [ 1653.874380] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1653.876636] EXT4-fs (loop3): get root inode failed 01:13:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0xffffffffffffffc1, 0x4040) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x891}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x273}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x80000001, 0xe9, 0x8}) [ 1653.877405] EXT4-fs (loop3): mount failed [ 1653.878439] loop6: detected capacity change from 0 to 131072 [ 1653.885012] loop4: detected capacity change from 0 to 262144 [ 1653.909215] FAT-fs (loop6): bogus number of FAT sectors [ 1653.910031] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1653.911956] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1653.916767] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1653.936766] FAULT_INJECTION: forcing a failure. [ 1653.936766] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.939384] CPU: 1 PID: 10198 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1653.940876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.942635] Call Trace: [ 1653.943204] dump_stack+0x107/0x167 [ 1653.943977] should_fail.cold+0x5/0xa [ 1653.944799] ? io_wq_create+0xeb/0xc00 [ 1653.945633] should_failslab+0x5/0x20 [ 1653.946442] __kmalloc+0x72/0x390 [ 1653.947188] io_wq_create+0xeb/0xc00 [ 1653.947987] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1653.949077] ? io_import_iovec+0x1120/0x1120 [ 1653.950016] ? io_apoll_task_func+0x2d0/0x2d0 [ 1653.950968] ? __io_req_find_next+0x300/0x300 [ 1653.951923] ? do_raw_spin_lock+0x121/0x260 [ 1653.952849] ? rwlock_bug.part.0+0x90/0x90 [ 1653.953751] __io_uring_add_tctx_node+0x2c6/0x520 [ 1653.954777] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1653.955891] ? alloc_fd+0x2e7/0x670 [ 1653.956691] io_uring_setup+0x1fbb/0x2980 [ 1653.957586] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1653.958661] ? wait_for_completion_io+0x270/0x270 [ 1653.959708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.960823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.961917] do_syscall_64+0x33/0x40 [ 1653.962713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.963798] RIP: 0033:0x7eff19607b19 [ 1653.964600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.968515] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1653.970134] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1653.971636] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1653.973161] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1653.974674] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1653.976179] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:13:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 15) 01:13:17 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000", 0x18}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:13:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4000f, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:13:17 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 37) [ 1654.047509] FAULT_INJECTION: forcing a failure. [ 1654.047509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.049651] CPU: 1 PID: 10205 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1654.050908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.052377] Call Trace: [ 1654.052881] dump_stack+0x107/0x167 [ 1654.053529] should_fail.cold+0x5/0xa [ 1654.054219] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1654.055197] ? shmem_write_begin+0xf7/0x1d0 [ 1654.055975] ? shmem_write_begin+0x100/0x1d0 [ 1654.056785] generic_perform_write+0x279/0x4f0 [ 1654.057615] ? page_cache_prev_miss+0x310/0x310 [ 1654.058443] ? evict_inodes+0x470/0x470 [ 1654.059159] ? generic_write_checks+0x2ad/0x390 [ 1654.059998] __generic_file_write_iter+0x39d/0x5d0 [ 1654.060860] generic_file_write_iter+0xdb/0x230 [ 1654.061696] ? iov_iter_init+0x3c/0x130 [ 1654.062403] new_sync_write+0x42c/0x660 [ 1654.063110] ? new_sync_read+0x6f0/0x6f0 [ 1654.063842] ? __x64_sys_pwrite64+0x201/0x260 [ 1654.064663] ? lock_release+0x680/0x680 [ 1654.065385] ? selinux_file_permission+0x92/0x520 [ 1654.066228] ? security_file_permission+0xb1/0xe0 [ 1654.067087] vfs_write+0x7c0/0xb10 [ 1654.067730] __x64_sys_pwrite64+0x201/0x260 [ 1654.068663] ? ksys_pwrite64+0x1b0/0x1b0 [ 1654.069488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.070530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.071620] do_syscall_64+0x33/0x40 [ 1654.072392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.073390] RIP: 0033:0x7fe2f6e5dab7 [ 1654.074072] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1654.077693] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1654.079158] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1654.080476] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004 [ 1654.081682] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1654.082815] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1654.083992] R13: 0000000000000004 R14: 00000000200006c0 R15: 0000000000000000 [ 1654.087976] FAULT_INJECTION: forcing a failure. [ 1654.087976] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.089756] CPU: 0 PID: 10208 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1654.090738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.091933] Call Trace: [ 1654.092312] dump_stack+0x107/0x167 [ 1654.092851] should_fail.cold+0x5/0xa [ 1654.093395] ? create_object.isra.0+0x3a/0xa20 [ 1654.094048] should_failslab+0x5/0x20 [ 1654.094595] kmem_cache_alloc+0x5b/0x310 [ 1654.095174] create_object.isra.0+0x3a/0xa20 [ 1654.095797] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1654.096528] kmem_cache_alloc+0x159/0x310 [ 1654.097126] __kernfs_new_node+0xd4/0x860 [ 1654.097724] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1654.098389] ? kernfs_add_one+0x36e/0x4d0 [ 1654.098987] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1654.099675] ? wait_for_completion_io+0x270/0x270 [ 1654.100360] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1654.101110] kernfs_new_node+0x18d/0x250 [ 1654.101694] __kernfs_create_file+0x51/0x350 [ 1654.102322] sysfs_add_file_mode_ns+0x221/0x560 [ 1654.102989] internal_create_group+0x324/0xb30 [ 1654.103635] ? sysfs_remove_group+0x170/0x170 [ 1654.104268] ? lockdep_init_map_type+0x2c7/0x780 [ 1654.104944] ? blk_queue_flag_set+0x22/0x30 [ 1654.105550] ? __loop_update_dio+0x2d2/0x690 [ 1654.106174] loop_configure+0x953/0x1410 [ 1654.106755] lo_ioctl+0xa57/0x16b0 [ 1654.107259] ? avc_has_extended_perms+0x7f1/0xf40 [ 1654.107939] ? loop_set_status_old+0x250/0x250 [ 1654.108596] ? avc_ss_reset+0x180/0x180 [ 1654.109156] ? find_held_lock+0x2c/0x110 [ 1654.109735] ? __lock_acquire+0xbb1/0x5b00 [ 1654.110366] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1654.111108] ? generic_block_fiemap+0x60/0x60 [ 1654.111736] ? lock_downgrade+0x6d0/0x6d0 [ 1654.112315] ? build_open_flags+0x6f0/0x6f0 [ 1654.112927] ? find_held_lock+0x2c/0x110 [ 1654.113500] ? loop_set_status_old+0x250/0x250 [ 1654.114135] blkdev_ioctl+0x291/0x710 [ 1654.114669] ? blkdev_common_ioctl+0x1930/0x1930 [ 1654.115337] ? selinux_file_ioctl+0xb6/0x270 [ 1654.115958] block_ioctl+0xf9/0x140 [ 1654.116472] ? blkdev_read_iter+0x1c0/0x1c0 [ 1654.117074] __x64_sys_ioctl+0x19a/0x210 [ 1654.117641] do_syscall_64+0x33/0x40 [ 1654.118161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.118875] RIP: 0033:0x7fae9488f8d7 [ 1654.119396] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.121992] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.123060] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1654.124061] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1654.125061] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1654.126065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1654.127061] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1654.141499] FAT-fs (loop5): bogus number of reserved sectors [ 1654.142322] loop6: detected capacity change from 0 to 131072 [ 1654.142554] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1654.145863] loop4: detected capacity change from 0 to 262144 [ 1654.150722] FAT-fs (loop6): bogus number of FAT sectors [ 1654.151500] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1654.156341] loop3: detected capacity change from 0 to 262144 [ 1654.168772] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1654.176178] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1654.177500] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1654.178844] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1654.180073] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1654.191391] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1654.193747] EXT4-fs (loop3): get root inode failed [ 1654.194505] EXT4-fs (loop3): mount failed [ 1654.202076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:13:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 16) 01:13:31 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000001000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x8001}, {&(0x7f0000000100)="ed410000070000a3f687135fe0f4655fe0f4655f00000800040004000455395c5cda", 0x22, 0x2100}], 0x30808, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0xc0000, 0x182) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x9, &(0x7f00000008c0)=[{&(0x7f00000001c0)="34538e693d6c62600a91a14d275dcd829449519e92b6b4b0de9cd9bda8feca9baab37cffbc3bc1da87b1641c6954417b59cece08e89cf56189f8a34ddc7574ac088a244fc4ea55f37a54eb6ab604be3398f125cbb97b83ff8c685e9605a3314ee7a6fde71368728ecf07349e13f8bdbc7ef721bfa260cd74ffce05fd3ac0833ff10a091a0f599ab69a1afdbacfd4f4f4ca0867b05dabf339339a7bf0db80559d9d298982c1013abd314226c73068c37a10581b3f0b3539752df5eb33039d1b9d2a4fd2180397616903a81073e41779b6b0a28fd12c517afd68c0c41b4d84c4", 0xdf, 0x9}, {&(0x7f00000002c0)="bfe5cb786659a4718c", 0x9, 0x78}, {&(0x7f0000000300)="5d4cd86f4c59bdf9d83edcb709cb1860c969d795bff505362cc61c53a5c676af2fbed84277e3038e831ae3c0c4bafc4acde3a19d5591f69a61221d77b862bdf73826b266194318d5f6eb3f1ac5bb770feaa37a3ccac65776215cda3e29dcb83593c613fa9d8fa83ed812e6d435729945c530af4da02e4c86e95c29005a4bac60cac30cb943408259369a1d9a5d24fdffe9cf03998f4464ecc80d1e048a5d43881cc7f7155560865679c8a94a8706e6b532d298a72ade41073460bad7b91534f5bf825ddf6b97d8b41d9902f19308368cc02830dcab98b00a38afda526e3e73f37478b7f196ab6d5862", 0xe9, 0x271f}, {&(0x7f0000000400)="7586488ca60629458ecf76276f65ef3b37f33c0982e342b7cad315a4c0dfe9af80b606aa86391f029fd38b6bdbd2de419a916f55db0cecc5613ac0f0612ba495a94d0a79fffb44a506d57ab8e11106958bc9d4dcac8603747c26db1ec3e8e89a50a9b8b840f632d82b197f57c88d64361662a68bc9b0c518aa8c3cc2c735133a57", 0x81, 0xfffffffffffffff7}, {&(0x7f00000004c0)="e92378e29eee574c6bcaf739655ce53c1b2634112fdf760d84bcdb2704a30537538586f88c1ce00f03f06c76ed5de2efdf51bddc0731ad1a13931f489e9463c60b05721d90689e4a5b2c28ae3248cd402ca404fdf42170d7285357ac3e58a551607c355bc6266a9d2fd8a11541cae9ab09f50e0e723387c68b9f3761ca1f5986e0156a110cf6fc02cb23", 0x8a}, {&(0x7f0000000580)="8da76a962d20a4fb6d4c619e224eed0449439aac12ed4d9c5331f958522299003d8e14eb45c25913471ff86bde1816dc3729b12647f11a6d847895445621aec6ba4630486aab06186d5ded752f09ea1510386a9b5734f40da290f61dae3ca4447948c0a022242b1c98d351e5046adf213c6b80a0788b1d5bf995576bea75338734f05c843c43e942052b1956dd1548f9135e5ac495f9b9265ab2c7671e68c1ae62702a72c9e6a7667912c9502b87bea715e484ef02ce3cc3526b312e73c9d55f51caa3ccdd09cc96e1", 0xc9}, {&(0x7f0000000740)="8c6fc709ad64b15a8189f2cad9b6ca4f6065055f5fb5af011ba1af33465447ee9111d5058788e74ce218000a14a75f6c95473da9b420da43d25846700743017bbe4d2ac77598b77db08be66490b5562391096bca89be86fda68be0d4aac1600df4b106cbdddc6dc66ca98ef446cbf54d53c92ed1a8bc7862fa2b7ebf8ae4f124ee2aab2084a29e4321ef41302df9dd00bad017544bd8eafbb729ca161f4d0f2fb0541a9ee2bdb59b7274e03daa66a5a0119e97253621d828d5f8919b10f04aae3f16016219c80dbd1fb2b21ccb593b2318d746425ee5a272de9aa9f93f4a8140062afd8ea8e0494df242c28e", 0xec, 0x82}, {&(0x7f0000000680)="593a4effda95e2a7fdb2f9d8336991242a74978e1b7be1bd6ebe3f209e9ea77fbbe96d36a98e95cf10", 0x29, 0xfffffffffffffffe}, {&(0x7f0000000840)="b8a06e918e0c16353398ac6e1807b2a29c7a6b2ab7946edab365dfb3d8a647fe7b076c808a8e3e476fa580bc424b384dc00bd55cca3e0ae116d259edcf913526ee5f9fbccdaabe56ca551c02233952a3680dfecd73ae4eccab0bb864d625ceab879c48b05a08aad1ad7ecb59c0d840", 0x6f, 0x9}], 0x4, &(0x7f00000009c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@size={'size', 0x3d, [0x6d]}}, {@size={'size', 0x3d, [0x33, 0x70, 0x65]}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit}]}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:13:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40010, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:13:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 34) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:13:31 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 27) 01:13:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 01:13:31 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000", 0x18}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:13:31 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 38) [ 1667.163647] FAULT_INJECTION: forcing a failure. [ 1667.163647] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.165036] CPU: 0 PID: 10227 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1667.165862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.166854] Call Trace: [ 1667.167171] dump_stack+0x107/0x167 [ 1667.167607] should_fail.cold+0x5/0xa [ 1667.168068] ? __kernfs_new_node+0xd4/0x860 [ 1667.168587] should_failslab+0x5/0x20 [ 1667.169051] kmem_cache_alloc+0x5b/0x310 [ 1667.169546] __kernfs_new_node+0xd4/0x860 [ 1667.170038] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1667.170594] ? kernfs_add_one+0x36e/0x4d0 [ 1667.171095] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1667.171667] ? wait_for_completion_io+0x270/0x270 [ 1667.172242] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1667.172879] kernfs_new_node+0x18d/0x250 [ 1667.173375] __kernfs_create_file+0x51/0x350 [ 1667.173901] sysfs_add_file_mode_ns+0x221/0x560 [ 1667.174460] internal_create_group+0x324/0xb30 [ 1667.174497] FAULT_INJECTION: forcing a failure. [ 1667.174497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1667.175004] ? sysfs_remove_group+0x170/0x170 [ 1667.175020] ? lockdep_init_map_type+0x2c7/0x780 [ 1667.175048] ? blk_queue_flag_set+0x22/0x30 [ 1667.179507] ? __loop_update_dio+0x2d2/0x690 [ 1667.180031] loop_configure+0x953/0x1410 [ 1667.180519] lo_ioctl+0xa57/0x16b0 [ 1667.180947] ? avc_has_extended_perms+0x7f1/0xf40 [ 1667.181526] ? loop_set_status_old+0x250/0x250 [ 1667.182067] ? avc_ss_reset+0x180/0x180 [ 1667.182547] ? find_held_lock+0x2c/0x110 [ 1667.183034] ? __lock_acquire+0xbb1/0x5b00 [ 1667.183586] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1667.184204] ? generic_block_fiemap+0x60/0x60 [ 1667.184734] ? lock_downgrade+0x6d0/0x6d0 [ 1667.185232] ? build_open_flags+0x6f0/0x6f0 [ 1667.185747] ? find_held_lock+0x2c/0x110 [ 1667.186231] ? loop_set_status_old+0x250/0x250 [ 1667.186775] blkdev_ioctl+0x291/0x710 [ 1667.187230] ? blkdev_common_ioctl+0x1930/0x1930 [ 1667.187791] ? selinux_file_ioctl+0xb6/0x270 [ 1667.188313] block_ioctl+0xf9/0x140 [ 1667.188742] ? blkdev_read_iter+0x1c0/0x1c0 [ 1667.189265] __x64_sys_ioctl+0x19a/0x210 [ 1667.189744] do_syscall_64+0x33/0x40 [ 1667.190181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.190783] RIP: 0033:0x7fae9488f8d7 [ 1667.191224] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.193398] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.194291] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1667.195131] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1667.195968] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1667.196802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1667.197648] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1667.198525] CPU: 1 PID: 10238 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1667.200294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.200909] FAULT_INJECTION: forcing a failure. [ 1667.200909] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.202193] Call Trace: [ 1667.202221] dump_stack+0x107/0x167 [ 1667.202243] should_fail.cold+0x5/0xa [ 1667.205524] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1667.206623] ? shmem_write_begin+0xf7/0x1d0 [ 1667.207509] ? shmem_write_begin+0x100/0x1d0 [ 1667.208407] generic_perform_write+0x279/0x4f0 [ 1667.209379] ? page_cache_prev_miss+0x310/0x310 [ 1667.210357] ? evict_inodes+0x470/0x470 [ 1667.211193] ? generic_write_checks+0x2ad/0x390 [ 1667.212170] __generic_file_write_iter+0x39d/0x5d0 [ 1667.213176] generic_file_write_iter+0xdb/0x230 [ 1667.214129] ? iov_iter_init+0x3c/0x130 [ 1667.214940] new_sync_write+0x42c/0x660 [ 1667.215748] ? new_sync_read+0x6f0/0x6f0 [ 1667.216574] ? __x64_sys_pwrite64+0x201/0x260 [ 1667.217527] ? lock_release+0x680/0x680 [ 1667.218366] ? selinux_file_permission+0x92/0x520 [ 1667.219381] ? security_file_permission+0xb1/0xe0 [ 1667.220363] vfs_write+0x7c0/0xb10 [ 1667.221116] __x64_sys_pwrite64+0x201/0x260 [ 1667.221999] ? ksys_pwrite64+0x1b0/0x1b0 [ 1667.222840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1667.223929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1667.225016] do_syscall_64+0x33/0x40 [ 1667.225782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.226856] RIP: 0033:0x7fe2f6e5dab7 [ 1667.227610] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1667.231452] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1667.233016] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1667.234468] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000004 [ 1667.235957] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1667.237456] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 1667.238956] R13: 0000000000000004 R14: 00000000200006d8 R15: 0000000000000001 [ 1667.240469] CPU: 0 PID: 10232 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1667.241470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.242611] Call Trace: [ 1667.243003] dump_stack+0x107/0x167 [ 1667.243518] should_fail.cold+0x5/0xa [ 1667.244053] ? io_wq_create+0xeb/0xc00 [ 1667.244592] should_failslab+0x5/0x20 [ 1667.245362] __kmalloc+0x72/0x390 [ 1667.246282] io_wq_create+0xeb/0xc00 [ 1667.247307] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1667.248654] ? io_import_iovec+0x1120/0x1120 [ 1667.249753] ? io_apoll_task_func+0x2d0/0x2d0 [ 1667.250753] ? __io_req_find_next+0x300/0x300 [ 1667.251755] ? do_raw_spin_lock+0x121/0x260 [ 1667.252731] ? rwlock_bug.part.0+0x90/0x90 [ 1667.253696] __io_uring_add_tctx_node+0x2c6/0x520 [ 1667.254708] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1667.255824] ? alloc_fd+0x2e7/0x670 [ 1667.256607] io_uring_setup+0x1fbb/0x2980 [ 1667.257500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1667.258604] ? wait_for_completion_io+0x270/0x270 [ 1667.259644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1667.260754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1667.261856] do_syscall_64+0x33/0x40 [ 1667.262640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.263712] RIP: 0033:0x7eff19607b19 [ 1667.264513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.266507] loop6: detected capacity change from 0 to 131072 [ 1667.268390] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1667.268411] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1667.268431] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1667.274200] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1667.275720] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1667.277237] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1667.277848] FAT-fs (loop6): bogus number of FAT sectors [ 1667.279963] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1667.288067] FAT-fs (loop5): bogus number of reserved sectors [ 1667.289474] FAT-fs (loop5): Can't find a valid FAT filesystem 01:13:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f00000001c0)="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", 0x160, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00082abd7000fbdbdf253600000008000300", @ANYRES32=r3, @ANYBLOB="d2881f73870dab3494b6005ed68047fed50e5d04c548bf62310f4ce30be945b39800ae0c1108e8426221a0a888f0f86d5f87c9346132fae73b83000000000000000c4af9752d566c235ad0d355eebab77b11de2f50fdadba016742ed2ebc6c3008102ff6b994c061b6e3583659dbc13fd894ef527b8dc7cc70b36ae9f508c12df0720708daa19afe6c515d1bef5c1aee27"], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1667.295987] loop3: detected capacity change from 0 to 262144 [ 1667.300050] FAULT_INJECTION: forcing a failure. [ 1667.300050] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.302391] CPU: 1 PID: 10235 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1667.303860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.305592] Call Trace: [ 1667.306131] dump_stack+0x107/0x167 [ 1667.306905] should_fail.cold+0x5/0xa [ 1667.307689] ? __kthread_create_on_node+0xd1/0x400 [ 1667.308714] should_failslab+0x5/0x20 [ 1667.309517] kmem_cache_alloc_trace+0x55/0x320 [ 1667.310461] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1667.311416] __kthread_create_on_node+0xd1/0x400 [ 1667.312369] ? __kthread_parkme+0x1d0/0x1d0 [ 1667.313296] ? _raw_spin_unlock+0x1a/0x30 [ 1667.314173] ? __mutex_lock+0x5af/0x10b0 [ 1667.315000] ? loop_configure+0xc8a/0x1410 [ 1667.315913] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1667.316890] kthread_create_on_node+0xbb/0x100 [ 1667.317831] ? __kthread_create_on_node+0x400/0x400 [ 1667.318876] ? lockdep_init_map_type+0x2c7/0x780 [ 1667.319841] ? lockdep_init_map_type+0x2c7/0x780 [ 1667.320818] loop_configure+0x3e7/0x1410 [ 1667.321702] lo_ioctl+0xa57/0x16b0 [ 1667.322467] ? avc_has_extended_perms+0x7f1/0xf40 [ 1667.323474] ? loop_set_status_old+0x250/0x250 [ 1667.324400] ? avc_ss_reset+0x180/0x180 [ 1667.325225] ? find_held_lock+0x2c/0x110 [ 1667.326085] ? __lock_acquire+0xbb1/0x5b00 [ 1667.327000] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1667.328075] ? generic_block_fiemap+0x60/0x60 [ 1667.329020] ? lock_downgrade+0x6d0/0x6d0 [ 1667.329874] ? build_open_flags+0x6f0/0x6f0 [ 1667.330777] ? loop_set_status_old+0x250/0x250 [ 1667.331716] blkdev_ioctl+0x291/0x710 [ 1667.332510] ? blkdev_common_ioctl+0x1930/0x1930 [ 1667.333484] ? selinux_file_ioctl+0xb6/0x270 [ 1667.334409] block_ioctl+0xf9/0x140 [ 1667.335156] ? blkdev_read_iter+0x1c0/0x1c0 [ 1667.336053] __x64_sys_ioctl+0x19a/0x210 [ 1667.336888] do_syscall_64+0x33/0x40 [ 1667.337643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.338676] RIP: 0033:0x7f4b89d7c8d7 01:13:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 1667.339433] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.343385] RSP: 002b:00007f4b872f1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.344974] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d7c8d7 [ 1667.346455] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 1667.347914] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffffffffffff [ 1667.349385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1667.350882] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1667.362039] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1667.364364] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1667.366362] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1667.368274] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:13:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 35) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1667.388649] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1667.391494] loop4: detected capacity change from 0 to 262144 [ 1667.391769] EXT4-fs (loop3): get root inode failed [ 1667.393840] EXT4-fs (loop3): mount failed [ 1667.419743] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1667.425337] loop3: detected capacity change from 0 to 262144 [ 1667.434277] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1667.442608] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1667.444382] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1667.444499] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1667.448041] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1667.473510] FAULT_INJECTION: forcing a failure. [ 1667.473510] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.476005] CPU: 1 PID: 10256 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1667.477415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.479093] Call Trace: [ 1667.479640] dump_stack+0x107/0x167 [ 1667.480392] should_fail.cold+0x5/0xa 01:13:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x100000040004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:13:31 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 39) [ 1667.481183] ? io_wq_create+0x6ef/0xc00 [ 1667.482167] should_failslab+0x5/0x20 [ 1667.482952] kmem_cache_alloc_node_trace+0x59/0x340 [ 1667.483971] io_wq_create+0x6ef/0xc00 [ 1667.484773] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1667.485839] ? io_import_iovec+0x1120/0x1120 [ 1667.486747] ? io_apoll_task_func+0x2d0/0x2d0 01:13:31 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1667.487661] ? __io_req_find_next+0x300/0x300 [ 1667.488719] ? do_raw_spin_lock+0x121/0x260 [ 1667.489635] ? rwlock_bug.part.0+0x90/0x90 [ 1667.490521] __io_uring_add_tctx_node+0x2c6/0x520 [ 1667.491527] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1667.492615] ? alloc_fd+0x2e7/0x670 [ 1667.493368] io_uring_setup+0x1fbb/0x2980 [ 1667.494225] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1667.495286] ? wait_for_completion_io+0x270/0x270 [ 1667.496304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1667.497381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1667.498426] do_syscall_64+0x33/0x40 [ 1667.499182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.500214] RIP: 0033:0x7eff19607b19 [ 1667.501007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.504781] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1667.506388] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1667.507862] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1667.509322] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1667.510775] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1667.512229] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1667.516808] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1667.520531] EXT4-fs (loop3): get root inode failed [ 1667.521607] EXT4-fs (loop3): mount failed 01:13:31 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 28) 01:13:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40012, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:13:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 17) [ 1667.588612] loop6: detected capacity change from 0 to 131072 [ 1667.594013] FAULT_INJECTION: forcing a failure. [ 1667.594013] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.596409] CPU: 0 PID: 10265 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1667.597878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.599613] Call Trace: [ 1667.600167] dump_stack+0x107/0x167 [ 1667.600940] should_fail.cold+0x5/0xa [ 1667.601737] ? create_object.isra.0+0x3a/0xa20 [ 1667.602697] should_failslab+0x5/0x20 [ 1667.603499] kmem_cache_alloc+0x5b/0x310 [ 1667.604349] create_object.isra.0+0x3a/0xa20 [ 1667.605278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1667.606353] kmem_cache_alloc_trace+0x151/0x320 [ 1667.607324] ? dev_uevent_filter+0xd0/0xd0 [ 1667.608205] kobject_uevent_env+0x22b/0xfd0 [ 1667.609111] ? get_disk_and_module+0xf0/0xf0 [ 1667.610037] ? blk_queue_flag_set+0x22/0x30 [ 1667.610940] ? __loop_update_dio+0x2d2/0x690 [ 1667.611863] loop_configure+0x1118/0x1410 [ 1667.612740] lo_ioctl+0xa57/0x16b0 [ 1667.613492] ? avc_has_extended_perms+0x7f1/0xf40 [ 1667.614508] ? loop_set_status_old+0x250/0x250 [ 1667.615477] ? avc_ss_reset+0x180/0x180 [ 1667.616313] ? find_held_lock+0x2c/0x110 [ 1667.617188] ? __lock_acquire+0xbb1/0x5b00 [ 1667.618121] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1667.619215] ? generic_block_fiemap+0x60/0x60 [ 1667.620146] ? lock_downgrade+0x6d0/0x6d0 [ 1667.621019] ? build_open_flags+0x6f0/0x6f0 [ 1667.621918] ? find_held_lock+0x2c/0x110 [ 1667.622775] ? loop_set_status_old+0x250/0x250 [ 1667.623729] blkdev_ioctl+0x291/0x710 [ 1667.624520] ? blkdev_common_ioctl+0x1930/0x1930 [ 1667.625515] ? selinux_file_ioctl+0xb6/0x270 [ 1667.626440] block_ioctl+0xf9/0x140 [ 1667.627203] ? blkdev_read_iter+0x1c0/0x1c0 [ 1667.628111] __x64_sys_ioctl+0x19a/0x210 [ 1667.628970] do_syscall_64+0x33/0x40 [ 1667.629751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.630819] RIP: 0033:0x7fae9488f8d7 [ 1667.631598] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.635432] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.637025] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1667.638507] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1667.639990] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1667.641490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1667.642971] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:13:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 36) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:13:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 1667.686930] FAT-fs (loop6): bogus number of FAT sectors [ 1667.688255] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1667.693296] FAULT_INJECTION: forcing a failure. [ 1667.693296] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.695669] CPU: 1 PID: 10269 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1667.697117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.698863] Call Trace: [ 1667.699420] dump_stack+0x107/0x167 [ 1667.700187] should_fail.cold+0x5/0xa [ 1667.701000] ? create_object.isra.0+0x3a/0xa20 [ 1667.701958] should_failslab+0x5/0x20 [ 1667.702761] kmem_cache_alloc+0x5b/0x310 [ 1667.703613] create_object.isra.0+0x3a/0xa20 [ 1667.704525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1667.705613] kmem_cache_alloc_trace+0x151/0x320 [ 1667.706593] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1667.707577] __kthread_create_on_node+0xd1/0x400 [ 1667.708575] ? __kthread_parkme+0x1d0/0x1d0 [ 1667.709518] ? __mutex_lock+0x4fe/0x10b0 [ 1667.710376] ? loop_configure+0xc8a/0x1410 [ 1667.711257] ? do_raw_spin_unlock+0x4f/0x220 [ 1667.712175] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1667.713175] kthread_create_on_node+0xbb/0x100 [ 1667.714113] ? __kthread_create_on_node+0x400/0x400 [ 1667.715164] ? lockdep_init_map_type+0x2c7/0x780 [ 1667.716163] ? lockdep_init_map_type+0x2c7/0x780 [ 1667.717169] loop_configure+0x3e7/0x1410 [ 1667.718045] lo_ioctl+0xa57/0x16b0 [ 1667.718802] ? avc_has_extended_perms+0x7f1/0xf40 [ 1667.719823] ? loop_set_status_old+0x250/0x250 [ 1667.720787] ? avc_ss_reset+0x180/0x180 [ 1667.721625] ? find_held_lock+0x2c/0x110 [ 1667.722462] ? __lock_acquire+0xbb1/0x5b00 [ 1667.723391] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1667.724480] ? generic_block_fiemap+0x60/0x60 [ 1667.725417] ? lock_downgrade+0x6d0/0x6d0 [ 1667.726287] ? build_open_flags+0x6f0/0x6f0 [ 1667.727163] ? loop_set_status_old+0x250/0x250 [ 1667.728110] blkdev_ioctl+0x291/0x710 [ 1667.728914] ? blkdev_common_ioctl+0x1930/0x1930 [ 1667.729899] ? selinux_file_ioctl+0xb6/0x270 [ 1667.730800] block_ioctl+0xf9/0x140 [ 1667.731543] ? blkdev_read_iter+0x1c0/0x1c0 [ 1667.732452] __x64_sys_ioctl+0x19a/0x210 [ 1667.733289] do_syscall_64+0x33/0x40 [ 1667.734070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.735151] RIP: 0033:0x7f4b89d7c8d7 [ 1667.736026] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.740063] RSP: 002b:00007f4b872f1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.741656] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d7c8d7 [ 1667.743432] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 1667.745245] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffffffffffff [ 1667.747033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1667.748517] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1667.750768] FAT-fs (loop5): bogus number of reserved sectors [ 1667.750801] FAULT_INJECTION: forcing a failure. [ 1667.750801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1667.752176] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1667.754557] CPU: 1 PID: 10276 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1667.757187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.758889] Call Trace: [ 1667.759431] dump_stack+0x107/0x167 [ 1667.760210] should_fail.cold+0x5/0xa [ 1667.761025] __alloc_pages_nodemask+0x182/0x600 [ 1667.761983] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1667.763232] ? lock_downgrade+0x6d0/0x6d0 [ 1667.764099] ? lock_acquire+0x197/0x470 [ 1667.764947] alloc_pages_vma+0xbb/0x410 [ 1667.765773] shmem_alloc_page+0x10f/0x1e0 [ 1667.766632] ? shmem_init_inode+0x20/0x20 [ 1667.767498] ? percpu_counter_add_batch+0x8b/0x140 [ 1667.768528] ? __vm_enough_memory+0x184/0x360 [ 1667.769449] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1667.770555] ? shmem_unuse_inode+0xf60/0xf60 [ 1667.771482] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1667.772547] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1667.773637] shmem_write_begin+0xf7/0x1d0 [ 1667.774489] generic_perform_write+0x20a/0x4f0 [ 1667.775463] ? page_cache_prev_miss+0x310/0x310 [ 1667.776440] ? evict_inodes+0x470/0x470 [ 1667.777282] ? generic_write_checks+0x2ad/0x390 [ 1667.778265] __generic_file_write_iter+0x39d/0x5d0 [ 1667.779297] generic_file_write_iter+0xdb/0x230 [ 1667.780236] ? iov_iter_init+0x3c/0x130 [ 1667.781059] new_sync_write+0x42c/0x660 [ 1667.781889] ? new_sync_read+0x6f0/0x6f0 [ 1667.782739] ? __x64_sys_pwrite64+0x201/0x260 [ 1667.783670] ? lock_release+0x680/0x680 [ 1667.784470] ? selinux_file_permission+0x92/0x520 [ 1667.785507] ? security_file_permission+0xb1/0xe0 [ 1667.786519] vfs_write+0x7c0/0xb10 [ 1667.787273] __x64_sys_pwrite64+0x201/0x260 [ 1667.788192] ? ksys_pwrite64+0x1b0/0x1b0 [ 1667.789263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1667.790555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1667.791789] do_syscall_64+0x33/0x40 [ 1667.792723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.794006] RIP: 0033:0x7fe2f6e5dab7 [ 1667.794986] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1667.799528] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1667.801445] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1667.803220] RDX: 000000000000001d RSI: 0000000020000100 RDI: 0000000000000004 [ 1667.805057] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1667.806848] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1667.808636] R13: 0000000000000004 R14: 00000000200006f0 R15: 0000000000000002 [ 1667.814969] FAULT_INJECTION: forcing a failure. [ 1667.814969] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.816630] loop7: detected capacity change from 0 to 131072 [ 1667.817895] CPU: 0 PID: 10275 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1667.820297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.822050] Call Trace: [ 1667.822617] dump_stack+0x107/0x167 [ 1667.823373] should_fail.cold+0x5/0xa [ 1667.824174] ? create_object.isra.0+0x3a/0xa20 [ 1667.825135] should_failslab+0x5/0x20 [ 1667.825929] kmem_cache_alloc+0x5b/0x310 [ 1667.826779] ? io_wq_create+0x114/0xc00 [ 1667.827612] create_object.isra.0+0x3a/0xa20 [ 1667.828529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1667.829598] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1667.830673] io_wq_create+0x6ef/0xc00 [ 1667.831479] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1667.832538] ? io_import_iovec+0x1120/0x1120 [ 1667.833478] ? io_apoll_task_func+0x2d0/0x2d0 [ 1667.834406] ? __io_req_find_next+0x300/0x300 [ 1667.835335] ? do_raw_spin_lock+0x121/0x260 [ 1667.836228] ? rwlock_bug.part.0+0x90/0x90 [ 1667.837127] __io_uring_add_tctx_node+0x2c6/0x520 [ 1667.838137] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1667.839241] ? alloc_fd+0x2e7/0x670 [ 1667.840010] io_uring_setup+0x1fbb/0x2980 [ 1667.840878] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1667.842023] ? wait_for_completion_io+0x270/0x270 [ 1667.843066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1667.844163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1667.845247] do_syscall_64+0x33/0x40 [ 1667.846026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.847092] RIP: 0033:0x7eff19607b19 [ 1667.847874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.851730] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1667.853334] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1667.854841] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1667.856337] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1667.857872] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1667.859371] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1667.886541] loop4: detected capacity change from 0 to 262144 [ 1667.921778] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1667.926283] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1667.926703] loop3: detected capacity change from 0 to 262144 [ 1667.946921] EXT4-fs error (device loop4): ext4_fill_super:4967: inode #2: comm syz-executor.4: iget: special inode unallocated [ 1667.950876] EXT4-fs (loop4): get root inode failed [ 1667.951997] EXT4-fs (loop4): mount failed [ 1667.966585] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1667.981135] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1667.983288] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1667.985178] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1668.013595] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1668.026850] EXT4-fs (loop3): get root inode failed [ 1668.028039] EXT4-fs (loop3): mount failed [ 1668.051602] loop3: detected capacity change from 0 to 262144 [ 1668.056449] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1668.058536] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1668.060426] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1668.062307] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1668.065094] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1668.068006] EXT4-fs (loop3): get root inode failed [ 1668.069162] EXT4-fs (loop3): mount failed [ 1684.262762] FAULT_INJECTION: forcing a failure. [ 1684.262762] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.265716] CPU: 0 PID: 10299 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 1684.267469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.269577] Call Trace: [ 1684.270256] dump_stack+0x107/0x167 [ 1684.271169] should_fail.cold+0x5/0xa [ 1684.272154] ? __kernfs_new_node+0xd4/0x860 [ 1684.273248] should_failslab+0x5/0x20 [ 1684.274230] kmem_cache_alloc+0x5b/0x310 [ 1684.275269] __kernfs_new_node+0xd4/0x860 [ 1684.276321] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1684.277541] ? lock_chain_count+0x20/0x20 [ 1684.278599] ? update_load_avg+0x162/0x1870 [ 1684.279684] ? find_held_lock+0x2c/0x110 [ 1684.280722] kernfs_new_node+0x18d/0x250 [ 1684.281777] kernfs_create_dir_ns+0x49/0x160 [ 1684.282890] internal_create_group+0x793/0xb30 [ 1684.284049] ? set_user_nice.part.0+0x2fd/0x760 [ 1684.285220] ? sysfs_remove_group+0x170/0x170 [ 1684.286377] ? lockdep_init_map_type+0x2c7/0x780 [ 1684.287579] ? blk_queue_flag_set+0x22/0x30 [ 1684.288674] ? __loop_update_dio+0x2d2/0x690 [ 1684.289799] loop_configure+0x953/0x1410 [ 1684.290847] lo_ioctl+0xa57/0x16b0 [ 1684.291744] ? avc_has_extended_perms+0x7f1/0xf40 [ 1684.292971] ? loop_set_status_old+0x250/0x250 [ 1684.294148] ? avc_ss_reset+0x180/0x180 [ 1684.295154] ? find_held_lock+0x2c/0x110 [ 1684.296185] ? __lock_acquire+0xbb1/0x5b00 [ 1684.297322] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1684.298880] ? generic_block_fiemap+0x60/0x60 [ 1684.300216] ? lock_downgrade+0x6d0/0x6d0 [ 1684.301261] ? build_open_flags+0x6f0/0x6f0 [ 1684.302411] ? loop_set_status_old+0x250/0x250 [ 1684.303581] blkdev_ioctl+0x291/0x710 [ 1684.304574] ? blkdev_common_ioctl+0x1930/0x1930 [ 1684.305820] ? selinux_file_ioctl+0xb6/0x270 [ 1684.306972] block_ioctl+0xf9/0x140 [ 1684.307912] ? blkdev_read_iter+0x1c0/0x1c0 01:13:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40014, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1684.309029] __x64_sys_ioctl+0x19a/0x210 [ 1684.310278] do_syscall_64+0x33/0x40 [ 1684.311253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.312583] RIP: 0033:0x7f4b89d7c8d7 [ 1684.313570] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.318352] RSP: 002b:00007f4b872f1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.320321] RAX: ffffffffffffffda RBX: 00007f4b89dc6970 RCX: 00007f4b89d7c8d7 [ 1684.322169] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 1684.323709] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffffffffffff [ 1684.325253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1684.326829] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 01:13:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000200)="2000000080000000060000006a00003a0eb787c4b23e31000100000001000000070000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000500000000000000c608b233ab04f429e82fe249", 0x68, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x1004001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000044) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:13:48 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 29) 01:13:48 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 40) 01:13:48 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 01:13:48 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:13:48 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 37) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:13:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 18) [ 1684.332471] FAULT_INJECTION: forcing a failure. [ 1684.332471] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.334854] CPU: 1 PID: 10308 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1684.336303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.338061] Call Trace: [ 1684.338627] dump_stack+0x107/0x167 [ 1684.339399] should_fail.cold+0x5/0xa [ 1684.340215] ? xas_alloc+0x336/0x440 [ 1684.341010] should_failslab+0x5/0x20 [ 1684.341834] kmem_cache_alloc+0x5b/0x310 [ 1684.342690] ? trace_hardirqs_on+0x5b/0x180 [ 1684.343596] xas_alloc+0x336/0x440 [ 1684.344344] xas_create+0x60f/0x10d0 [ 1684.345147] xas_create_range+0x189/0x620 [ 1684.346049] shmem_add_to_page_cache+0x760/0x1130 [ 1684.347086] ? shmem_getattr+0x180/0x180 [ 1684.347960] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1684.349097] ? shmem_unuse_inode+0xf60/0xf60 [ 1684.350036] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1684.351131] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1684.352210] shmem_write_begin+0xf7/0x1d0 [ 1684.353107] generic_perform_write+0x20a/0x4f0 [ 1684.354163] ? page_cache_prev_miss+0x310/0x310 [ 1684.355154] ? evict_inodes+0x470/0x470 [ 1684.356013] ? generic_write_checks+0x2ad/0x390 [ 1684.357007] __generic_file_write_iter+0x39d/0x5d0 [ 1684.358050] generic_file_write_iter+0xdb/0x230 [ 1684.359021] ? iov_iter_init+0x3c/0x130 [ 1684.359859] new_sync_write+0x42c/0x660 [ 1684.360702] ? new_sync_read+0x6f0/0x6f0 [ 1684.361568] ? __x64_sys_pwrite64+0x201/0x260 [ 1684.362516] ? lock_release+0x680/0x680 [ 1684.363357] ? selinux_file_permission+0x92/0x520 [ 1684.364378] ? security_file_permission+0xb1/0xe0 [ 1684.365406] vfs_write+0x7c0/0xb10 [ 1684.366186] __x64_sys_pwrite64+0x201/0x260 [ 1684.366767] loop7: detected capacity change from 0 to 131072 [ 1684.367095] ? ksys_pwrite64+0x1b0/0x1b0 [ 1684.369165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.370311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.371401] do_syscall_64+0x33/0x40 [ 1684.372174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.373244] RIP: 0033:0x7fe2f6e5dab7 [ 1684.374029] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1684.377872] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1684.379475] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1684.380962] RDX: 000000000000001d RSI: 0000000020000100 RDI: 0000000000000004 [ 1684.382450] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1684.383943] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1684.385433] R13: 0000000000000004 R14: 00000000200006f0 R15: 0000000000000002 [ 1684.395643] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1684.397145] FAULT_INJECTION: forcing a failure. [ 1684.397145] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.399913] CPU: 0 PID: 10316 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1684.401413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.403224] Call Trace: [ 1684.403801] dump_stack+0x107/0x167 [ 1684.404599] should_fail.cold+0x5/0xa [ 1684.405410] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1684.406507] should_failslab+0x5/0x20 [ 1684.407321] kmem_cache_alloc_trace+0x55/0x320 [ 1684.408317] __io_uring_add_tctx_node+0x15c/0x520 [ 1684.409345] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1684.410495] ? alloc_fd+0x2e7/0x670 [ 1684.411281] io_uring_setup+0x1fbb/0x2980 [ 1684.412192] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1684.413279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.414443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.415559] do_syscall_64+0x33/0x40 [ 1684.416386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.417492] RIP: 0033:0x7eff19607b19 [ 1684.418320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.422272] RSP: 002b:00007eff16b5c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1684.423967] RAX: ffffffffffffffda RBX: 00007eff1971b020 RCX: 00007eff19607b19 [ 1684.425572] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1684.427145] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1684.428727] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1684.430326] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1684.432399] FAULT_INJECTION: forcing a failure. [ 1684.432399] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.434907] CPU: 0 PID: 10310 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1684.436440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.438289] Call Trace: [ 1684.438884] dump_stack+0x107/0x167 [ 1684.439690] should_fail.cold+0x5/0xa [ 1684.440549] ? __kernfs_new_node+0xd4/0x860 [ 1684.441519] should_failslab+0x5/0x20 [ 1684.442367] kmem_cache_alloc+0x5b/0x310 [ 1684.443287] __kernfs_new_node+0xd4/0x860 [ 1684.444227] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1684.445276] ? kernfs_add_one+0x36e/0x4d0 [ 1684.446219] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1684.447294] ? wait_for_completion_io+0x270/0x270 [ 1684.448373] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1684.449550] kernfs_new_node+0x18d/0x250 [ 1684.450456] __kernfs_create_file+0x51/0x350 [ 1684.451438] sysfs_add_file_mode_ns+0x221/0x560 [ 1684.452471] internal_create_group+0x324/0xb30 [ 1684.453507] ? sysfs_remove_group+0x170/0x170 [ 1684.454508] ? lockdep_init_map_type+0x2c7/0x780 [ 1684.455562] ? blk_queue_flag_set+0x22/0x30 [ 1684.456519] ? __loop_update_dio+0x2d2/0x690 [ 1684.457516] loop_configure+0x953/0x1410 [ 1684.458434] lo_ioctl+0xa57/0x16b0 [ 1684.459215] ? avc_has_extended_perms+0x7f1/0xf40 [ 1684.460292] ? loop_set_status_old+0x250/0x250 [ 1684.461315] ? avc_ss_reset+0x180/0x180 [ 1684.462216] ? find_held_lock+0x2c/0x110 [ 1684.463131] ? __lock_acquire+0xbb1/0x5b00 [ 1684.464110] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1684.465273] ? generic_block_fiemap+0x60/0x60 01:13:48 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x20, &(0x7f0000000080)=ANY=[@ANYRES32=r2]) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1684.466305] ? lock_downgrade+0x6d0/0x6d0 [ 1684.467396] ? build_open_flags+0x6f0/0x6f0 [ 1684.468354] ? find_held_lock+0x2c/0x110 [ 1684.469263] ? loop_set_status_old+0x250/0x250 [ 1684.470288] blkdev_ioctl+0x291/0x710 [ 1684.471140] ? blkdev_common_ioctl+0x1930/0x1930 [ 1684.472198] ? selinux_file_ioctl+0xb6/0x270 [ 1684.473183] block_ioctl+0xf9/0x140 [ 1684.474005] ? blkdev_read_iter+0x1c0/0x1c0 [ 1684.474970] __x64_sys_ioctl+0x19a/0x210 [ 1684.475869] do_syscall_64+0x33/0x40 [ 1684.476702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.477855] RIP: 0033:0x7fae9488f8d7 [ 1684.478679] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.482780] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.484473] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1684.486077] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1684.487669] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1684.489254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1684.490829] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1684.503494] loop6: detected capacity change from 0 to 131072 [ 1684.517627] loop3: detected capacity change from 0 to 262144 [ 1684.541270] FAT-fs (loop6): bogus number of FAT sectors [ 1684.542493] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1684.543908] FAT-fs (loop5): bogus number of reserved sectors [ 1684.545203] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1684.547418] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1684.563412] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1684.565369] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1684.567282] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1684.579356] loop4: detected capacity change from 0 to 262144 01:13:48 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:13:48 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 01:13:48 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 30) [ 1684.632535] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 01:13:48 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 38) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1684.638992] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1684.642696] EXT4-fs (loop3): get root inode failed [ 1684.643897] EXT4-fs (loop3): mount failed [ 1684.672837] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1684.691538] loop6: detected capacity change from 0 to 131072 01:13:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 19) [ 1684.711022] loop3: detected capacity change from 0 to 262144 01:13:48 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 41) [ 1684.737321] FAT-fs (loop6): bogus number of FAT sectors [ 1684.738627] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1684.743316] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1684.766662] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1684.768755] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1684.770724] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1684.805669] FAULT_INJECTION: forcing a failure. [ 1684.805669] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.808480] CPU: 0 PID: 10344 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1684.809991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.811784] Call Trace: [ 1684.812357] dump_stack+0x107/0x167 [ 1684.813144] should_fail.cold+0x5/0xa [ 1684.813978] ? create_object.isra.0+0x3a/0xa20 [ 1684.814969] should_failslab+0x5/0x20 [ 1684.815791] kmem_cache_alloc+0x5b/0x310 [ 1684.816673] create_object.isra.0+0x3a/0xa20 [ 1684.817627] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1684.818727] kmem_cache_alloc_trace+0x151/0x320 [ 1684.819738] __io_uring_add_tctx_node+0x15c/0x520 [ 1684.820778] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1684.821913] ? alloc_fd+0x2e7/0x670 [ 1684.822709] io_uring_setup+0x1fbb/0x2980 [ 1684.823610] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1684.824708] ? wait_for_completion_io+0x270/0x270 [ 1684.825776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.826921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.828039] do_syscall_64+0x33/0x40 [ 1684.828841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.829957] RIP: 0033:0x7eff19607b19 [ 1684.830761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.834720] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1684.836354] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1684.837890] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1684.839423] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1684.840956] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1684.842519] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1684.845160] FAULT_INJECTION: forcing a failure. [ 1684.845160] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.847982] CPU: 0 PID: 10343 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1684.849484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.851274] Call Trace: [ 1684.851841] dump_stack+0x107/0x167 [ 1684.852631] should_fail.cold+0x5/0xa [ 1684.853455] ? __alloc_skb+0x6d/0x5b0 [ 1684.854284] should_failslab+0x5/0x20 [ 1684.855109] kmem_cache_alloc_node+0x55/0x330 [ 1684.856082] __alloc_skb+0x6d/0x5b0 [ 1684.856873] alloc_uevent_skb+0x7b/0x210 [ 1684.857765] kobject_uevent_env+0x99a/0xfd0 [ 1684.858696] ? blk_queue_flag_set+0x22/0x30 [ 1684.859619] ? __loop_update_dio+0x2d2/0x690 [ 1684.860568] loop_configure+0x1118/0x1410 [ 1684.861467] lo_ioctl+0xa57/0x16b0 [ 1684.862237] ? avc_has_extended_perms+0x7f1/0xf40 [ 1684.863274] ? loop_set_status_old+0x250/0x250 [ 1684.864253] ? avc_ss_reset+0x180/0x180 [ 1684.865108] ? find_held_lock+0x2c/0x110 [ 1684.865998] ? __lock_acquire+0xbb1/0x5b00 [ 1684.866950] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1684.868071] ? generic_block_fiemap+0x60/0x60 [ 1684.869030] ? lock_downgrade+0x6d0/0x6d0 [ 1684.869925] ? build_open_flags+0x6f0/0x6f0 [ 1684.870848] ? find_held_lock+0x2c/0x110 [ 1684.871724] ? loop_set_status_old+0x250/0x250 [ 1684.872736] blkdev_ioctl+0x291/0x710 [ 1684.873563] ? blkdev_common_ioctl+0x1930/0x1930 [ 1684.874584] ? selinux_file_ioctl+0xb6/0x270 [ 1684.875530] block_ioctl+0xf9/0x140 [ 1684.876306] ? blkdev_read_iter+0x1c0/0x1c0 [ 1684.877231] __x64_sys_ioctl+0x19a/0x210 [ 1684.878112] do_syscall_64+0x33/0x40 [ 1684.878911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.880009] RIP: 0033:0x7fae9488f8d7 [ 1684.880807] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.884776] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.886420] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1684.887949] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1684.889489] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1684.891023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1684.892553] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1684.907290] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1684.914802] FAULT_INJECTION: forcing a failure. [ 1684.914802] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.917172] CPU: 0 PID: 10349 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1684.918771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.920606] Call Trace: [ 1684.921176] dump_stack+0x107/0x167 [ 1684.921976] should_fail.cold+0x5/0xa [ 1684.922798] ? create_object.isra.0+0x3a/0xa20 [ 1684.923789] should_failslab+0x5/0x20 [ 1684.924615] kmem_cache_alloc+0x5b/0x310 [ 1684.925515] create_object.isra.0+0x3a/0xa20 [ 1684.926466] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1684.927566] kmem_cache_alloc+0x159/0x310 [ 1684.928457] ? trace_hardirqs_on+0x5b/0x180 [ 1684.929392] xas_alloc+0x336/0x440 [ 1684.930170] xas_create+0x60f/0x10d0 [ 1684.930993] xas_create_range+0x189/0x620 [ 1684.931903] shmem_add_to_page_cache+0x760/0x1130 [ 1684.932954] ? shmem_getattr+0x180/0x180 [ 1684.933862] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1684.935028] ? shmem_unuse_inode+0xf60/0xf60 [ 1684.935981] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1684.936886] FAT-fs (loop5): bogus number of reserved sectors [ 1684.937088] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1684.937117] shmem_write_begin+0xf7/0x1d0 [ 1684.937146] generic_perform_write+0x20a/0x4f0 [ 1684.938443] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1684.939490] ? page_cache_prev_miss+0x310/0x310 [ 1684.939509] ? evict_inodes+0x470/0x470 [ 1684.939531] ? generic_write_checks+0x2ad/0x390 [ 1684.943535] EXT4-fs (loop3): get root inode failed [ 1684.943604] __generic_file_write_iter+0x39d/0x5d0 [ 1684.944514] EXT4-fs (loop3): mount failed [ 1684.945446] generic_file_write_iter+0xdb/0x230 [ 1684.945461] ? iov_iter_init+0x3c/0x130 [ 1684.945495] new_sync_write+0x42c/0x660 [ 1684.951129] ? new_sync_read+0x6f0/0x6f0 [ 1684.952007] ? __x64_sys_pwrite64+0x201/0x260 [ 1684.952981] ? lock_release+0x680/0x680 [ 1684.953860] ? selinux_file_permission+0x92/0x520 [ 1684.954900] ? security_file_permission+0xb1/0xe0 [ 1684.955940] vfs_write+0x7c0/0xb10 [ 1684.956714] __x64_sys_pwrite64+0x201/0x260 [ 1684.957647] ? ksys_pwrite64+0x1b0/0x1b0 [ 1684.958518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1684.959638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.960743] do_syscall_64+0x33/0x40 [ 1684.961557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1684.962650] RIP: 0033:0x7fe2f6e5dab7 [ 1684.963446] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1684.967407] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1684.969037] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1684.970577] RDX: 000000000000001d RSI: 0000000020000100 RDI: 0000000000000004 [ 1684.972111] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1684.973654] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1684.975179] R13: 0000000000000004 R14: 00000000200006f0 R15: 0000000000000002 [ 1685.027450] loop4: detected capacity change from 0 to 262144 [ 1685.044907] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1685.084444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:14:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 20) 01:14:03 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 42) 01:14:03 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 01:14:03 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000", 0x2a}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:03 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:03 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 39) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:14:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4002d, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1699.659256] loop3: detected capacity change from 0 to 262144 [ 1699.671263] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1699.676518] FAULT_INJECTION: forcing a failure. [ 1699.676518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.677516] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1699.678419] CPU: 1 PID: 10364 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1699.680680] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1699.681722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.681728] Call Trace: [ 1699.681748] dump_stack+0x107/0x167 [ 1699.681768] should_fail.cold+0x5/0xa 01:14:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='logfs\x00', 0x1000040, &(0x7f00000001c0)='ext2\x00') setxattr$incfs_id(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1699.684041] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1699.685284] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1699.685310] ? shmem_write_begin+0xf7/0x1d0 [ 1699.690111] ? shmem_write_begin+0x100/0x1d0 [ 1699.690827] generic_perform_write+0x279/0x4f0 [ 1699.691538] ? page_cache_prev_miss+0x310/0x310 [ 1699.692262] ? evict_inodes+0x470/0x470 [ 1699.692879] ? generic_write_checks+0x2ad/0x390 [ 1699.693605] __generic_file_write_iter+0x39d/0x5d0 [ 1699.694386] generic_file_write_iter+0xdb/0x230 [ 1699.695101] ? iov_iter_init+0x3c/0x130 [ 1699.695739] new_sync_write+0x42c/0x660 [ 1699.696355] ? new_sync_read+0x6f0/0x6f0 [ 1699.697002] ? __x64_sys_pwrite64+0x201/0x260 [ 1699.697707] ? lock_release+0x680/0x680 [ 1699.698336] ? selinux_file_permission+0x92/0x520 [ 1699.699093] ? security_file_permission+0xb1/0xe0 [ 1699.699852] vfs_write+0x7c0/0xb10 [ 1699.700412] __x64_sys_pwrite64+0x201/0x260 [ 1699.701081] ? ksys_pwrite64+0x1b0/0x1b0 [ 1699.701718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.702546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.703345] do_syscall_64+0x33/0x40 [ 1699.703929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.704728] RIP: 0033:0x7fe2f6e5dab7 [ 1699.705317] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1699.708184] RSP: 002b:00007fe2f441ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1699.709365] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5dab7 [ 1699.710475] RDX: 000000000000001d RSI: 0000000020000100 RDI: 0000000000000004 [ 1699.711579] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 1699.712675] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 1699.713788] R13: 0000000000000004 R14: 00000000200006f0 R15: 0000000000000002 [ 1699.723377] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1699.728451] FAULT_INJECTION: forcing a failure. [ 1699.728451] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.730973] CPU: 0 PID: 10367 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1699.732512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.734281] Call Trace: [ 1699.734840] dump_stack+0x107/0x167 [ 1699.735599] should_fail.cold+0x5/0xa [ 1699.736397] ? create_object.isra.0+0x3a/0xa20 [ 1699.737351] should_failslab+0x5/0x20 [ 1699.737553] EXT4-fs (loop3): get root inode failed [ 1699.738155] kmem_cache_alloc+0x5b/0x310 [ 1699.738961] EXT4-fs (loop3): mount failed [ 1699.739799] create_object.isra.0+0x3a/0xa20 [ 1699.739815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.739841] kmem_cache_alloc_node+0x169/0x330 [ 1699.743368] __alloc_skb+0x6d/0x5b0 [ 1699.744133] alloc_uevent_skb+0x7b/0x210 [ 1699.744991] kobject_uevent_env+0x99a/0xfd0 [ 1699.745908] ? blk_queue_flag_set+0x22/0x30 [ 1699.746814] ? __loop_update_dio+0x2d2/0x690 [ 1699.747740] loop_configure+0x1118/0x1410 [ 1699.748615] lo_ioctl+0xa57/0x16b0 [ 1699.749370] ? avc_has_extended_perms+0x7f1/0xf40 [ 1699.750394] ? loop_set_status_old+0x250/0x250 [ 1699.751355] ? avc_ss_reset+0x180/0x180 [ 1699.752193] ? find_held_lock+0x2c/0x110 [ 1699.753054] ? __lock_acquire+0xbb1/0x5b00 [ 1699.753987] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1699.755094] ? generic_block_fiemap+0x60/0x60 [ 1699.756025] ? lock_downgrade+0x6d0/0x6d0 [ 1699.756889] ? build_open_flags+0x6f0/0x6f0 [ 1699.757787] ? find_held_lock+0x2c/0x110 [ 1699.758646] ? loop_set_status_old+0x250/0x250 [ 1699.759593] blkdev_ioctl+0x291/0x710 [ 1699.760388] ? blkdev_common_ioctl+0x1930/0x1930 [ 1699.761376] ? selinux_file_ioctl+0xb6/0x270 [ 1699.762311] block_ioctl+0xf9/0x140 [ 1699.763067] ? blkdev_read_iter+0x1c0/0x1c0 [ 1699.763965] __x64_sys_ioctl+0x19a/0x210 [ 1699.764821] do_syscall_64+0x33/0x40 [ 1699.765596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.766664] RIP: 0033:0x7fae9488f8d7 [ 1699.767438] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.771288] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.772876] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1699.774379] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1699.775860] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1699.777343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1699.778839] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:14:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1699.787148] FAULT_INJECTION: forcing a failure. [ 1699.787148] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.789184] CPU: 1 PID: 10369 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1699.790227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.791491] Call Trace: [ 1699.791895] dump_stack+0x107/0x167 [ 1699.792446] should_fail.cold+0x5/0xa [ 1699.793023] ? xas_alloc+0x336/0x440 [ 1699.793586] should_failslab+0x5/0x20 [ 1699.794174] kmem_cache_alloc+0x5b/0x310 [ 1699.794816] ? stack_trace_consume_entry+0x160/0x160 [ 1699.795587] xas_alloc+0x336/0x440 [ 1699.796123] xas_create+0x34a/0x10d0 [ 1699.796664] ? kernel_text_address+0xf2/0x120 [ 1699.797353] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.798285] xas_store+0x8c/0x1c40 [ 1699.798970] __xa_store+0x164/0x2d0 [ 1699.799653] ? xa_delete_node+0x280/0x280 [ 1699.800427] ? trace_hardirqs_on+0x5b/0x180 [ 1699.801250] xa_store+0x31/0x50 [ 1699.801874] __io_uring_add_tctx_node+0x1cf/0x520 [ 1699.802778] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1699.803767] ? alloc_fd+0x2e7/0x670 [ 1699.804465] io_uring_setup+0x1fbb/0x2980 [ 1699.805240] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.806199] ? wait_for_completion_io+0x270/0x270 [ 1699.807119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.808091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.809045] do_syscall_64+0x33/0x40 [ 1699.809735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.810699] RIP: 0033:0x7eff19607b19 [ 1699.811385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.814820] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.816234] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1699.817555] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.818909] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.820227] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1699.821538] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1699.823025] FAT-fs (loop5): bogus number of reserved sectors [ 1699.824367] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1699.825989] loop6: detected capacity change from 0 to 131072 [ 1699.843556] loop4: detected capacity change from 0 to 262144 [ 1699.859015] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1699.873002] loop7: detected capacity change from 0 to 131072 [ 1699.895601] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1699.895761] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:03 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 40) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1699.945542] FAULT_INJECTION: forcing a failure. [ 1699.945542] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.948162] CPU: 0 PID: 10383 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1699.949625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.951370] Call Trace: [ 1699.951933] dump_stack+0x107/0x167 [ 1699.952708] should_fail.cold+0x5/0xa [ 1699.953510] ? create_object.isra.0+0x3a/0xa20 [ 1699.954488] should_failslab+0x5/0x20 [ 1699.955291] kmem_cache_alloc+0x5b/0x310 [ 1699.956146] create_object.isra.0+0x3a/0xa20 [ 1699.957071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.958150] kmem_cache_alloc+0x159/0x310 [ 1699.959023] xas_alloc+0x336/0x440 [ 1699.959778] xas_create+0x34a/0x10d0 [ 1699.960571] ? kernel_text_address+0xf2/0x120 [ 1699.961517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.962640] xas_store+0x8c/0x1c40 [ 1699.963397] __xa_store+0x164/0x2d0 [ 1699.964164] ? xa_delete_node+0x280/0x280 [ 1699.965036] ? trace_hardirqs_on+0x5b/0x180 [ 1699.965944] xa_store+0x31/0x50 [ 1699.966646] __io_uring_add_tctx_node+0x1cf/0x520 [ 1699.967655] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1699.968758] ? alloc_fd+0x2e7/0x670 [ 1699.969557] io_uring_setup+0x1fbb/0x2980 [ 1699.970463] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.971524] ? wait_for_completion_io+0x270/0x270 [ 1699.972559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.973657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.974758] do_syscall_64+0x33/0x40 [ 1699.975543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.976625] RIP: 0033:0x7eff19607b19 [ 1699.977413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.981296] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.982906] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1699.984416] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.985918] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.987426] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1699.988931] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1699.995972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:14:03 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:03 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) 01:14:03 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 43) [ 1700.035515] FAULT_INJECTION: forcing a failure. [ 1700.035515] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.037229] CPU: 1 PID: 10390 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1700.038207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.039355] Call Trace: [ 1700.039723] dump_stack+0x107/0x167 [ 1700.040229] should_fail.cold+0x5/0xa [ 1700.040761] should_failslab+0x5/0x20 [ 1700.041293] __kmalloc_node_track_caller+0x74/0x3b0 [ 1700.041989] ? alloc_uevent_skb+0x7b/0x210 [ 1700.042587] __alloc_skb+0xb1/0x5b0 [ 1700.043094] alloc_uevent_skb+0x7b/0x210 [ 1700.043658] kobject_uevent_env+0x99a/0xfd0 [ 1700.044232] ? blk_queue_flag_set+0x22/0x30 [ 1700.044827] ? __loop_update_dio+0x2d2/0x690 [ 1700.045436] loop_configure+0x1118/0x1410 [ 1700.046024] lo_ioctl+0xa57/0x16b0 [ 1700.046497] ? avc_has_extended_perms+0x7f1/0xf40 [ 1700.047168] ? loop_set_status_old+0x250/0x250 [ 1700.047772] ? avc_ss_reset+0x180/0x180 [ 1700.048327] ? find_held_lock+0x2c/0x110 [ 1700.048873] ? __lock_acquire+0xbb1/0x5b00 [ 1700.049511] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1700.050207] ? generic_block_fiemap+0x60/0x60 [ 1700.050797] ? lock_downgrade+0x6d0/0x6d0 [ 1700.051379] ? build_open_flags+0x6f0/0x6f0 [ 1700.051942] ? find_held_lock+0x2c/0x110 [ 1700.052511] ? loop_set_status_old+0x250/0x250 [ 1700.053107] blkdev_ioctl+0x291/0x710 [ 1700.053643] ? blkdev_common_ioctl+0x1930/0x1930 [ 1700.054282] ? selinux_file_ioctl+0xb6/0x270 [ 1700.054860] block_ioctl+0xf9/0x140 [ 1700.055331] ? blkdev_read_iter+0x1c0/0x1c0 [ 1700.055896] __x64_sys_ioctl+0x19a/0x210 [ 1700.056434] do_syscall_64+0x33/0x40 [ 1700.056916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.057620] RIP: 0033:0x7fae9488f8d7 [ 1700.058119] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.060644] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.061634] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1700.062621] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1700.063589] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1700.064565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1700.065542] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1700.072443] FAT-fs (loop5): bogus number of reserved sectors [ 1700.073284] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1700.084648] loop7: detected capacity change from 0 to 131072 01:14:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4002e, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:14:04 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1700.112394] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 21) 01:14:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x40002, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fstatfs(r1, &(0x7f0000000440)=""/76) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = geteuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x800, 0x40, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=0xee00, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="02000900", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000800", @ANYRES32, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="10000400000000002000040000000000"], 0x64, 0x6) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/73, 0x49}], 0x5) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x20010) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000) 01:14:04 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 44) [ 1700.144412] FAULT_INJECTION: forcing a failure. [ 1700.144412] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.145987] CPU: 1 PID: 10400 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1700.146937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.148046] Call Trace: [ 1700.148411] dump_stack+0x107/0x167 [ 1700.148895] should_fail.cold+0x5/0xa [ 1700.149401] ? getname_flags.part.0+0x50/0x4f0 [ 1700.150018] should_failslab+0x5/0x20 [ 1700.150535] kmem_cache_alloc+0x5b/0x310 [ 1700.151074] ? new_sync_write+0x499/0x660 [ 1700.151637] getname_flags.part.0+0x50/0x4f0 [ 1700.152193] getname+0x8e/0xd0 [ 1700.152623] do_sys_openat2+0xf9/0x4d0 [ 1700.153115] ? build_open_flags+0x6f0/0x6f0 [ 1700.153706] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.154309] __x64_sys_openat+0x13f/0x1f0 [ 1700.154864] ? __ia32_sys_open+0x1c0/0x1c0 [ 1700.155404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.156106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.156756] do_syscall_64+0x33/0x40 [ 1700.157256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.157900] RIP: 0033:0x7fe2f6e5da04 [ 1700.158414] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1700.160722] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1700.161743] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1700.162714] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1700.163656] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1700.164615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1700.165557] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:14:04 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) 01:14:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 22) [ 1700.198059] loop6: detected capacity change from 0 to 131072 [ 1700.220118] FAT-fs (loop6): bogus number of FAT sectors [ 1700.221062] FAT-fs (loop6): Can't find a valid FAT filesystem 01:14:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40036, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:14:04 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1700.241871] FAULT_INJECTION: forcing a failure. [ 1700.241871] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.244342] CPU: 0 PID: 10411 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1700.245842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.247647] Call Trace: [ 1700.248220] dump_stack+0x107/0x167 [ 1700.249013] should_fail.cold+0x5/0xa [ 1700.249842] ? create_object.isra.0+0x3a/0xa20 [ 1700.250843] should_failslab+0x5/0x20 [ 1700.251669] kmem_cache_alloc+0x5b/0x310 [ 1700.252553] ? __generic_file_write_iter+0x1a4/0x5d0 [ 1700.253653] create_object.isra.0+0x3a/0xa20 [ 1700.254614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.255717] kmem_cache_alloc+0x159/0x310 [ 1700.256617] ? new_sync_write+0x499/0x660 [ 1700.257523] getname_flags.part.0+0x50/0x4f0 [ 1700.258483] getname+0x8e/0xd0 [ 1700.259182] do_sys_openat2+0xf9/0x4d0 [ 1700.260032] ? build_open_flags+0x6f0/0x6f0 [ 1700.260978] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.261991] __x64_sys_openat+0x13f/0x1f0 [ 1700.262900] ? __ia32_sys_open+0x1c0/0x1c0 [ 1700.263772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.264919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.266184] do_syscall_64+0x33/0x40 [ 1700.267077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.268288] RIP: 0033:0x7fe2f6e5da04 [ 1700.269155] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1700.273054] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1700.274730] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1700.276393] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1700.278028] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1700.279543] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1700.281065] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:14:04 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1700.303042] FAULT_INJECTION: forcing a failure. [ 1700.303042] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.304507] CPU: 1 PID: 10408 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1700.305354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.306380] Call Trace: [ 1700.306716] dump_stack+0x107/0x167 [ 1700.307157] should_fail.cold+0x5/0xa [ 1700.307619] ? create_object.isra.0+0x3a/0xa20 [ 1700.308178] should_failslab+0x5/0x20 [ 1700.308637] kmem_cache_alloc+0x5b/0x310 [ 1700.309124] ? kmem_cache_alloc_trace+0x151/0x320 [ 1700.309709] create_object.isra.0+0x3a/0xa20 [ 1700.310248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.310860] __kmalloc+0x16e/0x390 [ 1700.311296] kobject_get_path+0xc5/0x1f0 [ 1700.311789] kobject_uevent_env+0x251/0xfd0 [ 1700.312313] ? blk_queue_flag_set+0x22/0x30 [ 1700.312832] ? __loop_update_dio+0x2d2/0x690 [ 1700.313366] loop_configure+0x1118/0x1410 [ 1700.313873] lo_ioctl+0xa57/0x16b0 [ 1700.314310] ? avc_has_extended_perms+0x7f1/0xf40 [ 1700.314893] ? loop_set_status_old+0x250/0x250 [ 1700.315448] ? avc_ss_reset+0x180/0x180 [ 1700.315929] ? find_held_lock+0x2c/0x110 [ 1700.316450] ? __lock_acquire+0xbb1/0x5b00 [ 1700.317013] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1700.317644] ? generic_block_fiemap+0x60/0x60 [ 1700.318197] ? lock_downgrade+0x6d0/0x6d0 [ 1700.318696] ? build_open_flags+0x6f0/0x6f0 [ 1700.319223] ? find_held_lock+0x2c/0x110 [ 1700.319718] ? loop_set_status_old+0x250/0x250 [ 1700.320270] blkdev_ioctl+0x291/0x710 [ 1700.320730] ? blkdev_common_ioctl+0x1930/0x1930 [ 1700.321305] ? selinux_file_ioctl+0xb6/0x270 [ 1700.321843] block_ioctl+0xf9/0x140 [ 1700.322295] ? blkdev_read_iter+0x1c0/0x1c0 [ 1700.322822] __x64_sys_ioctl+0x19a/0x210 [ 1700.323320] do_syscall_64+0x33/0x40 [ 1700.323770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.324388] RIP: 0033:0x7fae9488f8d7 [ 1700.324846] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.327086] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.328017] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1700.328882] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1700.329759] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1700.330628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1700.331489] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:14:04 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) [ 1700.342327] FAT-fs (loop5): bogus number of reserved sectors [ 1700.343623] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1700.356317] loop4: detected capacity change from 0 to 262144 [ 1700.369047] loop7: detected capacity change from 0 to 131072 [ 1700.384415] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1700.390871] loop6: detected capacity change from 0 to 131072 [ 1700.393434] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1700.403022] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1700.428987] FAT-fs (loop6): bogus number of FAT sectors [ 1700.430349] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1700.439836] loop3: detected capacity change from 0 to 262144 [ 1700.447866] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1700.449682] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1700.451216] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1700.452322] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1700.459694] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1700.461309] EXT4-fs (loop3): get root inode failed [ 1700.461878] EXT4-fs (loop3): mount failed [ 1700.482698] loop3: detected capacity change from 0 to 262144 [ 1700.488109] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1700.490756] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1700.492694] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1700.494638] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1700.498892] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1700.501750] EXT4-fs (loop3): get root inode failed [ 1700.502891] EXT4-fs (loop3): mount failed 01:14:19 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 41) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:14:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40053, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:14:19 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 23) 01:14:19 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001240)=0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000006f40)={'syztnl1\x00', &(0x7f0000006ec0)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x6, 0x8, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x66, 0x0, 0xe0, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@lsrr={0x83, 0x7, 0x26, [@rand_addr=0x64010102]}, @generic={0x89, 0x9, "1823bb2fc5e325"}, @timestamp={0x44, 0x14, 0xca, 0x0, 0x4, [0x8, 0x1ff, 0x5, 0x8]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000007040)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007000)={&(0x7f0000006f80)={0x6c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) capget(&(0x7f0000001280)={0x19980330, r0}, &(0x7f00000012c0)={0x1f, 0x101, 0x67d98864, 0x4, 0x6, 0x401}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{&(0x7f0000001340)={0xa, 0x4e24, 0x4, @mcast1, 0x80}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001380)="112bb87d5e6b5238277951262743d0f689114647a0fa833b2c70a99183bcd8556f7d30dfbf288ed01dcedf2e69d071c09dc3055c34872c16c8f9fd0285411ea6e28a04180dc524f3db8283a4a27b6bb8a9604c62d66d099508d018aec2bf7901cbbca6875b8b3d11d47da48540949af1ab48749c8f2d73c09d1b4bed1994f5b00b928210ed8802689b1445a7", 0x8c}, {&(0x7f0000001440)="aaf07a36760021616a58fced1d9c5b4c28b21cd9e11acd2b6034fa697a1f71857bb0", 0x22}, {&(0x7f0000001480)="c06edba1a2f9333be6fa5b2638a3fc0e5d94b8ff931e903aa4585aa08c002ccc153ed5178b11e6b07a76ce5b71e0ad5955bfeee2b59b90075d0e959386b5ad5b7f9d11783aaa411008268eaaae05e1924d29ee83b738aa6f011a1da51dfc1c71cf1905730fe3ca2d39f57c479a5d8f9e4ae887488f55c0f22f05c14c3c3ce92e5ccf5578e98f1c96305426e10cf50fb6b8ae1a0535f92adfb2067d6b593c995c7996707e0ac869690cceb1cc1a876071a93eb4f9bbcac9b93db98b81a3e59b6db8c10d1a08104c9d73f66e53bc84c54e2178361613c6f169252c787e4e", 0xdd}, {&(0x7f0000001580)="fcae29e2dec61856c4e20ff4a360712e1de5d1bf7f9ff016f68a59b2", 0x1c}, {&(0x7f00000015c0)="0804cd4e24d9ef9536a953d0f13bf94ff3c20cc12c0e19585b9880d9a6cfd3ad05b580fc7d064c12780fd603b19f9ac1a7404392f1d3264cf47e5f9b0fb8adfe69d1e1a39332b4d9cf748e4186d6ef69373530c362ac2f211819cce78d55163d12a4fbbd2895c404098770800900257ef1c38218b0a84e2d3f5b0bbdb7ac14185b3b8cba776526124a90db18aa0b7ac59e4e91544795e93a6ce44992ca81519938aaab45d20194e2690b34938e9712baf7c8ccce98f75cee90acdcc43bde60cf006b2d79e06a645b4c75150ffbfed4c55b9546912be9e73fb56de4b70b17c1e0fad64e8fff0f10c977aa43d25a09522d29e1", 0xf2}], 0x5, &(0x7f0000001740)=[@rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x2, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @local}]}}}, @rthdrdstopts={{0x138, 0x29, 0x37, {0x1d, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x58, {0x1, 0x14, 0x5, 0xfffa, [0x400, 0x9, 0x7, 0x6, 0x3, 0x8, 0x9, 0x0, 0x7, 0x4000]}}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x6, [0x4, 0x0]}}, @ra, @generic={0x1f, 0x94, "309999a4c28ffea7b52a672e98596e6d1b2a6e7013f62e6f58266e9f60b8d5443b5f098ff1d6fa439272f340cf63e4e661992efd0aac03e38429d9b08bb3848910cd3fde7bc28a288529245f986eff19e9f37508352a578b5137624b37e802212aebbf7bbb067e6f0994c6c300267898a8f053c4f839ef7b7d27af2c97a2afa6c0529eaccccecb778983fcb540b5616c86502036"}, @jumbo={0xc2, 0x4, 0x81}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @hopopts={{0x30, 0x29, 0x36, {0x9, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8fd}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x6c, 0x1d, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x0, 0x90, "a68b9bc900561db52bf480aa06db9cad3c04af94aed5766ce1332ae9b6f8c5ee6b31d90ef3bd8b2857eab0125bffc668b449f2a47a1085a234674baf389ce0f8fbb283a969b5965b681dd8946b946a9ae35640cf22e06478f5b9f0214d04ce39b9557618aeb8498eb336cae92d2d6652026672175d7930de994909c39b8f651552b6a8e9d5a1218a39bcb22676c82e43"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x200}, @generic={0x7, 0x2f, "2582dc8e5d848ea65c540bf5a8a333906e68dfe41b9e81f39aac49418e5ec28d1d9ca6c9a4ab87ff0b422e857a684c"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @hopopts={{0xf0, 0x29, 0x36, {0x87, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @generic={0x8b, 0xc4, "aedc0f183062469d2154076d0abc5141d4944e8773577aa925cd05c516ca2336c984b52b950407b90f3323a1ac2bfe429fae2f2bc434313021bf6b987b5b0f702831958dd12766db930ad268c743c155b79ccaf7e5d6a08fd3ad3e119f73e969d3a27f368aaf7762e6dbefa21ea067f8cbcb5d4ab04cb8931858f6a91363ab59fa0bc273d3cbe2ea6071e391843cb34a4aa6838e09dff33bc1cda09c3b04e1c2cf16183d33a7f143b9f24e8b341c7a73e0a7470f18e93735d3064357159619ba15865d57"}, @ra={0x5, 0x2, 0x20}, @ra={0x5, 0x2, 0x7139}]}}}], 0x430}}, {{&(0x7f0000001b80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001bc0)="e2fe2d84cd0cb896eb2b7a4ff653a490dcaf96e44e2bb93ec631de1d373e17145e67d180c698cfa98dbce3eae0d11ab2cb4ab4fdb069518fff800c1c4a28631f56bf189e9ad5ba11f3710cc20bc3d58465874d78f09be4668bc2cc5f5960cdf6726ac50038c797e31f275cdfab4cdee1da5a9d7071699029caf33d93f49370ae3e2c738f5f0b10bb515c8452ca51aec3904cb5e225c686d5", 0x98}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="b5fad12b271dbd866471f685c6eb886283e7867b8abb629ca47664fb0559dc752d6480b3218ae7c0669a57c681ed0c9bc0e47580c96d5f4fe38b4fd20b4b6102e743ecaf5aea050c6bc76e537cdaea7f6e09871ca5d30a3732c8384d43d8c6e9c9a76c449e07b2a9fe9800004d44920d0684e41d29d22e864970402b764c682679266d6a0d1a73f5880e4abbd98251c8ad7ff442836f01ba327bf2ce4a41ad6defb65894ee5f84af7593bd85fa74696b8d9c93eed970d1328923d87e39", 0xbd}], 0x3, &(0x7f0000001dc0)=[@flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @dstopts={{0x40, 0x29, 0x37, {0x67, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1000}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2b, 0x3, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x3f}, @hao={0xc9, 0x10, @remote}]}}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000001ec0)="403ffe4dde6b512a4b364ae288036feec3b018ad9a0b6299eccd9c553c7667e9e6d8661e2e26cc810177a8d9346336b6a55c0daab6c07b3cd4667d4e58f28f30253525f19791fb980fcc05d2657451249b95ffe1e59feb8f4b6b9c4c23341cc7b773b44d94fd066007028d8dc855c28f067eacd67df1fd0128c233fdf2db9d9554cbeab4d211a4", 0x87}, {&(0x7f0000001f80)="d1f5850ee20d948cacf07625dbdeaedff5902795feabbb83046f9ac172a67c89c9754f52ce301159876c01a4bd94d76282979e6c935f153b1d9a44e02394a46d02a85a3514c4803b31ac771d4b62826b273615fbfd08892ddc6ee5f272cb4f028032a669c093466aee65663ccd7182f6ae11b53bbdd46f3c3362b54ea28a558f35b05e369e74d31f21d9a87cdcc394db6014d6c5976382335f57d90d9ac2a5fd88eeb2c1c8313a959bf76ae408f248884d8bf835624a745a57dfd5dedd39c339d774d41ede1792a81cac6d214c5e35b34269cd6acd2d9ac9f980950729d350b105f313a422296377572acd5e6a65b0eb8edc60d4a12392eec19986d8dc030e938aa1506fb68814c3d472d077e5af09fef00942c8e7a8f75e341834152c8d87ad77f59074d991b9c108e98dc393a02dc6fa09a0c59f36568a7ff5d70ebf31895f71cd5378eee427c3ba11ddc84f244ed7e9f577a476c1316ff18a41657dcf12f7ffe4bc106f667416c9705cbf6343fed82658b0df28768ad7bbfc3eace876b554643b87dc12e1dcab194205835a41e4712e86d941e5bff4b54c8a275a94f65bcb714ff6942761209a59392a0a88e231e432e5ec39445d9c39738b4debcb1a3acd7abcea7344d18764a5df81276cd68a5570b1329da61f5791f6fb17bf4c97947f96cb6d3c5890deb276948bf7a016a0ec0742697a8e0801ca96865099df6cdd58c4c340968b47809f98775a0114b1698be2e394df9fdbbd3ab46c03cb10f47b0ed0567d93ed833ef73f1ab81fa477f923f99b29ad3c90046e0e9de693249ba3ba54c35f6354a5b40361fde7d510e7f3bc5d63a8f00d43af12778c23829a1b4c1fcc6e0459b20b4ede5f68af1d432caf07872779babc2bea79866332ce66e0cdc74e75ab7f1039cf1243bda1fb40bfd938eb02a71a3b281cf9465e232817ffaee61a88bbed0565fa2562c4a872bc16628202874bf49db08ffd083f2c9cd5d7e5b116d84fadcd8bc88b9fdac81b5d4e11e8df2ff7a747b40dbac65b2e24b2c266bf06cee8d0117a3e786a9e77f483e073f5946d91059fdbc43d094fa225ba451329dbb90432acc89e9dc2006a588c27f42be3bdf8a2e0ffa1d77e6e56373bd8ea41ffb60273f73284dae6228d502945a8bd789ec04bc1884c3877d421e2f2f529fe170c404cd6a0085c98dcfb51f9d4863197b5970187e794769de7d5c3d81e7b7d5eadd25f782206848548040831a3193d290e36ec01aa6982f7937edcaacbd926fd179c534c75ecf3621327c66f93a7c8d1ef3a4ab566c44f081bcb602cca1f4b053e7b95fe63ecd70a2426734d66d798dc912d32af37d5ecb0a3292642cf0d6167be97bb5b12c7586e65fe8fe0d3b00b0ac7b8772358628387dd86b09112a27523660c0a89236027fdcbdf896597339446e010cd8f052f8b0392f80ceadeace5448a02b866c0751d76345a2b08eb29450fc7f34890480212290fec3673c6f56fe7cd303c74686447b60096c30dc62d5bf23154a8924fc37ad5fee1dae8bec53e89e6db19db9f3bc2cc02ccc2f893e230418187ce55d86a9ee2e875dabdd72c4bf4d84c234807862deef7e9ea7442a95d60f38d723b365dbbf0891314fcacb2ea94a7a2246f3fa1a89dafb32354a3eed2c227c5d8e350e3fb9048a74b61124efc8b30528ff06a6a264df0f0db4720867caeae2f89d8ae7564642ea6c08e9a85a406e0eae03dfd1534545fc16d53f1d79588e17953e6458b4ebca0336570ae9aff81b546c8b1f36aa64128d9c76f6b4a8e78ca804833a61da68521f4f688147d4e1d02cd1633892b914fac05b5224c61af6c907fa068f6bd7e5da3d12f02ee9d401e5f74c0d458d3a1ecf12a498584aed49fdf7578f082222aa3e42548857486332adb026622d1c82e194cf264bb5cb359ac1aeb7bf4a0dc45126f2887080cbdbdea45b43396f3762d9f4d410102b1021008ec7b2d23eade059b442e24c35f83a814636685a4c01043dd7ed93d5aa56a2b8854f263acbc77197dbf92a5187da206df02739c78ebad7bd78b99a020e743e6b12332da7684e0070d23b3c8fac39de52a810da8acde33faac6836d863a8d8afb33dcceb8aa6800cc8d23b6c382c18d4ad2434c5c8d338ee62e466a3f918766beebb00fc2f764373c10c8906918fb64fccf3607fab1f7d28cbab94425d60ac5adf4b347d4d0875db3579d3478530aec86e044bdab22f4e2be35c32b203b3faa707d6d6981836dc5b7f72a1bc5c27fad13babeafe9b50a920f6826d8ae0b908cc143aa9926c515dccc01159dc436741f8e4aed2523b6abd53796c9a30733252cd84dd8e447c99059f3c8b84b4c8f721e9de3928ef958731950631073cebf1ba76da690bf9d4683ae542be58c2fb1fe4f311636ece02e77f441c4a818b39faaee48766d1c975e38a8f644d6657784d3237befe467ae1fdb1cefef70e280ba321fed9b7f449de09992484bf7d338516936c5655613c2b2c4f1ebc7bf68f1027ffdafb72fd1716accec9370930c8b54714029c414bf066999c9063b2e8d026180b64fefc7c382e2183e156716b23dce304b33aca2c727b633dca3bf6e626385cc537a9e75732203e7d0bcc17c1a3609db27b5d4e9e888c83dd1d8458391127a7b6729cbbf41da5b8f72e41eb79f69f5d0726cfe251dd1c97e3ad78c5c77b29a417ad88634e3b48f8e91bf64b9c9d1e1072702cf99d629d4f3af19067d5093976ccc0c854b11971b8b2d57a2b7a8cb07125e452dccf2ecb9c9654323423131eaf78900efcdf636edf2c91b344d28a97f6b7982a3b9a67bceb1029dda54e68097a5d3b24392b6a64c0034c122d1cd1878e4c3662403d9809ee4d77a25dfdd7d8ef411cc149b80ef8a245cddd4f210e0db32ddfdd6f0e7603c328a555d1aa50aff92dc626ce1bc27546a1a9b4167be294c4fd36e60ba42917611c2f4a8d4acfccb492b7f107b5b618fc70059d77621f535031725cdead2005582ce0ef33bbbabbd709a1375d4acefecff69f2a0d5fcba0ddf68266fc3ba03d22e0c2d9d62dd6564cb8e671045f9ee5927318264c0d4cacd86c85b2d43e016a9724cd7729fd9f5118b87a460291b69979abba64322432313348076cb2534d6a1ad8a858e7b65a46b93e391ffb6f3b80296957658b11667b5fa75d3fe04f1acd2c33a6fe4e7545bceac33c75b9801601c28b4db5615a17602a633c754d28c0f196550a7e1a6907c24204279f6d3a110043d48f35fb1ff8f6bce352802f18bbf577e662185fda5b08bb97b546ae3883598e538cf2bb28229de231ecc46d49fdc027159fa1c23f8686b5c3d6eeda548232b186a0efc8c0cfe65f20e90c5343e0e3681a2d8193067246532b2de559f6c3cdd32263e91ffb7102d0d9a6e2824eb0689a605a5112de85e3ac42f57fe2356ac1c104373445f909b95a00f3b09d76da02225caf0e0d7246a9720f166c09065e3fe8a2f0e438cd5e3d049415c9e58a1d3976972f139e444cd9e7a5e5c360d0f80662491a94d1de55b84ddf0d1b70d88bd363d6e21d2d073b0a930d30c18d1b9713b74829f19beb94552f5af035131b1d653cb41cb48b6a938d2cea2c9127669a78a36ccf35f8a71a78e72656046e9c05ae979706c3580f3ea86f4df14f5f92869b21099aa6eae97252c053c2f0e016f56e6ab730314124319cfb1e5525f0d7adbdc37428cdbd93c614d3eb25162b735d717f2829feec9f99be277be132c5613c832935f87ca3a213257432089cf3d0fa87f57977349470ab6a30970075fd45c3f709441471cdf5724ae0e22900230c4dccdef14fc47e15c5be4c11f1fa66548fd77328fa26712cc697dae56cf4192a0cb76cc992249ff3883547a5cb7313b389ed3015c13d7269e42ad06a0be1fe000d1be72422f0c1a835a1703351127a0fbe1d467bfd2e2a79b4147618bf05ff8f862e3784bf53ef3a3dad0ea9a1f2c7c9b49611f6184ed9bd9cc6d63356dfe474d1b5514cc4b7eb52edd4b720465273a91c2f18eefd92d5be8b9d4fcc8cd29e7960b3cec807e81c2fa65c15fcc97b70f617b7fab76c928c58845b003893a24eb0c84412cdf24236c4550819fa8a93503d74a1450f5e241ee59556a27afb114a8156b4698b4d5757ffabcfbd2a78b6d5762988da816b325db70d8d9c1c5c6dbefa05eb0da9e5d6b0537c280db7d10455a53efe527ee017854dfb25df351e443e4738f7f1a0aa8e2de47319c207cac6eaddf7dfd9d0b2b21f11f5590fee874ec2c41b234d8a67d41bf84c916cc5e9ee1769c1cf1f1e5968eacb628fa163e4ef895512e17af68a0aa1702226238d85c90b5dcf6fd12868f8204d7841412472867de5032b2e4009b7922596836cbbf7b6afdc7a33fe6be09596410b3ab3c53bb72bfe7c7f06fa0c2a9a10c91eab808e1aed368c17fbf8b9a3d4b085d5b70531dc978e5c536b166cf8fd1fe6b0462dc9ba09e9296cb0e203ebe9513d3d2f70fef92f56ec0b394cd3b7335c8d05a393ca5aa3d11c78bd04313841c9516b227f1a58cccae5933f0bb3ad568e5409acf1424c446cb7c95f3576a26976684f1432cefc77b316be277b7ccdb61e0c23a0c068e3a67bca612de91d4e30410ae84bcaa4bd96e565ec5950054722cb7b26f10f63859386bc246761fb34ca8e422d7496c60cfa64359fc06fe3d77eaf89aea1935e4a44182c8509741cfb376707fc0b90819ff318143c38644c08eba982bfe70c98863906d23341ef7d7c20774f66ee779df6b6bdf76258215ba13ecbe37b6e05d7b6c7e91cc3fb032836a44e243f366a858da97465c49bbb4ba8dd115d937f58f8f9a54c256d49846445b599e6bce49c0dad2eda9e7ab87499ef3ed625f45e76c371a24b8604fa37dea876befaddd12f6568d40485eb40c5ec4e67e7256768ebfb8b4fe382df4bac9e3f06dbea54413f9490fd0db0ca975177ad67bf7f824a9fc61f39ec555ccd869f9bb34c74ae9e9cd1b364fd2f34ec7b41744ddb10c712c4817934bf6d406ec58262fe305918424d7d227f9871c9ce4d38ab8846b64fe5459a1cb23962871ea18668257ad568e4c0d89d927c101e26b4034ae0aa81ca04d6566c7cebf8ee0ceb176c19e10392ae6f5b5a4b552a1fbda9c499746d08bc2cd766b45f788c1781b18a466da05b85df52f4600bd9ca96b9850dcaa7c67548cdbb3491eb78e336ec04b36cf656539fb8f1de76dea97753ae533cf76b4c1c5278db53bd8aa90e9ce5980a2f304911d9b9992dee701fcb8cfe066279b93fdca55e5f49539e601b81e3fa68c0feedbddc6d9ac89219ab36eef5b7a49b5fec8b30820af99e79267961ad9a3c61fea5fdaef24898f57626f88fa8a03dd3f74152184268f775858176ec381eb3833d9f4733472d1c4d441a53ac4b2172d9f15239050a849ac18e3762d0ff44efa122f096ca82b34212cfc9f78a029b6e3d86319d75294da37e185cdd3e084303338bea93cc95a894ec51e2d8513e11323a379507f4a111f4eee0077a9281b9de8e27b79b7d52f2e4611894184d86648908f6f74ffc183d9d3978385fd40bd6814531afc381d94f5b28a900b41b9b390d9e1579163bac5078187db0dcb9432cd05d6ebbb30bca15d10a7a810c67be413a48fb13c57fdf9150f5d88ce2c78f273d06c8de7f1310e4edf3c70324b73c2fa346d25c813c3466936ede3f1880735afc5a3445a970cd8fb8287817a131d5478a7a3824995b24b5ba3a41fc2af2c78749b492f21f2347a7d0cb790b6cb7b1256c1b6b6206af1f43b86b31c7fa9e59e96178b5dca77b449e15", 0x1000}, {&(0x7f0000002f80)="02f92177f15761a172e06948d37bfe2525c410a236228afbe03b12fb00087b4791c9b949b7510f9bb2a5901622c8acbf224616c174306b90ad4a411e337487", 0x3f}, {&(0x7f0000002fc0)="dfb96466d4de0680c2ed0e979a7b1b37ee0dccaf82cb5f33bdf0da2fb5895685890e2062f0b279c8572fbcd813a1eec107b2a52780190bc4aa07aac36da8d09a6207c544ca7777df", 0x48}, {&(0x7f0000003040)="308207998d184887a7e85699a4d1d3f15bcfa2229c4c9df1e4cd3d274ccf4475d96cab3a11bcef9c999c26fc392e13dc71175692c6d4af5268a65198214b204c42d287b486cadf76bac449fd53f552a42a5a0d8829f9290002f36f987e8391fb6f2b958c50b11ae66b08283f734ae7d5d21768b5f056fe84c065400d29853e3c8ebe48a0af945ed8f0fc5f4f6528023e49a2f7b5ce654e752e64dc1322a40970868af133cae86ccdf4f057cffad2ad6467e3006c6e67889b6583a595b7cedce0c2ace921d08ccf5b86", 0xc9}, {&(0x7f0000003140)="893404ffde6091061ed25d4a53e020418980606ff28c93c75ec88c42ac4c837f0e71eb1c0dbaebf32dd339eddcbd880dadd69ff68bcae73a52534095edfb66f5cad2c792e2c49b541ff1a2507d9e3753b1e26e0d6a942e772e73cee2239390be009b2a6c1fd921c7d64ac98eb213b361a88aa62c5a22f30fd5f2a40cc0235a5c63371d2ac7c4deee72c8042772ce89c8dce545477cb73cd41751362fc9e17282a8627185c373504cc8", 0xa9}, {&(0x7f0000005900)="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", 0x100c}, {&(0x7f0000004200)="5c6fc486a63da66892edccd60afd4c1d821f301982c36efa77e17497bb20ed3455e5702747c77eae6e4f52093a68959b752ef9c8dcc81aa6dc633d2c2958a1c69bcf6a577c3127b085833a88a10bbf237948c5af360ddd8fcfd9910e7727eb2e48dc49c9063fc039fd", 0x69}], 0x8, &(0x7f0000004300)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x2e, 0x2, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo, @jumbo={0xc2, 0x4, 0xe0}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x1, 0x7f, 0x0, [@mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3f}}, @dstopts_2292={{0x290, 0x29, 0x4, {0x89, 0x4f, '\x00', [@generic={0x3, 0x12, "675d347e255d0f69706c8305f574d4b83a1d"}, @generic={0x0, 0x73, "a5924fd406a2b52a791c37919103a544af4ac2fb893044587cb359641bdb6e69403d7e14d17721667d6f84815fff5642368ab11712cb3fb4668f7b2701cc6cdbe614fa62296a8a92159fed87e77c9213d2fd7a0175a86c47ac172c7746a5753e80ec6d5abd50806dd5148c67c0cbba2d68a92c"}, @generic={0x1, 0xe8, "29e1da2512b85170ada984121b9a3f54a0cebb7c82b98d241fd4a2e423c3b575121634c813216ab5303561a82fe8384fc480605c284428a28e214c53f570cad011c40c98128c184d2f78b521e3e3a91105923c5087682a5829bff9a9222861b0afbb060d35154a6d58003990e291994f08ba6c14fd033d68bfe6ac0a7343404c56669cfdded58ab408dcb4ea1a3b437a7cde6a3cc8a4c0a5671f5af50fead2f3d8b3e2cad90d08935cec9510dcc5aa0ade477e839e120c6b24314f4fa6c00b322d03f39c9ea16ba60900f41ba00e467410df19843c72523adfdad15d71c7bb77d5cf7b09577c3f7a"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, @generic={0x3, 0x48, "e00ef827bbccf9ab9a0e86f48bd1592133f4a18a4cf3b8546fe56fb29156d59f1aa80211504da0ca3eb7039bc4645462ba28221f11ecabade270e03795422fb78c811be197a5cc1d"}, @generic={0x5, 0xa7, "a823a6f397f2e02b86bb8b0b3fff0a8ce9602d88a4da16a5de7a84aa45e16fe9b981af18afdb64479ab5e24cdbf8746b3c1a12a51946ea0eb0b8cdbfa22c51847253bd3d3aebcf6d5756c372565d5e827b55b3c76f11a070b5a63ad220a941870f964d1c633a8573e49db0b0abaed7b2d0b446c203e12bfb4cecf8ecf92fa3ba26199045312d3799ac8424e5684296736020a396e07bc23b117437f921c5dad68af7e105a20fe5"}]}}}], 0x2f8}}, {{&(0x7f0000004600)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xeaba}, 0x1c, &(0x7f0000005640)=[{&(0x7f0000004640)="177d0b76ebd0b0646a7e52a15ebff709d574ebd99323427a00bdfc7479b82b5c5357f122abe0e7758d259c20869517f48e880dafdbe8a5f60c6d893c54f54d8b9e31a9f5f50061d58b501f7fd017890e73733520da309fa1b29e364e5e28c178b9d84a139dec6b720ed338847e486b5d6a575ef12d3d7e5e85c8d64ea8923e98f01d83228cadacb77c60cb5c382363c72094831b6af695086e01f7e7c6c15398504cd7b3e6910f78c1a64622332f950dfe615f66b4e4e8e6ffb31b031abcddde8647f5b49bb7b72956f90417da410cf0c4703ccfdf945136aa589fbd2fac554cb8b175ff30169f2fb8876dc169db8c715adebca6ec31ac2e569a23ee0ba8e6cacfa7325f327fdf48be8c71a98bdceadb1e4aab0e69876e51d0108853967960064f4a84caf3175fb5cd3b9cd645d62af217ca2dc19eb43863b5083476e053b7b8b3de67727724c9b3ef34295535ff8f5b1193bc7a4f17345576169c133725866f7d26048bf6794a48a4c4ee84ef2866797c559cae68ffa694942ee5252f2b2adc3ea2eca121e4c9007a675f7c1ac65b5ab57e52b8c935d152ab1452ac87bfdeeed360938ea85357c29113dc0d8da53bd743952d479d9f12bf907081aa6acde47759d959d3d1f1fffa8c18fa0512ca74ab9e287447380e0b756691e5d4853298cf621bce9a515ae905fd19693f2de5538f1fd85bb6873faded4b1cc2f3344e793d21058c9359bce6f2f05a7c4fea5894deb7c9d7d6195898708eefbaa84238600ec1878c4182caa811e8b08b4a8ea8ed97ff71105fa17e0f41ba6f4a8253cc5e15d60ad39494bf023f2ab77ecc80e579540ccb9262b3aed6ea006670b6995012a7d91c09a84aff7b9ed4c9b8fad22f2e5ce4680097ae38f44a05a038683c1a84bad06d78488e4f7434ba314e6bba471fb9644b51c78ac6dbd66e04a3b4726851fa8b5f7448b92b0a5da2ca9323c311cd526108816dbe47f50a61c7623a364e1ef5b08da8ca3308122193c9f500f3d62a4fceb8cb8611504f85c36266a298506365c8224b01f4e4c588d632ed1df7e8fab964e6363891e6635807f4012f01807ea3dbf68b424797b86e93923ff523ca5b789e816c417841a3e5a50c5d960bc7361b26ac7d728dd182ef69930795ea4e28257ffd566cd5d4005269876ebbf7e3f4a5497570407641adc7c82831b35edf3db8f492b0bfc540ed59da4ea5897467b049fc3f2bc4e293f695777110fc93832b30f1842b7330b9504bae5c1c4e7332367ea66833f4ae0dedc185a2777d3e670d9c84fd2e16fcc6b32a3ceea72fbf7100d397ccbdc9ec537aca0a9759d9b402c3628d48dac35fed8081733fdecb484a804a79659477e7089099ce504b51639dc79a4a4d3b10c9da9da64f78ee252b1eb368f1bb5aec6bda50c9ec23df8168f4ab19e31ada1536c637719c28de75dcd6d6ce19f775df8ce9a9f46be3018fd43d58c138093d28e25a5649df153da9c20842b452f7553d32773c2ffda01170608073d4449af4b5809946e9804e678cc7821e8b404e98a8c6bfdafd6cd2c79ba04a73147ea52bf880232ef9e48a1c6602d71c5fbe81250a7cac33deb3569d8fe109456712d315451d7a03858431195234f392edb77ec6ae3dd8ca38fc3aa7abf661ca35efb6c8d573be4ea831d024cb499d7ce3a75891c3d6ff06dee1baba271438c60d9f292e7177c33e7a317a4ef329c6a99d7f96f024c2da8b554b2b39b0fb77a664b37afd42b0dc53953a07b8886ce8579808c295ca603e0e57d79ee4a96d4bd717b44382e4b346b0bfcd8fd751e9b9ee3778576293414123da3b2f4ca286a92938d69a65332682f40abbcd1e38ddf232084ee0d37131f47ce912d5153180ed57116d1d7e668e81fdff926442aac1c4e53bf68f9be89a46211c1b6e6c5f75c13b827277862a8f2a17e1f26e02c81c1eed4f0a0ae773903892c28c23803f305d4fbbe02ac29d4b1f91d9ea11eda95718246c148f46a316a06a6d188cc604a05d1812ea0eea9c833e2a34c06af69e8feb0714aa60f73e16208517d1638483aa8756717658185704c358e12c87442e8ec481c34ccaee10046e58b5eb4176e17655f79a21ab0a20dd13253ab1677aade331f64ccde76fac4f9e9ed937b285f6ef7985dc9537d8929114684b457fcda31a6d1e6ee3710c6f382d11ba5627698b53ad1c7c7f531bc281c1c3971919fb95ec06f4a39e6b124c3cb61cc25a071f81d5a58d7c5689f19d4bce9acb6101fb414f335649ccc70ae940df4be92371e6ab9e6dddc956d1a5d2afd1b7be45fae348364c8f5579e7561314381e82c5f4fdd70674df26584732c9cde68172d7c9cd43477312a1b23568f415874f8f79fc814e29cbec68070844c73d5d89eabc80188d86bee9596082b6b15b5d3c9707870596e902ff85b9d6597862451a6aa2edc9865bc7e614f29b62950437a20c38c9172637d42c9397620f0c8b08f3dde60593abd50842af18e85948f9a84b21755812700ead67e50395bce26a9e46cfa95c7dce946c5d2d3427faaf9197f24a0600a6e1dce17bbe9812e3833276a74235a51a9252fc4a9c127077dd9c0c170ec352caf60c926aa81e9badc2298f4c56ca13908b6a2d3d963feb5452dc5a26726946ab688c274b0a8c4facbd30f09e1979fac2cf658da45621b965e613d2acf3ee929d69f15f8466f0df1b7d950843da50e32cdbca397d2e072cb964bd4ad09447edfa4e319f8480bf309bf6761286e1f4bca643120f06e3f8a2f1df0d5e79a55928df8e4fc2415cd0e7ad45db723f2e050a5022b5d752098fa149e9b0f507a68d222cfae4ab82c73fb539adb495108c1d25726f3e5c404123dd0626acf5760c69ad093408ee1a2dbd0284dc8624dd0c8b6bf7a25c15c11146fad4d203f0b517332ddf2856eaddd3854d7ffe73ea791ed14a2f35a65da4c8888623e8f18b2c9283ab8691e849976c471d9155f0c247c8763dffad2703df388f8d48fd61c76883084f097f05ef09d3cd187ee56644a56cf136e9c5d6ab952f7c98bee5eb41abf441e286157c820924a93c7be6a8d66ac50de9278970e60323d1022c5734b1cb9ee26f65028057b6d3b7f8c9053358153296422e4a8187e85047ca1adcd5c2fcaa53da6744b0f0d85cb49e75a0b0c51dbfa03d7116dadf18ba4327fac17efaf5042203e1579695fdaa51c26a17d03267df705b65746df64d35fda7aa4f35042589889f739c3a2bc4474967a4438336e0338c823b90f3f2477aaf74b4df3ac2bbe5939102e1a45b9b7be89f7236171d5a5705fcb33aef3dfed06fe8e2833615f6b2e8e9716709d3f13b2a9893aff1e568139717575c9a2af8b054a1658afe3ce4bc2189ad0e5b8ee8e2cd4b70b29ca89712df861d9deb621c3efbc8c7107d598fab6c9818c5a751692e425f1cf15b9283e09a5c75d812c71e1c94211a18f3bfe52d18d7df341cda8e21be7fc555e7800895b172facf2fbeedf5bf0c4ba56059cb7f7841abbb71cd92759ff4884bcd73dc75a415aacdd15546f915198489735cb80b513da663755f46089a5fa490c9c2d445e74edeab9014c304d70b262861a0c6aecc6ba99614f2760c65999e2161bce51a462fe386ab410ebdea3b47b2a2fcdc3a5c6c108b52344e18615cba8f5279f0c1efe4b3b7b8f6652a1c3188232b1fc3e87a32f797e672043d85a896971946a214d85b58afc34a14141931be3fa568f2d2c0a04c5f4ab457b6b2d87debaedc497028192b09241da02fdda11e73a351bfca3fbfae7488c936a28b7ac63afaf67861f69bcdbf234b19f2b566480e7c8824078c21ed5d22a933653925770bda3a885b6a18850637fb131daf077d261c500311e4bbf100bf3992bb0d3df1b1ea06c6bcb66207816607fc0f0e5ed9738c79681d572b2b274fda79f03691ff2d5fdd22c5f478c716497982180ac6b6d8429460b6b54c505f0346e77bfda1105a8177d35cf1fbb52a1efd42bed7807574e35d6638f4ad739376839dc25b60dbf777bfbc7c77cd82eb6a6bef923f5c1e3889477e12c4d13b4a4cb5a1b7ed8649595593fe3443e0a6658e33a702e530f8cb9b3fd02bb34cf793db88925e7cbe744176859b7f54fc313f52922f072a67b8b8ae69c1dc012afacf65bf9888cf50d83590fda9c5c7f3fa9eb18699a58b6efefd50f1a8604a6702d7921587448b481539f4e59bbc1fe37d87881a5987069eb07548bff7aae41726e09520dee0691fba19ceb362e3970259dd62dc778d83d44d6e0b79b13255cf27aed3d0353e6e2a4f35051059037acd043eee6ef60e1150a9f2ed440a3b9dd4ade4f1d79b4197d01b9e584b291129af1c801df13ba787484770b44cf74b9e9db627f8b172e1b25fcb43e8bfd30b4e9e7b45e9bc7db3dce0e94f5430cb0dba1d31f84ab07389f1e3ede7fa5e8d6561a37dcb5e0fba78c214afaaf91c41cb9fec76bb5705400d9b84515a888159165a96d2a2d4e9457d99c370173e52bff8eb64878474a0aa9164e4f60a329e2bb1c1b5e2b3c6caeab4ba5873035554e524f7bf8be010b6c41f4e22051743f20581bba317c622a729a1754988baa1e6b85c5d6b43c73cdfd10c60848a5e52912f1fc30f214afe364fbb8287925d6b8e7ea2a24676e1a6997e03084a0f486483dba8ce238e4bfaecc2eba4b739ccbd2a18e624682a26e821d43033895b842d75a0745323dbe4df04f54a4815f738ee5b5c0dcd1ab0dbb9afac49e478fa31767a09adaea51e1d2ff4c0803f8cd258bc51dd2b367ac6cb2062adb345db0d482c77f6c08682347a72ccc87e50a8bb2f7b5b1442b2b2028012468ab71ad36e3022cc7933c7551795b899c4178d11f835b8eeba4dc4ce2a482672aca0dd75bbe8d7facf37c56e4ff1ef6332e9ee821d7f51b0b1ef83fd002e686882d73b04b1c997538828049d241913b7b9aa4f47eda156141db9cdb336f24eb405a65fea8bfe403c650c588eaa95596ce7fb73183d38c8146e314abedf870a96bf1e0b5abc235a145345969ce428683f3f0a7106485f3a0de32510d1fb216081304d33baf02db259e737caa1efb24141a9dacee4fea343251f848c7a047105bde55e69022ec5ec513ff40f26f813b7313d301e32e605ab28ad5f7dd553f2ed65332fab8fc1d869155457f83ab8b4391770bf04eecefa8d37b29494346726520d0d604e6c46147aa46d3ef2ce3220714ded11006144237d191817d07d7c0f462b7b77775954e1f58bf909ec3f141305a4258881c6c41018a2088a54f7679aa162ed23cddb6918dddf15129300c95e3e23e145ebeaafaae5d81f27157b597c1f53c4542ea1a17522b02b78509f560adc93319f6acf01ca5000345171e0121e3504fd4ce06a226fd6f3c52fe72c71a651f44a7a767e5e127740394a04217cf4df2c5f8e2c771e8b52408f9fc827971dc88a22a697bb7491136ab544a20d692c92124e095f584251347344e294aec502a7557967e5fc5f9a546af4e13a86079eac3635457b2d7b4b8886d17b820b214ddeb050d8e6e45b7f0281fc79bf2361a0d50d47a4485f73fc702dab06b77018462b4757567545a43570d7b23a59a2a9ecd01e97d28afa92ba9d87c7c6bcef9bac0406abbb0349b11032d3b63083b20a3476b2576a648e0ff1870f628f0d8971d9666ae03dcc890be574f221c8c49580dba5c9dafb185a1bd1775e0ce67c2c101115e36b526527d65964ddfeef477be87c7c88340f1425b8d8c52037fabfc1d1018268eeebcefee9741f88e3482ce75bd90ed4cc857e2748f56500693de8293b90ac98d7ae", 0x1000}], 0x1, &(0x7f0000005680)=ANY=[@ANYBLOB="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"], 0x160}}], 0x4, 0x4000000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xc28c0, 0x0) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x5, 0x0, 0x3, 0x9, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e46, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x882, 0x5, 0x40, 0x6, 0x3, 0x4, 0xffff, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xb, r6, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) recvmmsg(r9, &(0x7f0000001100)=[{{&(0x7f0000000280)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/142, 0x8e}], 0x1}, 0x13b1}, {{&(0x7f0000000400)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000740)=""/132, 0x84}, {&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f00000008c0)=""/214, 0xd6}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000009c0)=""/158, 0x9e}], 0x7, &(0x7f0000000b00)=""/235, 0xeb}, 0x7ff}, {{&(0x7f0000000c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/93, 0x5d}], 0x2, &(0x7f0000000e00)=""/40, 0x28}, 0xb9}, {{&(0x7f0000000e40)=@l2tp6, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/204, 0xcc}, {&(0x7f0000000fc0)=""/94, 0x5e}], 0x2, &(0x7f0000001080)=""/96, 0x60}, 0x7fffffff}], 0x4, 0x2000, &(0x7f0000001200)={0x77359400}) 01:14:19 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)}], 0x1}, 0x0) 01:14:19 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 45) 01:14:19 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1715.346830] FAULT_INJECTION: forcing a failure. [ 1715.346830] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.349362] CPU: 0 PID: 10439 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1715.350824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.352578] Call Trace: [ 1715.353133] dump_stack+0x107/0x167 [ 1715.353921] should_fail.cold+0x5/0xa [ 1715.354791] ? xas_alloc+0x336/0x440 [ 1715.355673] should_failslab+0x5/0x20 [ 1715.356493] kmem_cache_alloc+0x5b/0x310 [ 1715.357370] xas_alloc+0x336/0x440 [ 1715.358135] xas_create+0x34a/0x10d0 [ 1715.358957] ? kernel_text_address+0xf2/0x120 [ 1715.359622] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 1715.359950] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1715.363004] xas_store+0x8c/0x1c40 [ 1715.363813] __xa_store+0x164/0x2d0 [ 1715.364625] ? xa_delete_node+0x280/0x280 [ 1715.365528] FAULT_INJECTION: forcing a failure. [ 1715.365528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.365567] ? trace_hardirqs_on+0x5b/0x180 [ 1715.368926] xa_store+0x31/0x50 [ 1715.369637] __io_uring_add_tctx_node+0x1cf/0x520 [ 1715.370740] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1715.371927] ? alloc_fd+0x2e7/0x670 [ 1715.372772] io_uring_setup+0x1fbb/0x2980 [ 1715.373693] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1715.374740] ? wait_for_completion_io+0x270/0x270 [ 1715.375797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1715.376994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1715.378099] do_syscall_64+0x33/0x40 [ 1715.378877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1715.379998] RIP: 0033:0x7eff19607b19 [ 1715.380855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.385005] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1715.386659] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1715.388319] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1715.389856] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1715.391539] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1715.393214] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1715.394796] CPU: 1 PID: 10448 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1715.396320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.398117] Call Trace: [ 1715.398705] dump_stack+0x107/0x167 [ 1715.399494] should_fail.cold+0x5/0xa [ 1715.399844] FAULT_INJECTION: forcing a failure. [ 1715.399844] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.400325] strncpy_from_user+0x34/0x470 [ 1715.400352] getname_flags.part.0+0x95/0x4f0 [ 1715.404704] getname+0x8e/0xd0 [ 1715.405405] do_sys_openat2+0xf9/0x4d0 [ 1715.406244] ? build_open_flags+0x6f0/0x6f0 [ 1715.407183] ? rcu_read_lock_any_held+0x75/0xa0 [ 1715.408185] __x64_sys_openat+0x13f/0x1f0 [ 1715.409068] ? __ia32_sys_open+0x1c0/0x1c0 [ 1715.409982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1715.411114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1715.412214] do_syscall_64+0x33/0x40 [ 1715.413008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1715.414103] RIP: 0033:0x7fe2f6e5da04 [ 1715.414913] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1715.418862] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1715.420488] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1715.422014] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1715.423551] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1715.425078] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1715.426620] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1715.428172] CPU: 0 PID: 10443 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1715.429672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.431481] Call Trace: [ 1715.432052] dump_stack+0x107/0x167 [ 1715.432825] should_fail.cold+0x5/0xa [ 1715.433623] ? __alloc_skb+0x6d/0x5b0 [ 1715.434458] should_failslab+0x5/0x20 [ 1715.435304] kmem_cache_alloc_node+0x55/0x330 [ 1715.436294] __alloc_skb+0x6d/0x5b0 [ 1715.437065] alloc_uevent_skb+0x7b/0x210 [ 1715.437932] kobject_uevent_env+0x99a/0xfd0 [ 1715.438933] ? blk_queue_flag_set+0x22/0x30 [ 1715.439883] ? __loop_update_dio+0x2d2/0x690 [ 1715.440837] loop_configure+0x1118/0x1410 [ 1715.441699] lo_ioctl+0xa57/0x16b0 [ 1715.442432] ? avc_has_extended_perms+0x7f1/0xf40 [ 1715.443432] ? loop_set_status_old+0x250/0x250 [ 1715.444373] ? avc_ss_reset+0x180/0x180 [ 1715.445193] ? find_held_lock+0x2c/0x110 [ 1715.446042] ? __lock_acquire+0xbb1/0x5b00 [ 1715.446964] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1715.448040] ? generic_block_fiemap+0x60/0x60 [ 1715.448960] ? lock_downgrade+0x6d0/0x6d0 [ 1715.449823] ? build_open_flags+0x6f0/0x6f0 [ 1715.450713] ? find_held_lock+0x2c/0x110 [ 1715.451565] ? loop_set_status_old+0x250/0x250 [ 1715.452498] blkdev_ioctl+0x291/0x710 [ 1715.453281] ? blkdev_common_ioctl+0x1930/0x1930 [ 1715.454258] ? selinux_file_ioctl+0xb6/0x270 [ 1715.455173] block_ioctl+0xf9/0x140 [ 1715.455918] ? blkdev_read_iter+0x1c0/0x1c0 [ 1715.456805] __x64_sys_ioctl+0x19a/0x210 [ 1715.457646] do_syscall_64+0x33/0x40 [ 1715.458412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1715.459473] RIP: 0033:0x7fae9488f8d7 [ 1715.460236] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.464022] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.465582] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1715.467057] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1715.468523] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1715.469987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1715.471460] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 01:14:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x1ac13b6f1e590f9) [ 1715.482270] loop7: detected capacity change from 0 to 131072 [ 1715.492442] loop6: detected capacity change from 0 to 131072 01:14:19 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)}], 0x1}, 0x0) [ 1715.508776] loop3: detected capacity change from 0 to 262144 [ 1715.516304] FAT-fs (loop5): bogus number of reserved sectors [ 1715.517697] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1715.522927] FAT-fs (loop6): bogus number of FAT sectors [ 1715.524227] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1715.530203] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1715.540587] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 01:14:19 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 42) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1715.554756] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1715.557083] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1715.559032] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:14:19 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 46) 01:14:19 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000", 0x27}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1715.602279] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1715.618762] FAULT_INJECTION: forcing a failure. [ 1715.618762] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.621494] CPU: 0 PID: 10466 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1715.623029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.624819] Call Trace: [ 1715.625391] dump_stack+0x107/0x167 [ 1715.626180] should_fail.cold+0x5/0xa [ 1715.627029] ? create_object.isra.0+0x3a/0xa20 [ 1715.628015] should_failslab+0x5/0x20 [ 1715.628837] kmem_cache_alloc+0x5b/0x310 [ 1715.629715] ? mark_held_locks+0x9e/0xe0 [ 1715.630614] create_object.isra.0+0x3a/0xa20 [ 1715.631569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1715.632666] kmem_cache_alloc+0x159/0x310 [ 1715.633567] xas_alloc+0x336/0x440 [ 1715.634336] xas_create+0x34a/0x10d0 [ 1715.635179] ? kernel_text_address+0xf2/0x120 [ 1715.636147] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1715.637278] xas_store+0x8c/0x1c40 [ 1715.638062] __xa_store+0x164/0x2d0 [ 1715.638882] ? xa_delete_node+0x280/0x280 [ 1715.639788] ? trace_hardirqs_on+0x5b/0x180 [ 1715.640724] xa_store+0x31/0x50 [ 1715.641438] __io_uring_add_tctx_node+0x1cf/0x520 [ 1715.642476] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1715.643631] ? alloc_fd+0x2e7/0x670 [ 1715.644428] io_uring_setup+0x1fbb/0x2980 [ 1715.645333] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1715.646425] ? wait_for_completion_io+0x270/0x270 [ 1715.647518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1715.648652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1715.649764] do_syscall_64+0x33/0x40 [ 1715.650581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1715.651702] RIP: 0033:0x7eff19607b19 [ 1715.652498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.656485] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1715.658125] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1715.659688] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1715.661223] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1715.662783] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1715.664321] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1715.668490] EXT4-fs (loop3): get root inode failed [ 1715.669608] EXT4-fs (loop3): mount failed 01:14:19 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 24) 01:14:19 executing program 1: fallocate(0xffffffffffffffff, 0x9, 0xfff, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x20001, &(0x7f00000001c0)={'trans=unix,', {[{@access_uid={'access', 0x3d, r0}}, {@cache_loose}, {@uname={'uname', 0x3d, '\'.,}\\)'}}, {@cachetag={'cachetag', 0x3d, '.^)\x0e\v[\xdb'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1715.700661] FAULT_INJECTION: forcing a failure. [ 1715.700661] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.703162] CPU: 1 PID: 10470 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1715.704644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.706423] Call Trace: [ 1715.707000] dump_stack+0x107/0x167 [ 1715.707785] should_fail.cold+0x5/0xa [ 1715.708608] ? create_object.isra.0+0x3a/0xa20 [ 1715.709592] should_failslab+0x5/0x20 [ 1715.710411] kmem_cache_alloc+0x5b/0x310 [ 1715.711300] create_object.isra.0+0x3a/0xa20 [ 1715.712242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1715.713336] kmem_cache_alloc_node+0x169/0x330 [ 1715.714330] __alloc_skb+0x6d/0x5b0 [ 1715.715133] alloc_uevent_skb+0x7b/0x210 [ 1715.716012] kobject_uevent_env+0x99a/0xfd0 [ 1715.716946] ? blk_queue_flag_set+0x22/0x30 [ 1715.717876] ? __loop_update_dio+0x2d2/0x690 [ 1715.718833] loop_configure+0x1118/0x1410 [ 1715.719736] lo_ioctl+0xa57/0x16b0 [ 1715.720503] ? avc_has_extended_perms+0x7f1/0xf40 [ 1715.721546] ? loop_set_status_old+0x250/0x250 [ 1715.722531] ? avc_ss_reset+0x180/0x180 [ 1715.723395] ? find_held_lock+0x2c/0x110 [ 1715.724277] ? __lock_acquire+0xbb1/0x5b00 [ 1715.725238] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1715.726362] ? generic_block_fiemap+0x60/0x60 [ 1715.727332] ? lock_downgrade+0x6d0/0x6d0 [ 1715.728221] ? build_open_flags+0x6f0/0x6f0 [ 1715.729143] ? find_held_lock+0x2c/0x110 [ 1715.730018] ? loop_set_status_old+0x250/0x250 [ 1715.731005] blkdev_ioctl+0x291/0x710 01:14:19 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)}], 0x1}, 0x0) [ 1715.731822] ? blkdev_common_ioctl+0x1930/0x1930 [ 1715.732998] ? selinux_file_ioctl+0xb6/0x270 [ 1715.733954] block_ioctl+0xf9/0x140 [ 1715.734745] ? blkdev_read_iter+0x1c0/0x1c0 [ 1715.735671] __x64_sys_ioctl+0x19a/0x210 [ 1715.736552] do_syscall_64+0x33/0x40 [ 1715.737351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1715.738447] RIP: 0033:0x7fae9488f8d7 [ 1715.739252] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.743208] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.744841] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1715.746369] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1715.747902] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1715.749433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1715.750966] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1715.766928] FAULT_INJECTION: forcing a failure. [ 1715.766928] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.769352] CPU: 1 PID: 10477 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1715.770850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.772625] Call Trace: [ 1715.773217] dump_stack+0x107/0x167 [ 1715.774008] should_fail.cold+0x5/0xa [ 1715.774838] ? __alloc_file+0x21/0x320 [ 1715.775747] should_failslab+0x5/0x20 [ 1715.776570] kmem_cache_alloc+0x5b/0x310 [ 1715.777435] __alloc_file+0x21/0x320 [ 1715.778214] alloc_empty_file+0x6d/0x170 [ 1715.779071] path_openat+0xe6/0x2770 [ 1715.779841] ? __lock_acquire+0x1657/0x5b00 [ 1715.780750] ? path_lookupat+0x860/0x860 [ 1715.781597] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1715.782725] ? lock_acquire+0x197/0x470 [ 1715.783555] ? find_held_lock+0x2c/0x110 [ 1715.784411] do_filp_open+0x190/0x3e0 [ 1715.785201] ? may_open_dev+0xf0/0xf0 [ 1715.785809] FAT-fs (loop5): bogus number of reserved sectors [ 1715.785995] ? alloc_fd+0x2e7/0x670 [ 1715.787296] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1715.788008] ? lock_downgrade+0x6d0/0x6d0 [ 1715.790044] ? do_raw_spin_lock+0x121/0x260 [ 1715.790948] ? rwlock_bug.part.0+0x90/0x90 [ 1715.791914] ? _raw_spin_unlock+0x1a/0x30 [ 1715.792792] ? alloc_fd+0x2e7/0x670 [ 1715.793573] do_sys_openat2+0x171/0x4d0 [ 1715.794405] ? build_open_flags+0x6f0/0x6f0 [ 1715.795328] ? rcu_read_lock_any_held+0x75/0xa0 [ 1715.796301] __x64_sys_openat+0x13f/0x1f0 [ 1715.797166] ? __ia32_sys_open+0x1c0/0x1c0 [ 1715.798058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1715.799163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1715.800250] do_syscall_64+0x33/0x40 [ 1715.801028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1715.802147] RIP: 0033:0x7fe2f6e5da04 [ 1715.802975] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1715.806977] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1715.808584] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1715.810074] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1715.811612] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1715.813095] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1715.814593] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1715.838050] loop6: detected capacity change from 0 to 131072 [ 1715.861493] loop7: detected capacity change from 0 to 131072 [ 1715.868912] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1715.882409] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 25) 01:14:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40064, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:14:35 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 47) 01:14:35 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 43) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:14:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100), 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) unlink(&(0x7f0000000000)='./file1\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = geteuid() statx(r1, &(0x7f0000001d00)='./file1\x00', 0x400, 0x7ff, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000001740), &(0x7f0000001780)='./file1\x00', 0xe830, 0x8, &(0x7f0000001c40)=[{&(0x7f00000017c0)="e713b108d055a52b5aa8bb19baa833bb42e33ddae41de3f9021a59eecc863d9b7454d306186ae2eb848de23a67e2a675e3b919f1feac9e26145109ca", 0x3c, 0x9}, {&(0x7f0000001800)="6721cf40a31e89348d648a9cd703ccf1e57a616fc9d5f488baa79b80ca2ea2c9e7f8e05fc06870b82f24dd4f951a1a31c532ae54", 0x34, 0x8}, {&(0x7f0000001840)="9b49e9af22a8c44756a7440aa4a0040ff9caa9db90ea4904e36a3765b1b25a7bf833ac89ff0d8c4610ccf30d979abf8e737343253138afcda454dc90d887887d3e1ebe2eefa61441313a62f49540064b50997858e35113f38456a63144c17caeb0d9d8b62c38f41ef22d8a39272a7440318eb9f8412e96c3e19dee8ea596433b821beb0d9758989c23bebcbfb1ae71d9a668a69eefff24e276f87a196714aa8a717bb782b98c88de90507c8b26258bad5be1f90972d4e835eaa092e4d0d4be1263", 0xc1, 0x6}, {&(0x7f0000001940)="2ad754cb99653e14eef897c077c1b2956224700d213b8d1cbab8e5b3e845ccdfed7582b2ab9dd7586f3823ec236ec70e6177ed96b904f442700f5c1e28accbd9329a0f56202b33e88b92e27b873089f9c9a6b5e632612ebba676c1371d8af9d4c7b94f9d72094b5d2cb47259760dfb212c73782883ace919c7", 0x79, 0x9}, {&(0x7f00000019c0)="c65c2dbc1027f13e6377705c2765d830becff7952f6c6f76b651aa8d9d23c6755fd945e3b2623f11fcdab3725f690bb52695d1616c6f7f01e03d55f6b5c959b94e99c0a12dc5dbd829d378e57ed7e51cb55cc0fbdc338a429b6304653a8df517bc97f305ec50b76656396a75c6314e17cedce4b5e930b89984dfd82f9a01d1be305547a39dfbb1e7c6ce437545d80387b57a0afc36fd4d2450d50c49c9481657c1bdcd2b27dbe4c0d8fc9c238dcc62b0d8ef8fdca0772314f3e38df6f23cd9a9fae605cfd121e69bb754c8760f265969ff47eb1921b7ab2abaf2dc16e2a9ffc99de730e97497ecca92a942b31d97eb699d9cadd858", 0xf5, 0xee4}, {&(0x7f0000001ac0)="5be294e33058a88939aee1d3e21e3d37a59f4237970bbae98c874c269304ecac2fd703da9c36337c68405f2d3a77e628a9e0963ef7950ddd3845a864b37febb01c8219a268fc2bfef2742462872f6597fe0e2a299928b6421af6e701678b921917561851563be27fdadc14bbe8b64e817a6d62c837c669ff673f2fef96aeba4f414459150bdf5d71e9283ed81a5e31c5b25b1fe4ec3ae0363403b2dbdacddd742746723abcaba7d6f38df674fc48ee2a8d503bd63440d266553c907f55af16aaf200547bb6012b247ff6ececffcbdb72c3498dcbd5a48f334adc438fa03f569f83405413847f5fcc9a2252b353", 0xed, 0x100}, {&(0x7f0000001bc0)="01b4a683785d2bf8e977d9de204e5875307213044a467aa9087c4fd2cf2b9d344deafa480b", 0x25, 0x8}, {&(0x7f0000001c00)="af9857c23fa3741f6ac7aec38de676d68cea0cfd64ef22de02964ac471baef623034b100e06a09ecb701dac17b0ddc8ffa412615e645c5ab247d6c10805b5d", 0x3f, 0x12000000}], 0x8000, &(0x7f0000001e40)={[{@huge_advise}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x5c, 0x36, 0x2d]}}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}, {@size={'size', 0x3d, [0x0]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x3a, 0x35, 0x1e, 0x2d]}}}}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x6b, 0x6d, 0x39, 0x67, 0x32, 0x35, 0x39, 0x34]}}, {@huge_advise}], [{@measure}, {@dont_hash}]}) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) [ 1731.599366] FAULT_INJECTION: forcing a failure. [ 1731.599366] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.602350] CPU: 0 PID: 10494 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1731.604326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.606412] Call Trace: [ 1731.607080] dump_stack+0x107/0x167 [ 1731.608013] should_fail.cold+0x5/0xa [ 1731.608972] ? xas_alloc+0x336/0x440 [ 1731.609909] should_failslab+0x5/0x20 [ 1731.610867] kmem_cache_alloc+0x5b/0x310 [ 1731.611906] xas_alloc+0x336/0x440 [ 1731.612801] xas_create+0x34a/0x10d0 [ 1731.613755] ? kernel_text_address+0xf2/0x120 [ 1731.614892] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1731.616216] xas_store+0x8c/0x1c40 [ 1731.617132] __xa_store+0x164/0x2d0 [ 1731.618046] ? xa_delete_node+0x280/0x280 [ 1731.619118] ? trace_hardirqs_on+0x5b/0x180 [ 1731.620214] xa_store+0x31/0x50 [ 1731.621046] __io_uring_add_tctx_node+0x1cf/0x520 [ 1731.622259] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1731.623581] ? alloc_fd+0x2e7/0x670 [ 1731.624509] io_uring_setup+0x1fbb/0x2980 [ 1731.625566] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1731.626847] ? wait_for_completion_io+0x270/0x270 [ 1731.628091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.628701] FAULT_INJECTION: forcing a failure. [ 1731.628701] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.629412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.629445] do_syscall_64+0x33/0x40 [ 1731.633900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.635202] RIP: 0033:0x7eff19607b19 [ 1731.636138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.640557] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1731.642151] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1731.643647] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1731.645132] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1731.646616] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1731.648114] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1731.649626] CPU: 1 PID: 10499 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1731.651210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.653119] Call Trace: [ 1731.653767] dump_stack+0x107/0x167 [ 1731.654666] should_fail.cold+0x5/0xa [ 1731.655694] ? create_object.isra.0+0x3a/0xa20 [ 1731.656752] should_failslab+0x5/0x20 [ 1731.657696] kmem_cache_alloc+0x5b/0x310 [ 1731.658669] create_object.isra.0+0x3a/0xa20 [ 1731.659757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1731.660769] kmem_cache_alloc+0x159/0x310 [ 1731.661591] __alloc_file+0x21/0x320 [ 1731.662332] alloc_empty_file+0x6d/0x170 [ 1731.663147] path_openat+0xe6/0x2770 [ 1731.663884] ? __lock_acquire+0x1657/0x5b00 [ 1731.664747] ? path_lookupat+0x860/0x860 [ 1731.665728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1731.666766] ? lock_acquire+0x197/0x470 [ 1731.667564] ? find_held_lock+0x2c/0x110 [ 1731.668375] do_filp_open+0x190/0x3e0 [ 1731.669123] ? may_open_dev+0xf0/0xf0 [ 1731.669888] ? alloc_fd+0x2e7/0x670 [ 1731.670616] ? lock_downgrade+0x6d0/0x6d0 [ 1731.671443] ? do_raw_spin_lock+0x121/0x260 [ 1731.672293] ? rwlock_bug.part.0+0x90/0x90 [ 1731.673135] ? _raw_spin_unlock+0x1a/0x30 [ 1731.673951] ? alloc_fd+0x2e7/0x670 [ 1731.674683] do_sys_openat2+0x171/0x4d0 [ 1731.675494] ? build_open_flags+0x6f0/0x6f0 [ 1731.676369] ? rcu_read_lock_any_held+0x75/0xa0 [ 1731.677285] __x64_sys_openat+0x13f/0x1f0 [ 1731.678107] ? __ia32_sys_open+0x1c0/0x1c0 [ 1731.678956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.680005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.681021] do_syscall_64+0x33/0x40 [ 1731.681759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.682772] RIP: 0033:0x7fe2f6e5da04 [ 1731.683522] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1731.687069] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1731.688581] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1731.689980] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1731.691384] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1731.692777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1731.694163] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 sendmmsg(r6, &(0x7f000000ac80)=[{{&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000080)="6738ef1185fcaf2a621abf02e4e13589f095", 0x12}], 0x2, &(0x7f0000001740)}}, {{&(0x7f0000000240)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="2a91892148cb7546623bb3fe82f8853123fd3c3cd61334047275b567e60775ffde267d21f0b6da2d01daecaedf8d1807b809c776c5db26bb1bbb22777710255b300e1c721e26fd70d845ec1baf9c3e423ac32a866ef31e94f478a39b53cc4b8568b99ace440869c48a6efdd0298c71d5fe9fd9a37d937890e66c1fdac44681f2f1ac61bd54ecf0c588a24f97b6235e6731fa6629a0926a6c73dd995745340b789fc7be3659f3a17f7321ce7f56d974454b5d01b71b3a5a3987eb0b4bd4b0ee5ad81499c822cf1cd5a29536527bf36a81c9c4c77a98590ab4", 0xd8}, {&(0x7f00000003c0)="86429d078916e6e28c1d924ad380e26077dca51c0db5aa8eaffc92e7b3258ed1b65dea4cdb7df37c0b93fd5e4f38f6e49ff50cf7385166147a446f3d573fbb5500144987b82c3934d379b37343636ad0dfcdf3e84c1a78c6ba07b6313a26e3053c719f99aa2b280974715951874dafbdbd29628254932a5914b94cd7f6e6af385db55052cb3ccdd29847af26c3ec28267225602d6a55c37307b6d5672fe582e4e838b1a6a7fd353955", 0xa9}, {&(0x7f0000002900)="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", 0x1000}], 0x3, &(0x7f0000003900)=[{0xe0, 0x109, 0x22, "19870fdf934ca31719b43d3ac2d1b383d8766055db665ccfaa3fedc0d055b053c44e5e0601f3f1141b135544d15b4bf994930d374ef4d872ab7eb1c82180af10dbc54a746f057c8c45671a26b483389dc4fd39a9617fd37f2e62ee8bd09693bd754cedc8467ed44ebed0ac364fb420cf8c80223222f38cb9772ed6f2016d84ad47f4b5225f335544a544d04f1e358109be3c4a8a911dd08c373a67b7cd010d3b18670683f67548e8ee1ac6b75651c5238cd67032c9a6592f8002fa9cc6f2a54a76434bd3ccc97af6c25acd64"}, {0x1010, 0x3a, 0x80000000, "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"}, {0x1010, 0x105, 0x7, "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"}, {0xd8, 0x105, 0xfd, "7bb4b2948624f769cb3ef081e43cd484cf9721155d348077584252e345fd5ac405e085a2f3c8eecbd51f9d28268d48879628b5809a5924f3273cf40f9e89bacd53e9304a74bd08c5f3b69faca1c8d74f2af4556a49eb5a1142afc8080aa6062f5973879bce66261c19bb011c87bfe5f1e3a95ffd1dbceb54f987796a4d1c67827540f0177c3a9877491b4d9c498310d6ef88bae6f85db01148162b5b0a71e6da73ec18f4ded7bc4feea32ed42f7acc2e3330dd353b1e1419f4c8776d3e56d75590fad09cdac8b2"}], 0x21d8}}, {{&(0x7f00000004c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000000540)="51674d2379f19ab36a45d0bae9fc246353db096ec55bbd79cf205599be74c542eae53c74560d97da13a6be4a867dea2df6f3f513989f13", 0x37}, {&(0x7f0000000580)="cb7f921f3c142517c7c1b52d2f6d62851c76e574ca68d5940e62119c0b9b18b7185fee825a078d6e68db780456b5ffec13b972482ddf5d", 0x37}, {&(0x7f00000005c0)="fc7e098da1035db71f43ac8f3e59964d48662f88bdc6b9d55f6d4ecd4e91cb82f80083819627efefc5a330f24b324a6d98fae3fe92f219bea7823d65406c8ada6d77faf146e8986b172ad21c9e904af98ec7254b9c4494b6aa0def4b433c62b566b04b4a8cae702168d829b43f763718400ce54127e583f01f30f60fb6ebae7df413194ffcc7762706c41afd4fb0c12e707fdc473c10e0d1", 0x98}, {&(0x7f0000005b00)="a0f7d14732daec40f7ae56fa134a27b71a3873a94a20e72efa4c64e7111fa161865f5754fa360cdccab7e2b53479ba1c97f9f84022d8776b97c10d0a342635c3c93d0b3683657be674fc1b3c15c034d9b41f4596187462dffdcbf2d2e1f2510be6b7eec73ad24a500512a489e373a5889cd9263172c4821b3853a7eee77f9b", 0x7f}, {&(0x7f0000000680)="c57d8eb713a4200aa2028e592f0470e3acc54bfa5043d664dc244ab3ca83b6953efb3939", 0x24}, {&(0x7f0000005b80)="26b88061453daaf2e6dbc5afcd95b3ef00e47253386b140367124d52be817ec5f73d0d6c05d40245b68d28bcc6a860145397557650c14cb0500ddd5d345ac8e75eaea469e202d9560cd4a79ad2ed9a92b949e3deaa7c050b14ccea59a6ba9b2ae38594f1a8540f3986ef2ff74322036c52b9c8e0edbd14d00e174a669a0e8a5cce", 0x81}, {&(0x7f0000005c40)="3f53d13ebc9a7668132bd55437f6388d8a09b4ec34d4c0f2b52b22acca52eb7c11eb6d14308a2eaf75ff2f51baccd52512e5972c8f28b35c7331dbaf1e208c9156b893f5cbf4631e47692564abd1ee0f605ed37e8fcf39c912d809e4701f268107bbaf1d76eb8633bbe68107a62618e8022497d905f10ed7e806ec5b8e7c3c12cc0ed11125fd1a733e8f231a6d3972f2aa731d08d89973c22dd72255f25e9c9196e4fa525dfd6095b9ee0a3c8bb1126dd954a2", 0xb3}], 0x7}}, {{&(0x7f0000005d80)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x8000, 0x3}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005e00)="6c4beb1f671ac397ae1511cddee17b52b5fb097d98a39b5ec57821cc05376f783b3eff98a05376e9a495a88f6d901bc3da30b817725347452f8b737f50b142526cfee4366288296b186a7c2d7ad21bae1e3e51a506049df502317292725ebdab244f03908c64e677bc099cb5f7dda8b4e01f4dcaffd0a0", 0x77}, {&(0x7f0000005e80)="43a22c28130631ac32b73ff34c20ee9a2b2334dc47610668c97df5cd77cff112417d6fcbf17a534db6cb85ed28ad6fecaea25b7d22e23cd81ddbd8b61e9c0a8339c704b74e605d2f64d8f489ffec37ecbd8e9435bef71de598330ff62e0a0b3845491076fde0451b2d8f441e18da8b17a85e0e14de8e3f6c9cdec585fc9ccd0a7100218dd35f8d3ae59d3749d6ded4b5e373997f145ad9b28996114ef588477caac5bcdfc5eda5ed661d80ffb6e8b184f9a091fd747ce4411301dd56e09ea56b3d09a3c02770392bf204c7c36124a364e63b66", 0xd3}], 0x2, &(0x7f0000005fc0)=[{0x1010, 0x105, 0x6, "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"}, {0x88, 0x115, 0xfffffffb, "0c0516e9eeb429ee52c8c922dd76cdbeb8cc7e4765f4be4e9fee1ad18193561fa0f688e02ecc3575f7b2fe0a57984d6ec16f5521de7fb12c040ddb3d691c1ddce08185aa8548fa115700a85d1e0315d550df9500c04fc56cbcdf1607c7a1a1fe3e92293669f3877303e6adf2aa2e678b64b907"}, {0xa8, 0x1, 0xc1e, "b2024e4ab669b4e906b14b9303e461beae49aa63d9220400b6c81910eeba666290098a5b2a8d894693f4f18abb2127f5ef860bf7856db0071c1b3de64c626b93c4994e7c3a950447d737f594635b32ec5b978f862d51403828326a4e880d28d4067044ceeacc1a986279566fc76549a11bd126cb8377e506204606cf8c5e5ac5b5541a86510fffa7d5d071e89d673b7b47b544"}, {0xa0, 0x10d, 0x4, "febe3550bea0c532c58e9e2abf64630c2fc77439b1f63f358307921ae2626c05f3357ac6ddf7f92143dbee24600caa0562e2d72981e40c53fd90cf1090e058acc1ac813319bd4dc98fe9431f4e92d40cf9ced7d086b45a22690a4573b782d47d7fdca155bc8eb1c350af03548fe35bae473f0f0dcdd140c5f5b597e66d2f3116f20174be03a76e9b8f"}, {0x20, 0x116, 0xff, "c49524deedbc2404c3b0b2a1e59629"}, {0xa0, 0x10b, 0x80000000, "ecf33c349ce512d08916498ce572f028a8c86e11058e08b593291165005d94661365676937d99ec595bc6afcd2b2eb5a3ee912b82ff28e15e2b1a4f9f4f98d0943ce66aace7718eb06fa0ccd8d2e084ea7cefcdb12255fe0daa2aeaf60d13bda8b840d68701809d76dcdb10abfacbfd3fa6f7adb5e715332c4682f35fca686cab629efb8bd208c2e1633837065"}, {0xe8, 0x116, 0x9, "c17cece398dab2becf7a7f654db160224287de89313a1f146862186ece5966e22657de02f771c1d96ccbee9e10abdd6c30747cb31030cd4d77cb23209193785788c0070d978eca4d352cc85253540467be60fcc6a3147dfab399f47776d4462d89ab51f1a3d1f76ddf192d4a4f31883e36de26ba2f3810de0fad7fa53f82e79b7b84731cfbd77976d5896677b7bb68682aba93dfd97e114c4ecc75f670f493032c4edb505eed5c6d0d8234d899c42678fcc5e9cdc036da46ef74d69300f94ab2adf04ed143c3229264819329946a9952b120"}, {0xc0, 0x104, 0x800, "3f03d5f105302b612e74241d9b8a4c022af4cb18ca88763bcb32e4257cdf43d244719b2ebe0953e24dc2f14c701da322905f79654d69cf931e3cbc8dafd024ee7792e8d0260848969e2c442fd75120c5999c662eeaf9e559dec6cda245b47c08a4feb00c63a0141ddbd2af59a34da175a0cb54198f179d78e7770fe1adfb6c11a1cdf7a8a41c1435e88af38270c4fd2a2e689793f1c5a825a574ecbbba8306dee24c8ee5e27b491293be254e"}, {0x1010, 0x11, 0xe2a, "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"}], 0x2458}}, {{0x0, 0x0, &(0x7f000000a7c0)=[{0xfffffffffffffffe}, {&(0x7f0000008440)="fc9094672f7ada75a6c1d58efbe7cbf1a7a6d5f39010e471a8a33175eb852e011b05dd1f7cfde8dcc3cac4ca3cec964ea481470d300924e768f570a3282610f291e753d6fc1ed671a4b024cc897fbcc02eca392f7c1bc37415d81718f90a7bfa5d926c0b5fb6bc9403cedf6315b57d005aa3", 0x72}, {&(0x7f00000084c0)="a31dca7b5b895c3aca28625d563cf34aa9eb7ff885d12d7f053748f73df1609c2c0555b0f71b9f569d08b575b26946ae533b033e7d69a02d231e85cb28162df6c8a8555c9dfaf09512e2fde1bcf5f853b135ccca173ca2d3750d54cc9a4a82c162e03217", 0x64}, {&(0x7f0000008540)="9a0b91105e282f9bf932671c12a69537874aceccded6f959355fa6e78010ceb1052e4f101be7e244f92968724158f6fe5c20ee466bee7c7eddd32bc92fac0cb2ea02fec18747818b40db4f9b3dfcacfe5f5e4855047d6892360952fbd343940e2908ac8a5dcf25cd152ccf7b1f128ad202a511e31f2f199a509894ec040ea7d560697d82e668bd8f35ea58d43b6cb572f91beb3906b04376c62b963beefb0c8eececa4d1e3291996b4d370d45014dc3b577dc2e64945ecf1788d9d7e9dafa330bf6c3aa4eeed9fd2fef9e72c1ae62caca8334a41628ff062be349c34b2756da5697abff950fa1f545788e1dbfff42d5fe766c848a14b1033493473ee964cb8db5ab7030cc50daf82c5f2332d57a133c72803f71a3cdfc8c2cef73b8340600e7144925e3169b74fef0ef40d9426296fd95a4c825ae41e7d72016c51621243eeeb778bc9735bd48d7c799793b8e3ed7a0fbfdc063caf3a375d578fced51e9413f66f8433852151216b5d6d7b1d86563b9ff316071ddb811983122fcc0b70832a2427ed170e74b39648152a0e3aadda9da2bc2c5b2428bb5b4ea0195c00786ce2a1f7281c063ee3d0c073ae075905b2c5487b823a48522a364aa0d8bbd8cac0b80562687054cd9c1ce8104ffe412ec27b2db07b2c686f271d1cedc26dfc0532fe26b6242da8d4ce9b50187ac9a00392d9825be77b1a9de0cc83f775525d378850672910c8269fdd3f5adc34b46b74677a37e091fffb49b66e4baeca48e3257340896430b86ccca52577150afa7901a9013b9463172a5980e446b7b7496a32201904eb3d4a6316d917d12437381b794fe5c26085e0960da5574ede59c9aa2699f4151a50ed6465ded53190bface07bb4cc9b403e50125c1baa57cb0354fb2e540841cd42272305bdc612ac7aa10d6366828745163383fcf131741c40f33ee7ba8c87a5bbeee26ba9479b29f0b599fd246b42ff407d2183a77606c9c6aadb9d99c1ef51270d981877f74c766f53dbeb5593baaa734b8f83e7376c80a43c0350d597dc972dfe13d02cb652074597a869baa4f841a25d33581745617caeb5b79b0f21c56effb85e43b7768157684aa37114c4a7e5ecf6126c8bcfb8e779b2521a189839a31a36ede8e9886c4496f763ca5120e9bdae711afcbd07e4acb23eadef6e4f6ab5545c672479d43bcf9993485e5f80016bb486ebaf270d60069726ce68312a40796491a5a4bd281c411287214c5a601c18116b29432da0a428cc43ec408925102d9f6fbac9ac0bb94bd8987b259d2d638d509d0b418330c87ffeddb3505251fa120e8a8f588a6dab0baff9d72c61c94b64abf89d1ca2079f2bf8c5d32e111adac633c59f72a513d37445e33031d839b4055845e81a31fb0a7b427bc45f157abba8c281c0431a2f4c978fdfe9dded785408f35227cf2c7b576c63460f154c5c9b205ea89c1729d8b9108308bb6a61589c47a9480b897902175a124114642a1926105640c4af8873df07e5bae114964649b4cf83a5150606762eb293fc95c877d70eea5746e9970e205f75524140c8f1aa52316efa48f1fdccb022f6cad1aec7aa1134da25c9ee81e995ba039a36e2680bd2795fda5c1208d7e78af6ac958de3c54dd17e38ce69a4b6ae2346459641c5ba7445c9c93aaef2c3709543cb9c3fa219a0d8b4b4e5595554ffb71956023614b27ff3a49735afd94c04d45a1f702076e49c520f5d7cf2d3985fd7d84188fbad5b19174622ba1dfdded7c94012853a1907f72d7b4ba6e144a7851d50df2be19dbfd2dc457eb1758e4b8c8bcec6a369751d0ff6d6bdd116c7a54721fd4433808f5cdb9d7f2c438e2fa17fba5ea5542b50a9c45442608380c57986aeed2c6af7e5c4995ce6c4abe6f5f48443e90bb7ab72dd77b2e353d2cc580dbcc55afdb739c0b9796b1eaf5d2ef98acf142dee51618e5faa0a8fb1b2be725434fac568de9556ad97084746b098a66863470c1eb2cf1b0c26086748c4e57f4d6ddeedc0feb577a174bfec7af6d64d5068edd135b4e5ac7b0ed0aded420feac15c03dea12b1c400ecd26c463dbf2b95bec258682882d768d16109949545dcc1b5f8bf6a67ad13c8ff5077c538b1d96fc65a2c318cbae0cdbfa88d10fcec5d649b7704465afb29da7579438bdcfd6a9c3a562d1a1317ddbb0cd5c6b9d091f2099fa8563fa286db5dac90793f25fd8b6f29d0df52c564d5b558fa13cf2d15761a4e663eb907e8ee05602093d5d927e8b41bc02724c42e4b38d871b1c2adedb338d84632dc6f830007ad1c9d9b27f4d23c57102d56f4913d5e017220736d936e8090ed8cf984fa9fdd509f215182ab4d6cc66750f2993f8bc6603d7cdf6cf2477ae4e1e2921b4f818d0dba9ae7c4eca5cadff01db8288768c858ccb05d51204f7acc6ba2f11fea590feac7dcbf5de3fdb9be453cdaf4ff2c75243a74c8e525cdc4f16efbfbd65f139480775ebf55b5d35b3a555388b345e978960733f4abc30d3451fabe8595a90698020c4510cbec18846defa3be1a452cc3e800b481d16242ba87bbfb9d4d7452f5ba372f4a14de26b246e54a5d31a9f51512cd86510e5337115ca754e7d2703a9746dd5c4f70fce35396d277570ca9895d7837d54e33ed625115e0ce19d2edfa38569cc9acd9f6c26bf18522ad0306d4e0f70a786aac947f36be76f4708f0d96fb17e974e4bc408d867c46d7d24c39f53c22a4b529999f02d5d7a54a2792178bc56c2ea9b79ddc518fcf23729e0cd27d68f83bffd8049a7d818735aff93bc492f06f1aa7b63040b8fc7c1f4a980728c053a093b2e7db451941095a9bcac45a69f5e5b8aeefd26f9c53f96230e718c80fd5f516fbeafdbdaaaa39292163640abff0b484dee36210a813c32f0e19c3f060b7751cdb2941ba883e54abc9b66fde5619964456f2410d08017cd024242014ed3456b3cbb49fe19fdcab065fb1fa5572f4658a82cf02d7b2fd6b88d8e1a2c34dea4fd3ee593bce518eca9b28d25236740ec6bbc3b23b9e79acb732fad121b0a9071e1d56aa4edc00621457b4c533ee5481717049ae6837f3a9078dc9b9d564b2eff53bb8920a326adbecbaffefcb2a4f655cb67a8e5172532ea5feda1e45dd4054372de147a5410529d601ffe2110cda2a7585d727cce6c6d491b49ca49a6912a4728f9e15499ed159e9f918cf82970620e2c1f5459318a1dfb86a5d24fa4010ca3362881bd219ea7135dc044c26aa451d908ffeb0d793788aaa46e149fadcd318bd74e23003b19b647f76101df42d005b7f51cc390d4f6436739186ceb58c437a440b1d3c280ec1f96078dbfa7333a97dbbb563217a634cda320e9f0307e3ce08fba98f3e82101c04f82a0e7e8aa95b4ff684f4ba355452cf6e6e4933177efa6c1f8b4d95148e590168b2d0385584a6533e4d676b88659e47576eb4f66f38f3774f07d147f19f5950406c75ac3a100c09bd418b298efd85f1ae6401fc895477b7ad3204be6bc3d3691f6408bcfc401596f100cacb3e67acf6bef8af02f8f5fdd124edf083bc3c1d854b96251bb221643a8de7645a55d7154da0b1db650987d328d597fb8ed495fe7984f281ff4c76157cf8dd2a15e833a9a9a4b86a111ea4034d499057f35b4514ffc05a301d0e8ddd4223652b1270ccae0783ca0e1746c470a0ef3239a77e26807d911f5c4b191f823932f2faef9bb462bb6b915ff4b27319ae84a79060ef251d76035362031dc7d4829dca9cf15f2a23ef33f633d27efb60d06cc1ae3664cd82a77b3824a9117d9880a0668d8ea22c8fd5e18cd6f05d42b8fd070a01f75d1842395da710bf5bd22d6901c1c6e42fb49cc4d9294e186f77fa4bddabaab6f7d07c508cd73664230d534e7360e4405ce5709a9c1a453a6d954723b447bb19a73ed9c15e63bde2e15d776f417e9c58cbbfe5250315400a806501697636797e8cb0a302089091968f48ed2fef50164cf127c494686f00c7cc8cda4c9ada24cf56ed5d7fab94aa8b2de8ce78d310b824ea2229b6b45d0eca8621224fc1b17a74a1422687f09c8990be5cf55362d487ccc0100638d7ee44569b29e9c59bbb0edd098625a8976fed869f0790ba3e836867f457afc7cce49d6cdff0d091f77ffaa0a2ea9ea355441437ff7f46e02228fabb75d8f40638f1f6ea3564e7dc9bcd92a59d6425f04ebd874a3406c064b27a3b7c5a99f27447ecba289319eb1912910048f44bc984fee797c8b1bac7e0c0c265d00b4aafeaced60a5dd32d6962d9c10608cea5f6d94d7c52aabf03e875711ba3337f35862120036a2d1be4c4c66712c69df81500258178c18a1a8c6eceaaf160086c12b251661a9d2aeb06f09a51e40e8200d480d408711c0d17e223cb5d65a5532703e40c785aa7a3711bc9f366c3946460f7a7654ce978b0ebea5bb027360bd04bb69fc749cbf183188175caeb6e536c62be899b2b59dd80cca096d2a2b5c0f700a32fca50f170fc3a9244da4a9686b3bd19577011fd01abeaad3303f722927b6d40f2126d636b6afc601036225bd078d206468515954d0009c79e1adf86ad3e59f01f8181aeb239cd5da5451c42db1a91780ff5d7b9efc7e067ac88e3af825f73182afd8b22ca16c4229b24b27f08caad9df21b12f38f2bcb7bae19d9575fa8355e7bd866246caffd7800ff8f7313005bc17ee3d840b2b60f394dd6882e06e64294e9e94ecf81210214c84c7a55a857d8e8634f389c7ec0284e5573fb46246b77716f2cee4dab89a25f15e803187f4c9200c54270263d88f0f87b0b62032c5024461caa7a9ce3f915fd43c1f6a0b49890feb8a867db6280cc05b1552b01ab54942752f1fa3c21aa0da6ed31bcc77527e45e22db6f0b7c9ee4f91b27faf2bb60d5d6c01bcd10c787dd1ced04c5719733cd93d8e2aef6f429b7f1c3830aaa189088e83f1e7359ebd829e38d29d5ee53a6b48f98a6f16f3541415e07d3d874badf72413fccea7516cfc8b109a408ee40254a01cb8041af6ab9860b12bd5dbd3a8ea391943b1d09ddb480b34839d76bfcfd0c5b4eca95ed6ea0b6bdecb379caff6d9a4e45b6d0826945dfea5250679876fb321c19d8d0e69842ebda05991ed035a3a288c3322532ea51ed91b12f35015ef3016e5abc9930f86a8d9ad48703b64bfe722821e545da53597dc5bed22e28911475346bae233c270e8584cbfec356a910ab43402eb305065d87cc9013493993bc39250b5b730649399c31624a97622aac2bc86a9b2606aefdaaaeec81eb8f671c687d4c1cf545c1b37228cd143ac141e2fa6d6b12bea07a1cbb3dccbee16e068b5f12736a7850eab878c0c62fefa6d55459e459f9a8726b6fe39628526a5f2867e8d9b141c9ec11016cfbc4f0c69b69bd763c2438f3ad1a6729a64135092e261c84ea26b9c05a19d77c2ede27b084aa56fd2becd07948272bfe5c02f90654e590d5aa341d70c04a49bd7c73460fe9e7ea135d09a50b9afd5c7576fec81827aad341a493d625a46eb5cd9bbb8a8694a984418d46b0d105e0e5d29e8a540a16b6a7cfe11bfa3608805292bb9c4700351ed3a95f2dba6db46d29134dd136446bbe81f91e9278cb21d53eabed409b597d950b3d9841f9a92e9feb88a229755316aeccacf11adac1639faff625ba5e8517ef8b628527c6a9d93ee7a0c5fac3c4ff69d2d1b305c2fe212146126c92e7b09cc29ab2a2146da69a0ae85f660272f764ceb9b27cbfb905251150690ebe135525bffe4ea8e58e629163ee1e59f08a626ddf37515f2ec32fe7c6c258fd395bdf21cebef4c3f89a13bc2243bb0958a40", 0x1000}, {&(0x7f0000009540)="ed695d2de4fae99788a063fdb6db12457d205672e828780030ab7107c34501f21fbdeed5b546654836788245c7542a64e64d5dfb0eff358ef6915c592f67381b5df9047ecae3fa69793cf52042ef98450e605a7ec7c9f5e504ce51c03df772040efc337fea0f60758f328e6e0168a1f511acc40b7bbb573b2c05d0c859cb86096799854eb3a91892d765d392d3baf0520e4dee650b514bd0d75a4f7e877162c64cfde234b02c0d7b47c7cc4be1a7e00051611d1b8d", 0xb5}, {&(0x7f0000009600)}, {&(0x7f0000009640)="fec215458fbbfbdfd8773efc39729c1a099d51200fa821d17d5cfb422bbff5580a9a2bc42187b8", 0x27}, {&(0x7f0000009680)="42444d616eb7e3b5bb440c9a4bc61dd73a9f4720015ac2ac9d5bd1dd1683e60fafe64ab048129384aeb688533209f7b50ab1e7d0ea2589a2a96290d319357310aa388fd0ecfb7e717ae0d855e2007d0f86ecd8e39a8bd3d8aab6f3b289b9fa00af9dac50e373d861790ca7ed1cc60b134c56b94f396b85859048a59fb2a2318acc6e90bdcb03b2bfdc76133adf9783399ae427cdff1e10f17c15d5105be92765c1a6b314e8be7931a363cb213c04925f11b876bbc00b13343e246c511f0c91c6935774fc911fbf81d95f9d5c3ed98810f6ff9fb024db31929c9000913b89a9ceaad331a96534dd959b66f969401a7a6a603db5c39433703a083debdeb9cf7d9496f6418e1b9a415b19247a49d93416fb4030bf5ac11af432ab587127caa8f6ffe94e016ee930d6cc78c706fbfe5d5d50af5e6b40106f4109d19951af1f2e994a0620b777bccc5adbfea9467b62721b9c26e91a7470f5a2a44e6d55ed48ce337c8cf31167b72f49c6f495a540f2135a35c3d3d95ce56db338a42ffa104a4aab05fce3de5ab236226098d6c6c6f6248a5a03cd9f3c2fd3c6f7c0ce96d128b44cc99fe21aa05045e6651ce0fb236d56f8279a509c447141ede169bec1c426bbcf76597b32b2b0e04e02cc8333cdac9ed45bbb795b434e515cb7f4dd6e9a8fbec397706c8fd13f93dc993392a1ad5646056425e600377a2d8ea81ca5ce92ee8ecd2483f2141b9627062b2b5b4c38cc1fdacfe067cd9cdd9a22b3bedf71772b0ee44309bb7786260dfc9b13abaad344e6357647d5e02c96e7f2eb11088201dbd7d49c4de8d0085b1a0d932ae04273809c8b958c32dfacd0c667869f1f30fe27c01e5ee0744b892c54aa5de85a07a1b465a66d1bd41312c279dbe721c673bcc3d922091b0d84216f79f261ef2c832c1942ffb6b7e4b4c97f3cd9cbc229a9dffb69353592929d8c38ad4541d7992478d2a6c4d3b577c6b52b231d901b109384dc6756a7c447a17fb749a267ed11acdd8b31ce1bcc13cb6b1d3566de4b7123e66fdd29a1ca4c3727470010382d07184d3212f75d7c98398ff04f8458ae09a2fc977dacc70bd9fae8f5f35f310ce7c70b9780eedfdcf9aed527aa5b455098ac6c455ee56e2655635ebb9d1bfb125c3caf50b41eda43a96c9c61579f992b143de55ceeb5df4a797e4661747d8d510b71c21c564235d902ac653bcc5516d015bffc43fe31218bcec0fb47112280ab1a6909323ebb5e8fa0cf0ca3208756b55a81d249ab6590bc1d43fd43984654ae27c27119212ad267874d9590b182c3fb40dca25bb38d05d66f5b7096d917d77408a50c5117065c1ead070d81da5293ae2d876c47052251c6c7df7de575e91226c0508597369d1a7b9da486ed6b824696e821f7273737cbffab6d7da24096ffb51138190afa372c6e698866fb0ef7d107c3d940027edc9640973889d4d6b4a039aa2c10538fa44617a71e6c29e3d4c9f0ceacedc666f7475b0fab5fb675ac27c98465580a1ab9a0e88198b2b018540fd981f6cb6d144c8e47d27bab2f3ef0d32ccdc1932c6253dac54ab1f873ef1c9933209d5f51ea7ac528ee1e438c42f781711d4d8c1c1ecd1188596a9e9569c5e0601c9295171681c51a0726f51a9fbb9b01602dc6b97e22ad659c4ad9e53584585c31299e49eebd77ba388fa8b09e45aca43eb45d3fe6481938b61c2c37fd60b7f7a407cccc7075e6d06a3633622c383beeb6ce3bd2ed723e26d9daa2f7c15c0bd8997d145fba40b92700be1400dfcd717319153b3a27edeeafb374edb97b0b59285ef133823f2fcabe0bf6c114404fcf6a2c3babe6c751910e064c64adf167cfb0cc2f0978aa37688eb827d6b5cb4ac2da9dab381f9582c45b267ac9941c54f799ec6ad43633bb83ed20a9e0b2c1518217f1cf29de6471c82680616bfbb3979edcceca5810d8295eb4c032a7ecd3212981fa2b35e03fca57bfd6c445ede78848191e8993ea028df366ecb8263bb165d73c9ccbe24936f1c46e86a3884cba39e7af3f458ab56e5e6c26e3e2ac4d62c3d663cdf446f48b249779679dcb7405b416c2643bf75b7007d3e7f8b1633e597e0bd260ae390a88cf0487a076da54e982ee95708817e7387d2e5b69d71d3a3d150b329a0b9735898ca74074954fc682a3c8b24fbc70eec72dc35d0b230bc6d1538062cd6b434b889b4e77c619779c67d4fdfcf19982b008181859ed8431d997038d900052c73f15c4b205333f14413812e1aafb94d36f5660816fc9a41d092b1b0909d10575ce6e5f29ed7687a4eea9925945f031d2a7bafbb15f5f0a3542af53d04909df1de8b41f4005d22d5b8ac19c12f72de8f19bd78725676b357aba9a0f51cc7e7793ada4a37575ff9e683e90c03e59336838f696c53997ea32d2c63d8d65b571d271ec084923b6d8dc569b6afcf6f6012d46306f514c8697ab290e6c87263310f057162982902c529746cd033adf2764f6c6508c4de90bad95917a1084844ec336429609e5e2cba543bc52bf95723c5c385485f30047e0d01d45ed0b2f480766acfb5636e1657a7a385b0827894a24699a37b3c06f6cb8adf97ba4d4a2c2b4cb2d6c7023463ff133907bf336a2dc270d14b18180ceebb2c4473ff40fa985fbbf37cffb5d451034e4b65d9915844468fa0588b5fd381e35e3379ce53d78fc86819c1899f94c09b7acc3b827a97f039c781257c71f1dadf92da8e226d58376afa36608871d9be34ce135ca970e92a83e3652adc7682890961fdf50299012d82f285c469d685eecb9f8552d855ddb6a347fcae24a1666fde4e87fc929bd947df121360e86fbc710234add991196b4a044bca3db5aa31ce87ce478d3f732db777cf24740fc4250bc70ae36e24bb3f733c3934decb0f4750cc6ad52901f1595f83f31a22de0a98b7aaf7d9c924ba221f2ac425e086b5e0ac95d2bdd76b487325babd3a3a5bf82c5f60c2f884e6526c237323ce314a4ed52a2a8c950cab80841d57633a44a3b0e280f6048130ec297d85cd4b73025962821a31c58ef7d2fec95e712d33e5011504cb0e44e5bd303ba3b75ee1f044d21b212a5f73bde9c4f2a370f04ee3f526c8bd223e13841ea1b39b72e724477d65fe89f0bacf0ff3ff6b3189b7943ab201b269115061dc4cefabce958c961fa04009919be4bc42e98dcd92e2473139db29769566cd011430a8ac6d08babda13d2e50d212e7b59c5973320e7801ebb50507ffd1992e81b4db763b87034aae42b3ed6c27be8a6a281fd1fd918ada595053af4f9182ce4a203edfb1b0c8cfa6d77d39d31f611125aa7aaffd2c855029d9a7431edee361bf572aa79ef6659bfa199f3310c6cd0a4a2c0025ee9aa10fb697e7a1e89d01d48eb85a28a4e7a7e31af872a3e3c5508df7d8e0119f2dfdfc381b2865b788d9b1d54b3f8a4b937ba50ac0af11180bd055edecaffa8a57cef411b8b757068f104d887b7d1d2f2065e1d19a0c0d23b7784e7297835fac5beb2eda9147233a4f9d4f0634e98547bf780967ecc601e5445c7f93dbaa90c73b86fda657a94fe4ca2d16b0e7d55415bdcca9d866a65d1b517509979f46ae00d3c802f11e29af081f16d10b0235ca6c5c826b7716917b9a78eafb1c86c774776919f5d072bc9a635ae35e0fccf075afa434c2d6f784f505bf6fc14646c2dab8f98fdad307bfdce6442195ceff3b940b3730c11a578f4174dd66b1b94c86adc5466e24b06e2963582c9dc7fdb840cb5561d6da448552f6e949696cb9a7ca5b81f47bab0d3dd68d4c9b704857c10daa33be48c2222891ee56641ebc6fbca687fd614e28df451ca74d677ca34e62c2f266bddaf2c25303062c30a9acd285270da14c87d91c263dccefa4ad7cdfb373acdd221936a1eceaa9b5448152cdfe17e85ea620953d4cfddb16b0429155411bd6448e9a78fdfb29b4610f29a0d49abcd80786be1b9dcd8d7f0a3d8f889db630fa3973baec4a6e741838f8c9e5e0fef1a0fbf61426a6392853e4bbd94cd7596663331cf5a01580c2c62bff3f9f90f94ace0881fb75fca2110b9a7c8c60d586ef6f37b1b44d7c103610bef93bd72218727d9283491c862f6f7f230e0be87684b2b224d8810c77744b858b06a707e01d8a3e5cd03c203aa834a2886c07a39cf8878c0c4ab412727a67a99cbdac95f2d260fad6c90e629bd96ba0cd49c5de039a54357e630d48427e782d7e0a61c6cf5e88b19d07cd819ab9f4eba33e1538653cbdcbe5493f92d19eda11924032a555cfd502cacb1e4141da42a2229f0666ae0d88637bda4b3b65ec6e05e6f706208e054ba63e0382ac21b5423043814ca21c41b7ebf87d789fa5a9dab136828bf2101105ed4624a2958d9191be67c647d01ada84495073ff7c036c3b1d98312b7d2871fa3d9eca0a9c07bec0a7805915f087764d607bd53bc3dca2ff2c5d0f8613f02c24e0430fb4a55ba5cf4e2fd5da46e967e2eeca24eeb023179af9f80e09186f3e093a2b4ede518f340ebee07e54b6c4d08329e291a30327cfad4a51f83d4dea5fd330759c25972a32575dfdbe437b953e667c32078a28ca1b2ae08e33fb8f1a8a38297bdc97cdb67bd1d05a0bc26f7f1019de1363e20216fda0ee250caaded03f884fc050f43cd0a81c16ad02988a66536a18c1139d4069e3c8a906414b6613449575c4ca032a707283ab6d63aa448350f7a2540906450f34bb7e70ed2e1f37334f5928804684b5e366ca65e3ff6bb593cdd30f5f5b5472683b5702e91905ce32b2e2ef71192cb8f14751cddac280be34483ebc3932f887317321b6b9f9ea9b344e54e739e0c9916a220969dc8813da31166e640dec0f13dfbdf836f9bbbb35eb08ded4de4b84f94b6b7fb5d15ad071d5913c4710eee3d241fa3aae200df5a01f9e9bbbde07afb538cb37b6de6912c4d9cf0af229d991b7604316473995758417abf90f7b241048399a4dfe9a2c7213dd4c6cf20ce90f3202016ce6f103b27cf94e76be5f942cba4b90395a2cb037c757bb848a847366b74851b8c459a88b5cd75e30d1cf762919d59495e2dc1f5f00678a13d8d2025598f8aff1b5df2a69a30c0294aa119aa10ef4205eac8625835be50f34a2681328238ff4f90a9889552b8aa698ae2da0ad2ec51a6de6094fc71346962ebd3abc7f0917072e48c40b5085f9da76423ee564adc961b6a3035c063c431046c25fc996736c1b688be5dea834e01e6c8316a36990a59e15be7ec9d685ca346952c45a5ef1246903a0d14e73426c033ff641bcf692a2f98a83c410856bfd701a70f7a1e452a46528373cf2693ef9ca021ab6cf354776ae72fc11708eed66f6662dfe3b5727d323925c07b29ba01d0777abc06e783340b0e1db4ba7d883002321085152bbec5795f221877a9a979a982120b02bada91e964f6717d53db9c34380486be8403434c612c9ee5b39e9389105e0709fc8c17ac8f9fd783ea989bcea15f89c23a19ebfd2455b4754f5b2d434cf859694f3c03fa6a20b9322ffb885a367ac3b6e0a80e76e10bf317f531bb8cc6af8c0652cf19cc26481e3189ea18d9c3e8f5883e4996937d2a3d12283497bac48c718e48f79da26714c8b41943bf2c32dcbde6b15d1dc0c910ed784980948bd23ea6bf11350388626de73520cb79aaacf69294a442805d4b0347daeabc9aa42675461c1334e74bdcef4cf50cc9a55682e0ff6b5e304f56ee56ca7dcb669f645db44798324a29352e963a6d8246131495e889aa440ca3d8b6f01e93147e8219bef0f0ff107f4b78f4cc08a9a4f7456a58a5afa51d30dec34ed890c9d5", 0x1000}, {&(0x7f000000a680)="c530b6c7c3079de72c4bce6507f1735958312d98fc1cac2e7affb013abba2c82398659cc8ddfd3ee92c720b8f2c5d6e68cf54090d5c4c11e87b0ba42e7fc706c67537226477e0157d50fcde807fca95cca53d0b15fe15a18e7833bc5", 0x5c}, {&(0x7f000000a700)="412464019f982e8b9b7e468c9547e7848a04ea0ea31081f7ed33109c5d07d2ed29b614b6c7b99eaec49e29a5e9ea7ee9f777a5e96db0a3a5756defae9c3e8069200ecfe4e8df81d89bc87b38083dafed9f114b72df834af59ed39b4d36785bcb8b1eb44a3605698a31b2d64368e6270ae6f98af9ec874590b96f3bab22a2a9074714fa0458146e3c3b80f23127ead45584c1cd6b0f443bc59dfc689c2e3d9493e68b0412a2f9949ac5f2", 0xaa}], 0xa, &(0x7f000000a880)=[{0x50, 0x110, 0xffffffff, "d60decc6f71f08c2ead31437151c3127ba4c2eb92d9cdbbd5f93be9c848a52583210ab3fca626c6f59f897f7fa6a67ad2615f82d0d1e8431a970"}, {0x108, 0x101, 0x9, "80879a85babbd15ccc3d778eeab7bf07255d68884ca1ae263cb8832bb0f032bcdcf1742bd1835e545ee0147b610ded42cc598f2c23a37aca9770c81590cf91409a1ba60aafa603ac3b3dc96fcbbe8c213786565a2c0903572332761456c5058e613cd569b12b83dabbd620ed5cb29c50667a3887fe67dc9bfc9423295341a04f8de87ab3dc24a0490b228bcdf2275771cced1b54b33da78ea89a95cb873ec8cd1ce385797bfa07e97f432c86a28d485da9f8e2ea16c68b6f70d348eb881cbd8dbaff58116171053c46b56476686d4759483e331d57d35cbf7b21bf09ddab6ac2ceab1ef57b4f84bdad03d6cb4dfe1955e3c1a8d7c8"}, {0xb8, 0x10c, 0x3ba, "74e0f6d927b6d5fdc772f6ae52d8fc71faf3deebe96959e8eaa508e967d2b2e08aeac1d2fa7ab31c8b72be7811ebafa2c85ab7c7c4ee2922a2330312c72f2ac8c9fc947615a111167220ea9f9c7a4897c502d50276b40b1d97e2574ff952edf131977f900ba3f051bd11939d529bd549c1606e9b3926eb3ccd0e206d4ffa573867613d121ea4549b43e7c77de68a390bd2712a820d0dfaaec7003be2d5f4af4c573c"}, {0x20, 0x113, 0x16e, "cbd1248ac76ce66dc939ca"}, {0xd8, 0x109, 0x200, "75d95d7a9e5e5f2573e2093e0beb6bf2c38c451de6a31969fcf2457a3251d7b4d4ea5dfa8ad0dd92aca201a3b649bb9302e9c973c7b69b479278558e63cc104a35a9c50e1d0cee3d7ab0a6309e9aec92f116379e7fe2744af70533e4c7f323fe858a10a5f237a2956e8e9de97e806f7e050674be826ab7db4d1b1121534ebebe5991d0c848fb40d54eaefa726c82880ccb9ce0d5a45d951d01e21c7fbda75f42f283ab819a16571faf557a7d392db7475b737d6e02c6592e8c4a7493e4ccef9706ff"}, {0x18, 0xde49e92fa2075dde, 0x200, "b8dcb6141c"}, {0x98, 0x104, 0x6, "172d2e494bc41d93bfc7030d7b06a7834666da45c2e43ec9f79991d80de03582500da227bd8db6967df78e41f90e8bc2d5e4660c579802b1bb3eadec0dee95e562ab3576154e5a38453d15e5571746f8b7d9e0804e69b5e538529df976321c7c9ebd333ad62e6f6b011014444074626c54ef3c811d7e954d2ada99a93dd2c107a2"}, {0x40, 0x116, 0xfffeffff, "228bb823b29e1f4494ee505cf971408d831839023e1c82dcd1c2bd9bbf9b9df6f3da20fa8bd3e9a2bbcc"}], 0x3f8}}], 0x5, 0x8000) 01:14:35 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:35 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:35 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 1) 01:14:35 executing program 1: syz_emit_ethernet(0xb6, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @tipc={{0x1c, 0x4, 0x3, 0x2, 0xa4, 0x67, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4c, 0x81, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x1f}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@empty}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010102, 0x3}, {@private=0xa010100, 0x5}]}, @timestamp={0x44, 0x10, 0x22, 0x0, 0x4, [0x80000001, 0x40, 0x0]}]}}, @payload_mcast={{{{{{0x34, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x2, 0x800, 0x0, 0x0, 0x9, 0x5, 0x1, 0x0, 0x1, 0x4, 0x4e21, 0x4e22}, 0x3}, 0x0, 0x3}, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x9a2, 0xbdb, 0x2ad, 0x20a]}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_emit_ethernet(0x66, &(0x7f0000000300)={@empty, @random="76712951eea5", @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x3f, 0x0, 0x1}], @generic="97eb472c974402c97087a423e434d29614440837a9522674ca391701a4b0421ee4731ffe3d34815f98d07ccf5ae87981b79d80d7d8629172f1f9039df685c06864bf812e7e4d719e2472d379"}}}}, 0x0) [ 1731.720987] loop7: detected capacity change from 0 to 131072 [ 1731.725727] FAULT_INJECTION: forcing a failure. [ 1731.725727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.728016] CPU: 1 PID: 10509 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1731.729348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.730945] Call Trace: [ 1731.731462] dump_stack+0x107/0x167 [ 1731.732166] should_fail.cold+0x5/0xa [ 1731.732905] _copy_from_user+0x2e/0x1b0 [ 1731.733675] __copy_msghdr_from_user+0x91/0x4b0 [ 1731.734575] ? __ia32_sys_shutdown+0x80/0x80 [ 1731.735439] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1731.736442] ? __lock_acquire+0x1657/0x5b00 [ 1731.737280] ? __lock_acquire+0xbb1/0x5b00 [ 1731.738113] sendmsg_copy_msghdr+0xa1/0x160 [ 1731.738944] ? do_recvmmsg+0x6d0/0x6d0 [ 1731.739725] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1731.740734] ? lock_downgrade+0x6d0/0x6d0 [ 1731.741533] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1731.742553] ___sys_sendmsg+0xc6/0x170 [ 1731.743314] ? sendmsg_copy_msghdr+0x160/0x160 [ 1731.744198] ? __fget_files+0x2cf/0x520 [ 1731.744975] ? lock_downgrade+0x6d0/0x6d0 [ 1731.745768] ? find_held_lock+0x2c/0x110 [ 1731.746553] ? __fget_files+0x2f8/0x520 [ 1731.747326] ? __fget_light+0xea/0x290 [ 1731.748075] __sys_sendmsg+0xe5/0x1b0 [ 1731.748800] ? __sys_sendmsg_sock+0x40/0x40 [ 1731.749626] ? rcu_read_lock_any_held+0x75/0xa0 [ 1731.750508] ? fput_many+0x2f/0x1a0 [ 1731.751214] ? ksys_write+0x1a9/0x260 [ 1731.751939] ? __ia32_sys_read+0xb0/0xb0 [ 1731.752718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.753719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.754703] ? trace_hardirqs_on+0x5b/0x180 [ 1731.755531] do_syscall_64+0x33/0x40 [ 1731.756242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.757218] RIP: 0033:0x7fb8c885ab19 [ 1731.757923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.761419] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1731.762864] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1731.764238] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1731.765584] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.766927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.768276] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:14:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 1731.778837] loop3: detected capacity change from 0 to 262144 [ 1731.788416] loop6: detected capacity change from 0 to 131072 [ 1731.793002] FAT-fs (loop6): bogus number of FAT sectors [ 1731.794077] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1731.794609] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1731.800730] FAULT_INJECTION: forcing a failure. [ 1731.800730] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.802854] CPU: 1 PID: 10511 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1731.804157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.805709] Call Trace: [ 1731.806201] dump_stack+0x107/0x167 [ 1731.806877] should_fail.cold+0x5/0xa [ 1731.807601] ? getname_flags.part.0+0x50/0x4f0 [ 1731.808445] should_failslab+0x5/0x20 [ 1731.809145] kmem_cache_alloc+0x5b/0x310 [ 1731.809889] ? generic_block_fiemap+0x60/0x60 [ 1731.810709] getname_flags.part.0+0x50/0x4f0 [ 1731.811533] getname_flags+0x9a/0xe0 [ 1731.812218] do_mkdirat+0x8f/0x2b0 [ 1731.812876] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1731.813877] ? user_path_create+0xf0/0xf0 [ 1731.814645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.815617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.816562] do_syscall_64+0x33/0x40 [ 1731.817253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.818197] RIP: 0033:0x7fae9488ec27 [ 1731.818884] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.822265] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1731.823678] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1731.824989] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1731.826305] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1731.827627] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1731.828934] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1731.830717] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1731.834952] loop4: detected capacity change from 0 to 262144 01:14:35 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 44) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1731.841563] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1731.843384] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1731.845309] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1731.857369] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1731.884792] FAULT_INJECTION: forcing a failure. [ 1731.884792] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.888461] CPU: 0 PID: 10521 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1731.889833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.891482] Call Trace: [ 1731.892018] dump_stack+0x107/0x167 01:14:35 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1731.892745] should_fail.cold+0x5/0xa [ 1731.893608] ? create_object.isra.0+0x3a/0xa20 [ 1731.894521] should_failslab+0x5/0x20 [ 1731.895290] kmem_cache_alloc+0x5b/0x310 [ 1731.896104] ? mark_held_locks+0x9e/0xe0 [ 1731.896925] create_object.isra.0+0x3a/0xa20 [ 1731.897789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1731.898812] kmem_cache_alloc+0x159/0x310 [ 1731.899650] xas_alloc+0x336/0x440 [ 1731.900366] xas_create+0x34a/0x10d0 [ 1731.901115] ? kernel_text_address+0xf2/0x120 [ 1731.902003] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1731.903062] xas_store+0x8c/0x1c40 [ 1731.903794] __xa_store+0x164/0x2d0 [ 1731.904529] ? xa_delete_node+0x280/0x280 [ 1731.905358] ? trace_hardirqs_on+0x5b/0x180 [ 1731.906225] xa_store+0x31/0x50 [ 1731.906888] __io_uring_add_tctx_node+0x1cf/0x520 [ 1731.907846] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1731.908883] ? alloc_fd+0x2e7/0x670 [ 1731.909617] io_uring_setup+0x1fbb/0x2980 [ 1731.910452] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1731.911468] ? wait_for_completion_io+0x270/0x270 [ 1731.912456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.913499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.914531] do_syscall_64+0x33/0x40 [ 1731.915287] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.916302] RIP: 0033:0x7eff19607b19 [ 1731.917043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.920713] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1731.922205] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1731.923606] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1731.925006] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1731.926407] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1731.927823] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:14:35 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 48) [ 1731.933404] loop6: detected capacity change from 0 to 131072 [ 1731.942698] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:14:35 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 2) [ 1731.951722] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1731.966723] FAULT_INJECTION: forcing a failure. [ 1731.966723] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.969175] CPU: 0 PID: 10530 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1731.970550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.972184] Call Trace: [ 1731.972722] dump_stack+0x107/0x167 [ 1731.973528] should_fail.cold+0x5/0xa [ 1731.974381] ? getname_flags.part.0+0x50/0x4f0 [ 1731.975437] should_failslab+0x5/0x20 [ 1731.976276] kmem_cache_alloc+0x5b/0x310 [ 1731.977102] ? generic_block_fiemap+0x60/0x60 [ 1731.978158] getname_flags.part.0+0x50/0x4f0 [ 1731.979049] getname_flags+0x9a/0xe0 [ 1731.979801] do_mkdirat+0x8f/0x2b0 [ 1731.980520] ? user_path_create+0xf0/0xf0 [ 1731.981367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.982417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.983455] do_syscall_64+0x33/0x40 [ 1731.984201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.985221] RIP: 0033:0x7fae9488ec27 [ 1731.985964] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.989636] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1731.991158] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1731.992560] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1731.993972] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1731.995396] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1731.996805] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1732.003963] EXT4-fs (loop3): get root inode failed [ 1732.005077] EXT4-fs (loop3): mount failed [ 1732.017183] FAT-fs (loop6): bogus number of FAT sectors [ 1732.018283] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1732.037122] FAULT_INJECTION: forcing a failure. [ 1732.037122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.039393] CPU: 1 PID: 10535 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1732.040571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1732.041990] Call Trace: [ 1732.042444] dump_stack+0x107/0x167 [ 1732.043066] should_fail.cold+0x5/0xa [ 1732.043740] _copy_from_user+0x2e/0x1b0 [ 1732.044421] iovec_from_user+0x141/0x400 [ 1732.045113] __import_iovec+0x67/0x590 [ 1732.045785] ? __ia32_sys_shutdown+0x80/0x80 [ 1732.046538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1732.047442] import_iovec+0x83/0xb0 [ 1732.048061] sendmsg_copy_msghdr+0x131/0x160 [ 1732.048806] ? do_recvmmsg+0x6d0/0x6d0 [ 1732.049476] ? lock_downgrade+0x6d0/0x6d0 [ 1732.050184] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1732.051073] ___sys_sendmsg+0xc6/0x170 [ 1732.051742] ? sendmsg_copy_msghdr+0x160/0x160 [ 1732.052518] ? __fget_files+0x2cf/0x520 [ 1732.053190] ? lock_downgrade+0x6d0/0x6d0 [ 1732.053890] ? find_held_lock+0x2c/0x110 [ 1732.054578] ? __fget_files+0x2f8/0x520 [ 1732.055266] ? __fget_light+0xea/0x290 [ 1732.055936] __sys_sendmsg+0xe5/0x1b0 [ 1732.056588] ? __sys_sendmsg_sock+0x40/0x40 [ 1732.057314] ? rcu_read_lock_any_held+0x75/0xa0 [ 1732.058096] ? fput_many+0x2f/0x1a0 [ 1732.058704] ? ksys_write+0x1a9/0x260 [ 1732.059363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1732.060254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1732.061119] ? trace_hardirqs_on+0x5b/0x180 [ 1732.061847] do_syscall_64+0x33/0x40 [ 1732.062473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1732.063345] RIP: 0033:0x7fb8c885ab19 [ 1732.063972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.067077] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1732.068372] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1732.069591] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1732.070773] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.071984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.073188] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:14:35 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1732.092789] loop3: detected capacity change from 0 to 262144 [ 1732.127219] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1732.141725] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1732.143585] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1732.145469] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1732.167384] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1732.173509] EXT4-fs (loop3): get root inode failed [ 1732.174532] EXT4-fs (loop3): mount failed 01:14:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 26) 01:14:50 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 3) 01:14:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40065, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:14:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x40000000000400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x105100, 0x83) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f9d677695a07230633b23d84f16fad26e405a9977507cd46a654988e8"], &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='sysfs\x00', 0x1000800, 0x0) 01:14:50 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 45) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:14:50 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:14:50 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 49) 01:14:50 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1746.713924] FAULT_INJECTION: forcing a failure. [ 1746.713924] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.716899] CPU: 1 PID: 10555 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1746.718670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.720822] Call Trace: [ 1746.721501] dump_stack+0x107/0x167 [ 1746.722445] should_fail.cold+0x5/0xa [ 1746.723422] ? security_file_alloc+0x34/0x170 [ 1746.724448] loop7: detected capacity change from 0 to 131072 [ 1746.724590] should_failslab+0x5/0x20 [ 1746.726811] kmem_cache_alloc+0x5b/0x310 [ 1746.727870] security_file_alloc+0x34/0x170 [ 1746.728978] __alloc_file+0xb7/0x320 [ 1746.729935] alloc_empty_file+0x6d/0x170 [ 1746.730979] path_openat+0xe6/0x2770 [ 1746.731942] ? __lock_acquire+0x1657/0x5b00 [ 1746.733060] ? path_lookupat+0x860/0x860 [ 1746.734102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1746.735437] ? lock_acquire+0x197/0x470 [ 1746.736456] ? find_held_lock+0x2c/0x110 [ 1746.737512] do_filp_open+0x190/0x3e0 [ 1746.738486] ? may_open_dev+0xf0/0xf0 [ 1746.739464] ? alloc_fd+0x2e7/0x670 [ 1746.740407] ? lock_downgrade+0x6d0/0x6d0 [ 1746.741469] ? do_raw_spin_lock+0x121/0x260 [ 1746.742574] ? rwlock_bug.part.0+0x90/0x90 [ 1746.743686] ? _raw_spin_unlock+0x1a/0x30 [ 1746.744657] ? alloc_fd+0x2e7/0x670 [ 1746.745451] do_sys_openat2+0x171/0x4d0 [ 1746.746306] ? build_open_flags+0x6f0/0x6f0 [ 1746.747244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1746.748257] __x64_sys_openat+0x13f/0x1f0 [ 1746.749146] ? __ia32_sys_open+0x1c0/0x1c0 [ 1746.750066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.751196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.752313] do_syscall_64+0x33/0x40 [ 1746.753110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1746.754214] RIP: 0033:0x7fe2f6e5da04 [ 1746.755017] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1746.758990] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1746.760629] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1746.762164] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1746.763706] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1746.765243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1746.766770] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1746.770394] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1746.782770] FAULT_INJECTION: forcing a failure. [ 1746.782770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1746.785851] CPU: 1 PID: 10549 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1746.787343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.789138] Call Trace: [ 1746.789702] dump_stack+0x107/0x167 [ 1746.790485] should_fail.cold+0x5/0xa [ 1746.791313] __alloc_pages_nodemask+0x182/0x600 [ 1746.792318] ? mark_lock+0xf5/0x2df0 [ 1746.793119] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1746.794400] ? find_held_lock+0x2c/0x110 [ 1746.795287] ? __is_insn_slot_addr+0x123/0x290 [ 1746.796281] ? lock_downgrade+0x6d0/0x6d0 [ 1746.797179] alloc_pages_current+0x187/0x280 [ 1746.798123] skb_page_frag_refill+0x27c/0x490 [ 1746.799089] sk_page_frag_refill+0x4a/0x1d0 [ 1746.800024] __ip_append_data+0xaff/0x3310 [ 1746.800943] ? lock_chain_get_class+0x30/0xa0 [ 1746.801902] ? lock_chain_count+0x20/0x20 [ 1746.802779] ? ip_frag_init+0x350/0x350 [ 1746.803653] ? ip_finish_output+0x330/0x330 [ 1746.804569] ? lock_downgrade+0x6d0/0x6d0 [ 1746.805457] ? do_raw_spin_lock+0x121/0x260 [ 1746.806375] ? ip_frag_init+0x350/0x350 [ 1746.807216] ip_append_data+0x114/0x1a0 [ 1746.808123] udp_sendmsg+0x8a7/0x2160 [ 1746.808956] ? mark_lock+0xf5/0x2df0 [ 1746.809774] ? ip_frag_init+0x350/0x350 [ 1746.810621] ? lock_chain_count+0x20/0x20 [ 1746.811516] ? udp_setsockopt+0xc0/0xc0 [ 1746.811607] loop6: detected capacity change from 0 to 131072 [ 1746.812369] ? mark_lock+0xf5/0x2df0 [ 1746.812411] ? lock_acquire+0x197/0x470 [ 1746.812437] ? lock_chain_count+0x20/0x20 [ 1746.816178] ? mark_lock+0xf5/0x2df0 [ 1746.816985] ? mark_lock+0xf5/0x2df0 [ 1746.817780] ? lock_chain_count+0x20/0x20 [ 1746.818693] ? __lock_acquire+0xbb1/0x5b00 [ 1746.819598] ? lock_chain_count+0x20/0x20 [ 1746.820507] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1746.821633] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1746.822525] ? udp_v6_push_pending_frames+0x360/0x360 [ 1746.823630] ? mark_lock+0xf5/0x2df0 [ 1746.824447] ? lock_acquire+0x197/0x470 [ 1746.825288] ? find_held_lock+0x2c/0x110 [ 1746.826170] ? __might_fault+0xd3/0x180 [ 1746.827021] ? lock_downgrade+0x6d0/0x6d0 [ 1746.827925] ? lock_downgrade+0x6d0/0x6d0 [ 1746.828813] ? sock_has_perm+0x1ea/0x280 [ 1746.829688] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1746.830801] ? _copy_from_user+0xfb/0x1b0 [ 1746.831719] ? __import_iovec+0x458/0x590 [ 1746.832607] ? udp_v6_push_pending_frames+0x360/0x360 [ 1746.833726] inet6_sendmsg+0x105/0x140 [ 1746.834564] ? inet6_compat_ioctl+0x320/0x320 [ 1746.835527] __sock_sendmsg+0xf2/0x190 [ 1746.836368] ____sys_sendmsg+0x70d/0x870 [ 1746.837262] ? sock_write_iter+0x3d0/0x3d0 [ 1746.838160] ? do_recvmmsg+0x6d0/0x6d0 [ 1746.839002] ? lock_downgrade+0x6d0/0x6d0 [ 1746.839913] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1746.841055] ___sys_sendmsg+0xf3/0x170 [ 1746.841900] ? sendmsg_copy_msghdr+0x160/0x160 [ 1746.842904] ? __fget_files+0x2cf/0x520 [ 1746.843765] ? lock_downgrade+0x6d0/0x6d0 [ 1746.844660] ? find_held_lock+0x2c/0x110 [ 1746.845536] ? __fget_files+0x2f8/0x520 [ 1746.846405] ? __fget_light+0xea/0x290 [ 1746.847245] __sys_sendmsg+0xe5/0x1b0 [ 1746.848078] ? __sys_sendmsg_sock+0x40/0x40 [ 1746.848993] ? rcu_read_lock_any_held+0x75/0xa0 [ 1746.850023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.851159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.852283] ? trace_hardirqs_on+0x5b/0x180 [ 1746.853205] do_syscall_64+0x33/0x40 [ 1746.854008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1746.855102] RIP: 0033:0x7fb8c885ab19 [ 1746.855914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.859848] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1746.861482] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1746.862991] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1746.864510] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.866013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.867517] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:14:50 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1746.880828] FAULT_INJECTION: forcing a failure. [ 1746.880828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1746.883334] CPU: 0 PID: 10561 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1746.884822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.886588] Call Trace: [ 1746.887154] dump_stack+0x107/0x167 [ 1746.887942] should_fail.cold+0x5/0xa [ 1746.888760] strncpy_from_user+0x34/0x470 [ 1746.889650] getname_flags.part.0+0x95/0x4f0 [ 1746.890586] getname_flags+0x9a/0xe0 [ 1746.891375] do_mkdirat+0x8f/0x2b0 [ 1746.892143] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1746.893289] ? user_path_create+0xf0/0xf0 [ 1746.894182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.895327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.896439] do_syscall_64+0x33/0x40 [ 1746.897235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1746.898397] RIP: 0033:0x7fae9488ec27 [ 1746.899186] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.903183] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1746.904825] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1746.906389] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1746.907934] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1746.909456] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1746.911039] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1746.914847] FAULT_INJECTION: forcing a failure. [ 1746.914847] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.917303] CPU: 0 PID: 10564 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1746.918823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.920641] Call Trace: [ 1746.921206] dump_stack+0x107/0x167 [ 1746.921987] should_fail.cold+0x5/0xa [ 1746.922820] ? xas_alloc+0x336/0x440 [ 1746.923843] should_failslab+0x5/0x20 [ 1746.925038] kmem_cache_alloc+0x5b/0x310 [ 1746.926024] xas_alloc+0x336/0x440 [ 1746.926861] xas_create+0x34a/0x10d0 [ 1746.927774] ? kernel_text_address+0xf2/0x120 [ 1746.928806] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1746.930054] xas_store+0x8c/0x1c40 [ 1746.930981] __xa_store+0x164/0x2d0 [ 1746.931789] ? xa_delete_node+0x280/0x280 [ 1746.932684] ? trace_hardirqs_on+0x5b/0x180 [ 1746.933606] xa_store+0x31/0x50 [ 1746.934314] __io_uring_add_tctx_node+0x1cf/0x520 [ 1746.935436] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1746.936731] ? alloc_fd+0x2e7/0x670 [ 1746.937594] io_uring_setup+0x1fbb/0x2980 [ 1746.938591] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1746.939860] ? wait_for_completion_io+0x270/0x270 [ 1746.941051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.942199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.943365] do_syscall_64+0x33/0x40 [ 1746.944170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1746.945303] RIP: 0033:0x7eff19607b19 [ 1746.946115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.950042] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1746.951724] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1746.953315] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1746.954936] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1746.956490] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1746.958087] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1746.967429] loop3: detected capacity change from 0 to 262144 [ 1746.978775] FAT-fs (loop6): bogus number of FAT sectors [ 1746.980065] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1746.996316] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1747.015261] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1747.017329] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1747.019245] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1747.024897] loop7: detected capacity change from 0 to 131072 [ 1747.043850] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1747.047595] EXT4-fs (loop3): get root inode failed [ 1747.048738] EXT4-fs (loop3): mount failed [ 1747.050851] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1747.073485] loop3: detected capacity change from 0 to 262144 [ 1747.085253] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1747.095371] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1747.097354] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1747.099300] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1747.116372] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1747.123229] EXT4-fs (loop3): get root inode failed [ 1747.124703] EXT4-fs (loop3): mount failed 01:15:07 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 46) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:15:07 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 4) 01:15:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4008a, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:15:07 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f800002000400003000000000000000100", 0x26}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000001100000000001b000000070021006141"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40810) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) creat(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:15:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 27) 01:15:07 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:07 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 50) [ 1764.032717] FAULT_INJECTION: forcing a failure. [ 1764.032717] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.035215] CPU: 0 PID: 10588 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1764.036649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.038362] Call Trace: [ 1764.038939] dump_stack+0x107/0x167 [ 1764.039711] should_fail.cold+0x5/0xa [ 1764.040526] ? create_object.isra.0+0x3a/0xa20 [ 1764.041498] should_failslab+0x5/0x20 [ 1764.042311] kmem_cache_alloc+0x5b/0x310 [ 1764.043198] ? find_held_lock+0x2c/0x110 [ 1764.044085] create_object.isra.0+0x3a/0xa20 [ 1764.045025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1764.046107] kmem_cache_alloc+0x159/0x310 [ 1764.047175] skb_clone+0x14f/0x3d0 [ 1764.047912] netlink_broadcast_filtered+0xa08/0xdc0 [ 1764.048992] netlink_broadcast+0x35/0x50 [ 1764.049860] kobject_uevent_env+0x93d/0xfd0 [ 1764.050789] ? blk_queue_flag_set+0x22/0x30 [ 1764.051720] ? __loop_update_dio+0x2d2/0x690 [ 1764.052652] loop_configure+0x1118/0x1410 [ 1764.053552] lo_ioctl+0xa57/0x16b0 [ 1764.054323] ? avc_has_extended_perms+0x7f1/0xf40 [ 1764.055412] ? loop_set_status_old+0x250/0x250 [ 1764.056410] ? avc_ss_reset+0x180/0x180 [ 1764.057281] ? find_held_lock+0x2c/0x110 [ 1764.058156] ? __lock_acquire+0xbb1/0x5b00 [ 1764.059086] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1764.060179] ? generic_block_fiemap+0x60/0x60 [ 1764.061133] ? lock_downgrade+0x6d0/0x6d0 [ 1764.062049] ? build_open_flags+0x6f0/0x6f0 [ 1764.062971] ? find_held_lock+0x2c/0x110 [ 1764.063891] ? loop_set_status_old+0x250/0x250 [ 1764.064868] blkdev_ioctl+0x291/0x710 [ 1764.065670] ? blkdev_common_ioctl+0x1930/0x1930 [ 1764.066683] ? selinux_file_ioctl+0xb6/0x270 [ 1764.067811] block_ioctl+0xf9/0x140 [ 1764.068648] ? blkdev_read_iter+0x1c0/0x1c0 [ 1764.069562] __x64_sys_ioctl+0x19a/0x210 [ 1764.070434] do_syscall_64+0x33/0x40 [ 1764.071245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.072319] RIP: 0033:0x7fae9488f8d7 [ 1764.072805] FAULT_INJECTION: forcing a failure. [ 1764.072805] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.073107] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.079331] RSP: 002b:00007fae91e04f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.080974] RAX: ffffffffffffffda RBX: 00007fae948d9970 RCX: 00007fae9488f8d7 [ 1764.082486] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1764.084003] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1764.085509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1764.087107] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1764.088620] CPU: 1 PID: 10598 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1764.090085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.091825] Call Trace: [ 1764.092410] dump_stack+0x107/0x167 [ 1764.093183] should_fail.cold+0x5/0xa [ 1764.093986] ? create_object.isra.0+0x3a/0xa20 [ 1764.094948] should_failslab+0x5/0x20 [ 1764.095748] kmem_cache_alloc+0x5b/0x310 [ 1764.096609] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1764.097766] create_object.isra.0+0x3a/0xa20 [ 1764.098690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1764.099760] kmem_cache_alloc+0x159/0x310 [ 1764.100646] security_file_alloc+0x34/0x170 [ 1764.101551] __alloc_file+0xb7/0x320 [ 1764.102336] alloc_empty_file+0x6d/0x170 [ 1764.103194] path_openat+0xe6/0x2770 [ 1764.103980] ? __lock_acquire+0x1657/0x5b00 [ 1764.104901] ? path_lookupat+0x860/0x860 [ 1764.105770] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.106868] ? lock_acquire+0x197/0x470 [ 1764.107699] ? find_held_lock+0x2c/0x110 [ 1764.108569] do_filp_open+0x190/0x3e0 [ 1764.109365] ? may_open_dev+0xf0/0xf0 [ 1764.110169] ? alloc_fd+0x2e7/0x670 [ 1764.110933] ? lock_downgrade+0x6d0/0x6d0 [ 1764.111806] ? do_raw_spin_lock+0x121/0x260 [ 1764.112718] ? rwlock_bug.part.0+0x90/0x90 [ 1764.113613] ? _raw_spin_unlock+0x1a/0x30 [ 1764.114486] ? alloc_fd+0x2e7/0x670 [ 1764.115263] do_sys_openat2+0x171/0x4d0 [ 1764.116100] ? build_open_flags+0x6f0/0x6f0 [ 1764.117023] ? rcu_read_lock_any_held+0x75/0xa0 [ 1764.118020] __x64_sys_openat+0x13f/0x1f0 [ 1764.118889] ? __ia32_sys_open+0x1c0/0x1c0 [ 1764.119788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.120896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.121977] do_syscall_64+0x33/0x40 [ 1764.122760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.123832] RIP: 0033:0x7fe2f6e5da04 [ 1764.124630] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1764.128183] FAT-fs (loop5): bogus number of reserved sectors [ 1764.128512] RSP: 002b:00007fe2f441fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1764.129918] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1764.131456] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6e5da04 [ 1764.131468] RDX: 0000000000000002 RSI: 00007fe2f4420000 RDI: 00000000ffffff9c [ 1764.131479] RBP: 00007fe2f4420000 R08: 0000000000000000 R09: ffffffffffffffff [ 1764.131491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1764.131509] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1764.155487] loop7: detected capacity change from 0 to 131072 [ 1764.158255] FAULT_INJECTION: forcing a failure. [ 1764.158255] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.160683] CPU: 1 PID: 10606 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1764.162142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.164102] Call Trace: [ 1764.164828] dump_stack+0x107/0x167 [ 1764.165785] should_fail.cold+0x5/0xa [ 1764.166757] ? create_object.isra.0+0x3a/0xa20 [ 1764.167958] should_failslab+0x5/0x20 [ 1764.169010] kmem_cache_alloc+0x5b/0x310 [ 1764.170089] ? mark_held_locks+0x9e/0xe0 [ 1764.171199] create_object.isra.0+0x3a/0xa20 [ 1764.172387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1764.173707] kmem_cache_alloc+0x159/0x310 [ 1764.174600] xas_alloc+0x336/0x440 [ 1764.175357] xas_create+0x34a/0x10d0 [ 1764.176148] ? kernel_text_address+0xf2/0x120 [ 1764.177113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.178221] xas_store+0x8c/0x1c40 [ 1764.178991] __xa_store+0x164/0x2d0 [ 1764.179763] ? xa_delete_node+0x280/0x280 [ 1764.180668] ? trace_hardirqs_on+0x5b/0x180 [ 1764.181586] xa_store+0x31/0x50 [ 1764.182292] __io_uring_add_tctx_node+0x1cf/0x520 [ 1764.183310] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1764.184450] ? alloc_fd+0x2e7/0x670 [ 1764.185235] io_uring_setup+0x1fbb/0x2980 [ 1764.186124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1764.187200] ? wait_for_completion_io+0x270/0x270 [ 1764.188265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.189372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.190531] do_syscall_64+0x33/0x40 [ 1764.191364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.192518] RIP: 0033:0x7eff19607b19 [ 1764.193336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.197457] RSP: 002b:00007eff16b5c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1764.199166] RAX: ffffffffffffffda RBX: 00007eff1971b020 RCX: 00007eff19607b19 [ 1764.200767] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1764.202360] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1764.203948] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1764.205558] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1764.209520] loop3: detected capacity change from 0 to 262144 [ 1764.217864] FAULT_INJECTION: forcing a failure. [ 1764.217864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.220184] loop6: detected capacity change from 0 to 131072 [ 1764.220503] CPU: 0 PID: 10597 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1764.223065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.224846] Call Trace: [ 1764.225424] dump_stack+0x107/0x167 [ 1764.226241] should_fail.cold+0x5/0xa [ 1764.227081] _copy_from_iter_full+0x201/0xa60 [ 1764.228037] ? __virt_addr_valid+0x170/0x5d0 [ 1764.228997] ? __check_object_size+0x319/0x440 [ 1764.229997] ip_generic_getfrag+0xf7/0x230 [ 1764.230914] ? ip_frag_init+0x350/0x350 [ 1764.231760] ? skb_page_frag_refill+0x2eb/0x490 [ 1764.232742] __ip_append_data+0xf22/0x3310 [ 1764.233651] ? lock_chain_get_class+0x30/0xa0 [ 1764.234652] ? lock_chain_get_class+0x30/0xa0 [ 1764.235600] ? ip_frag_init+0x350/0x350 [ 1764.236458] ? ip_finish_output+0x330/0x330 [ 1764.237374] ? lock_downgrade+0x6d0/0x6d0 [ 1764.238287] ? do_raw_spin_lock+0x121/0x260 [ 1764.239205] ? ip_frag_init+0x350/0x350 [ 1764.240084] ip_append_data+0x114/0x1a0 [ 1764.240949] udp_sendmsg+0x8a7/0x2160 [ 1764.241760] ? mark_lock+0xf5/0x2df0 [ 1764.242547] ? ip_frag_init+0x350/0x350 [ 1764.243427] ? lock_chain_count+0x20/0x20 [ 1764.244320] ? udp_setsockopt+0xc0/0xc0 [ 1764.245422] ? mark_lock+0xf5/0x2df0 [ 1764.246220] ? lock_acquire+0x197/0x470 [ 1764.247102] ? lock_chain_count+0x20/0x20 [ 1764.248010] ? mark_lock+0xf5/0x2df0 [ 1764.248844] ? mark_lock+0xf5/0x2df0 01:15:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_localevents}], [{@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@seclabel}, {@audit}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1764.249671] ? lock_chain_count+0x20/0x20 [ 1764.250707] ? __lock_acquire+0xbb1/0x5b00 [ 1764.251616] ? lock_chain_count+0x20/0x20 [ 1764.252533] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.253690] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1764.254569] ? udp_v6_push_pending_frames+0x360/0x360 [ 1764.255717] ? mark_lock+0xf5/0x2df0 [ 1764.256534] ? lock_acquire+0x197/0x470 [ 1764.257389] ? find_held_lock+0x2c/0x110 [ 1764.258303] ? __might_fault+0xd3/0x180 [ 1764.259179] ? lock_downgrade+0x6d0/0x6d0 [ 1764.260068] ? lock_downgrade+0x6d0/0x6d0 [ 1764.261000] ? sock_has_perm+0x1ea/0x280 [ 1764.261910] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1764.262994] ? _copy_from_user+0xfb/0x1b0 [ 1764.263914] ? __import_iovec+0x458/0x590 [ 1764.264814] ? udp_v6_push_pending_frames+0x360/0x360 [ 1764.265931] inet6_sendmsg+0x105/0x140 [ 1764.266775] ? inet6_compat_ioctl+0x320/0x320 [ 1764.267761] __sock_sendmsg+0xf2/0x190 [ 1764.268618] ____sys_sendmsg+0x70d/0x870 [ 1764.269487] ? sock_write_iter+0x3d0/0x3d0 [ 1764.270384] ? do_recvmmsg+0x6d0/0x6d0 [ 1764.271228] ? lock_downgrade+0x6d0/0x6d0 [ 1764.272126] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.273277] ___sys_sendmsg+0xf3/0x170 [ 1764.274129] ? sendmsg_copy_msghdr+0x160/0x160 [ 1764.275084] ? __fget_files+0x2cf/0x520 [ 1764.275896] ? lock_downgrade+0x6d0/0x6d0 [ 1764.276822] ? find_held_lock+0x2c/0x110 [ 1764.277686] ? __fget_files+0x2f8/0x520 [ 1764.278528] ? __fget_light+0xea/0x290 [ 1764.279379] __sys_sendmsg+0xe5/0x1b0 [ 1764.280233] ? __sys_sendmsg_sock+0x40/0x40 [ 1764.281169] ? rcu_read_lock_any_held+0x75/0xa0 [ 1764.282207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.283297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.284409] ? trace_hardirqs_on+0x5b/0x180 [ 1764.285331] do_syscall_64+0x33/0x40 [ 1764.286133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.287235] RIP: 0033:0x7fb8c885ab19 [ 1764.288035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.291926] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1764.293585] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1764.295070] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1764.296570] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.298089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.299599] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:15:08 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 47) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1764.308949] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1764.325635] loop4: detected capacity change from 0 to 262144 [ 1764.331389] FAULT_INJECTION: forcing a failure. [ 1764.331389] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.333871] CPU: 0 PID: 10616 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1764.335393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.337209] Call Trace: [ 1764.337776] dump_stack+0x107/0x167 [ 1764.338561] should_fail.cold+0x5/0xa [ 1764.339400] ? xas_alloc+0x336/0x440 [ 1764.340213] should_failslab+0x5/0x20 [ 1764.341066] kmem_cache_alloc+0x5b/0x310 [ 1764.341984] xas_alloc+0x336/0x440 [ 1764.342735] xas_create+0x34a/0x10d0 [ 1764.343548] ? kernel_text_address+0xf2/0x120 [ 1764.344535] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.345729] xas_store+0x8c/0x1c40 [ 1764.346563] __xa_store+0x164/0x2d0 [ 1764.347366] ? xa_delete_node+0x280/0x280 [ 1764.348267] ? trace_hardirqs_on+0x5b/0x180 [ 1764.349247] xa_store+0x31/0x50 [ 1764.350007] __io_uring_add_tctx_node+0x1cf/0x520 [ 1764.351012] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1764.352213] ? alloc_fd+0x2e7/0x670 [ 1764.352989] io_uring_setup+0x1fbb/0x2980 [ 1764.353893] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1764.355007] ? wait_for_completion_io+0x270/0x270 [ 1764.356059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.357178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.358293] do_syscall_64+0x33/0x40 [ 1764.359127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.360236] RIP: 0033:0x7eff19607b19 [ 1764.361090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.365282] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1764.367088] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1764.368567] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1764.370052] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1764.371526] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1764.373017] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1764.396511] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1764.419157] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1764.422379] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1764.426852] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1764.429170] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1764.431316] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1764.457799] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:15:08 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 51) 01:15:08 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 5) [ 1764.506623] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1764.511885] EXT4-fs (loop3): get root inode failed [ 1764.513333] EXT4-fs (loop3): mount failed 01:15:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 28) 01:15:08 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:08 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1764.547527] FAULT_INJECTION: forcing a failure. [ 1764.547527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.549940] CPU: 0 PID: 10626 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1764.551351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.553152] Call Trace: [ 1764.553713] dump_stack+0x107/0x167 [ 1764.554538] should_fail.cold+0x5/0xa [ 1764.555396] strncpy_from_user+0x34/0x470 [ 1764.556348] getname_flags.part.0+0x95/0x4f0 [ 1764.557348] getname_flags+0x9a/0xe0 [ 1764.558188] do_mkdirat+0x8f/0x2b0 [ 1764.559001] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1764.560218] ? user_path_create+0xf0/0xf0 [ 1764.561143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.562319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.563640] do_syscall_64+0x33/0x40 [ 1764.564475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.565594] RIP: 0033:0x7fae9488ec27 [ 1764.566429] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.570465] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1764.572165] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1764.573699] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1764.575180] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1764.576703] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1764.578264] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1764.588355] FAULT_INJECTION: forcing a failure. [ 1764.588355] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.590990] CPU: 0 PID: 10625 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1764.592444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.594171] Call Trace: [ 1764.594750] dump_stack+0x107/0x167 [ 1764.595517] should_fail.cold+0x5/0xa [ 1764.596329] ? skb_clone+0x14f/0x3d0 [ 1764.597156] should_failslab+0x5/0x20 [ 1764.597970] kmem_cache_alloc+0x5b/0x310 [ 1764.598861] skb_clone+0x14f/0x3d0 [ 1764.599640] ip_mc_output+0x4d9/0xa30 [ 1764.600454] ? 0xffffffffa0000000 [ 1764.601236] ip_send_skb+0xdd/0x260 [ 1764.602026] udp_send_skb+0x6da/0x11d0 [ 1764.602857] udp_sendmsg+0x139a/0x2160 [ 1764.603701] ? mark_lock+0xf5/0x2df0 [ 1764.604510] ? ip_frag_init+0x350/0x350 [ 1764.605374] ? lock_chain_count+0x20/0x20 [ 1764.606251] ? udp_setsockopt+0xc0/0xc0 [ 1764.607100] ? mark_lock+0xf5/0x2df0 [ 1764.607887] ? lock_acquire+0x197/0x470 [ 1764.608909] ? lock_chain_count+0x20/0x20 [ 1764.609799] ? mark_lock+0xf5/0x2df0 [ 1764.610760] ? mark_lock+0xf5/0x2df0 [ 1764.611566] ? lock_chain_count+0x20/0x20 [ 1764.612487] ? __lock_acquire+0xbb1/0x5b00 [ 1764.613551] ? lock_chain_count+0x20/0x20 [ 1764.614513] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.615684] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1764.616611] ? udp_v6_push_pending_frames+0x360/0x360 [ 1764.617710] ? mark_lock+0xf5/0x2df0 [ 1764.618505] ? lock_acquire+0x197/0x470 [ 1764.619348] ? find_held_lock+0x2c/0x110 [ 1764.620219] ? __might_fault+0xd3/0x180 [ 1764.621071] ? lock_downgrade+0x6d0/0x6d0 [ 1764.621953] ? lock_downgrade+0x6d0/0x6d0 [ 1764.622858] ? sock_has_perm+0x1ea/0x280 [ 1764.623729] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1764.624871] ? _copy_from_user+0xfb/0x1b0 [ 1764.625785] ? __import_iovec+0x458/0x590 [ 1764.626697] ? udp_v6_push_pending_frames+0x360/0x360 [ 1764.627878] inet6_sendmsg+0x105/0x140 [ 1764.628740] ? inet6_compat_ioctl+0x320/0x320 [ 1764.629696] __sock_sendmsg+0xf2/0x190 [ 1764.630556] ____sys_sendmsg+0x70d/0x870 [ 1764.631459] ? sock_write_iter+0x3d0/0x3d0 [ 1764.632342] ? do_recvmmsg+0x6d0/0x6d0 [ 1764.633165] ? lock_downgrade+0x6d0/0x6d0 [ 1764.634056] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1764.635196] ___sys_sendmsg+0xf3/0x170 [ 1764.636040] ? sendmsg_copy_msghdr+0x160/0x160 [ 1764.637026] ? __fget_files+0x2cf/0x520 [ 1764.637905] ? lock_downgrade+0x6d0/0x6d0 [ 1764.638775] ? find_held_lock+0x2c/0x110 [ 1764.639699] ? __fget_files+0x2f8/0x520 [ 1764.640573] ? __fget_light+0xea/0x290 [ 1764.641410] __sys_sendmsg+0xe5/0x1b0 [ 1764.642252] ? __sys_sendmsg_sock+0x40/0x40 [ 1764.643177] ? rcu_read_lock_any_held+0x75/0xa0 [ 1764.644178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.645326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.646622] ? trace_hardirqs_on+0x5b/0x180 [ 1764.647588] do_syscall_64+0x33/0x40 [ 1764.648537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.649614] RIP: 0033:0x7fb8c885ab19 [ 1764.650402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.654281] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1764.655908] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1764.657411] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1764.658906] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.660452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.661966] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1764.791466] loop3: detected capacity change from 0 to 262144 [ 1764.798012] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1764.830648] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1764.832752] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1764.834746] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1764.847771] FAULT_INJECTION: forcing a failure. [ 1764.847771] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.850014] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1764.850233] CPU: 1 PID: 10633 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1764.853188] EXT4-fs (loop3): get root inode failed [ 1764.854426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.854436] Call Trace: [ 1764.854473] dump_stack+0x107/0x167 [ 1764.854503] should_fail.cold+0x5/0xa [ 1764.855561] EXT4-fs (loop3): mount failed [ 1764.857572] ? __kthread_create_on_node+0xd1/0x400 [ 1764.857602] should_failslab+0x5/0x20 [ 1764.862730] kmem_cache_alloc_trace+0x55/0x320 [ 1764.863688] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1764.864689] __kthread_create_on_node+0xd1/0x400 [ 1764.865670] ? __kthread_parkme+0x1d0/0x1d0 [ 1764.866586] ? __mutex_lock+0x4fe/0x10b0 [ 1764.867430] ? loop_configure+0xc8a/0x1410 [ 1764.868310] ? do_raw_spin_unlock+0x4f/0x220 [ 1764.869232] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1764.870217] kthread_create_on_node+0xbb/0x100 [ 1764.871176] ? __kthread_create_on_node+0x400/0x400 [ 1764.872219] ? lockdep_init_map_type+0x2c7/0x780 [ 1764.873220] ? lockdep_init_map_type+0x2c7/0x780 [ 1764.874217] loop_configure+0x3e7/0x1410 [ 1764.875081] lo_ioctl+0xa57/0x16b0 [ 1764.875821] ? avc_has_extended_perms+0x7f1/0xf40 [ 1764.876842] ? loop_set_status_old+0x250/0x250 [ 1764.877793] ? avc_ss_reset+0x180/0x180 [ 1764.878626] ? find_held_lock+0x2c/0x110 [ 1764.879482] ? __lock_acquire+0xbb1/0x5b00 [ 1764.880427] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1764.881524] ? generic_block_fiemap+0x60/0x60 [ 1764.882457] ? lock_downgrade+0x6d0/0x6d0 [ 1764.883322] ? build_open_flags+0x6f0/0x6f0 [ 1764.884222] ? loop_set_status_old+0x250/0x250 [ 1764.885192] blkdev_ioctl+0x291/0x710 [ 1764.885983] ? blkdev_common_ioctl+0x1930/0x1930 [ 1764.886984] ? selinux_file_ioctl+0xb6/0x270 [ 1764.887900] block_ioctl+0xf9/0x140 [ 1764.888672] ? blkdev_read_iter+0x1c0/0x1c0 [ 1764.889588] __x64_sys_ioctl+0x19a/0x210 [ 1764.890450] do_syscall_64+0x33/0x40 [ 1764.891240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.892334] RIP: 0033:0x7fe2f6eaa8d7 [ 1764.893127] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.897044] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.898664] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1764.900185] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1764.901711] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1764.903236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1764.904763] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1764.928526] loop7: detected capacity change from 0 to 131072 [ 1764.934066] loop6: detected capacity change from 0 to 131072 [ 1764.945367] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1764.947396] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 01:15:25 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x400040004, 0x5, &(0x7f0000000380)=[{&(0x7f0000000500)="2000000080001022168f00006a0000000f000000000000000100000004000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000000000000001d9709ec79b5ca56f602223e6f410608983ced20f0ff0224720c1d20736a6301db24a9235d5c9a1538710186ad77fd829c8", 0x86, 0x400}, {&(0x7f0000000100)="020000000700000004a9c1af26acedebe1fd632d81b072c0e1ea404cb5e31de3a15e282d459b46252668375df9a90e4c194d2a6e88697228fdbb53d123f0583d8016c313441a39966a61c583393265", 0x4f, 0x802}, {&(0x7f0000000400)="ed4100000093b200dff4655fe0f40000000000000006080000000400045539545cee89665698ef313caf40a2a2acdfa02394a769024234b56b34f3ed131037f421802fba1a460efa7dca2833c38c2f339a35666c9e00ab647d7975582d5badd5b0c5bdbdf264dfeab6eeb32b98079c556344b5488db8ebff741a89e1c520b103cdd3150f019195e89015b8558b030c3d3be42713b732f56734440ae62d139e1fee96dfafc1f691d281f41e398221c9fbfb5f8fbf851d8422c4adb7ebe9804db9b748adf3af9d41c4bd2eac", 0xcb, 0x12100}, {&(0x7f00000001c0)="18ad2b902d2e0a5824bf66e9052a8050d6394367a9d165d07114b34a68b306e61549a4204c15ceda63e2c08dfff5f8e62af693c8db9ec1d281acf13341157d5713a2fced3aa0b3382640be440a4820be54dafa43cf1d410c9868371b1539a31645532af08b848d03f1617f973ce95c6768b75c4fea2fc473e0a56f3cc0d79144c7ef8393929e6c0140c47eb19f2eb85b5449262b6342ba11c11b3663b3fc88c8e92d6984992b4bb34404fdea6327fd06cc1a98fbaf1bf492217e129f369ed4b41219bed0ff3851ba796131ebb6d5413547a20de7c3314f6984684f6e31b8367b215b14843a4a", 0xe6, 0x6}, {&(0x7f00000002c0)="609a6c9618b89b70e4ab651f3626d219cfd38cb7455187e96ae5e379267067c3d9608fdf01869c7f27f218630ed88747def2e1734d90c9565dc0e5033d2875ffce784407fa4067ca89c7dac1f5b3e89353aba192610ebc16f91deff2cbb9e8aef5e5fb951ff97ee393bc3ef3437c85f26f0ab0fce50b11b7122f4975e2dce7403e101f933dac933f72b66b69e088737942d3", 0x92, 0x5}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x4) 01:15:25 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:25 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 6) 01:15:25 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 48) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:15:25 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 52) 01:15:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 29) 01:15:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40102, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1781.806705] FAULT_INJECTION: forcing a failure. [ 1781.806705] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.809176] CPU: 1 PID: 10648 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1781.810656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.812450] Call Trace: [ 1781.813033] dump_stack+0x107/0x167 [ 1781.813820] should_fail.cold+0x5/0xa [ 1781.814645] ? create_object.isra.0+0x3a/0xa20 [ 1781.815642] should_failslab+0x5/0x20 [ 1781.816471] kmem_cache_alloc+0x5b/0x310 [ 1781.817364] create_object.isra.0+0x3a/0xa20 [ 1781.818433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1781.819826] kmem_cache_alloc+0x159/0x310 [ 1781.820982] getname_flags.part.0+0x50/0x4f0 [ 1781.822122] getname_flags+0x9a/0xe0 [ 1781.822927] do_mkdirat+0x8f/0x2b0 [ 1781.823713] ? user_path_create+0xf0/0xf0 [ 1781.824614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.825757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.826862] do_syscall_64+0x33/0x40 [ 1781.827677] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.828781] RIP: 0033:0x7fae9488ec27 [ 1781.829598] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.833581] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1781.835207] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1781.836753] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1781.838309] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1781.839841] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1781.841418] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1781.857492] FAT-fs (loop5): bogus number of reserved sectors [ 1781.859976] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1781.874955] FAULT_INJECTION: forcing a failure. [ 1781.874955] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.877259] CPU: 0 PID: 10659 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1781.878535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.880077] Call Trace: [ 1781.880572] dump_stack+0x107/0x167 [ 1781.881290] should_fail.cold+0x5/0xa [ 1781.881995] ? create_object.isra.0+0x3a/0xa20 [ 1781.882837] should_failslab+0x5/0x20 [ 1781.883547] kmem_cache_alloc+0x5b/0x310 [ 1781.884296] ? mark_held_locks+0x9e/0xe0 [ 1781.885055] create_object.isra.0+0x3a/0xa20 [ 1781.885868] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1781.886802] kmem_cache_alloc+0x159/0x310 [ 1781.887573] FAULT_INJECTION: forcing a failure. [ 1781.887573] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.887590] xas_alloc+0x336/0x440 [ 1781.887612] xas_create+0x34a/0x10d0 [ 1781.891287] ? kernel_text_address+0xf2/0x120 [ 1781.892102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1781.893054] xas_store+0x8c/0x1c40 [ 1781.893717] __xa_store+0x164/0x2d0 [ 1781.894387] ? xa_delete_node+0x280/0x280 [ 1781.895150] ? trace_hardirqs_on+0x5b/0x180 [ 1781.895938] xa_store+0x31/0x50 [ 1781.896543] __io_uring_add_tctx_node+0x1cf/0x520 [ 1781.897425] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1781.898372] ? alloc_fd+0x2e7/0x670 [ 1781.899041] io_uring_setup+0x1fbb/0x2980 [ 1781.899866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1781.901013] ? wait_for_completion_io+0x270/0x270 [ 1781.902004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.903027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.903938] do_syscall_64+0x33/0x40 [ 1781.904621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.905550] RIP: 0033:0x7eff19607b19 [ 1781.906206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.909563] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1781.910910] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1781.912199] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1781.913480] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1781.914754] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1781.916016] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1781.917332] CPU: 1 PID: 10662 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1781.918813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.920560] Call Trace: [ 1781.921130] dump_stack+0x107/0x167 [ 1781.921898] should_fail.cold+0x5/0xa [ 1781.922703] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1781.923791] ? create_object.isra.0+0x3a/0xa20 [ 1781.924757] should_failslab+0x5/0x20 [ 1781.925566] kmem_cache_alloc+0x5b/0x310 [ 1781.926432] create_object.isra.0+0x3a/0xa20 [ 1781.927359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1781.928432] kmem_cache_alloc+0x159/0x310 [ 1781.929322] skb_clone+0x14f/0x3d0 [ 1781.930079] ip_mc_output+0x4d9/0xa30 [ 1781.930874] ? 0xffffffffa0000000 [ 1781.931615] ip_send_skb+0xdd/0x260 [ 1781.932388] udp_send_skb+0x6da/0x11d0 [ 1781.933222] udp_sendmsg+0x139a/0x2160 [ 1781.934042] ? mark_lock+0xf5/0x2df0 [ 1781.934824] ? ip_frag_init+0x350/0x350 [ 1781.935665] ? lock_chain_count+0x20/0x20 [ 1781.936553] ? udp_setsockopt+0xc0/0xc0 [ 1781.937387] ? mark_lock+0xf5/0x2df0 [ 1781.938168] ? lock_acquire+0x197/0x470 [ 1781.939006] ? lock_chain_count+0x20/0x20 [ 1781.939873] ? mark_lock+0xf5/0x2df0 [ 1781.940666] ? mark_lock+0xf5/0x2df0 [ 1781.941456] ? lock_chain_count+0x20/0x20 [ 1781.942327] ? __lock_acquire+0xbb1/0x5b00 [ 1781.943222] ? lock_chain_count+0x20/0x20 [ 1781.944107] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1781.945248] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1781.946127] ? udp_v6_push_pending_frames+0x360/0x360 [ 1781.947215] ? mark_lock+0xf5/0x2df0 [ 1781.948008] ? lock_acquire+0x197/0x470 [ 1781.948842] ? find_held_lock+0x2c/0x110 [ 1781.949706] ? __might_fault+0xd3/0x180 [ 1781.950545] ? lock_downgrade+0x6d0/0x6d0 [ 1781.951417] ? lock_downgrade+0x6d0/0x6d0 [ 1781.952289] ? sock_has_perm+0x1ea/0x280 [ 1781.953147] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1781.953598] loop6: detected capacity change from 0 to 131072 [ 1781.954234] ? _copy_from_user+0xfb/0x1b0 [ 1781.954266] ? __import_iovec+0x458/0x590 [ 1781.954291] ? udp_v6_push_pending_frames+0x360/0x360 [ 1781.958069] inet6_sendmsg+0x105/0x140 [ 1781.958891] ? inet6_compat_ioctl+0x320/0x320 [ 1781.959832] __sock_sendmsg+0xf2/0x190 [ 1781.960650] ____sys_sendmsg+0x70d/0x870 [ 1781.961515] ? sock_write_iter+0x3d0/0x3d0 [ 1781.962404] ? do_recvmmsg+0x6d0/0x6d0 [ 1781.963225] ? lock_downgrade+0x6d0/0x6d0 [ 1781.964103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1781.965218] ___sys_sendmsg+0xf3/0x170 [ 1781.966041] ? sendmsg_copy_msghdr+0x160/0x160 [ 1781.967007] ? __fget_files+0x2cf/0x520 [ 1781.967848] ? lock_downgrade+0x6d0/0x6d0 [ 1781.968719] ? find_held_lock+0x2c/0x110 [ 1781.969605] ? __fget_files+0x2f8/0x520 [ 1781.970449] ? __fget_light+0xea/0x290 [ 1781.971279] __sys_sendmsg+0xe5/0x1b0 [ 1781.972088] ? __sys_sendmsg_sock+0x40/0x40 [ 1781.972996] ? rcu_read_lock_any_held+0x75/0xa0 [ 1781.973995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.975099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.976176] ? trace_hardirqs_on+0x5b/0x180 [ 1781.977101] do_syscall_64+0x33/0x40 01:15:25 executing program 1: lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)=@v2={0x3, 0x3, 0xc, 0x3a, 0xcc, "73a33d307a6252e6b7f0b9dc65535bcd2cb2d8ee6e800c7e71cd7b037f343a012bbab913264383c17b0ebaff2f5d2f4e9f064eefd6eb745fa254332e7b09a313a403e6de879e2d13138b2c20a99f288270e90e0f001201dc1414bb5fc910e86866d3194ccfacc23900342c8a5a4366ccefa42eb422ba2d23d540a2f5a122dfb0de1aba04ab74f4447cfe59c3a260dddcdb1c017954f553b3718c5c65381a82772250c6f0638f3e0d29cfd78621d8d2ba1c6cad9dd99f21314df0ebae6fe5174aa1d12d17c85a044228e15a49"}, 0xd5, 0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1781.977888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.979135] RIP: 0033:0x7fb8c885ab19 [ 1781.979916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.983792] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.985409] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1781.986906] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1781.988409] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.989919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.991420] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1782.020446] FAULT_INJECTION: forcing a failure. [ 1782.020446] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.022528] CPU: 0 PID: 10661 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1782.023729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.025170] Call Trace: [ 1782.025634] dump_stack+0x107/0x167 [ 1782.026279] should_fail.cold+0x5/0xa [ 1782.026940] ? create_object.isra.0+0x3a/0xa20 [ 1782.027742] should_failslab+0x5/0x20 [ 1782.028412] kmem_cache_alloc+0x5b/0x310 [ 1782.029133] create_object.isra.0+0x3a/0xa20 [ 1782.029900] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.030784] kmem_cache_alloc_trace+0x151/0x320 [ 1782.031594] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1782.032408] __kthread_create_on_node+0xd1/0x400 [ 1782.033250] ? __kthread_parkme+0x1d0/0x1d0 [ 1782.034014] ? __mutex_lock+0x4fe/0x10b0 [ 1782.034715] ? loop_configure+0xc8a/0x1410 [ 1782.035443] ? do_raw_spin_unlock+0x4f/0x220 [ 1782.036210] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1782.037050] kthread_create_on_node+0xbb/0x100 [ 1782.037841] ? __kthread_create_on_node+0x400/0x400 [ 1782.038710] ? lockdep_init_map_type+0x2c7/0x780 [ 1782.039523] ? lockdep_init_map_type+0x2c7/0x780 [ 1782.040349] loop_configure+0x3e7/0x1410 [ 1782.041068] lo_ioctl+0xa57/0x16b0 [ 1782.041682] ? avc_has_extended_perms+0x7f1/0xf40 [ 1782.042510] ? loop_set_status_old+0x250/0x250 [ 1782.043287] ? avc_ss_reset+0x180/0x180 [ 1782.043967] ? find_held_lock+0x2c/0x110 [ 1782.044676] ? __lock_acquire+0xbb1/0x5b00 [ 1782.045447] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1782.046338] ? generic_block_fiemap+0x60/0x60 [ 1782.047110] ? lock_downgrade+0x6d0/0x6d0 [ 1782.047817] ? build_open_flags+0x6f0/0x6f0 [ 1782.048549] ? loop_set_status_old+0x250/0x250 [ 1782.049339] blkdev_ioctl+0x291/0x710 [ 1782.049999] ? blkdev_common_ioctl+0x1930/0x1930 [ 1782.050811] ? selinux_file_ioctl+0xb6/0x270 [ 1782.051571] block_ioctl+0xf9/0x140 [ 1782.052204] ? blkdev_read_iter+0x1c0/0x1c0 [ 1782.052950] __x64_sys_ioctl+0x19a/0x210 [ 1782.053652] do_syscall_64+0x33/0x40 [ 1782.054294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.055171] RIP: 0033:0x7fe2f6eaa8d7 [ 1782.055820] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.058975] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1782.060267] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1782.061487] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1782.062705] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1782.063926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1782.065144] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:15:25 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 49) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:15:25 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 7) [ 1782.092398] loop4: detected capacity change from 0 to 262144 [ 1782.101444] loop7: detected capacity change from 0 to 131072 [ 1782.109613] FAT-fs (loop6): bogus number of FAT sectors [ 1782.110653] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1782.119748] loop3: detected capacity change from 0 to 262144 [ 1782.140746] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1782.141212] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:15:26 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 53) [ 1782.160835] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1782.187529] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1782.189569] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1782.191539] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:15:26 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) openat(r0, &(0x7f0000000000)='./file0\x00', 0xa00, 0x1) openat(r0, &(0x7f0000000600)='./file0\x00', 0x101180, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000140)=""/11, 0xb}], 0x5, 0x20, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="2ec3365c155aa73573644e9f962c84fb80cb7516ac9f4c2b589f38956f92cd6505f75b54d2171eb82bbdeab731a5147a4e0a7f8fcc806a2a19a7bcb8f813c2f5054d6eaa3e719ec79265ac067151663cab0c3f72a307debf258cef6a0df29fd77d3751b569b7c756774c83cc66d6acf0703431cb0ff1ff9176286e194864bd0ea3cb6541ee894c9161e507298b2a909ca4522580ab2d6b879605b4d2776e", 0x9e}, {&(0x7f00000004c0)="e9e4bedaa63265fcca05a39b6c2180230ad96251df7a17a2281d40e3d1614567823d7ed651220bdec10c542e8960d8c2081ab6451b760bcb2a30ae66960acd440ac75e9da405850faef1f046ce64e375545d9c35351114d5b84f7748c515a6292bc76ded94a50b250769c23c11fb35cc746ff7f7e62cfb8560f6bbfa32d0fa0144d5fb4486f5645ba6941c2fba020b04b68948061c7f9ce918f9bc90ec797e82bff72e87644a75317d96e5a7d0f58f5d3db0a99d5893576440732b5fa5472b79bf2fe0c1d1d547cc1351fda866fd2a12af82ac66ddd691fc0e19e57408322bc80b51336a0774b7b8c134f774a0f2d285ea0602cf4626ef437787a22b4e73523d223e1d457cf958edc05c5fcf7951d575aeae2d923ad2ed0898bbfa7ff85cfe32e54abedffa2663bba7a7d462098574cfe06ccaad9a156ca7a3964067301350d7556558215bd0d1d82e2ce38a79a065b02d74f328b640112d6a86ab7751e66ab488584604beb9580412a652246b25d7a688d199a726e1c9c80bf3e1e1f4fd5d122b93b0090d8e6616e25311761069e60499798891ad10f9337676efc61b5c15c344dca22cd3f15c794d3fb426af0b86ce1750b1c05e52d4a556d4e8df0d6f24539399c604458d06bbb3e00a58e3a1c8f7eed6dc7f0dfc2de604a8c08f75cb02226e0454c48495014ee6c54a8b89828136479b1db4d5318e5e75792d0b3695f81ff39545736e0db854ef7df8f3928b1f5f7d94e224233c1fe4dd2b6a516f50cf0cc66417e45a904a398b6521d02be9cd3263b059afdf8b9d8b2ac1f0382018293f34215a54f92c7751aecd226bf7ccb8a2fcd611858ce367d78c01a352808e674e94ec4e9a5a1c3cdc330e211799d209758eeba9257fd55c8021538a2386b18c5ae407a8ebc932bf8bd55f216a41cdc0662ce1d8cb7f1859904690baa781ddaef0ccf7162d96331fa72567bdbe2bfed16920e111d83ee7c714c8c487793b5534b296843d45666a78dc0e1811fada433b98c28b90ac30401366b26fdb3c29dea20ccce91b62757258d47a20d87b9280d0b9abb60b7143217f1948a35536040704402e752282fe4a630cf55a21fe00c6f235d09d329d06c572f9c81bdc9d3abe05df8f5e55b3f96a083335dad3d04f99627e8f73caf5bbeb8d585271da290357b1d883971a612496445ec02135902bf29d134637f1a17ae96feed951f971de4a0adae1191b8d7ee5d02834ebd01ca3550415fdc27f896c4824d5972e8d19749704efbf4ccaa34ce2910328f5b694a8fa806cc6aeb4430036d9632215c6527d91a515cb8403349b50f187bc2a1b3448e68edc65bf20cd6da7608a2dd0df0ea496b35ac267e5d09197ebdabb1ae9f39f13fcbc84302c6427303283cfeff905f73855672c72949e3b9656f5bac3e6eba60fe33c86557bc9736ea5cf4b6ae7f3d7a84414954ee3de63a09bcc58fcc905428bd51c91df3680d4d3efb9e0dd3a2e6d251986cf96a1782b0c8126d9d274c03e03b5f3b66bdd63b027510ddbf66a489c51bcd082e4374f8bbc3a741e9cfc63ac848ef874a14bf093b2f4bad8ed2c6b25241291a98baa5fae333e5f6bd1458bfdfea9876fc33e3fc99ec9ae539f3d3f6d7262ca7a14a7d91ab681b03ab9ffb90242ca679f19fca92fe96ebbc5182ed6acd13ab58e2003ae70788788304581be1f3534a1ebdc09901702287d89607c9bc3af3423c8b45a7be9a98494984fe878e1ae0b41456b8d65a6ed180d2d463e6fa42b6de0c32d1bf596e7bc07e2f15a3bd3b89e8149053d13b794269d86756b67c85400af349d8211fc9316ca36092812f2a81165f5a72622c62ab56391e076045b763d6ca0cf249ceb4cb0fed2f1d71571a9bddb116043d1b83e733495b40e9d9fe10f82ddd1cd53d509fccc2db371fcc96d0b67878e557b700ad5821774d3016ab1c4bc6e96234a3af6bee914f9eb2d31185ae32fdc28b125212c067b486f7f4902dd38e6c57737aad1d1fe8926708dd9d0f1f13e440962c4a80fd42214e30210b31a4dffba7a204074482edcfaa95ac94ae580ec7fc17d98df6660d929b66008291015bb076a8875e82a5c69597d20f1c7c531e5473dc6c30e7f1bc325695c0fe59dcb8d100fd94837f14003e3dae76a2598338f78701c2b6f4ade1da943d7cd78ce69064c39d964a81ce3c8a2a9b44d5730656f546aefb95d1d439a1518cda8a502d3ccdb78b8b9b204707e7ad315175733c29ccd334bcd1dd080eecbf7cf4dc610e94da5ff7e670e342df77b9fb4ac821d95d7589a41c27ad8473615a748a40d81a0b56a6cb91b0bd72e7ee179168d40cd569ba417f81e2ab09fc74f2758534b9e297ad05454bea74705d8ef09ae83fff693a4c328285ffbdeadf5f36e0cdf95a174d57593941ffe1c2d701f788f869fac8fef4aaa0dd3352e201c0966ce7edcdc8f0b97df70b0d63fd2321eb5b35eb1b180d9f94733273e967dfca799ea93539140468d20587d44bebad4c2df6b9ed94d3de48aba3fc3b6f2b75931ba87b9a4db26539227e094b3f87b239e67630d0119ba4610dc51db8c26a543453e6c63827af819c9cf54993df1b693828df97bb4e6483f59411ea5d2bf32b7bcea78418438f7efb7c2ca328925b2724806ca88eb4859ee8bb9b6138eabbba263e36809ac325132596a96d4d8440f515f2899f1b6727748dc8c32e4d06f680ff5e5d48ccbac6e25c0410244cf2882919e6498021026b08abda20c9231dbddbae68ca88f9281d3657217fe315bc80c6166f03779eafd28022bf1049ff58134a14420e2404b5b1a251394e503911e431a083798e7d8bf0b6b34490491dddcbb1ba19effb63cea97455031f105f93d1fa36c3473ba8545d08450f0e5018d18e0ceb7c4ef1fb9274cf85eaafab30be5cfb2028b83d19e24c8a51510bfc0fb14d1a5dafe6f8c1e17d5c2b099513906e98fffc1652f3429b45f40579092621859b5dcfcdf9dde197f74584f3389559712c21691a3549dd9b7c7705fd4ee397d68425cb620d44256554fa528641d5e2f72735d4c1730bf3912a1a69d4924f3f21cdf24692cd03ef48a3e53c09446e4e941ede3e30afd2cc08d483b580c0f20144f174e886eb25f12fa7455893c0a1ac75ed358599b392aad28582c00b3d9790aa3fe2208af9445fb8bb2936fe40d10772400151b5aae220ea1f7bf3c0bb30fb431e69241618ae3850239dcbf8907acd9e2b4aa244f21feacd08e5b6e7990ede4a63213127813085bf91a4618e50fe41dbb89ff47474b8ecc481796a36b7e2fe12b02d818d1095fae2e305f8586c19500ce46f05b8e5c213d9ef0cf09e4c090d083e63698abf983c669faed60b00ed721d22e77bb687d762c5663fe128ef63f474e6cf3d1185cf879ff0b5a974069a132f98ce1c3192ed55c109c5f827940aa85d5b6b89bb97bb239322b6a75f1e262e5a8af62b262a784253cca9895de3a18a41bf8a9cd5b4b8164b87c00fe223f9846c7c2605453f69ea86ce8ff0f3f5098c68201363cc2a4e65cfe5ab2979687b1be1af45d4aa1a14bb773d38e20a2c8dd7fdf33f5fbf0e779cf7cc6b8013f50823836c284f7da639b09368cf77ecc1b3987b69d9b37ccdfb480803501726cabebb5f10799034af2fd0584fb46371d840565525dce20298896eae76d2a2b886f0f4e24460a10b1b8e21fb99965a989189e72bbe9e88f5a44990cd5e44100fbe9b9cdf027526b0c667ec896ee4add46b19bf001a1e63bab88379e784fc2a90c42012516006f7f55eafb1d41a5216b570164b6039e66df33a54cec31d34cf8d4b3469414d4771ecaeda466997382fb0853fbbb9a84ac415041c1049a9419cb1e34d12b66328a4d21f924392c28dcd5ec5cbc018923788029954cf3f71111642c9e800b3ae04d4e6c82def8fea5f7fbbb8a7acd9d3e5d8a1ae095d6f6c794236687b21f6dc317fff81ca80618b71fc4116064d150844af2a93a75957e8b153488e7e3985a0ff73670f68cdcd8ac35b44be6b58fb4130f49988fee88b8176a2b442efb2966677829ce4c9637e2a7aa35de98234134b7876b9b943ee4589659eeb035f18126660d38b058f1699b3052ba91e9ce6000043acb7e14c277e3dc072fed2acf567a01e92d8639547fb50ff22d283c232d27ef194089b498294ea02aa82cec0132fdf4f9f53c55e3ebdd01dc31b96484ca7a4b6d23174eb30e6187d43209e074ceea113f14bfc66d176798a6a8c25e7c20985a04a2a91a72244587bf1d3e8e8eb58d6ae791affef15d9057948aa4d72355c1f37b06c91fbc1123691ae9de1e6f227dfff1c0329f05d2a08e5c735d7f2bce181790724b7a80608319b54103a9a62c93b0d99de947e2e27e7d9b558421ae6599914bb9db57538b378a43cc3cfca4cf83125db1eae347625c47370df422addb5d5b636911471c12fe9aa9ea8560d05903b9ae62cf369e74704f14260aeabda71ec29dd91765d8719e9ca2bf657d9fbf679a0784bd7b1a4673291324b4f29021b4492212b51d243beddf3a7a9d388a48733200caf96bd352c3b44ab4c0cb5fbc1be583543ad561b8cf1f01d81a733274f2ccb67989961649fcac651ae3a5d17670d04dea9cf665e5672a42b3eac383932107da598da437b3ca66f2161ea3449254f44a1b37fceb2331dc50683eeb6b382a381146f36e855584a664233dd9d90aa729414101f3a49f66ba5a7ba82eab9100a264b26c70b3ad885feea29ec0aa2f500c310233363bdaf38fe2c8f3042ce846e7dfb73bb94f51302f86ff56b6ca410ee19c789180ba3d29f16a9e94a6421b9e745b5b85b94e34ca1d5fba4aea3220de4eac589d45cc1c0086839d0ded8218b715f90ed0a441b11dd450eda51b0c54d377e39f14ac04d35dde555852b01cf6892c72f15f4c5507e398151913c079bffffb9e9b5f38502ce81ca2faeab24c8522281e34ad2b3efce822da93c1e9d332782c97358e4c0dfa2503dc5245b2fc4b7859fed424f1751af559576aef0ef0ab833b48630e25ce8654f40f1f031fd541864ee986701be8c9250d0d09ccc2b5e683975c2994a77ce7dc58d96e04b2a8c41ce73d00086f0b0b380d621cd9244f44ec04450eccdf94f934487c2d302c763899389de0012594cb31881a869f1659eddbc1eda9d6f7ca72ba4b18641dc6d9474100a2ce1897525acc8664c71dbf745a322fe7a6d60619d14e805f6363f117c6d1b7ec95a080274a9a9bdb07bebb531baa02cfd4652330793c61a08cea49eb90663129ce835b0e601b94eb497a008b7952ec9683387b5f53a18c839b7ae31a7c78ad5e6dd2feadc17bfd42ade4a75a6b48c0023699869cdd998be1401061a93bcd80b155b0a992812439289045d5d4b0949b6cb4f1492c63fa2fd4f5a2795664dd830542cfe278913a9ea8d0ea62dbf12709a2235cd1d3b8e827e6287cff37a8b23a10e5bfabf079934172bc13d528199469d2daf66e5472357bc04de05db7714cc65dd2b204935e60265f9bd074beca2ce353d5ddec49c5a881f059710b4f8426ed08e1175c4d4e191e6f553ef7d080718242a3c1bc37b81427010c", 0xf62}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) [ 1782.213742] FAULT_INJECTION: forcing a failure. [ 1782.213742] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.216426] CPU: 1 PID: 10678 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1782.217043] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1782.217915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.217923] Call Trace: [ 1782.217949] dump_stack+0x107/0x167 [ 1782.217972] should_fail.cold+0x5/0xa [ 1782.220681] EXT4-fs (loop3): get root inode failed [ 1782.222014] ? xas_alloc+0x336/0x440 [ 1782.222038] should_failslab+0x5/0x20 [ 1782.222058] kmem_cache_alloc+0x5b/0x310 [ 1782.222081] xas_alloc+0x336/0x440 [ 1782.222577] EXT4-fs (loop3): mount failed [ 1782.223325] xas_create+0x34a/0x10d0 [ 1782.223353] ? kernel_text_address+0xf2/0x120 [ 1782.223379] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1782.231837] xas_store+0x8c/0x1c40 [ 1782.232616] __xa_store+0x164/0x2d0 [ 1782.233409] ? xa_delete_node+0x280/0x280 [ 1782.234308] ? trace_hardirqs_on+0x5b/0x180 [ 1782.235249] xa_store+0x31/0x50 [ 1782.235963] __io_uring_add_tctx_node+0x1cf/0x520 [ 1782.237050] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1782.238208] ? alloc_fd+0x2e7/0x670 [ 1782.238997] io_uring_setup+0x1fbb/0x2980 [ 1782.239912] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1782.241014] ? wait_for_completion_io+0x270/0x270 [ 1782.242094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.243212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.244290] do_syscall_64+0x33/0x40 [ 1782.245095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.246245] RIP: 0033:0x7eff19607b19 [ 1782.247048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.251013] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1782.252643] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1782.254188] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1782.255714] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1782.257249] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1782.258776] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1782.263234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1782.273952] FAULT_INJECTION: forcing a failure. [ 1782.273952] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.276476] CPU: 1 PID: 10675 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1782.277978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.279758] Call Trace: [ 1782.280329] dump_stack+0x107/0x167 [ 1782.281121] should_fail.cold+0x5/0xa [ 1782.281940] ? ext4_alloc_inode+0x1a/0x670 [ 1782.282859] should_failslab+0x5/0x20 [ 1782.283677] kmem_cache_alloc+0x5b/0x310 [ 1782.284555] ? security_compute_validatetrans.part.0+0x960/0x960 [ 1782.285874] ? ext4_init_journal_params+0x350/0x350 [ 1782.286944] ext4_alloc_inode+0x1a/0x670 [ 1782.287800] ? ext4_init_journal_params+0x350/0x350 [ 1782.288876] alloc_inode+0x63/0x240 [ 1782.289645] new_inode+0x23/0x250 [ 1782.290394] __ext4_new_inode+0x32c/0x5370 [ 1782.291289] ? avc_has_extended_perms+0xf40/0xf40 [ 1782.292360] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1782.293397] ? dquot_initialize_needed+0x290/0x290 [ 1782.294450] ? selinux_determine_inode_label+0x1ab/0x340 [ 1782.295615] ext4_mkdir+0x32c/0xb10 [ 1782.296415] ? ext4_rmdir+0xf70/0xf70 [ 1782.297247] vfs_mkdir+0x493/0x750 [ 1782.298001] do_mkdirat+0x150/0x2b0 [ 1782.298785] ? user_path_create+0xf0/0xf0 [ 1782.299663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.300796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.301895] do_syscall_64+0x33/0x40 [ 1782.302678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.303757] RIP: 0033:0x7fae9488ec27 [ 1782.304538] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.308529] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1782.310148] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1782.310916] FAULT_INJECTION: forcing a failure. [ 1782.310916] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.311645] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1782.311689] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1782.311708] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1782.317936] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1782.319522] CPU: 0 PID: 10682 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1782.320762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.322253] Call Trace: [ 1782.322729] dump_stack+0x107/0x167 [ 1782.323372] should_fail.cold+0x5/0xa [ 1782.324038] ? dst_alloc+0x9e/0x5d0 [ 1782.324680] should_failslab+0x5/0x20 [ 1782.325360] kmem_cache_alloc+0x5b/0x310 [ 1782.326079] dst_alloc+0x9e/0x5d0 [ 1782.326701] rt_dst_clone+0x59/0x860 [ 1782.327365] ip_mc_finish_output+0x95/0x280 [ 1782.328122] ip_mc_output+0x853/0xa30 [ 1782.328794] ip_send_skb+0xdd/0x260 [ 1782.329448] udp_send_skb+0x6da/0x11d0 [ 1782.330140] udp_sendmsg+0x139a/0x2160 [ 1782.330833] ? mark_lock+0xf5/0x2df0 [ 1782.331488] ? ip_frag_init+0x350/0x350 [ 1782.332187] ? lock_chain_count+0x20/0x20 [ 1782.332924] ? udp_setsockopt+0xc0/0xc0 [ 1782.333612] ? mark_lock+0xf5/0x2df0 [ 1782.334253] ? lock_acquire+0x197/0x470 [ 1782.334949] ? lock_chain_count+0x20/0x20 [ 1782.335674] ? mark_lock+0xf5/0x2df0 [ 1782.336330] ? mark_lock+0xf5/0x2df0 [ 1782.336983] ? lock_chain_count+0x20/0x20 [ 1782.337711] ? __lock_acquire+0xbb1/0x5b00 [ 1782.338454] ? lock_chain_count+0x20/0x20 [ 1782.339191] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1782.340115] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1782.340836] ? udp_v6_push_pending_frames+0x360/0x360 [ 1782.341752] ? mark_lock+0xf5/0x2df0 [ 1782.342401] ? lock_acquire+0x197/0x470 [ 1782.343090] ? find_held_lock+0x2c/0x110 [ 1782.343806] ? __might_fault+0xd3/0x180 [ 1782.344509] ? lock_downgrade+0x6d0/0x6d0 [ 1782.345236] ? lock_downgrade+0x6d0/0x6d0 [ 1782.345959] ? sock_has_perm+0x1ea/0x280 [ 1782.346664] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1782.347569] ? _copy_from_user+0xfb/0x1b0 [ 1782.348307] ? __import_iovec+0x458/0x590 [ 1782.349027] ? udp_v6_push_pending_frames+0x360/0x360 [ 1782.349933] inet6_sendmsg+0x105/0x140 [ 1782.350600] ? inet6_compat_ioctl+0x320/0x320 [ 1782.351374] __sock_sendmsg+0xf2/0x190 [ 1782.352037] ____sys_sendmsg+0x70d/0x870 [ 1782.352744] ? sock_write_iter+0x3d0/0x3d0 [ 1782.353465] ? do_recvmmsg+0x6d0/0x6d0 [ 1782.354142] ? lock_downgrade+0x6d0/0x6d0 [ 1782.354843] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1782.355754] ___sys_sendmsg+0xf3/0x170 [ 1782.356413] ? sendmsg_copy_msghdr+0x160/0x160 [ 1782.357205] ? __fget_files+0x2cf/0x520 [ 1782.357882] ? lock_downgrade+0x6d0/0x6d0 [ 1782.358595] ? find_held_lock+0x2c/0x110 [ 1782.359300] ? __fget_files+0x2f8/0x520 [ 1782.359998] ? __fget_light+0xea/0x290 [ 1782.360672] __sys_sendmsg+0xe5/0x1b0 [ 1782.361341] ? __sys_sendmsg_sock+0x40/0x40 [ 1782.362080] ? rcu_read_lock_any_held+0x75/0xa0 [ 1782.362901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.363806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.364700] ? trace_hardirqs_on+0x5b/0x180 [ 1782.365448] do_syscall_64+0x33/0x40 [ 1782.366085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.366955] RIP: 0033:0x7fb8c885ab19 [ 1782.367588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.370389] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1782.371420] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1782.372345] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1782.373283] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.374208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.375133] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1782.436621] loop3: detected capacity change from 0 to 262144 [ 1782.439860] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1782.442362] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1782.443525] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1782.444725] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1782.463715] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1782.465470] EXT4-fs (loop3): get root inode failed [ 1782.466087] EXT4-fs (loop3): mount failed 01:15:40 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 50) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:15:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40103, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:15:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf32(r0, 0x0, 0x58) openat(r0, &(0x7f0000000000)='./file0\x00', 0x101000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$getflags(r1, 0x3) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:15:40 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 8) 01:15:40 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:40 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1796.999247] loop3: detected capacity change from 0 to 262144 [ 1797.007420] FAULT_INJECTION: forcing a failure. [ 1797.007420] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.009925] CPU: 0 PID: 10706 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1797.011411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.013186] Call Trace: [ 1797.013768] dump_stack+0x107/0x167 [ 1797.014552] should_fail.cold+0x5/0xa [ 1797.015365] ? create_object.isra.0+0x3a/0xa20 [ 1797.016346] should_failslab+0x5/0x20 [ 1797.017155] kmem_cache_alloc+0x5b/0x310 [ 1797.018033] ? mark_held_locks+0x9e/0xe0 [ 1797.018920] create_object.isra.0+0x3a/0xa20 [ 1797.019856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.020936] kmem_cache_alloc+0x159/0x310 [ 1797.021827] xas_alloc+0x336/0x440 [ 1797.022590] xas_create+0x34a/0x10d0 01:15:40 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 54) 01:15:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 30) [ 1797.023391] ? kernel_text_address+0xf2/0x120 [ 1797.024491] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.025634] xas_store+0x8c/0x1c40 [ 1797.026411] __xa_store+0x164/0x2d0 [ 1797.027190] ? xa_delete_node+0x280/0x280 [ 1797.028103] ? trace_hardirqs_on+0x5b/0x180 [ 1797.029042] xa_store+0x31/0x50 [ 1797.029779] __io_uring_add_tctx_node+0x1cf/0x520 [ 1797.030815] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.031958] ? alloc_fd+0x2e7/0x670 [ 1797.032000] FAULT_INJECTION: forcing a failure. [ 1797.032000] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.032744] io_uring_setup+0x1fbb/0x2980 [ 1797.032773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.032794] ? wait_for_completion_io+0x270/0x270 [ 1797.032847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.039256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.040363] do_syscall_64+0x33/0x40 [ 1797.041159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.042274] RIP: 0033:0x7eff19607b19 [ 1797.043073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.047023] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.048649] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1797.050185] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.051721] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.053247] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1797.054786] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1797.056363] CPU: 1 PID: 10707 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1797.057867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.058843] loop6: detected capacity change from 0 to 131072 [ 1797.059607] Call Trace: [ 1797.059636] dump_stack+0x107/0x167 [ 1797.059658] should_fail.cold+0x5/0xa [ 1797.059682] ? create_object.isra.0+0x3a/0xa20 [ 1797.059705] should_failslab+0x5/0x20 [ 1797.059725] kmem_cache_alloc+0x5b/0x310 [ 1797.059749] create_object.isra.0+0x3a/0xa20 [ 1797.059766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.059790] kmem_cache_alloc+0x159/0x310 [ 1797.059817] dst_alloc+0x9e/0x5d0 [ 1797.059842] rt_dst_clone+0x59/0x860 [ 1797.059864] ip_mc_finish_output+0x95/0x280 [ 1797.059888] ip_mc_output+0x853/0xa30 [ 1797.059913] ip_send_skb+0xdd/0x260 [ 1797.059938] udp_send_skb+0x6da/0x11d0 [ 1797.059970] udp_sendmsg+0x139a/0x2160 [ 1797.059991] ? mark_lock+0xf5/0x2df0 [ 1797.060012] ? ip_frag_init+0x350/0x350 [ 1797.060032] ? lock_chain_count+0x20/0x20 [ 1797.060056] ? udp_setsockopt+0xc0/0xc0 [ 1797.060071] ? mark_lock+0xf5/0x2df0 [ 1797.060090] ? lock_acquire+0x197/0x470 [ 1797.060112] ? lock_chain_count+0x20/0x20 [ 1797.060132] ? mark_lock+0xf5/0x2df0 [ 1797.060159] ? mark_lock+0xf5/0x2df0 [ 1797.081519] ? lock_chain_count+0x20/0x20 [ 1797.082384] ? __lock_acquire+0xbb1/0x5b00 [ 1797.083284] ? lock_chain_count+0x20/0x20 [ 1797.084177] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.085289] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1797.086160] ? udp_v6_push_pending_frames+0x360/0x360 [ 1797.087223] ? mark_lock+0xf5/0x2df0 [ 1797.087998] ? lock_acquire+0x197/0x470 [ 1797.088835] ? find_held_lock+0x2c/0x110 [ 1797.089680] ? __might_fault+0xd3/0x180 [ 1797.090521] ? lock_downgrade+0x6d0/0x6d0 [ 1797.091392] ? lock_downgrade+0x6d0/0x6d0 [ 1797.092276] ? sock_has_perm+0x1ea/0x280 [ 1797.093128] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1797.094207] ? _copy_from_user+0xfb/0x1b0 [ 1797.095091] ? __import_iovec+0x458/0x590 [ 1797.095952] ? udp_v6_push_pending_frames+0x360/0x360 [ 1797.097049] inet6_sendmsg+0x105/0x140 [ 1797.097874] ? inet6_compat_ioctl+0x320/0x320 [ 1797.098819] __sock_sendmsg+0xf2/0x190 [ 1797.099644] ____sys_sendmsg+0x70d/0x870 [ 1797.100496] ? sock_write_iter+0x3d0/0x3d0 [ 1797.101389] ? do_recvmmsg+0x6d0/0x6d0 [ 1797.102205] ? lock_downgrade+0x6d0/0x6d0 [ 1797.103072] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.104153] ___sys_sendmsg+0xf3/0x170 [ 1797.104960] ? sendmsg_copy_msghdr+0x160/0x160 [ 1797.105910] ? __fget_files+0x2cf/0x520 [ 1797.106736] ? lock_downgrade+0x6d0/0x6d0 [ 1797.107599] ? find_held_lock+0x2c/0x110 [ 1797.108468] ? __fget_files+0x2f8/0x520 [ 1797.109285] ? __fget_light+0xea/0x290 [ 1797.110115] __sys_sendmsg+0xe5/0x1b0 [ 1797.110899] ? __sys_sendmsg_sock+0x40/0x40 [ 1797.111820] ? rcu_read_lock_any_held+0x75/0xa0 [ 1797.112825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.113935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.115017] ? trace_hardirqs_on+0x5b/0x180 [ 1797.115931] do_syscall_64+0x33/0x40 [ 1797.116717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.117794] RIP: 0033:0x7fb8c885ab19 [ 1797.118581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.122349] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.123954] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1797.125459] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1797.126933] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.128429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.129940] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1797.150799] FAT-fs (loop6): bogus number of FAT sectors [ 1797.152044] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1797.161851] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 01:15:41 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x403}, {&(0x7f00000001c0)="2500030000000003048ef9a8e9f61bef951246f688bf9318146cb3306d4cba8cf93c96137d45be850834d87cba15baad044e67e8203e19b7c2610635544b51ab4cb02b33a0fd0f88ead5d03c26b37a2769e209ca6fe14a85c9f49a6fc7daf982377298d47170caf572a11be5ade6eefa8d788e2cbde4714a10488f23bc590b036e24c39fdf20254d994bfd0ee86fa82f0e54646201d23a9c5455fae92ae8484c36585c6a380b6976e78aad7c70d9a04a313eff7e38", 0xb5, 0x7}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x8000, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)="3b9e1f5bbf5773c6b178638f9c55fe058a202a9954af40dade9c803c8966ff", 0x1f}, {&(0x7f0000000300)="698aa83d29db09dfbffd511f021ef2b47389a8d442114a7e2c129cb52e43c163497bdb0674d31cd7e96183fba3161816e2350053c182384610f0fc6d0d7196755c6ab383a18bfe9f550dd329f6529608fd7229cede5fa7b3ba855038ebf6046502c787add5a9b0e29e45f3bca276d9b37b31ba43f4b439087bdcfe99a737c00b097c9204d0", 0x85}, {&(0x7f0000000080)="ea79b02f75e55cedede11a0982c9e513fee8e0f89a77a6", 0x17}, {&(0x7f0000000140)="31a5642b2f209589fd8418bae3634c93621753af36e68de6adb5849e636b9847085228fa1ab60e48275c55", 0x2b}, {&(0x7f00000003c0)="46ba1e40747c", 0x6}, {&(0x7f0000000400)="8c309c6131f8caf4562a25c6ed998c794deccfb355a5762b67f0ff54968780adda2d203d247a1ab0f77e76b4d633dc507afad8dd67a6f5a859e44199fb53da8a20d3390bb907bf25d7b3b3e5cdf191c033d03a18f67d2192d5ba3edb37df72", 0x5f}, {&(0x7f0000000480)="c28d3c3eb48740c5064f", 0xa}, {&(0x7f00000004c0)="ebe9e854fc071a7f6b77594896e781865fe925e896aa820354b7fe220b757225f9780a586dc339780b05af9914e8d5875e595aae69a7c5409c9b67d4fa6915403dd0284f44f4e8eb3faa7aa28cba7d", 0x4f}], 0x8, &(0x7f0000000740)=[{0x60, 0x118, 0xff, "be8083c5c2d97ad1e93f40489bfb9bd7cc4a05436feb7ea533718f0978d46264f7c50a493fb9b9f2c2273f0e195cd8d19afad73496c1a852468b75efe92c95d8dec9ac9a2985f25b1b23b23c"}, {0xe8, 0x113, 0x6, "5961d2154fcbb1223e5315bff38bf0a703e4250d51e002f649e93e0169be447a1bc06a3074c1007cfec51dca7304629c5de1a387dc1bd8a8215c19cc104131065954959d7d522c2d058db04201929608c8175c694ddcf006e02e84738c7550e7f5af8c840a13b58324a0c74183b0092807885ef68cfc8c413455f39e37952d399b2e2683f4e70c236d31c0bee8e255fec582bea7769cef285633b025313a3e36c1da694555f22e1b2d8a5ad2cc273a237cede6c4d8e02ba1c336ff7805d3feadd07e36ec06c7f671a54cb96b8ff90012625758"}, {0x100, 0x101, 0xfffff2c2, "79fecca4d213ea03c6e9847387640ba7043f346d90f86bf67aecddb28c92c4fc98c7f24ee4e2068dad43ed5b9466dc8e3dc41ea9b2e304d1743aa2a5a1407445674fbe5459322af164a04d4a911b99b2bfc7b0ea930274f9c69e7c56a4a0c4ce55ac97dd07409e96bae9921afd10e55bffcac0046e5281c48c0d5e1d2fb3d32d42310c60cc52a4dd140ad5ed864d2d4f9ca435deee554e7f777a516156e914e10e4783cd3fb0710e26e7b4d108d0462f1950b958ae25e85b4ca3b7fef2a5e23a043645e83ca23f1149839c0e198e3a3ddb5ad5bdaf3bc503af11b9bbf20fd1cdfff13b7cd7033716365cf8f1102b6b70"}, {0x1010, 0x111, 0x3d8, "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"}, {0xf0, 0x3a, 0x2, "18a3456930fd31325aa851df15d50b4c96fa1c754a3f588ecc2d0a6f3f5b2696de684f0ace53ce71d4ec4cb068377b65c98e0dc4943878eecda34baf52a06049f17f79b9294cef6e7bc3ad7cca87a18ee186702c6ef16bc5fb9f87d7698f8460cf9c6f8cc2a1ee76cf3975af7bdcdf4b72e06eeb1ea54561c473aac6c0e55913b51c011312d22289ec0d6c25711561c23812e3a4135a573cffc76fde4b45a47fb8ec5c578d36f38a2843c5697472ecbdfbeeddec3d754e36774dae4b65d0db177cfce2f4ae44665a45ded55754cb5ce463141da1b3f0e3d79d5ef692"}, {0x70, 0x103, 0x1f, "236b2fed2b0eb8f47029653aab4d167f5e581f73c261db6853e0d035f4ca54a7a034e4f158566dbc4de349d4076ba28e856c27cdc6fec9596209036c5cdbacdeb3c6ef2ebbac098b4ccf6d15c261387a6ed1f352cd608ec62eb9ccea33"}], 0x13b8}, 0x4800) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000600)='./file0\x00', 0x250000, 0xa8) openat(r1, &(0x7f0000000640)='./file0\x00', 0x20400, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000001b00)=0xc) 01:15:41 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 51) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1797.165816] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1797.167830] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1797.169743] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1797.175937] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1797.179762] EXT4-fs (loop3): get root inode failed [ 1797.180859] EXT4-fs (loop3): mount failed [ 1797.182289] loop7: detected capacity change from 0 to 131072 [ 1797.195943] FAULT_INJECTION: forcing a failure. [ 1797.195943] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.196972] FAULT_INJECTION: forcing a failure. [ 1797.196972] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.198288] CPU: 1 PID: 10709 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1797.198299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.198305] Call Trace: [ 1797.198329] dump_stack+0x107/0x167 [ 1797.198350] should_fail.cold+0x5/0xa [ 1797.198374] ? security_inode_alloc+0x34/0x160 [ 1797.198398] should_failslab+0x5/0x20 [ 1797.198416] kmem_cache_alloc+0x5b/0x310 [ 1797.198444] security_inode_alloc+0x34/0x160 [ 1797.198465] inode_init_always+0xa4e/0xd10 [ 1797.198486] alloc_inode+0x84/0x240 [ 1797.198509] new_inode+0x23/0x250 [ 1797.211979] __ext4_new_inode+0x32c/0x5370 [ 1797.212868] ? avc_has_extended_perms+0xf40/0xf40 [ 1797.213912] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1797.214945] ? dquot_initialize_needed+0x290/0x290 [ 1797.215985] ? selinux_determine_inode_label+0x1ab/0x340 [ 1797.217126] ext4_mkdir+0x32c/0xb10 [ 1797.217925] ? ext4_rmdir+0xf70/0xf70 [ 1797.218739] vfs_mkdir+0x493/0x750 [ 1797.219488] do_mkdirat+0x150/0x2b0 [ 1797.220257] ? user_path_create+0xf0/0xf0 [ 1797.221134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.222240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.223332] do_syscall_64+0x33/0x40 [ 1797.224136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.225212] RIP: 0033:0x7fae9488ec27 [ 1797.225989] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.229868] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1797.231468] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1797.232964] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1797.234482] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1797.235985] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1797.237486] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1797.239028] CPU: 0 PID: 10720 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1797.240546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.242308] Call Trace: [ 1797.242875] dump_stack+0x107/0x167 [ 1797.243639] should_fail.cold+0x5/0xa [ 1797.244443] ? xas_alloc+0x336/0x440 [ 1797.245229] should_failslab+0x5/0x20 [ 1797.246038] kmem_cache_alloc+0x5b/0x310 [ 1797.246893] xas_alloc+0x336/0x440 [ 1797.247646] xas_create+0x34a/0x10d0 [ 1797.248449] ? kernel_text_address+0xf2/0x120 [ 1797.249397] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.250502] xas_store+0x8c/0x1c40 [ 1797.251265] __xa_store+0x164/0x2d0 [ 1797.252039] ? xa_delete_node+0x280/0x280 [ 1797.252924] ? trace_hardirqs_on+0x5b/0x180 [ 1797.253849] xa_store+0x31/0x50 [ 1797.254551] __io_uring_add_tctx_node+0x1cf/0x520 [ 1797.255543] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.256619] ? alloc_fd+0x2e7/0x670 [ 1797.257410] io_uring_setup+0x1fbb/0x2980 [ 1797.258304] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.259384] ? wait_for_completion_io+0x270/0x270 [ 1797.260425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.261550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.262656] do_syscall_64+0x33/0x40 [ 1797.263451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.264539] RIP: 0033:0x7eff19607b19 [ 1797.265320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.269456] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.271059] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1797.272587] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.274093] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.275592] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1797.277091] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:15:41 executing program 1: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000001c0)=""/253) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20) mkdirat(r0, &(0x7f0000000140)='\x00', 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="2ec3365c155aa73573644e9f962c84fb80cb7516ac9f4c2b589f38956f92cd6505f75b54d2171eb82bbdeab731a5147a4e0a7f8fcc806a2a19a7bcb8f813c2f5054d6eaa3e719ec79265ac067151663cab0c3f72a307debf258cef6a0df29fd77d3751b569b7c756774c83cc66d6acf0703431cb0ff1ff9176286e194864bd0ea3cb6541ee894c9161e507298b2a909ca4522580ab2d6b879605b4d2776e", 0x9e}, {&(0x7f00000004c0)="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", 0xf62}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001540)={'team_slave_1\x00', &(0x7f0000001440)=@ethtool_drvinfo={0x3, "9bfe328995f4318f05a4c93e4acaf26fe29ebe92807c6fb41ae20b68ca18583d", "3dd451144b2219715911c3c419167db55d157841ea0a730e548d617b53c1ad2c", "b3c814351ad733b4cbf4e936feff2735786572c77e39ffffea7f5b217a5c89ca", "faaa34cb7d392ec3166665219f65f2264f5c69302e0cc9ee1b7274d6ad86d5ec", "ef3eca364d7324fcf982156219be9b044aedef3c7921df2151e7bd7922d861fa", "0d15c439543b117f69d68b91", 0xff, 0x8000, 0x1, 0x3, 0xfff00000}}) execveat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='ext2\x00'], &(0x7f0000000780)=[&(0x7f0000000600)='#*@$\t\x00', &(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='*/x\'%@,**\x00', &(0x7f0000000740)='$&@@}{(}\x00'], 0x1000) [ 1797.295646] FAULT_INJECTION: forcing a failure. [ 1797.295646] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.298195] CPU: 1 PID: 10711 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1797.299658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.301419] Call Trace: [ 1797.302066] dump_stack+0x107/0x167 [ 1797.302871] should_fail.cold+0x5/0xa [ 1797.303697] ? __kernfs_new_node+0xd4/0x860 [ 1797.304615] should_failslab+0x5/0x20 [ 1797.305423] kmem_cache_alloc+0x5b/0x310 [ 1797.306304] __kernfs_new_node+0xd4/0x860 [ 1797.307205] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1797.308227] ? lock_chain_count+0x20/0x20 [ 1797.309131] ? update_load_avg+0x162/0x1870 [ 1797.310081] ? find_held_lock+0x2c/0x110 [ 1797.311144] kernfs_new_node+0x18d/0x250 [ 1797.312023] kernfs_create_dir_ns+0x49/0x160 [ 1797.313156] internal_create_group+0x793/0xb30 [ 1797.314164] ? set_user_nice.part.0+0x2fd/0x760 [ 1797.315154] ? sysfs_remove_group+0x170/0x170 01:15:41 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 9) [ 1797.316278] ? lockdep_init_map_type+0x2c7/0x780 [ 1797.317589] ? blk_queue_flag_set+0x22/0x30 [ 1797.318713] ? __loop_update_dio+0x2d2/0x690 [ 1797.319656] loop_configure+0x953/0x1410 [ 1797.320667] lo_ioctl+0xa57/0x16b0 [ 1797.321442] ? avc_has_extended_perms+0x7f1/0xf40 [ 1797.322465] ? loop_set_status_old+0x250/0x250 [ 1797.323445] ? avc_ss_reset+0x180/0x180 [ 1797.324295] ? find_held_lock+0x2c/0x110 [ 1797.325179] ? __lock_acquire+0xbb1/0x5b00 [ 1797.326142] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1797.327240] ? generic_block_fiemap+0x60/0x60 [ 1797.328181] ? lock_downgrade+0x6d0/0x6d0 [ 1797.329053] ? build_open_flags+0x6f0/0x6f0 [ 1797.329991] ? loop_set_status_old+0x250/0x250 [ 1797.330968] blkdev_ioctl+0x291/0x710 [ 1797.331809] ? blkdev_common_ioctl+0x1930/0x1930 [ 1797.332814] ? selinux_file_ioctl+0xb6/0x270 [ 1797.333779] block_ioctl+0xf9/0x140 [ 1797.334561] ? blkdev_read_iter+0x1c0/0x1c0 [ 1797.335499] __x64_sys_ioctl+0x19a/0x210 [ 1797.336375] do_syscall_64+0x33/0x40 [ 1797.337271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.338371] RIP: 0033:0x7fe2f6eaa8d7 [ 1797.339182] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.343125] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.344937] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1797.346530] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1797.348032] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1797.349599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1797.351441] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1797.356299] loop4: detected capacity change from 0 to 262144 [ 1797.362395] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1797.371901] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1797.379474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:15:41 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 55) 01:15:41 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:41 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000540)}], 0x8, &(0x7f0000000600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 01:15:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40104, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:15:41 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000", 0x24}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1797.537792] FAULT_INJECTION: forcing a failure. [ 1797.537792] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.540423] CPU: 0 PID: 10732 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1797.541882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.543633] Call Trace: [ 1797.544193] dump_stack+0x107/0x167 [ 1797.544968] should_fail.cold+0x5/0xa [ 1797.545781] ? __alloc_skb+0x6d/0x5b0 [ 1797.546595] should_failslab+0x5/0x20 [ 1797.547412] kmem_cache_alloc_node+0x55/0x330 [ 1797.548359] __alloc_skb+0x6d/0x5b0 [ 1797.549135] skb_segment+0x9d8/0x3aa0 [ 1797.549951] ? __lock_acquire+0xbb1/0x5b00 [ 1797.550888] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1797.551932] ? lock_acquire+0x197/0x470 [ 1797.552762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.553879] __udp_gso_segment+0x11c6/0x1830 [ 1797.554828] ? __sk_receive_skb+0x830/0x830 [ 1797.555753] udp4_ufo_fragment+0x528/0x720 [ 1797.556647] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1797.557697] inet_gso_segment+0x4fb/0x11a0 [ 1797.558611] skb_mac_gso_segment+0x273/0x570 [ 1797.559548] ? inet_sock_destruct+0x840/0x840 [ 1797.560495] ? skb_network_protocol+0x650/0x650 [ 1797.561477] ? skb_crc32c_csum_help+0x80/0x80 [ 1797.562445] ? lock_acquire+0x197/0x470 [ 1797.563283] ? __dev_queue_xmit+0x1c6/0x2690 [ 1797.564229] __skb_gso_segment+0x32d/0x6d0 [ 1797.565119] ? mark_lock+0xf5/0x2df0 [ 1797.565915] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1797.567027] ? lock_chain_count+0x20/0x20 [ 1797.567907] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1797.568872] __dev_queue_xmit+0x825/0x2690 [ 1797.569772] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1797.570862] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1797.571844] ? mark_held_locks+0x9e/0xe0 [ 1797.572712] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1797.573838] neigh_connected_output+0x382/0x4d0 [ 1797.574831] ip_finish_output2+0x6f1/0x21f0 [ 1797.575744] ? nf_hook_slow+0xfc/0x1e0 [ 1797.576571] ? ip_frag_next+0x9e0/0x9e0 [ 1797.577418] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1797.578486] __ip_finish_output.part.0+0x5f3/0xb50 [ 1797.579524] ? ip_fragment.constprop.0+0x240/0x240 [ 1797.580567] ? netif_rx_ni+0xe7/0x300 [ 1797.581395] ip_mc_output+0x401/0xa30 [ 1797.582222] ip_send_skb+0xdd/0x260 [ 1797.582998] udp_send_skb+0x6da/0x11d0 [ 1797.583831] udp_sendmsg+0x139a/0x2160 [ 1797.584651] ? mark_lock+0xf5/0x2df0 [ 1797.585454] ? ip_frag_init+0x350/0x350 [ 1797.586303] ? lock_chain_count+0x20/0x20 [ 1797.587169] ? udp_setsockopt+0xc0/0xc0 [ 1797.588005] ? mark_lock+0xf5/0x2df0 [ 1797.588787] ? lock_acquire+0x197/0x470 [ 1797.589633] ? lock_chain_count+0x20/0x20 [ 1797.590506] ? mark_lock+0xf5/0x2df0 [ 1797.591282] ? mark_lock+0xf5/0x2df0 [ 1797.592066] ? lock_chain_count+0x20/0x20 [ 1797.592937] ? __lock_acquire+0xbb1/0x5b00 [ 1797.593846] ? lock_chain_count+0x20/0x20 [ 1797.594736] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.595853] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1797.596730] ? udp_v6_push_pending_frames+0x360/0x360 [ 1797.597832] ? mark_lock+0xf5/0x2df0 [ 1797.598628] ? lock_acquire+0x197/0x470 [ 1797.599472] ? find_held_lock+0x2c/0x110 [ 1797.600335] ? __might_fault+0xd3/0x180 [ 1797.601179] ? lock_downgrade+0x6d0/0x6d0 [ 1797.602061] ? lock_downgrade+0x6d0/0x6d0 [ 1797.602950] ? sock_has_perm+0x1ea/0x280 [ 1797.603810] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1797.604900] ? _copy_from_user+0xfb/0x1b0 [ 1797.605789] ? __import_iovec+0x458/0x590 [ 1797.606691] ? udp_v6_push_pending_frames+0x360/0x360 [ 1797.607795] inet6_sendmsg+0x105/0x140 [ 1797.608628] ? inet6_compat_ioctl+0x320/0x320 [ 1797.609579] __sock_sendmsg+0xf2/0x190 [ 1797.610408] ____sys_sendmsg+0x70d/0x870 [ 1797.611284] ? sock_write_iter+0x3d0/0x3d0 [ 1797.612163] ? do_recvmmsg+0x6d0/0x6d0 [ 1797.612974] ? lock_downgrade+0x6d0/0x6d0 [ 1797.613860] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.614958] ___sys_sendmsg+0xf3/0x170 [ 1797.615778] ? sendmsg_copy_msghdr+0x160/0x160 [ 1797.616741] ? __fget_files+0x2cf/0x520 [ 1797.617589] ? lock_downgrade+0x6d0/0x6d0 [ 1797.618467] ? find_held_lock+0x2c/0x110 [ 1797.619327] ? __fget_files+0x2f8/0x520 [ 1797.620171] ? __fget_light+0xea/0x290 [ 1797.620995] __sys_sendmsg+0xe5/0x1b0 [ 1797.621798] ? __sys_sendmsg_sock+0x40/0x40 [ 1797.622709] ? rcu_read_lock_any_held+0x75/0xa0 [ 1797.623715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.624840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.625913] ? trace_hardirqs_on+0x5b/0x180 [ 1797.626834] do_syscall_64+0x33/0x40 [ 1797.627623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.628718] RIP: 0033:0x7fb8c885ab19 [ 1797.629510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.633414] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.635014] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1797.636532] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1797.638030] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.639531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.641030] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:15:41 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 52) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:15:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 31) [ 1797.648658] loop7: detected capacity change from 0 to 131072 [ 1797.684380] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1797.696570] FAULT_INJECTION: forcing a failure. [ 1797.696570] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.699034] CPU: 1 PID: 10738 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1797.700493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.702264] Call Trace: 01:15:41 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 10) [ 1797.702831] dump_stack+0x107/0x167 [ 1797.703807] should_fail.cold+0x5/0xa [ 1797.704679] ? create_object.isra.0+0x3a/0xa20 [ 1797.705787] should_failslab+0x5/0x20 [ 1797.706766] kmem_cache_alloc+0x5b/0x310 [ 1797.707687] create_object.isra.0+0x3a/0xa20 [ 1797.708606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.709706] kmem_cache_alloc+0x159/0x310 [ 1797.710616] security_inode_alloc+0x34/0x160 [ 1797.711563] inode_init_always+0xa4e/0xd10 [ 1797.712465] alloc_inode+0x84/0x240 [ 1797.713248] new_inode+0x23/0x250 [ 1797.714166] __ext4_new_inode+0x32c/0x5370 [ 1797.715058] ? avc_has_extended_perms+0xf40/0xf40 [ 1797.716108] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1797.717169] ? dquot_initialize_needed+0x290/0x290 [ 1797.718217] ? selinux_determine_inode_label+0x1ab/0x340 [ 1797.719513] ext4_mkdir+0x32c/0xb10 [ 1797.720287] ? ext4_rmdir+0xf70/0xf70 [ 1797.721116] vfs_mkdir+0x493/0x750 [ 1797.721904] do_mkdirat+0x150/0x2b0 [ 1797.722705] ? user_path_create+0xf0/0xf0 [ 1797.723600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.724740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.725869] do_syscall_64+0x33/0x40 [ 1797.726680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.727654] FAULT_INJECTION: forcing a failure. [ 1797.727654] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.727791] RIP: 0033:0x7fae9488ec27 [ 1797.730904] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.734804] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1797.736419] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1797.737926] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1797.739448] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1797.740942] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1797.742459] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1797.744019] CPU: 0 PID: 10747 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1797.745493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.747250] Call Trace: [ 1797.747808] dump_stack+0x107/0x167 [ 1797.748575] should_fail.cold+0x5/0xa [ 1797.749382] ? create_object.isra.0+0x3a/0xa20 [ 1797.750360] should_failslab+0x5/0x20 [ 1797.751164] kmem_cache_alloc+0x5b/0x310 [ 1797.752025] ? mark_lock+0xf5/0x2df0 [ 1797.752808] create_object.isra.0+0x3a/0xa20 [ 1797.753731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.754800] kmem_cache_alloc_node+0x169/0x330 [ 1797.755763] __alloc_skb+0x6d/0x5b0 [ 1797.756534] skb_segment+0x9d8/0x3aa0 [ 1797.757332] ? __lock_acquire+0xbb1/0x5b00 [ 1797.758269] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1797.759310] ? lock_acquire+0x197/0x470 [ 1797.760147] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.761247] __udp_gso_segment+0x11c6/0x1830 [ 1797.762183] ? __sk_receive_skb+0x830/0x830 [ 1797.763090] udp4_ufo_fragment+0x528/0x720 [ 1797.763990] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1797.765039] inet_gso_segment+0x4fb/0x11a0 [ 1797.765949] skb_mac_gso_segment+0x273/0x570 [ 1797.766873] ? inet_sock_destruct+0x840/0x840 [ 1797.767806] ? skb_network_protocol+0x650/0x650 [ 1797.768778] ? skb_crc32c_csum_help+0x80/0x80 [ 1797.769721] ? lock_acquire+0x197/0x470 [ 1797.770558] ? __dev_queue_xmit+0x1c6/0x2690 [ 1797.771479] __skb_gso_segment+0x32d/0x6d0 [ 1797.772376] ? mark_lock+0xf5/0x2df0 [ 1797.773154] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1797.774259] ? lock_chain_count+0x20/0x20 [ 1797.775133] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1797.776085] __dev_queue_xmit+0x825/0x2690 [ 1797.776972] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1797.778069] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1797.779029] ? mark_held_locks+0x9e/0xe0 [ 1797.779880] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1797.780996] neigh_connected_output+0x382/0x4d0 [ 1797.781991] ip_finish_output2+0x6f1/0x21f0 [ 1797.782896] ? nf_hook_slow+0xfc/0x1e0 [ 1797.783713] ? ip_frag_next+0x9e0/0x9e0 [ 1797.784542] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1797.785588] __ip_finish_output.part.0+0x5f3/0xb50 [ 1797.786637] ? ip_fragment.constprop.0+0x240/0x240 [ 1797.787666] ? netif_rx_ni+0xe7/0x300 [ 1797.788466] ip_mc_output+0x401/0xa30 [ 1797.789269] ip_send_skb+0xdd/0x260 [ 1797.790044] udp_send_skb+0x6da/0x11d0 [ 1797.790864] udp_sendmsg+0x139a/0x2160 [ 1797.791684] ? ip_frag_init+0x350/0x350 [ 1797.792530] ? udp_setsockopt+0xc0/0xc0 [ 1797.793369] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.794469] ? find_held_lock+0x2c/0x110 [ 1797.795320] ? clockevents_program_event+0x14b/0x360 [ 1797.796386] ? mark_lock+0xf5/0x2df0 [ 1797.797153] ? mark_lock+0xf5/0x2df0 [ 1797.797941] ? lock_chain_count+0x20/0x20 [ 1797.798797] ? lock_chain_count+0x20/0x20 [ 1797.799641] ? lock_downgrade+0x6d0/0x6d0 [ 1797.800492] ? lock_downgrade+0x6d0/0x6d0 [ 1797.801337] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1797.802229] ? clockevents_program_event+0x131/0x360 [ 1797.803298] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1797.804149] ? udp_v6_push_pending_frames+0x360/0x360 [ 1797.805212] ? mark_lock+0xf5/0x2df0 [ 1797.805979] ? lock_acquire+0x197/0x470 [ 1797.806791] ? find_held_lock+0x2c/0x110 [ 1797.807623] ? __might_fault+0xd3/0x180 [ 1797.808437] ? lock_downgrade+0x6d0/0x6d0 [ 1797.809290] ? lock_downgrade+0x6d0/0x6d0 [ 1797.810154] ? sock_has_perm+0x1ea/0x280 [ 1797.811008] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1797.812082] ? _copy_from_user+0xfb/0x1b0 [ 1797.812949] ? __import_iovec+0x458/0x590 [ 1797.813817] ? udp_v6_push_pending_frames+0x360/0x360 [ 1797.814881] inet6_sendmsg+0x105/0x140 [ 1797.815694] ? inet6_compat_ioctl+0x320/0x320 [ 1797.816612] __sock_sendmsg+0xf2/0x190 [ 1797.817420] ____sys_sendmsg+0x70d/0x870 [ 1797.818249] ? sock_write_iter+0x3d0/0x3d0 [ 1797.819119] ? do_recvmmsg+0x6d0/0x6d0 [ 1797.819921] ? lock_downgrade+0x6d0/0x6d0 [ 1797.820787] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.821890] ___sys_sendmsg+0xf3/0x170 [ 1797.822709] ? sendmsg_copy_msghdr+0x160/0x160 [ 1797.823650] ? __fget_files+0x2cf/0x520 [ 1797.824448] ? lock_downgrade+0x6d0/0x6d0 [ 1797.825295] ? find_held_lock+0x2c/0x110 [ 1797.826145] ? __fget_files+0x2f8/0x520 [ 1797.826970] ? __fget_light+0xea/0x290 [ 1797.827782] __sys_sendmsg+0xe5/0x1b0 [ 1797.828567] ? __sys_sendmsg_sock+0x40/0x40 [ 1797.829446] ? rcu_read_lock_any_held+0x75/0xa0 [ 1797.830418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.831479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.832526] ? trace_hardirqs_on+0x5b/0x180 [ 1797.833415] do_syscall_64+0x33/0x40 [ 1797.834172] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.835224] RIP: 0033:0x7fb8c885ab19 [ 1797.835987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.839745] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.841282] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1797.842753] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1797.844212] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.845668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1797.847131] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1797.874833] FAULT_INJECTION: forcing a failure. [ 1797.874833] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.877627] CPU: 0 PID: 10749 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1797.879339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.881363] Call Trace: [ 1797.882020] dump_stack+0x107/0x167 [ 1797.882940] should_fail.cold+0x5/0xa [ 1797.883877] ? create_object.isra.0+0x3a/0xa20 [ 1797.885010] should_failslab+0x5/0x20 [ 1797.885958] kmem_cache_alloc+0x5b/0x310 [ 1797.886951] ? mark_held_locks+0x9e/0xe0 [ 1797.887995] create_object.isra.0+0x3a/0xa20 [ 1797.889063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.890174] kmem_cache_alloc+0x159/0x310 [ 1797.891012] xas_alloc+0x336/0x440 [ 1797.891723] xas_create+0x34a/0x10d0 [ 1797.892473] ? kernel_text_address+0xf2/0x120 [ 1797.893373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1797.894426] xas_store+0x8c/0x1c40 [ 1797.895139] __xa_store+0x164/0x2d0 [ 1797.895858] ? xa_delete_node+0x280/0x280 [ 1797.896675] ? trace_hardirqs_on+0x5b/0x180 [ 1797.897567] xa_store+0x31/0x50 [ 1797.898233] __io_uring_add_tctx_node+0x1cf/0x520 [ 1797.899200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.900257] ? alloc_fd+0x2e7/0x670 [ 1797.900997] io_uring_setup+0x1fbb/0x2980 [ 1797.901849] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.902868] ? wait_for_completion_io+0x270/0x270 [ 1797.903870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.904921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.905969] do_syscall_64+0x33/0x40 [ 1797.906719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.907751] RIP: 0033:0x7eff19607b19 [ 1797.908504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.912217] RSP: 002b:00007eff16b5c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.913764] RAX: ffffffffffffffda RBX: 00007eff1971b020 RCX: 00007eff19607b19 [ 1797.915174] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.916587] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.918025] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1797.919432] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:15:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='rxrpc_s\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="cab82b756f69f1f92e51a92089993f4f57edd309612c0ce08d42b54ed1badf860a7a4427afa3e9d308c78f3ee90fac87db54ef6411891fbf5b9a13d155e84b62823677b7af7967fa1edec349", 0x4c, 0xfffffffffffffffa) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x1) keyctl$search(0xa, r0, &(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40004, 0x0, &(0x7f00000006c0), 0xc2, &(0x7f0000000040)=ANY=[@ANYRES32]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1797.943241] loop6: detected capacity change from 0 to 131072 01:15:41 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 53) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1797.974529] FAT-fs (loop5): bogus number of reserved sectors [ 1797.975868] FAT-fs (loop5): Can't find a valid FAT filesystem 01:15:41 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 11) [ 1797.996225] FAT-fs (loop6): bogus number of FAT sectors [ 1797.997593] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1797.999191] loop3: detected capacity change from 0 to 262144 [ 1798.024700] FAULT_INJECTION: forcing a failure. [ 1798.024700] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.027142] CPU: 1 PID: 10756 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1798.028615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.030340] Call Trace: 01:15:41 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1798.030883] dump_stack+0x107/0x167 [ 1798.031927] should_fail.cold+0x5/0xa [ 1798.032735] ? create_object.isra.0+0x3a/0xa20 [ 1798.033799] should_failslab+0x5/0x20 [ 1798.034619] kmem_cache_alloc+0x5b/0x310 [ 1798.035527] create_object.isra.0+0x3a/0xa20 [ 1798.036643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1798.037802] kmem_cache_alloc+0x159/0x310 [ 1798.038756] __kernfs_new_node+0xd4/0x860 [ 1798.039789] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1798.040798] ? lock_chain_count+0x20/0x20 [ 1798.041685] ? update_load_avg+0x162/0x1870 [ 1798.042776] ? find_held_lock+0x2c/0x110 [ 1798.043767] kernfs_new_node+0x18d/0x250 [ 1798.044596] kernfs_create_dir_ns+0x49/0x160 [ 1798.045516] internal_create_group+0x793/0xb30 [ 1798.046454] ? set_user_nice.part.0+0x2fd/0x760 [ 1798.047409] ? sysfs_remove_group+0x170/0x170 [ 1798.048347] ? lockdep_init_map_type+0x2c7/0x780 [ 1798.049493] ? blk_queue_flag_set+0x22/0x30 [ 1798.050389] ? __loop_update_dio+0x2d2/0x690 [ 1798.051297] loop_configure+0x953/0x1410 [ 1798.052146] lo_ioctl+0xa57/0x16b0 [ 1798.052890] ? avc_has_extended_perms+0x7f1/0xf40 [ 1798.053908] ? loop_set_status_old+0x250/0x250 [ 1798.055100] ? avc_ss_reset+0x180/0x180 [ 1798.056124] ? find_held_lock+0x2c/0x110 [ 1798.057141] ? __lock_acquire+0xbb1/0x5b00 [ 1798.058301] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1798.059391] ? generic_block_fiemap+0x60/0x60 [ 1798.060302] ? lock_downgrade+0x6d0/0x6d0 [ 1798.061141] ? build_open_flags+0x6f0/0x6f0 [ 1798.062049] ? loop_set_status_old+0x250/0x250 [ 1798.063216] blkdev_ioctl+0x291/0x710 [ 1798.064186] ? blkdev_common_ioctl+0x1930/0x1930 [ 1798.065161] ? selinux_file_ioctl+0xb6/0x270 [ 1798.066087] block_ioctl+0xf9/0x140 [ 1798.066417] FAULT_INJECTION: forcing a failure. [ 1798.066417] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.066915] ? blkdev_read_iter+0x1c0/0x1c0 [ 1798.066940] __x64_sys_ioctl+0x19a/0x210 [ 1798.070908] do_syscall_64+0x33/0x40 [ 1798.071679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1798.072986] RIP: 0033:0x7fe2f6eaa8d7 [ 1798.073911] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1798.077663] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1798.079575] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1798.081387] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1798.082865] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1798.084330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1798.085785] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1798.087284] CPU: 0 PID: 10759 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1798.088560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.090226] Call Trace: [ 1798.090753] dump_stack+0x107/0x167 [ 1798.091390] loop4: detected capacity change from 0 to 262144 [ 1798.091483] should_fail.cold+0x5/0xa [ 1798.093542] ? xas_alloc+0x336/0x440 [ 1798.094274] should_failslab+0x5/0x20 [ 1798.094997] kmem_cache_alloc+0x5b/0x310 [ 1798.095757] xas_alloc+0x336/0x440 [ 1798.096415] xas_create+0x34a/0x10d0 [ 1798.097121] ? kernel_text_address+0xf2/0x120 [ 1798.098026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1798.099094] xas_store+0x8c/0x1c40 [ 1798.099896] __xa_store+0x164/0x2d0 [ 1798.100645] ? xa_delete_node+0x280/0x280 [ 1798.101500] xa_store+0x31/0x50 [ 1798.102128] __io_uring_add_tctx_node+0x1cf/0x520 [ 1798.103014] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1798.103939] ? alloc_fd+0x2e7/0x670 [ 1798.104615] io_uring_setup+0x1fbb/0x2980 [ 1798.105380] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1798.106307] ? wait_for_completion_io+0x270/0x270 [ 1798.107200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1798.108160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1798.109090] do_syscall_64+0x33/0x40 [ 1798.109780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1798.110694] RIP: 0033:0x7eff19607b19 [ 1798.111375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1798.114692] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1798.116056] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1798.117341] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1798.118632] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1798.119920] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1798.121206] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1798.122924] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1798.125515] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1798.127225] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1798.128839] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:15:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1798.138752] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1798.154308] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1798.169944] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1798.189478] EXT4-fs (loop3): get root inode failed [ 1798.190566] EXT4-fs (loop3): mount failed [ 1798.218987] FAULT_INJECTION: forcing a failure. [ 1798.218987] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.221475] CPU: 1 PID: 10770 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1798.222954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.224705] Call Trace: [ 1798.225266] dump_stack+0x107/0x167 [ 1798.226109] should_fail.cold+0x5/0xa [ 1798.226937] should_failslab+0x5/0x20 [ 1798.227850] __kmalloc_node_track_caller+0x74/0x3b0 [ 1798.228901] ? skb_segment+0x9d8/0x3aa0 [ 1798.229770] __alloc_skb+0xb1/0x5b0 [ 1798.230558] skb_segment+0x9d8/0x3aa0 [ 1798.231368] ? __lock_acquire+0xbb1/0x5b00 [ 1798.232311] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1798.233608] ? lock_acquire+0x197/0x470 [ 1798.234452] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1798.235600] __udp_gso_segment+0x11c6/0x1830 [ 1798.236544] ? __sk_receive_skb+0x830/0x830 [ 1798.237506] udp4_ufo_fragment+0x528/0x720 [ 1798.238421] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1798.239505] inet_gso_segment+0x4fb/0x11a0 [ 1798.240446] skb_mac_gso_segment+0x273/0x570 [ 1798.241373] ? inet_sock_destruct+0x840/0x840 [ 1798.242336] ? skb_network_protocol+0x650/0x650 [ 1798.243320] ? skb_crc32c_csum_help+0x80/0x80 [ 1798.244256] ? lock_acquire+0x197/0x470 [ 1798.245168] ? __dev_queue_xmit+0x1c6/0x2690 [ 1798.246118] __skb_gso_segment+0x32d/0x6d0 [ 1798.247022] ? mark_lock+0xf5/0x2df0 [ 1798.247839] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1798.248958] ? lock_chain_count+0x20/0x20 [ 1798.249849] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1798.250818] __dev_queue_xmit+0x825/0x2690 [ 1798.251723] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1798.252863] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1798.253849] ? mark_held_locks+0x9e/0xe0 [ 1798.254724] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1798.255925] neigh_connected_output+0x382/0x4d0 [ 1798.256917] ip_finish_output2+0x6f1/0x21f0 [ 1798.257843] ? nf_hook_slow+0xfc/0x1e0 [ 1798.258672] ? ip_frag_next+0x9e0/0x9e0 [ 1798.259516] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1798.260603] __ip_finish_output.part.0+0x5f3/0xb50 [ 1798.261759] ? ip_fragment.constprop.0+0x240/0x240 [ 1798.262802] ? netif_rx_ni+0xe7/0x300 [ 1798.263602] ip_mc_output+0x401/0xa30 [ 1798.264451] ip_send_skb+0xdd/0x260 [ 1798.265250] udp_send_skb+0x6da/0x11d0 [ 1798.266106] udp_sendmsg+0x139a/0x2160 [ 1798.266926] ? mark_lock+0xf5/0x2df0 [ 1798.267716] ? ip_frag_init+0x350/0x350 [ 1798.268563] ? lock_chain_count+0x20/0x20 [ 1798.269449] ? udp_setsockopt+0xc0/0xc0 [ 1798.270305] ? mark_lock+0xf5/0x2df0 [ 1798.271098] ? lock_acquire+0x197/0x470 [ 1798.271966] ? lock_chain_count+0x20/0x20 [ 1798.273032] ? mark_lock+0xf5/0x2df0 [ 1798.273877] ? mark_lock+0xf5/0x2df0 [ 1798.274801] ? lock_chain_count+0x20/0x20 [ 1798.275703] ? __lock_acquire+0xbb1/0x5b00 [ 1798.276626] ? lock_chain_count+0x20/0x20 [ 1798.277543] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1798.278678] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1798.279565] ? udp_v6_push_pending_frames+0x360/0x360 [ 1798.280716] ? mark_lock+0xf5/0x2df0 [ 1798.281533] ? lock_acquire+0x197/0x470 [ 1798.282386] ? find_held_lock+0x2c/0x110 [ 1798.283261] ? __might_fault+0xd3/0x180 [ 1798.284175] ? lock_downgrade+0x6d0/0x6d0 [ 1798.285091] ? lock_downgrade+0x6d0/0x6d0 [ 1798.286016] ? sock_has_perm+0x1ea/0x280 [ 1798.286900] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1798.288004] ? _copy_from_user+0xfb/0x1b0 [ 1798.288902] ? __import_iovec+0x458/0x590 [ 1798.289785] ? udp_v6_push_pending_frames+0x360/0x360 [ 1798.290878] inet6_sendmsg+0x105/0x140 [ 1798.291868] ? inet6_compat_ioctl+0x320/0x320 [ 1798.292891] __sock_sendmsg+0xf2/0x190 [ 1798.293912] ____sys_sendmsg+0x70d/0x870 [ 1798.294769] ? sock_write_iter+0x3d0/0x3d0 [ 1798.295848] ? do_recvmmsg+0x6d0/0x6d0 [ 1798.296697] ? lock_downgrade+0x6d0/0x6d0 [ 1798.297787] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1798.299077] ___sys_sendmsg+0xf3/0x170 [ 1798.300046] ? sendmsg_copy_msghdr+0x160/0x160 [ 1798.301204] ? __fget_files+0x2cf/0x520 [ 1798.302216] ? lock_downgrade+0x6d0/0x6d0 [ 1798.303305] ? find_held_lock+0x2c/0x110 [ 1798.304348] ? __fget_files+0x2f8/0x520 [ 1798.305359] ? __fget_light+0xea/0x290 [ 1798.306384] __sys_sendmsg+0xe5/0x1b0 [ 1798.307363] ? __sys_sendmsg_sock+0x40/0x40 [ 1798.308457] ? rcu_read_lock_any_held+0x75/0xa0 [ 1798.309675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1798.310906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1798.311957] ? trace_hardirqs_on+0x5b/0x180 [ 1798.312833] do_syscall_64+0x33/0x40 [ 1798.313602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1798.314648] RIP: 0033:0x7fb8c885ab19 [ 1798.315442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1798.319365] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.320936] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1798.322427] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1798.323919] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1798.325457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1798.326976] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1798.330973] loop7: detected capacity change from 0 to 131072 [ 1798.353192] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1798.392363] loop3: detected capacity change from 0 to 262144 [ 1798.398319] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1798.400958] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1798.402919] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1798.404865] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1798.415473] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1798.418884] EXT4-fs (loop3): get root inode failed [ 1798.419999] EXT4-fs (loop3): mount failed 01:15:57 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 56) 01:15:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x401fc, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:15:57 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:15:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000280)={0x0, 'wlan1\x00', {0x2}, 0x6}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r8, &(0x7f0000000000)=0x80, &(0x7f00000001c0)=@nl, 0x0, 0x80000}, 0x4) 01:15:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 32) 01:15:57 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, 0x0) 01:15:57 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 54) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:15:57 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 12) [ 1814.003067] loop3: detected capacity change from 0 to 262144 [ 1814.015028] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1814.017616] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1814.019574] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1814.021564] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1814.022188] FAULT_INJECTION: forcing a failure. [ 1814.022188] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.024686] loop6: detected capacity change from 0 to 131072 [ 1814.026424] CPU: 1 PID: 10781 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1814.029335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.029702] loop7: detected capacity change from 0 to 131072 [ 1814.031294] Call Trace: [ 1814.031321] dump_stack+0x107/0x167 [ 1814.031341] should_fail.cold+0x5/0xa [ 1814.031371] ? create_object.isra.0+0x3a/0xa20 [ 1814.035573] should_failslab+0x5/0x20 [ 1814.036382] kmem_cache_alloc+0x5b/0x310 [ 1814.037281] create_object.isra.0+0x3a/0xa20 [ 1814.038207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1814.039278] kmem_cache_alloc+0x159/0x310 [ 1814.040191] xas_alloc+0x336/0x440 [ 1814.040949] xas_create+0x34a/0x10d0 [ 1814.041738] ? kernel_text_address+0xf2/0x120 [ 1814.042699] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1814.043804] xas_store+0x8c/0x1c40 [ 1814.044570] __xa_store+0x164/0x2d0 [ 1814.045335] ? xa_delete_node+0x280/0x280 [ 1814.046224] ? trace_hardirqs_on+0x5b/0x180 [ 1814.047176] xa_store+0x31/0x50 [ 1814.047881] __io_uring_add_tctx_node+0x1cf/0x520 [ 1814.048897] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1814.050001] ? alloc_fd+0x2e7/0x670 [ 1814.050789] io_uring_setup+0x1fbb/0x2980 [ 1814.051669] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1814.052742] ? wait_for_completion_io+0x270/0x270 [ 1814.053774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.054912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.056011] do_syscall_64+0x33/0x40 [ 1814.056797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.057871] RIP: 0033:0x7eff19607b19 [ 1814.058658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.062541] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1814.064142] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1814.065644] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1814.067164] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1814.068663] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1814.070172] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1814.072726] FAULT_INJECTION: forcing a failure. [ 1814.072726] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.075331] CPU: 0 PID: 10791 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1814.076768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.078481] Call Trace: [ 1814.079026] dump_stack+0x107/0x167 [ 1814.079777] should_fail.cold+0x5/0xa [ 1814.080576] ? __kernfs_new_node+0xd4/0x860 [ 1814.081466] should_failslab+0x5/0x20 [ 1814.082256] kmem_cache_alloc+0x5b/0x310 [ 1814.083104] __kernfs_new_node+0xd4/0x860 [ 1814.083959] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1814.084921] ? kernfs_add_one+0x36e/0x4d0 [ 1814.085789] ? mutex_lock_io_nested+0xf30/0xf30 [ 1814.086787] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1814.087770] kernfs_new_node+0x18d/0x250 [ 1814.088606] __kernfs_create_file+0x51/0x350 [ 1814.089509] sysfs_add_file_mode_ns+0x221/0x560 [ 1814.090491] internal_create_group+0x324/0xb30 [ 1814.091437] ? sysfs_remove_group+0x170/0x170 [ 1814.092353] ? lockdep_init_map_type+0x2c7/0x780 [ 1814.093327] ? blk_queue_flag_set+0x22/0x30 [ 1814.094225] ? __loop_update_dio+0x2d2/0x690 [ 1814.095249] loop_configure+0x953/0x1410 [ 1814.096110] lo_ioctl+0xa57/0x16b0 [ 1814.096866] ? avc_has_extended_perms+0x7f1/0xf40 [ 1814.097872] ? loop_set_status_old+0x250/0x250 [ 1814.098836] ? avc_ss_reset+0x180/0x180 [ 1814.099682] ? find_held_lock+0x2c/0x110 [ 1814.100578] ? __lock_acquire+0xbb1/0x5b00 [ 1814.101623] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1814.102867] ? generic_block_fiemap+0x60/0x60 [ 1814.103937] ? lock_downgrade+0x6d0/0x6d0 [ 1814.104885] ? build_open_flags+0x6f0/0x6f0 [ 1814.105888] ? loop_set_status_old+0x250/0x250 [ 1814.106998] blkdev_ioctl+0x291/0x710 [ 1814.107827] ? blkdev_common_ioctl+0x1930/0x1930 [ 1814.108869] ? selinux_file_ioctl+0xb6/0x270 [ 1814.109943] block_ioctl+0xf9/0x140 [ 1814.110865] ? blkdev_read_iter+0x1c0/0x1c0 [ 1814.111991] __x64_sys_ioctl+0x19a/0x210 [ 1814.113075] do_syscall_64+0x33/0x40 [ 1814.114122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.115462] RIP: 0033:0x7fe2f6eaa8d7 [ 1814.116436] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.121135] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1814.123059] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1814.124894] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1814.126775] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1814.128644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1814.130522] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1814.132874] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1814.146486] EXT4-fs (loop3): get root inode failed [ 1814.147646] EXT4-fs (loop3): mount failed [ 1814.151576] FAULT_INJECTION: forcing a failure. [ 1814.151576] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.154057] CPU: 0 PID: 10794 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1814.155529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.157312] Call Trace: [ 1814.157882] dump_stack+0x107/0x167 [ 1814.158682] should_fail.cold+0x5/0xa [ 1814.159497] ? create_object.isra.0+0x3a/0xa20 [ 1814.160474] should_failslab+0x5/0x20 [ 1814.161292] kmem_cache_alloc+0x5b/0x310 [ 1814.162183] create_object.isra.0+0x3a/0xa20 [ 1814.163120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1814.164215] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1814.165295] ? skb_segment+0x9d8/0x3aa0 [ 1814.166164] __alloc_skb+0xb1/0x5b0 [ 1814.166948] skb_segment+0x9d8/0x3aa0 [ 1814.167761] ? __lock_acquire+0xbb1/0x5b00 [ 1814.168706] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1814.169774] ? lock_acquire+0x197/0x470 [ 1814.170640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1814.171768] __udp_gso_segment+0x11c6/0x1830 [ 1814.172711] ? __sk_receive_skb+0x830/0x830 [ 1814.173646] udp4_ufo_fragment+0x528/0x720 [ 1814.174561] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1814.175626] inet_gso_segment+0x4fb/0x11a0 [ 1814.176546] skb_mac_gso_segment+0x273/0x570 [ 1814.177489] ? inet_sock_destruct+0x840/0x840 [ 1814.178454] ? skb_network_protocol+0x650/0x650 [ 1814.179523] ? skb_crc32c_csum_help+0x80/0x80 [ 1814.180606] ? lock_acquire+0x197/0x470 [ 1814.181562] ? __dev_queue_xmit+0x1c6/0x2690 [ 1814.182645] __skb_gso_segment+0x32d/0x6d0 [ 1814.183664] ? mark_lock+0xf5/0x2df0 [ 1814.184581] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1814.185849] ? lock_chain_count+0x20/0x20 [ 1814.186858] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1814.187960] __dev_queue_xmit+0x825/0x2690 [ 1814.188990] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1814.190241] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1814.191355] ? mark_held_locks+0x9e/0xe0 [ 1814.192312] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1814.193585] neigh_connected_output+0x382/0x4d0 [ 1814.194707] ip_finish_output2+0x6f1/0x21f0 [ 1814.195751] ? nf_hook_slow+0xfc/0x1e0 [ 1814.196657] ? ip_frag_next+0x9e0/0x9e0 [ 1814.197615] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1814.198804] __ip_finish_output.part.0+0x5f3/0xb50 [ 1814.199992] ? ip_fragment.constprop.0+0x240/0x240 [ 1814.201142] ? netif_rx_ni+0xe7/0x300 [ 1814.202080] ip_mc_output+0x401/0xa30 [ 1814.202984] ip_send_skb+0xdd/0x260 [ 1814.203867] udp_send_skb+0x6da/0x11d0 [ 1814.204887] udp_sendmsg+0x139a/0x2160 [ 1814.205822] ? mark_lock+0xf5/0x2df0 [ 1814.206709] ? ip_frag_init+0x350/0x350 [ 1814.207668] ? lock_chain_count+0x20/0x20 [ 1814.208649] ? udp_setsockopt+0xc0/0xc0 [ 1814.209602] ? mark_lock+0xf5/0x2df0 [ 1814.210522] ? lock_acquire+0x197/0x470 [ 1814.211482] ? lock_chain_count+0x20/0x20 [ 1814.212450] ? mark_lock+0xf5/0x2df0 [ 1814.213350] ? mark_lock+0xf5/0x2df0 [ 1814.214231] ? lock_chain_count+0x20/0x20 [ 1814.215229] ? __lock_acquire+0xbb1/0x5b00 [ 1814.216226] ? lock_chain_count+0x20/0x20 [ 1814.217252] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1814.218504] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1814.219509] ? udp_v6_push_pending_frames+0x360/0x360 [ 1814.220720] ? mark_lock+0xf5/0x2df0 [ 1814.221602] ? lock_acquire+0x197/0x470 [ 1814.222551] ? find_held_lock+0x2c/0x110 [ 1814.223507] ? __might_fault+0xd3/0x180 [ 1814.224437] ? lock_downgrade+0x6d0/0x6d0 [ 1814.225415] ? lock_downgrade+0x6d0/0x6d0 [ 1814.226395] ? sock_has_perm+0x1ea/0x280 [ 1814.227339] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1814.228553] ? _copy_from_user+0xfb/0x1b0 [ 1814.229536] ? __import_iovec+0x458/0x590 [ 1814.230536] ? udp_v6_push_pending_frames+0x360/0x360 [ 1814.231745] inet6_sendmsg+0x105/0x140 [ 1814.232680] ? inet6_compat_ioctl+0x320/0x320 [ 1814.233723] __sock_sendmsg+0xf2/0x190 [ 1814.234688] ____sys_sendmsg+0x70d/0x870 [ 1814.235659] ? sock_write_iter+0x3d0/0x3d0 [ 1814.236654] ? do_recvmmsg+0x6d0/0x6d0 [ 1814.237600] ? lock_downgrade+0x6d0/0x6d0 [ 1814.238686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1814.240133] ___sys_sendmsg+0xf3/0x170 [ 1814.241241] ? sendmsg_copy_msghdr+0x160/0x160 [ 1814.245824] ? __fget_files+0x2cf/0x520 [ 1814.246899] ? lock_downgrade+0x6d0/0x6d0 [ 1814.248040] ? find_held_lock+0x2c/0x110 [ 1814.249090] ? __fget_files+0x2f8/0x520 [ 1814.250031] ? __fget_light+0xea/0x290 [ 1814.250947] __sys_sendmsg+0xe5/0x1b0 [ 1814.251830] ? __sys_sendmsg_sock+0x40/0x40 [ 1814.252859] ? rcu_read_lock_any_held+0x75/0xa0 [ 1814.254001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.255260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.256495] ? trace_hardirqs_on+0x5b/0x180 [ 1814.257533] do_syscall_64+0x33/0x40 [ 1814.258441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.259675] RIP: 0033:0x7fb8c885ab19 [ 1814.260562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.264963] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1814.266791] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1814.268499] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1814.270222] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.271934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.273649] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1814.301504] loop4: detected capacity change from 0 to 262144 [ 1814.308932] FAULT_INJECTION: forcing a failure. [ 1814.308932] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.311649] CPU: 0 PID: 10797 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1814.313299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.315286] Call Trace: [ 1814.315920] dump_stack+0x107/0x167 [ 1814.316795] should_fail.cold+0x5/0xa [ 1814.317720] ? jbd2__journal_start+0x190/0x7e0 [ 1814.318825] should_failslab+0x5/0x20 [ 1814.319739] kmem_cache_alloc+0x5b/0x310 [ 1814.320719] jbd2__journal_start+0x190/0x7e0 [ 1814.321778] __ext4_journal_start_sb+0x214/0x390 [ 1814.322919] __ext4_new_inode+0x2e0b/0x5370 [ 1814.323985] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1814.325156] ? dquot_initialize_needed+0x290/0x290 [ 1814.326344] ? selinux_determine_inode_label+0x1ab/0x340 [ 1814.327672] ext4_mkdir+0x32c/0xb10 [ 1814.328562] ? ext4_rmdir+0xf70/0xf70 [ 1814.329493] vfs_mkdir+0x493/0x750 [ 1814.330364] do_mkdirat+0x150/0x2b0 [ 1814.331236] ? user_path_create+0xf0/0xf0 [ 1814.332232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.333482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.334730] do_syscall_64+0x33/0x40 [ 1814.335620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.336847] RIP: 0033:0x7fae9488ec27 [ 1814.337734] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.342151] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1814.343972] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1814.345687] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1814.347402] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1814.349104] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1814.350812] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1814.354247] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory [ 1814.382071] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1814.392989] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1814.420658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:16:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 33) 01:16:14 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:16:14 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 13) 01:16:14 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 55) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:16:14 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 57) 01:16:14 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, 0x0) 01:16:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40201, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:16:14 executing program 1: setrlimit(0xd, &(0x7f0000000000)={0x2, 0x3}) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="200009fe518b55baa2fedd006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r0, 0x0, &(0x7f0000000080)='./file0\x00', 0x4, 0x4008c1, 0x23456}, 0xb3) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1831.080482] FAULT_INJECTION: forcing a failure. [ 1831.080482] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.083029] CPU: 0 PID: 10818 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1831.084532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.086333] Call Trace: [ 1831.086923] dump_stack+0x107/0x167 [ 1831.087717] should_fail.cold+0x5/0xa [ 1831.088563] ? create_object.isra.0+0x3a/0xa20 [ 1831.089566] should_failslab+0x5/0x20 [ 1831.090392] kmem_cache_alloc+0x5b/0x310 [ 1831.091287] create_object.isra.0+0x3a/0xa20 [ 1831.092238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1831.093345] kmem_cache_alloc+0x159/0x310 [ 1831.094254] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1831.095483] idr_get_free+0x4b5/0x8f0 [ 1831.096334] idr_alloc_u32+0x170/0x2d0 [ 1831.097191] ? __fprop_inc_percpu_max+0x130/0x130 [ 1831.098245] ? lock_acquire+0x197/0x470 [ 1831.099121] ? __kernfs_new_node+0xff/0x860 [ 1831.100063] idr_alloc_cyclic+0x102/0x230 [ 1831.100963] ? idr_alloc+0x130/0x130 [ 1831.101778] ? rwlock_bug.part.0+0x90/0x90 [ 1831.102723] __kernfs_new_node+0x117/0x860 [ 1831.103658] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1831.104696] ? lock_chain_count+0x20/0x20 [ 1831.105606] ? update_load_avg+0x162/0x1870 [ 1831.106543] ? find_held_lock+0x2c/0x110 [ 1831.107450] kernfs_new_node+0x18d/0x250 [ 1831.108340] kernfs_create_dir_ns+0x49/0x160 [ 1831.109297] internal_create_group+0x793/0xb30 [ 1831.110300] ? set_user_nice.part.0+0x2fd/0x760 [ 1831.111326] ? sysfs_remove_group+0x170/0x170 [ 1831.112311] ? lockdep_init_map_type+0x2c7/0x780 [ 1831.113361] ? blk_queue_flag_set+0x22/0x30 [ 1831.114306] ? __loop_update_dio+0x2d2/0x690 [ 1831.115286] loop_configure+0x953/0x1410 [ 1831.116201] lo_ioctl+0xa57/0x16b0 [ 1831.116982] ? avc_has_extended_perms+0x7f1/0xf40 [ 1831.118042] ? loop_set_status_old+0x250/0x250 [ 1831.119054] ? avc_ss_reset+0x180/0x180 [ 1831.119935] ? find_held_lock+0x2c/0x110 [ 1831.120840] ? __lock_acquire+0xbb1/0x5b00 [ 1831.121831] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1831.123000] ? generic_block_fiemap+0x60/0x60 [ 1831.123993] ? lock_downgrade+0x6d0/0x6d0 [ 1831.124917] ? build_open_flags+0x6f0/0x6f0 [ 1831.125883] ? loop_set_status_old+0x250/0x250 [ 1831.126928] blkdev_ioctl+0x291/0x710 [ 1831.127774] ? blkdev_common_ioctl+0x1930/0x1930 [ 1831.128829] ? selinux_file_ioctl+0xb6/0x270 [ 1831.129808] block_ioctl+0xf9/0x140 [ 1831.130627] ? blkdev_read_iter+0x1c0/0x1c0 [ 1831.131590] __x64_sys_ioctl+0x19a/0x210 [ 1831.132499] do_syscall_64+0x33/0x40 [ 1831.133332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.134477] RIP: 0033:0x7fe2f6eaa8d7 [ 1831.135322] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.139442] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.141154] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1831.142767] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1831.144392] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1831.146010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1831.147665] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1831.151801] loop4: detected capacity change from 0 to 262144 [ 1831.171666] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1831.177786] FAULT_INJECTION: forcing a failure. [ 1831.177786] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.180481] CPU: 0 PID: 10831 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1831.182117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.184116] Call Trace: [ 1831.184752] dump_stack+0x107/0x167 [ 1831.185635] should_fail.cold+0x5/0xa [ 1831.186553] ? xas_alloc+0x336/0x440 [ 1831.187462] should_failslab+0x5/0x20 [ 1831.188376] kmem_cache_alloc+0x5b/0x310 [ 1831.189360] xas_alloc+0x336/0x440 [ 1831.190225] xas_create+0x34a/0x10d0 [ 1831.191162] ? kernel_text_address+0xf2/0x120 [ 1831.192247] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.192979] FAULT_INJECTION: forcing a failure. [ 1831.192979] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.193539] xas_store+0x8c/0x1c40 [ 1831.193577] __xa_store+0x164/0x2d0 [ 1831.193604] ? xa_delete_node+0x280/0x280 [ 1831.198620] ? trace_hardirqs_on+0x5b/0x180 [ 1831.199688] xa_store+0x31/0x50 [ 1831.200500] __io_uring_add_tctx_node+0x1cf/0x520 [ 1831.201700] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1831.202996] ? alloc_fd+0x2e7/0x670 [ 1831.203914] io_uring_setup+0x1fbb/0x2980 [ 1831.204953] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1831.206188] ? wait_for_completion_io+0x270/0x270 [ 1831.207414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.208705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.209987] do_syscall_64+0x33/0x40 [ 1831.210907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.212183] RIP: 0033:0x7eff19607b19 [ 1831.213108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.217728] RSP: 002b:00007eff16b5c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1831.219613] RAX: ffffffffffffffda RBX: 00007eff1971b020 RCX: 00007eff19607b19 [ 1831.221398] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1831.223198] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1831.224977] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1831.226793] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1831.228632] CPU: 1 PID: 10828 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1831.230086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.231834] Call Trace: [ 1831.232393] dump_stack+0x107/0x167 [ 1831.233157] should_fail.cold+0x5/0xa [ 1831.233958] ? create_object.isra.0+0x3a/0xa20 [ 1831.234927] should_failslab+0x5/0x20 [ 1831.235727] kmem_cache_alloc+0x5b/0x310 [ 1831.236581] create_object.isra.0+0x3a/0xa20 [ 1831.237501] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1831.238567] kmem_cache_alloc+0x159/0x310 [ 1831.239459] jbd2__journal_start+0x190/0x7e0 [ 1831.240400] __ext4_journal_start_sb+0x214/0x390 [ 1831.241399] __ext4_new_inode+0x2e0b/0x5370 [ 1831.242326] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1831.243356] ? dquot_initialize_needed+0x290/0x290 [ 1831.244376] ? selinux_determine_inode_label+0x1ab/0x340 [ 1831.245518] ext4_mkdir+0x32c/0xb10 [ 1831.246296] ? ext4_rmdir+0xf70/0xf70 [ 1831.247107] vfs_mkdir+0x493/0x750 [ 1831.247850] do_mkdirat+0x150/0x2b0 [ 1831.248610] ? user_path_create+0xf0/0xf0 [ 1831.249287] FAULT_INJECTION: forcing a failure. [ 1831.249287] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.249489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.252882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.253969] do_syscall_64+0x33/0x40 [ 1831.254754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.255827] RIP: 0033:0x7fae9488ec27 [ 1831.256605] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.260485] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1831.262073] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1831.263568] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1831.265047] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1831.266565] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1831.268082] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1831.269581] CPU: 0 PID: 10837 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1831.271125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.272932] Call Trace: [ 1831.273506] dump_stack+0x107/0x167 [ 1831.274309] should_fail.cold+0x5/0xa [ 1831.275154] ? trace_hardirqs_on+0x5b/0x180 [ 1831.276108] ? __alloc_skb+0x6d/0x5b0 [ 1831.276952] should_failslab+0x5/0x20 [ 1831.277797] kmem_cache_alloc_node+0x55/0x330 [ 1831.278796] __alloc_skb+0x6d/0x5b0 [ 1831.279612] skb_segment+0x9d8/0x3aa0 [ 1831.280451] ? __lock_acquire+0xbb1/0x5b00 [ 1831.281428] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1831.282528] ? lock_acquire+0x197/0x470 [ 1831.283433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.284602] __udp_gso_segment+0x11c6/0x1830 [ 1831.285589] ? __sk_receive_skb+0x830/0x830 [ 1831.286556] udp4_ufo_fragment+0x528/0x720 [ 1831.287539] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1831.288651] inet_gso_segment+0x4fb/0x11a0 [ 1831.289622] skb_mac_gso_segment+0x273/0x570 [ 1831.290619] ? inet_sock_destruct+0x840/0x840 [ 1831.291635] ? skb_network_protocol+0x650/0x650 [ 1831.292686] ? skb_crc32c_csum_help+0x80/0x80 [ 1831.293700] ? lock_acquire+0x197/0x470 [ 1831.294612] ? __dev_queue_xmit+0x1c6/0x2690 [ 1831.295613] __skb_gso_segment+0x32d/0x6d0 [ 1831.296586] ? mark_lock+0xf5/0x2df0 [ 1831.297446] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1831.298658] ? lock_chain_count+0x20/0x20 [ 1831.299608] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1831.300668] __dev_queue_xmit+0x825/0x2690 [ 1831.301646] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1831.302845] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1831.303917] ? mark_held_locks+0x9e/0xe0 [ 1831.304877] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1831.306097] neigh_connected_output+0x382/0x4d0 [ 1831.307210] ip_finish_output2+0x6f1/0x21f0 [ 1831.308219] ? nf_hook_slow+0xfc/0x1e0 [ 1831.309154] ? ip_frag_next+0x9e0/0x9e0 [ 1831.310093] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1831.311328] __ip_finish_output.part.0+0x5f3/0xb50 [ 1831.312510] ? ip_fragment.constprop.0+0x240/0x240 [ 1831.313693] ? netif_rx_ni+0xe7/0x300 [ 1831.314626] ip_mc_output+0x401/0xa30 [ 1831.315532] ip_send_skb+0xdd/0x260 [ 1831.316418] udp_send_skb+0x6da/0x11d0 [ 1831.317338] udp_sendmsg+0x139a/0x2160 [ 1831.318235] ? mark_lock+0xf5/0x2df0 [ 1831.319101] ? ip_frag_init+0x350/0x350 [ 1831.320027] ? lock_chain_count+0x20/0x20 [ 1831.320982] ? udp_setsockopt+0xc0/0xc0 [ 1831.321897] ? mark_lock+0xf5/0x2df0 [ 1831.322770] ? lock_acquire+0x197/0x470 [ 1831.323692] ? lock_chain_count+0x20/0x20 [ 1831.324661] ? mark_lock+0xf5/0x2df0 [ 1831.325530] ? mark_lock+0xf5/0x2df0 [ 1831.326396] ? lock_chain_count+0x20/0x20 [ 1831.327363] ? __lock_acquire+0xbb1/0x5b00 [ 1831.328349] ? lock_chain_count+0x20/0x20 [ 1831.329332] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.330565] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1831.331541] ? udp_v6_push_pending_frames+0x360/0x360 [ 1831.332779] ? mark_lock+0xf5/0x2df0 [ 1831.333664] ? lock_acquire+0x197/0x470 [ 1831.334614] ? find_held_lock+0x2c/0x110 [ 1831.335580] ? __might_fault+0xd3/0x180 [ 1831.336525] ? lock_downgrade+0x6d0/0x6d0 [ 1831.337519] ? lock_downgrade+0x6d0/0x6d0 [ 1831.338524] ? sock_has_perm+0x1ea/0x280 [ 1831.339506] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1831.340753] ? _copy_from_user+0xfb/0x1b0 [ 1831.341756] ? __import_iovec+0x458/0x590 [ 1831.342771] ? udp_v6_push_pending_frames+0x360/0x360 [ 1831.344013] inet6_sendmsg+0x105/0x140 [ 1831.344953] ? inet6_compat_ioctl+0x320/0x320 [ 1831.346032] __sock_sendmsg+0xf2/0x190 [ 1831.346991] ____sys_sendmsg+0x70d/0x870 [ 1831.347989] ? sock_write_iter+0x3d0/0x3d0 [ 1831.349017] ? do_recvmmsg+0x6d0/0x6d0 [ 1831.349983] ? lock_downgrade+0x6d0/0x6d0 [ 1831.351012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.352313] ___sys_sendmsg+0xf3/0x170 [ 1831.353275] ? sendmsg_copy_msghdr+0x160/0x160 [ 1831.354416] ? __fget_files+0x2cf/0x520 [ 1831.355424] ? lock_downgrade+0x6d0/0x6d0 [ 1831.356464] ? find_held_lock+0x2c/0x110 [ 1831.357490] ? __fget_files+0x2f8/0x520 [ 1831.358487] ? __fget_light+0xea/0x290 [ 1831.359479] __sys_sendmsg+0xe5/0x1b0 [ 1831.360430] ? __sys_sendmsg_sock+0x40/0x40 [ 1831.361383] ? rcu_read_lock_any_held+0x75/0xa0 [ 1831.362372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.363479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.364547] ? trace_hardirqs_on+0x5b/0x180 [ 1831.365464] do_syscall_64+0x33/0x40 [ 1831.366240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.367320] RIP: 0033:0x7fb8c885ab19 [ 1831.368100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.371957] RSP: 002b:00007fb8c5daf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1831.373542] RAX: ffffffffffffffda RBX: 00007fb8c896e020 RCX: 00007fb8c885ab19 [ 1831.375077] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1831.376578] RBP: 00007fb8c5daf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.378073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.379572] R13: 00007ffef72ce8af R14: 00007fb8c5daf300 R15: 0000000000022000 [ 1831.390860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1831.400397] loop3: detected capacity change from 0 to 262656 [ 1831.407386] loop6: detected capacity change from 0 to 131072 01:16:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x484801, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x180, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x654c, 0xafa, 0x8]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x74, 0x4, 0x0, 0xfffffffb, 0x5, 0x6, 0x80]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x25a}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8000, 0x4, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4dd}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8eb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x44, 0x5, 0x7fff, 0x832c]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x1040) [ 1831.415473] loop7: detected capacity change from 0 to 131072 [ 1831.417958] FAT-fs (loop5): bogus number of reserved sectors [ 1831.419275] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1831.425685] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1831.435315] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1831.437322] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1831.439361] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1831.443582] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1831.471917] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 01:16:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 34) [ 1831.477410] EXT4-fs (loop3): get root inode failed [ 1831.478872] EXT4-fs (loop3): mount failed 01:16:15 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 58) 01:16:15 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, 0x0) 01:16:15 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 56) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1831.555469] FAULT_INJECTION: forcing a failure. [ 1831.555469] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.558292] CPU: 1 PID: 10847 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1831.559752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.561469] Call Trace: [ 1831.562023] dump_stack+0x107/0x167 01:16:15 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 14) [ 1831.562792] should_fail.cold+0x5/0xa [ 1831.563755] ? create_object.isra.0+0x3a/0xa20 [ 1831.564753] should_failslab+0x5/0x20 [ 1831.565553] kmem_cache_alloc+0x5b/0x310 [ 1831.566406] ? mark_held_locks+0x9e/0xe0 [ 1831.567279] create_object.isra.0+0x3a/0xa20 [ 1831.568199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1831.569270] kmem_cache_alloc+0x159/0x310 [ 1831.570149] xas_alloc+0x336/0x440 [ 1831.570904] xas_create+0x34a/0x10d0 [ 1831.571695] ? kernel_text_address+0xf2/0x120 [ 1831.572642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.573738] xas_store+0x8c/0x1c40 [ 1831.574499] __xa_store+0x164/0x2d0 [ 1831.575298] ? xa_delete_node+0x280/0x280 [ 1831.576174] ? trace_hardirqs_on+0x5b/0x180 [ 1831.577092] xa_store+0x31/0x50 [ 1831.577819] __io_uring_add_tctx_node+0x1cf/0x520 [ 1831.578838] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1831.579936] ? alloc_fd+0x2e7/0x670 [ 1831.580723] io_uring_setup+0x1fbb/0x2980 [ 1831.581603] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1831.582680] ? wait_for_completion_io+0x270/0x270 [ 1831.583724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.584825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.585908] do_syscall_64+0x33/0x40 [ 1831.586694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.587770] RIP: 0033:0x7eff19607b19 01:16:15 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:16:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40202, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:16:15 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r9, @ANYBLOB="17cf2ac523712ced642ae47f2a1b38b96be85f1fdaff5289833e1202a0d36fd58d23a0e2bb5cc131c69627a5692e49234506f092b2a49ffd7980702b986ce7ce457d7bf14b232cd8a363b656280303d9e37f0d416eaf87973cce82373449fbc56c81b4dc6a0800b74ced75646a9496d5cda602", @ANYRESDEC, @ANYRESDEC=r2, @ANYRES64=r2]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5b9c007f6d547a289ad8e04558a5b5db77718da7e62534e11ad5b33b52d8497b6b72ec4c2453e0d465ccb33636578cb60d103f37f208f9ffa926bcf504ccff8e7678009b016112871435d6099520dacc2c15c3ca6dd82f4b655bc560a7d666bf394336e58e45d15788", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf25060000001800178004000600040002000400030004000100040003000a00e800ffffffffffff00000a00180003030303030300000800050001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1831.588553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.592892] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1831.594495] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1831.596013] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1831.597512] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1831.599013] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1831.600511] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1831.611058] FAULT_INJECTION: forcing a failure. [ 1831.611058] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.613502] CPU: 0 PID: 10849 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1831.614989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.616928] Call Trace: [ 1831.617652] dump_stack+0x107/0x167 [ 1831.618501] should_fail.cold+0x5/0xa [ 1831.619326] ? __kernfs_new_node+0xd4/0x860 [ 1831.620256] should_failslab+0x5/0x20 [ 1831.621077] kmem_cache_alloc+0x5b/0x310 [ 1831.621968] __kernfs_new_node+0xd4/0x860 [ 1831.622891] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1831.623919] ? kernfs_add_one+0x36e/0x4d0 [ 1831.624818] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1831.625860] ? wait_for_completion_io+0x270/0x270 [ 1831.626911] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1831.628033] kernfs_new_node+0x18d/0x250 [ 1831.628905] __kernfs_create_file+0x51/0x350 [ 1831.629858] sysfs_add_file_mode_ns+0x221/0x560 [ 1831.630910] internal_create_group+0x324/0xb30 [ 1831.631901] ? sysfs_remove_group+0x170/0x170 [ 1831.632875] ? lockdep_init_map_type+0x2c7/0x780 [ 1831.633911] ? blk_queue_flag_set+0x22/0x30 [ 1831.634852] ? __loop_update_dio+0x2d2/0x690 [ 1831.635799] loop_configure+0x953/0x1410 [ 1831.636347] FAULT_INJECTION: forcing a failure. [ 1831.636347] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.636679] lo_ioctl+0xa57/0x16b0 [ 1831.636707] ? avc_has_extended_perms+0x7f1/0xf40 [ 1831.640797] ? loop_set_status_old+0x250/0x250 [ 1831.641781] ? avc_ss_reset+0x180/0x180 [ 1831.642669] ? find_held_lock+0x2c/0x110 [ 1831.643725] ? __lock_acquire+0xbb1/0x5b00 [ 1831.644683] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1831.645781] ? generic_block_fiemap+0x60/0x60 [ 1831.646724] ? lock_downgrade+0x6d0/0x6d0 [ 1831.647591] ? build_open_flags+0x6f0/0x6f0 [ 1831.648502] ? loop_set_status_old+0x250/0x250 [ 1831.649456] blkdev_ioctl+0x291/0x710 [ 1831.650258] ? blkdev_common_ioctl+0x1930/0x1930 [ 1831.651260] ? selinux_file_ioctl+0xb6/0x270 [ 1831.652194] block_ioctl+0xf9/0x140 [ 1831.652954] ? blkdev_read_iter+0x1c0/0x1c0 [ 1831.653864] __x64_sys_ioctl+0x19a/0x210 [ 1831.654736] do_syscall_64+0x33/0x40 [ 1831.655518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.656594] RIP: 0033:0x7fe2f6eaa8d7 [ 1831.657384] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.661256] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.662853] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1831.664346] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1831.665846] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1831.667343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1831.668832] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1831.670357] CPU: 1 PID: 10855 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1831.671824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.672242] loop4: detected capacity change from 0 to 262144 [ 1831.673559] Call Trace: [ 1831.673582] dump_stack+0x107/0x167 [ 1831.673613] should_fail.cold+0x5/0xa [ 1831.676867] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1831.677965] ? create_object.isra.0+0x3a/0xa20 [ 1831.678939] should_failslab+0x5/0x20 [ 1831.679742] kmem_cache_alloc+0x5b/0x310 [ 1831.680596] ? mark_held_locks+0x9e/0xe0 [ 1831.681453] create_object.isra.0+0x3a/0xa20 [ 1831.682384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1831.683461] kmem_cache_alloc_node+0x169/0x330 [ 1831.684445] __alloc_skb+0x6d/0x5b0 [ 1831.685270] skb_segment+0x9d8/0x3aa0 [ 1831.686082] ? lock_chain_count+0x20/0x20 [ 1831.687003] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1831.688054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.689164] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1831.690287] ? trace_hardirqs_on+0x5b/0x180 [ 1831.691206] __udp_gso_segment+0x11c6/0x1830 [ 1831.692266] ? __sk_receive_skb+0x830/0x830 [ 1831.693180] udp4_ufo_fragment+0x528/0x720 [ 1831.694251] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1831.695318] inet_gso_segment+0x4fb/0x11a0 [ 1831.696210] skb_mac_gso_segment+0x273/0x570 [ 1831.697142] ? inet_sock_destruct+0x840/0x840 [ 1831.698079] ? skb_network_protocol+0x650/0x650 [ 1831.699060] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1831.700198] __skb_gso_segment+0x32d/0x6d0 [ 1831.701092] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1831.702191] ? __dev_queue_xmit+0x1027/0x2690 [ 1831.703138] ? __dev_queue_xmit+0x6df/0x2690 [ 1831.704064] __dev_queue_xmit+0x825/0x2690 [ 1831.704962] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1831.705910] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1831.707141] ? trace_hardirqs_on+0x5b/0x180 [ 1831.708147] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1831.709298] neigh_connected_output+0x382/0x4d0 [ 1831.710292] ip_finish_output2+0x6f1/0x21f0 [ 1831.711210] ? nf_hook_slow+0xfc/0x1e0 [ 1831.712025] ? ip_frag_next+0x9e0/0x9e0 [ 1831.712853] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1831.713906] __ip_finish_output.part.0+0x5f3/0xb50 [ 1831.714941] ? ip_fragment.constprop.0+0x240/0x240 [ 1831.715963] ? netif_rx_ni+0xe7/0x300 [ 1831.716766] ip_mc_output+0x401/0xa30 [ 1831.717574] ip_send_skb+0xdd/0x260 [ 1831.718350] udp_send_skb+0x6da/0x11d0 [ 1831.719204] udp_sendmsg+0x139a/0x2160 [ 1831.720019] ? mark_lock+0xf5/0x2df0 [ 1831.720799] ? ip_frag_init+0x350/0x350 [ 1831.721638] ? lock_chain_count+0x20/0x20 [ 1831.722519] ? udp_setsockopt+0xc0/0xc0 [ 1831.723363] ? mark_lock+0xf5/0x2df0 [ 1831.724153] ? lock_acquire+0x197/0x470 [ 1831.724991] ? lock_chain_count+0x20/0x20 [ 1831.725866] ? mark_lock+0xf5/0x2df0 [ 1831.726664] ? mark_lock+0xf5/0x2df0 [ 1831.727446] ? lock_chain_count+0x20/0x20 [ 1831.728312] ? __lock_acquire+0xbb1/0x5b00 [ 1831.729199] ? lock_chain_count+0x20/0x20 [ 1831.730233] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.731403] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1831.732271] ? udp_v6_push_pending_frames+0x360/0x360 [ 1831.733377] ? mark_lock+0xf5/0x2df0 [ 1831.734171] ? lock_acquire+0x197/0x470 [ 1831.735013] ? find_held_lock+0x2c/0x110 [ 1831.735877] ? __might_fault+0xd3/0x180 [ 1831.736710] ? lock_downgrade+0x6d0/0x6d0 [ 1831.737591] ? lock_downgrade+0x6d0/0x6d0 [ 1831.738465] ? sock_has_perm+0x1ea/0x280 [ 1831.739328] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1831.740432] ? _copy_from_user+0xfb/0x1b0 [ 1831.741312] ? __import_iovec+0x458/0x590 [ 1831.742181] ? udp_v6_push_pending_frames+0x360/0x360 [ 1831.743286] inet6_sendmsg+0x105/0x140 [ 1831.744104] ? inet6_compat_ioctl+0x320/0x320 [ 1831.745044] __sock_sendmsg+0xf2/0x190 [ 1831.745868] ____sys_sendmsg+0x70d/0x870 [ 1831.746736] ? sock_write_iter+0x3d0/0x3d0 [ 1831.747626] ? do_recvmmsg+0x6d0/0x6d0 [ 1831.748447] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1831.749570] ? trace_hardirqs_on+0x5b/0x180 [ 1831.750478] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1831.751626] ___sys_sendmsg+0xf3/0x170 [ 1831.752449] ? sendmsg_copy_msghdr+0x160/0x160 [ 1831.753421] ? lock_release+0x3b4/0x680 [ 1831.754264] ? __fget_files+0x2cf/0x520 [ 1831.755114] ? lock_downgrade+0x6d0/0x6d0 [ 1831.755982] ? find_held_lock+0x2c/0x110 [ 1831.756848] ? __fget_files+0x2f8/0x520 [ 1831.757695] ? __fget_light+0xea/0x290 [ 1831.758515] __sys_sendmsg+0xe5/0x1b0 [ 1831.759321] ? __sys_sendmsg_sock+0x40/0x40 [ 1831.760233] ? rcu_read_lock_any_held+0x75/0xa0 [ 1831.761231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.762332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.763418] ? trace_hardirqs_on+0x5b/0x180 [ 1831.764321] do_syscall_64+0x33/0x40 [ 1831.765112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.766189] RIP: 0033:0x7fb8c885ab19 [ 1831.766980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.770839] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1831.772432] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1831.773922] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1831.775422] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.776926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.778413] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:16:15 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 57) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1831.866027] loop7: detected capacity change from 0 to 131072 [ 1831.875487] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1831.881765] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1831.885775] FAULT_INJECTION: forcing a failure. [ 1831.885775] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.888364] CPU: 1 PID: 10863 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1831.889814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.891576] Call Trace: [ 1831.892132] dump_stack+0x107/0x167 [ 1831.892909] should_fail.cold+0x5/0xa [ 1831.893716] ? xas_alloc+0x336/0x440 [ 1831.894503] should_failslab+0x5/0x20 [ 1831.895320] kmem_cache_alloc+0x5b/0x310 [ 1831.896179] xas_alloc+0x336/0x440 [ 1831.896932] xas_create+0x34a/0x10d0 [ 1831.897727] ? kernel_text_address+0xf2/0x120 [ 1831.898689] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.899800] xas_store+0x8c/0x1c40 [ 1831.900565] __xa_store+0x164/0x2d0 [ 1831.901331] ? xa_delete_node+0x280/0x280 [ 1831.902214] ? trace_hardirqs_on+0x5b/0x180 [ 1831.903155] xa_store+0x31/0x50 [ 1831.903857] __io_uring_add_tctx_node+0x1cf/0x520 [ 1831.904871] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1831.905975] ? alloc_fd+0x2e7/0x670 [ 1831.906764] io_uring_setup+0x1fbb/0x2980 [ 1831.907651] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1831.908695] ? wait_for_completion_io+0x270/0x270 [ 1831.909732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.910843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.912041] do_syscall_64+0x33/0x40 [ 1831.912897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.913970] RIP: 0033:0x7eff19607b19 [ 1831.914761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.918647] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1831.920259] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1831.921757] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1831.923262] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1831.924760] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1831.926265] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1831.944816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1831.946265] FAULT_INJECTION: forcing a failure. [ 1831.946265] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.949016] CPU: 1 PID: 10854 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1831.950482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.952233] Call Trace: [ 1831.952790] dump_stack+0x107/0x167 [ 1831.953563] should_fail.cold+0x5/0xa [ 1831.954376] ? create_object.isra.0+0x3a/0xa20 [ 1831.955350] should_failslab+0x5/0x20 [ 1831.956149] kmem_cache_alloc+0x5b/0x310 [ 1831.957025] create_object.isra.0+0x3a/0xa20 [ 1831.957952] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1831.959025] kmem_cache_alloc+0x159/0x310 [ 1831.959909] security_inode_alloc+0x34/0x160 [ 1831.960835] inode_init_always+0xa4e/0xd10 [ 1831.961830] alloc_inode+0x84/0x240 [ 1831.962614] new_inode+0x23/0x250 [ 1831.963352] __ext4_new_inode+0x32c/0x5370 [ 1831.964233] ? avc_has_extended_perms+0xf40/0xf40 [ 1831.965282] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1831.966305] ? dquot_initialize_needed+0x290/0x290 [ 1831.967350] ? selinux_determine_inode_label+0x1ab/0x340 [ 1831.968507] ext4_mkdir+0x32c/0xb10 [ 1831.969293] ? ext4_rmdir+0xf70/0xf70 [ 1831.970110] vfs_mkdir+0x493/0x750 [ 1831.970869] do_mkdirat+0x150/0x2b0 [ 1831.971641] ? user_path_create+0xf0/0xf0 [ 1831.972530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.973640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.974734] do_syscall_64+0x33/0x40 [ 1831.975514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1831.976578] RIP: 0033:0x7fae9488ec27 [ 1831.977361] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.981225] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1831.982824] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1831.984320] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1831.985819] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1831.987327] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1831.988827] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1832.011434] FAT-fs (loop5): bogus number of reserved sectors [ 1832.012651] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1832.027293] loop6: detected capacity change from 0 to 131072 [ 1832.107692] loop3: detected capacity change from 0 to 262656 [ 1832.114219] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1832.118786] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1832.120756] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1832.122940] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1832.136568] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1832.142729] EXT4-fs (loop3): get root inode failed [ 1832.144035] EXT4-fs (loop3): mount failed 01:16:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40203, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:16:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 15) 01:16:31 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 59) 01:16:31 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2e, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:16:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 35) 01:16:31 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4a2302221c7032039c613abf7ba35d3655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x69, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat(0xffffffffffffffff, 0x0, 0x200842, 0x55) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086607, &(0x7f0000000080)) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$link(0x8, r3, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r3, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) openat(r0, &(0x7f0000000000)='./file0\x00', 0x480880, 0x100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:16:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 58) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:16:31 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f800002000400003000000000000000100", 0x26}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1847.343689] FAULT_INJECTION: forcing a failure. [ 1847.343689] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.345421] FAULT_INJECTION: forcing a failure. [ 1847.345421] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.346729] CPU: 1 PID: 10886 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1847.349652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.351811] Call Trace: [ 1847.352503] dump_stack+0x107/0x167 [ 1847.353449] should_fail.cold+0x5/0xa [ 1847.354441] ? create_object.isra.0+0x3a/0xa20 [ 1847.355637] should_failslab+0x5/0x20 [ 1847.356626] kmem_cache_alloc+0x5b/0x310 [ 1847.357679] create_object.isra.0+0x3a/0xa20 [ 1847.358800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.360140] kmem_cache_alloc+0x159/0x310 [ 1847.361217] security_inode_alloc+0x34/0x160 [ 1847.362361] inode_init_always+0xa4e/0xd10 [ 1847.363520] alloc_inode+0x84/0x240 [ 1847.364451] new_inode+0x23/0x250 [ 1847.365365] __ext4_new_inode+0x32c/0x5370 [ 1847.366443] ? avc_has_extended_perms+0xf40/0xf40 [ 1847.367751] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1847.369002] ? dquot_initialize_needed+0x290/0x290 [ 1847.370267] ? selinux_determine_inode_label+0x1ab/0x340 [ 1847.371727] ext4_mkdir+0x32c/0xb10 [ 1847.372685] ? ext4_rmdir+0xf70/0xf70 [ 1847.373672] vfs_mkdir+0x493/0x750 [ 1847.374593] do_mkdirat+0x150/0x2b0 [ 1847.375594] ? user_path_create+0xf0/0xf0 [ 1847.376666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.378022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.379394] do_syscall_64+0x33/0x40 [ 1847.380358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.381672] RIP: 0033:0x7fae9488ec27 [ 1847.382634] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.387475] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1847.389231] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1847.390754] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1847.392310] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1847.393821] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1847.395359] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1847.396894] CPU: 0 PID: 10883 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1847.397705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.398673] Call Trace: [ 1847.398980] dump_stack+0x107/0x167 [ 1847.399412] should_fail.cold+0x5/0xa [ 1847.399860] should_failslab+0x5/0x20 [ 1847.400303] __kmalloc_node_track_caller+0x74/0x3b0 [ 1847.400872] ? skb_segment+0x9d8/0x3aa0 [ 1847.400923] FAULT_INJECTION: forcing a failure. [ 1847.400923] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.401337] __alloc_skb+0xb1/0x5b0 [ 1847.401353] skb_segment+0x9d8/0x3aa0 [ 1847.401368] ? __lock_acquire+0xbb1/0x5b00 [ 1847.401402] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1847.405621] ? lock_acquire+0x197/0x470 [ 1847.406074] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.406676] __udp_gso_segment+0x11c6/0x1830 [ 1847.407187] ? __sk_receive_skb+0x830/0x830 [ 1847.407684] udp4_ufo_fragment+0x528/0x720 [ 1847.408166] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1847.408734] inet_gso_segment+0x4fb/0x11a0 [ 1847.409224] skb_mac_gso_segment+0x273/0x570 [ 1847.409730] ? inet_sock_destruct+0x840/0x840 [ 1847.410242] ? skb_network_protocol+0x650/0x650 [ 1847.410770] ? skb_crc32c_csum_help+0x80/0x80 [ 1847.411290] ? lock_acquire+0x197/0x470 [ 1847.411739] ? __dev_queue_xmit+0x1c6/0x2690 [ 1847.412242] __skb_gso_segment+0x32d/0x6d0 [ 1847.412729] ? mark_lock+0xf5/0x2df0 [ 1847.413156] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1847.413751] ? lock_chain_count+0x20/0x20 [ 1847.414222] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1847.414743] __dev_queue_xmit+0x825/0x2690 [ 1847.415255] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1847.415840] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1847.416365] ? mark_held_locks+0x9e/0xe0 [ 1847.416834] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1847.417435] neigh_connected_output+0x382/0x4d0 [ 1847.417970] ip_finish_output2+0x6f1/0x21f0 [ 1847.418470] ? nf_hook_slow+0xfc/0x1e0 [ 1847.418913] ? ip_frag_next+0x9e0/0x9e0 [ 1847.419375] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1847.419947] __ip_finish_output.part.0+0x5f3/0xb50 [ 1847.420510] ? ip_fragment.constprop.0+0x240/0x240 [ 1847.421069] ? netif_rx_ni+0xe7/0x300 [ 1847.421507] ip_mc_output+0x401/0xa30 [ 1847.421946] ip_send_skb+0xdd/0x260 [ 1847.422372] udp_send_skb+0x6da/0x11d0 [ 1847.422824] udp_sendmsg+0x139a/0x2160 [ 1847.423278] ? mark_lock+0xf5/0x2df0 [ 1847.423705] ? ip_frag_init+0x350/0x350 [ 1847.424159] ? lock_chain_count+0x20/0x20 [ 1847.424634] ? udp_setsockopt+0xc0/0xc0 [ 1847.425083] ? mark_lock+0xf5/0x2df0 [ 1847.425508] ? lock_acquire+0x197/0x470 [ 1847.425962] ? lock_chain_count+0x20/0x20 [ 1847.426439] ? mark_lock+0xf5/0x2df0 [ 1847.426865] ? mark_lock+0xf5/0x2df0 [ 1847.427301] ? lock_chain_count+0x20/0x20 [ 1847.427772] ? __lock_acquire+0xbb1/0x5b00 [ 1847.428256] ? lock_chain_count+0x20/0x20 [ 1847.428740] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.429348] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1847.429817] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.430413] ? mark_lock+0xf5/0x2df0 [ 1847.430841] ? lock_acquire+0x197/0x470 [ 1847.431309] ? find_held_lock+0x2c/0x110 [ 1847.431773] ? __might_fault+0xd3/0x180 [ 1847.432229] ? lock_downgrade+0x6d0/0x6d0 [ 1847.432706] ? lock_downgrade+0x6d0/0x6d0 [ 1847.433183] ? sock_has_perm+0x1ea/0x280 [ 1847.433645] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1847.434236] ? _copy_from_user+0xfb/0x1b0 [ 1847.434716] ? __import_iovec+0x458/0x590 [ 1847.435198] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.435789] inet6_sendmsg+0x105/0x140 [ 1847.436238] ? inet6_compat_ioctl+0x320/0x320 [ 1847.436747] __sock_sendmsg+0xf2/0x190 [ 1847.437196] ____sys_sendmsg+0x70d/0x870 [ 1847.437662] ? sock_write_iter+0x3d0/0x3d0 [ 1847.438145] ? do_recvmmsg+0x6d0/0x6d0 [ 1847.438595] ? lock_downgrade+0x6d0/0x6d0 [ 1847.439070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.439679] ___sys_sendmsg+0xf3/0x170 [ 1847.440123] ? sendmsg_copy_msghdr+0x160/0x160 [ 1847.440651] ? __fget_files+0x2cf/0x520 [ 1847.441104] ? lock_downgrade+0x6d0/0x6d0 [ 1847.441580] ? find_held_lock+0x2c/0x110 [ 1847.442047] ? __fget_files+0x2f8/0x520 [ 1847.442510] ? __fget_light+0xea/0x290 [ 1847.442960] __sys_sendmsg+0xe5/0x1b0 [ 1847.443406] ? __sys_sendmsg_sock+0x40/0x40 [ 1847.443901] ? rcu_read_lock_any_held+0x75/0xa0 [ 1847.444442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.445038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.445624] ? trace_hardirqs_on+0x5b/0x180 [ 1847.446115] do_syscall_64+0x33/0x40 [ 1847.446545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.447128] RIP: 0033:0x7fb8c885ab19 [ 1847.447560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.449655] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1847.450524] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1847.451343] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1847.452153] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.452962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.453777] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1847.454617] CPU: 1 PID: 10894 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1847.456152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.457923] Call Trace: [ 1847.458491] dump_stack+0x107/0x167 [ 1847.459307] should_fail.cold+0x5/0xa [ 1847.460126] ? create_object.isra.0+0x3a/0xa20 [ 1847.461097] should_failslab+0x5/0x20 [ 1847.461905] kmem_cache_alloc+0x5b/0x310 [ 1847.462765] ? mark_held_locks+0x9e/0xe0 [ 1847.463672] create_object.isra.0+0x3a/0xa20 [ 1847.464607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.465689] kmem_cache_alloc+0x159/0x310 [ 1847.466578] xas_alloc+0x336/0x440 [ 1847.467373] xas_create+0x34a/0x10d0 [ 1847.468178] ? kernel_text_address+0xf2/0x120 [ 1847.469131] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.469321] loop3: detected capacity change from 0 to 262656 [ 1847.470248] xas_store+0x8c/0x1c40 [ 1847.470283] __xa_store+0x164/0x2d0 [ 1847.472456] ? xa_delete_node+0x280/0x280 [ 1847.472701] FAT-fs (loop5): bogus number of reserved sectors [ 1847.473343] ? trace_hardirqs_on+0x5b/0x180 [ 1847.473371] xa_store+0x31/0x50 [ 1847.474022] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1847.474921] __io_uring_add_tctx_node+0x1cf/0x520 [ 1847.474942] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1847.478648] ? alloc_fd+0x2e7/0x670 [ 1847.479165] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1847.479484] io_uring_setup+0x1fbb/0x2980 [ 1847.481182] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1847.482262] ? wait_for_completion_io+0x270/0x270 [ 1847.483331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.484443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.485550] do_syscall_64+0x33/0x40 [ 1847.486341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.487454] RIP: 0033:0x7eff19607b19 [ 1847.488247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.492183] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1847.493808] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1847.495362] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1847.496874] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1847.498385] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1847.499939] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1847.522926] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1847.524923] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1847.526935] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:16:31 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 16) [ 1847.538442] FAULT_INJECTION: forcing a failure. [ 1847.538442] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.541218] CPU: 1 PID: 10898 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1847.542698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.544521] Call Trace: [ 1847.545089] dump_stack+0x107/0x167 [ 1847.545869] should_fail.cold+0x5/0xa [ 1847.546689] ? create_object.isra.0+0x3a/0xa20 [ 1847.547688] should_failslab+0x5/0x20 [ 1847.548487] kmem_cache_alloc+0x5b/0x310 [ 1847.549359] create_object.isra.0+0x3a/0xa20 [ 1847.550296] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.551418] kmem_cache_alloc+0x159/0x310 [ 1847.552321] __kernfs_new_node+0xd4/0x860 [ 1847.553211] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1847.554218] ? kernfs_add_one+0x36e/0x4d0 [ 1847.555106] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.556158] ? wait_for_completion_io+0x270/0x270 [ 1847.557202] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1847.558315] kernfs_new_node+0x18d/0x250 [ 1847.559209] __kernfs_create_file+0x51/0x350 [ 1847.560143] sysfs_add_file_mode_ns+0x221/0x560 [ 1847.561138] internal_create_group+0x324/0xb30 [ 1847.562128] ? sysfs_remove_group+0x170/0x170 [ 1847.563085] ? lockdep_init_map_type+0x2c7/0x780 [ 1847.564118] ? blk_queue_flag_set+0x22/0x30 [ 1847.565045] ? __loop_update_dio+0x2d2/0x690 [ 1847.565995] loop_configure+0x953/0x1410 [ 1847.566868] lo_ioctl+0xa57/0x16b0 [ 1847.567655] ? avc_has_extended_perms+0x7f1/0xf40 [ 1847.568664] ? loop_set_status_old+0x250/0x250 [ 1847.569652] ? avc_ss_reset+0x180/0x180 [ 1847.570510] ? __lock_acquire+0xbb1/0x5b00 [ 1847.571496] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1847.572622] ? generic_block_fiemap+0x60/0x60 [ 1847.573573] ? lock_downgrade+0x6d0/0x6d0 [ 1847.574468] ? loop_set_status_old+0x250/0x250 [ 1847.575455] blkdev_ioctl+0x291/0x710 [ 1847.576270] ? blkdev_common_ioctl+0x1930/0x1930 [ 1847.577288] ? selinux_file_ioctl+0xb6/0x270 [ 1847.578235] block_ioctl+0xf9/0x140 [ 1847.579010] ? blkdev_read_iter+0x1c0/0x1c0 [ 1847.579963] __x64_sys_ioctl+0x19a/0x210 [ 1847.580837] do_syscall_64+0x33/0x40 [ 1847.581632] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.582734] RIP: 0033:0x7fe2f6eaa8d7 [ 1847.583562] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.587517] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1847.589137] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1847.590649] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1847.592184] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1847.593700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1847.595255] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:16:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000001c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1847.606273] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1847.612890] loop4: detected capacity change from 0 to 262144 [ 1847.614724] EXT4-fs (loop3): get root inode failed [ 1847.615326] EXT4-fs (loop3): mount failed [ 1847.622766] loop7: detected capacity change from 0 to 131072 [ 1847.647180] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1847.652810] loop6: detected capacity change from 0 to 131072 [ 1847.661224] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1847.671462] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1847.680563] FAULT_INJECTION: forcing a failure. [ 1847.680563] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.681849] CPU: 0 PID: 10911 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1847.682646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.683616] Call Trace: [ 1847.683931] dump_stack+0x107/0x167 [ 1847.684354] should_fail.cold+0x5/0xa [ 1847.684802] ? create_object.isra.0+0x3a/0xa20 [ 1847.685330] should_failslab+0x5/0x20 [ 1847.685775] kmem_cache_alloc+0x5b/0x310 [ 1847.686249] create_object.isra.0+0x3a/0xa20 [ 1847.686758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1847.687353] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1847.687949] ? skb_segment+0x9d8/0x3aa0 [ 1847.688412] __alloc_skb+0xb1/0x5b0 [ 1847.688834] skb_segment+0x9d8/0x3aa0 [ 1847.689277] ? __lock_acquire+0xbb1/0x5b00 [ 1847.689798] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1847.690374] ? lock_acquire+0x197/0x470 [ 1847.690834] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.691462] __udp_gso_segment+0x11c6/0x1830 [ 1847.691968] ? __sk_receive_skb+0x830/0x830 [ 1847.692471] udp4_ufo_fragment+0x528/0x720 [ 1847.692961] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1847.693535] inet_gso_segment+0x4fb/0x11a0 [ 1847.694035] skb_mac_gso_segment+0x273/0x570 [ 1847.694546] ? inet_sock_destruct+0x840/0x840 [ 1847.695062] ? skb_network_protocol+0x650/0x650 [ 1847.695606] ? skb_crc32c_csum_help+0x80/0x80 [ 1847.696123] ? lock_acquire+0x197/0x470 [ 1847.696577] ? __dev_queue_xmit+0x1c6/0x2690 [ 1847.697090] __skb_gso_segment+0x32d/0x6d0 [ 1847.697576] ? mark_lock+0xf5/0x2df0 [ 1847.698008] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1847.698610] ? lock_chain_count+0x20/0x20 [ 1847.699084] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1847.699622] __dev_queue_xmit+0x825/0x2690 [ 1847.700117] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1847.700710] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1847.701243] ? mark_held_locks+0x9e/0xe0 [ 1847.701717] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1847.702330] neigh_connected_output+0x382/0x4d0 [ 1847.702878] ip_finish_output2+0x6f1/0x21f0 [ 1847.703386] ? nf_hook_slow+0xfc/0x1e0 [ 1847.703835] ? ip_frag_next+0x9e0/0x9e0 [ 1847.704295] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1847.704877] __ip_finish_output.part.0+0x5f3/0xb50 [ 1847.705444] ? ip_fragment.constprop.0+0x240/0x240 [ 1847.706011] ? netif_rx_ni+0xe7/0x300 [ 1847.706457] ip_mc_output+0x401/0xa30 [ 1847.706907] ip_send_skb+0xdd/0x260 [ 1847.707341] udp_send_skb+0x6da/0x11d0 [ 1847.707802] udp_sendmsg+0x139a/0x2160 [ 1847.708251] ? mark_lock+0xf5/0x2df0 [ 1847.708683] ? ip_frag_init+0x350/0x350 [ 1847.709143] ? lock_chain_count+0x20/0x20 [ 1847.709627] ? udp_setsockopt+0xc0/0xc0 [ 1847.710089] ? mark_lock+0xf5/0x2df0 [ 1847.710517] ? lock_acquire+0x197/0x470 [ 1847.710981] ? lock_chain_count+0x20/0x20 [ 1847.711477] ? mark_lock+0xf5/0x2df0 [ 1847.711913] ? mark_lock+0xf5/0x2df0 [ 1847.712340] ? lock_chain_count+0x20/0x20 [ 1847.712819] ? __lock_acquire+0xbb1/0x5b00 [ 1847.713309] ? lock_chain_count+0x20/0x20 [ 1847.713799] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.714416] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1847.714892] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.715499] ? mark_lock+0xf5/0x2df0 [ 1847.715929] ? lock_acquire+0x197/0x470 [ 1847.716388] ? find_held_lock+0x2c/0x110 [ 1847.716859] ? __might_fault+0xd3/0x180 [ 1847.717318] ? lock_downgrade+0x6d0/0x6d0 [ 1847.717797] ? lock_downgrade+0x6d0/0x6d0 [ 1847.718279] ? sock_has_perm+0x1ea/0x280 [ 1847.718746] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1847.719350] ? _copy_from_user+0xfb/0x1b0 [ 1847.719838] ? __import_iovec+0x458/0x590 [ 1847.720314] ? udp_v6_push_pending_frames+0x360/0x360 [ 1847.720911] inet6_sendmsg+0x105/0x140 [ 1847.721369] ? inet6_compat_ioctl+0x320/0x320 [ 1847.721886] __sock_sendmsg+0xf2/0x190 [ 1847.722340] ____sys_sendmsg+0x70d/0x870 [ 1847.722813] ? sock_write_iter+0x3d0/0x3d0 [ 1847.723303] ? do_recvmmsg+0x6d0/0x6d0 [ 1847.723758] ? lock_downgrade+0x6d0/0x6d0 [ 1847.724238] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.724845] ___sys_sendmsg+0xf3/0x170 [ 1847.725296] ? sendmsg_copy_msghdr+0x160/0x160 [ 1847.725826] ? __fget_files+0x2cf/0x520 [ 1847.726286] ? lock_downgrade+0x6d0/0x6d0 [ 1847.726764] ? find_held_lock+0x2c/0x110 [ 1847.727267] ? __fget_files+0x2f8/0x520 [ 1847.727740] ? __fget_light+0xea/0x290 [ 1847.728199] __sys_sendmsg+0xe5/0x1b0 [ 1847.728641] ? __sys_sendmsg_sock+0x40/0x40 [ 1847.729141] ? rcu_read_lock_any_held+0x75/0xa0 [ 1847.729698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.730302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.730895] ? trace_hardirqs_on+0x5b/0x180 [ 1847.731398] do_syscall_64+0x33/0x40 [ 1847.731829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.732420] RIP: 0033:0x7fb8c885ab19 [ 1847.732845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.734951] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1847.735839] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1847.736658] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1847.737477] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.738302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.739122] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:16:31 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 60) [ 1847.772020] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:16:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40300, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1847.795604] FAULT_INJECTION: forcing a failure. [ 1847.795604] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.798574] CPU: 1 PID: 10917 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1847.800081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.801846] Call Trace: [ 1847.802408] dump_stack+0x107/0x167 [ 1847.803219] should_fail.cold+0x5/0xa [ 1847.804038] ? ext4_find_extent+0xa77/0xd70 [ 1847.804961] should_failslab+0x5/0x20 [ 1847.805769] __kmalloc+0x72/0x390 [ 1847.806520] ext4_find_extent+0xa77/0xd70 [ 1847.807447] ext4_ext_map_blocks+0x1c8/0x5830 01:16:31 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1847.808427] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.809662] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.810769] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1847.811925] ? ext4_ext_release+0x10/0x10 [ 1847.812819] ? lock_release+0x680/0x680 [ 1847.813667] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1847.814672] ? lock_downgrade+0x6d0/0x6d0 [ 1847.815598] ? down_read+0x10f/0x430 [ 1847.816387] ? down_write+0x160/0x160 [ 1847.817203] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1847.818210] ext4_map_blocks+0x8e1/0x1910 [ 1847.819106] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1847.820106] ? __brelse+0x84/0xa0 01:16:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 36) 01:16:31 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 59) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1847.820850] ? __ext4_new_inode+0x148/0x5370 [ 1847.821921] ext4_append+0x1b8/0x4e0 [ 1847.822725] ? ext4_move_extents+0x3050/0x3050 [ 1847.823736] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1847.824779] ext4_init_new_dir+0x25e/0x4d0 [ 1847.825692] ? ext4_init_dot_dotdot+0x610/0x610 [ 1847.826706] ext4_mkdir+0x3c1/0xb10 [ 1847.827529] ? ext4_rmdir+0xf70/0xf70 [ 1847.828361] vfs_mkdir+0x493/0x750 [ 1847.829127] do_mkdirat+0x150/0x2b0 [ 1847.829904] ? user_path_create+0xf0/0xf0 [ 1847.830799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.831941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.833048] do_syscall_64+0x33/0x40 [ 1847.833852] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.834935] RIP: 0033:0x7fae9488ec27 [ 1847.835757] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.839702] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1847.841312] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1847.842821] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1847.844368] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1847.845884] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1847.847444] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1847.859605] loop7: detected capacity change from 0 to 131072 01:16:31 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 1) [ 1847.867058] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1847.872036] FAULT_INJECTION: forcing a failure. [ 1847.872036] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.874670] CPU: 1 PID: 10925 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1847.876190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.877956] Call Trace: [ 1847.878519] dump_stack+0x107/0x167 [ 1847.879339] should_fail.cold+0x5/0xa [ 1847.880161] ? xas_alloc+0x336/0x440 [ 1847.880964] should_failslab+0x5/0x20 [ 1847.881780] kmem_cache_alloc+0x5b/0x310 [ 1847.882649] xas_alloc+0x336/0x440 [ 1847.883435] xas_create+0x34a/0x10d0 [ 1847.884242] ? kernel_text_address+0xf2/0x120 [ 1847.885201] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.886317] xas_store+0x8c/0x1c40 [ 1847.887091] __xa_store+0x164/0x2d0 [ 1847.887891] ? xa_delete_node+0x280/0x280 [ 1847.888784] ? trace_hardirqs_on+0x5b/0x180 [ 1847.889720] xa_store+0x31/0x50 [ 1847.890423] __io_uring_add_tctx_node+0x1cf/0x520 [ 1847.891485] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1847.892600] ? alloc_fd+0x2e7/0x670 [ 1847.893397] io_uring_setup+0x1fbb/0x2980 [ 1847.894289] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1847.895405] ? wait_for_completion_io+0x270/0x270 [ 1847.896456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.897570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.898678] do_syscall_64+0x33/0x40 [ 1847.899507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.900602] RIP: 0033:0x7eff19607b19 [ 1847.901389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.905327] RSP: 002b:00007eff16b7d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1847.906949] RAX: ffffffffffffffda RBX: 00007eff1971af60 RCX: 00007eff19607b19 [ 1847.908509] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1847.910035] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1847.911592] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1847.913115] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1847.969469] FAULT_INJECTION: forcing a failure. [ 1847.969469] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.970814] CPU: 0 PID: 10930 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1847.971604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.972546] Call Trace: [ 1847.972852] dump_stack+0x107/0x167 [ 1847.973265] should_fail.cold+0x5/0xa [ 1847.973699] ? __do_sys_memfd_create+0xfb/0x450 [ 1847.974226] should_failslab+0x5/0x20 [ 1847.974672] __kmalloc+0x72/0x390 [ 1847.975068] __do_sys_memfd_create+0xfb/0x450 [ 1847.975589] ? ksys_write+0x1a9/0x260 [ 1847.976019] ? memfd_file_seals_ptr+0x170/0x170 [ 1847.976553] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.977155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.977741] do_syscall_64+0x33/0x40 [ 1847.978166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1847.978753] RIP: 0033:0x7f06f1ea3b19 [ 1847.979186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.981286] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1847.982153] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1847.982966] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1847.983792] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1847.984606] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1847.985425] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1847.990809] loop3: detected capacity change from 0 to 262656 [ 1847.994554] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1847.995713] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1847.996767] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1847.997817] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1848.001885] FAULT_INJECTION: forcing a failure. [ 1848.001885] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.003556] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1848.004529] CPU: 1 PID: 10932 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1848.007224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.008166] EXT4-fs (loop3): get root inode failed [ 1848.008985] Call Trace: [ 1848.009013] dump_stack+0x107/0x167 [ 1848.009034] should_fail.cold+0x5/0xa [ 1848.009060] ? __kernfs_new_node+0xd4/0x860 [ 1848.009083] should_failslab+0x5/0x20 [ 1848.009103] kmem_cache_alloc+0x5b/0x310 [ 1848.009131] __kernfs_new_node+0xd4/0x860 [ 1848.009156] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1848.009170] ? kernfs_add_one+0x36e/0x4d0 [ 1848.009200] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1848.009224] ? wait_for_completion_io+0x270/0x270 [ 1848.009248] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1848.009272] kernfs_new_node+0x18d/0x250 [ 1848.009298] __kernfs_create_file+0x51/0x350 [ 1848.009322] sysfs_add_file_mode_ns+0x221/0x560 [ 1848.009351] internal_create_group+0x324/0xb30 [ 1848.009377] ? sysfs_remove_group+0x170/0x170 [ 1848.009401] ? lockdep_init_map_type+0x2c7/0x780 [ 1848.009426] ? blk_queue_flag_set+0x22/0x30 [ 1848.009444] ? __loop_update_dio+0x2d2/0x690 [ 1848.009467] loop_configure+0x953/0x1410 [ 1848.009497] lo_ioctl+0xa57/0x16b0 [ 1848.009518] ? avc_has_extended_perms+0x7f1/0xf40 [ 1848.009541] ? loop_set_status_old+0x250/0x250 [ 1848.009563] ? avc_ss_reset+0x180/0x180 [ 1848.009583] ? find_held_lock+0x2c/0x110 [ 1848.009615] ? __lock_acquire+0xbb1/0x5b00 [ 1848.009677] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1848.009701] ? generic_block_fiemap+0x60/0x60 [ 1848.009725] ? lock_downgrade+0x6d0/0x6d0 [ 1848.009747] ? build_open_flags+0x6f0/0x6f0 [ 1848.009772] ? loop_set_status_old+0x250/0x250 [ 1848.009788] blkdev_ioctl+0x291/0x710 [ 1848.009810] ? blkdev_common_ioctl+0x1930/0x1930 [ 1848.010488] EXT4-fs (loop3): mount failed [ 1848.010923] ? selinux_file_ioctl+0xb6/0x270 [ 1848.042354] block_ioctl+0xf9/0x140 [ 1848.043130] ? blkdev_read_iter+0x1c0/0x1c0 [ 1848.044084] __x64_sys_ioctl+0x19a/0x210 [ 1848.044954] do_syscall_64+0x33/0x40 [ 1848.045750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.046845] RIP: 0033:0x7fe2f6eaa8d7 [ 1848.047652] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.051578] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.053196] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1848.054708] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1848.056262] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1848.057775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1848.059304] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1848.061029] loop4: detected capacity change from 0 to 262144 [ 1848.069808] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1848.080045] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1848.082514] loop3: detected capacity change from 0 to 262656 [ 1848.085260] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1848.088463] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1848.089706] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1848.090770] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1848.095200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1848.101314] EXT4-fs (loop3): get root inode failed [ 1848.101897] EXT4-fs (loop3): mount failed 01:16:48 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 60) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:16:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x10000, 0x3, &(0x7f0000000300)=[{&(0x7f00000001c0)="6754ba14107e7f33edcb5a9568bf344eed68d3559152fcf8ea01f4063d610d49fdba5113d0304a1dc522b3f1da4788510041d89442b01eda66b4b0b063fb0c7682d7144bec3784445ecdf592c817a1ca7bcc827b0b518f048c8831faec63532658198b54", 0x64}, {&(0x7f0000000240)="443c99cd0b0c8a646e1d335d426dca8579a6d7db73943b154495aed9d6b53a6944feb6347725d0c20d15f9b3be9e1adc1f990a8eb9dd89e99604c01c86a4add270519ad099d2312290c64497cbd2272f2acb8b471442b09f2efafaf70ab6f95e72e20325369e46ae49d4ddfd6a21ea313fa66f36ef705aa0e765235ef7f29ce0fc7d435796f5aa2ed9f70a0e99dd0b752199d54f9cffdb74e77da09d4dd26efdf3e293913643980d09e7a3b356c8e01b28206f58aeaf6485b42e9f013f40b5", 0xbf, 0x5}, {&(0x7f0000000740)="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", 0x1000, 0x8}], 0x240800, &(0x7f0000000380)={[{'ext2\x00'}, {'ext2\x00'}, {'wlan1\x00'}, {'wlan1\x00'}, {',}K#\\{]{\\\'[{%$'}], [{@fowner_gt={'fowner>', 0xee00}}, {@dont_hash}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', 0x60cc00, 0x25) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0x4, 0xba, 0x7b, 0x0, 0x0, 0x9, 0x8108, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x1f, 0x0, 0x0, 0x6, 0xb0, 0x6, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r6, 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000001740)='./file1\x00', &(0x7f0000001780), &(0x7f00000017c0)={0x0, 0xfb, 0x83, 0x2, 0x0, "013b6c99e4dc18f816ede3307e92c48f", "8d5ff7cfee966c60864c133eb531329c7311374df1484fb6015e0bb38cbceb5a71d1f2ac466c9990c1b65b377f38ae87bbc3bd3fd479ccf9aa44e3ba054ae244c8361f2586bfd1565e97364b2fcfd54a56bac2cea48812e672752ba1c5b93253aa907f70004371a30842afa4d98a"}, 0x83, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001380)=@IORING_OP_READV=@pass_iovec={0x1, 0xf1930b2697df3da1, 0x0, @fd_index, 0x4, &(0x7f0000001340)=[{&(0x7f0000001180)=""/82, 0x52}, {&(0x7f0000001200)=""/207, 0xcf}, {&(0x7f0000001300)=""/17, 0x11}], 0x3, 0xc, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd=r5, 0x0, 0x5, 0x2, 0x15, 0x1, {0x0, r8}}, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:16:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40301, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:16:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 37) 01:16:48 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 61) 01:16:48 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:16:48 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 2) [ 1864.260018] loop3: detected capacity change from 0 to 262656 01:16:48 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 17) [ 1864.274594] FAULT_INJECTION: forcing a failure. [ 1864.274594] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.276526] CPU: 0 PID: 10955 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1864.277625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.278944] Call Trace: [ 1864.279366] dump_stack+0x107/0x167 [ 1864.279959] should_fail.cold+0x5/0xa [ 1864.280573] ? create_object.isra.0+0x3a/0xa20 [ 1864.281296] should_failslab+0x5/0x20 [ 1864.281893] kmem_cache_alloc+0x5b/0x310 [ 1864.282536] create_object.isra.0+0x3a/0xa20 [ 1864.283223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.284042] __kmalloc+0x16e/0x390 [ 1864.284604] __do_sys_memfd_create+0xfb/0x450 [ 1864.285331] ? ksys_write+0x1a9/0x260 [ 1864.285954] ? memfd_file_seals_ptr+0x170/0x170 [ 1864.286810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.287780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.288725] do_syscall_64+0x33/0x40 [ 1864.289413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.290357] RIP: 0033:0x7f06f1ea3b19 [ 1864.291040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.294326] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1864.295703] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1864.297014] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1864.298307] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1864.299590] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1864.300889] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1864.304653] FAULT_INJECTION: forcing a failure. [ 1864.304653] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.306447] CPU: 0 PID: 10947 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 1864.307532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.308825] Call Trace: [ 1864.309244] dump_stack+0x107/0x167 [ 1864.309824] should_fail.cold+0x5/0xa [ 1864.310428] ? create_object.isra.0+0x3a/0xa20 [ 1864.311144] should_failslab+0x5/0x20 [ 1864.311753] kmem_cache_alloc+0x5b/0x310 [ 1864.312398] create_object.isra.0+0x3a/0xa20 [ 1864.313086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.313890] __kmalloc+0x16e/0x390 [ 1864.314461] ext4_find_extent+0xa77/0xd70 [ 1864.315134] ext4_ext_map_blocks+0x1c8/0x5830 [ 1864.315871] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.316710] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.317547] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1864.318377] ? ext4_ext_release+0x10/0x10 [ 1864.319036] ? lock_release+0x680/0x680 [ 1864.319681] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1864.320454] ? lock_downgrade+0x6d0/0x6d0 [ 1864.321140] ? down_read+0x10f/0x430 [ 1864.321732] ? down_write+0x160/0x160 [ 1864.322344] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1864.323096] ext4_map_blocks+0x8e1/0x1910 [ 1864.323784] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1864.324502] ? __brelse+0x84/0xa0 [ 1864.325063] ? __ext4_new_inode+0x148/0x5370 [ 1864.325761] ext4_append+0x1b8/0x4e0 [ 1864.326351] ? ext4_move_extents+0x3050/0x3050 [ 1864.327078] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1864.327864] ext4_init_new_dir+0x25e/0x4d0 [ 1864.328532] ? ext4_init_dot_dotdot+0x610/0x610 [ 1864.329294] ext4_mkdir+0x3c1/0xb10 [ 1864.329889] ? ext4_rmdir+0xf70/0xf70 [ 1864.330538] vfs_mkdir+0x493/0x750 [ 1864.331186] do_mkdirat+0x150/0x2b0 [ 1864.331873] ? user_path_create+0xf0/0xf0 [ 1864.332631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.333581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.334505] do_syscall_64+0x33/0x40 [ 1864.335187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.336126] RIP: 0033:0x7fae9488ec27 [ 1864.336802] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.340098] RSP: 002b:00007fae91e04fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1864.341292] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007fae9488ec27 [ 1864.342423] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200002c0 [ 1864.343526] RBP: 00007fae91e05040 R08: 0000000000000000 R09: ffffffffffffffff [ 1864.344631] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 1864.345751] R13: 00000000200002c0 R14: 00007fae91e05000 R15: 0000000020000480 [ 1864.349034] FAULT_INJECTION: forcing a failure. [ 1864.349034] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.350788] CPU: 0 PID: 10963 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1864.351869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.353138] Call Trace: [ 1864.353550] dump_stack+0x107/0x167 [ 1864.354120] should_fail.cold+0x5/0xa [ 1864.354708] ? create_object.isra.0+0x3a/0xa20 [ 1864.355411] should_failslab+0x5/0x20 [ 1864.356144] kmem_cache_alloc+0x5b/0x310 [ 1864.356785] ? mark_held_locks+0x9e/0xe0 [ 1864.357429] create_object.isra.0+0x3a/0xa20 [ 1864.358119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.358934] kmem_cache_alloc+0x159/0x310 [ 1864.359605] xas_alloc+0x336/0x440 [ 1864.360190] xas_create+0x34a/0x10d0 [ 1864.360785] ? kernel_text_address+0xf2/0x120 [ 1864.361490] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.362345] xas_store+0x8c/0x1c40 [ 1864.363003] __xa_store+0x164/0x2d0 [ 1864.363681] ? xa_delete_node+0x280/0x280 [ 1864.364453] ? trace_hardirqs_on+0x5b/0x180 [ 1864.365244] xa_store+0x31/0x50 [ 1864.365853] __io_uring_add_tctx_node+0x1cf/0x520 [ 1864.366622] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1864.367421] ? alloc_fd+0x2e7/0x670 [ 1864.368017] io_uring_setup+0x1fbb/0x2980 [ 1864.368780] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1864.369701] ? wait_for_completion_io+0x270/0x270 [ 1864.370600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.371553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.372510] do_syscall_64+0x33/0x40 [ 1864.373188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.374129] RIP: 0033:0x7eff19607b19 [ 1864.374802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.378131] RSP: 002b:00007eff16b5c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1864.379524] RAX: ffffffffffffffda RBX: 00007eff1971b020 RCX: 00007eff19607b19 [ 1864.380840] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1864.382140] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1864.383300] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1864.384437] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1864.390494] FAULT_INJECTION: forcing a failure. [ 1864.390494] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.392267] CPU: 0 PID: 10957 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1864.393331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.394610] Call Trace: [ 1864.395035] dump_stack+0x107/0x167 01:16:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000000)="020000002139f53ea2c600e969f40300000004", 0x13, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) [ 1864.395602] should_fail.cold+0x5/0xa [ 1864.396396] ? trace_hardirqs_on+0x5b/0x180 [ 1864.397048] ? __alloc_skb+0x6d/0x5b0 [ 1864.397637] should_failslab+0x5/0x20 [ 1864.398214] kmem_cache_alloc_node+0x55/0x330 [ 1864.398903] __alloc_skb+0x6d/0x5b0 [ 1864.399456] skb_segment+0x9d8/0x3aa0 [ 1864.400043] ? __lock_acquire+0xbb1/0x5b00 [ 1864.400713] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1864.401458] ? lock_acquire+0x197/0x470 [ 1864.402068] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.402865] __udp_gso_segment+0x11c6/0x1830 [ 1864.403521] ? __sk_receive_skb+0x830/0x830 [ 1864.404210] udp4_ufo_fragment+0x528/0x720 [ 1864.404835] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1864.405623] inet_gso_segment+0x4fb/0x11a0 [ 1864.406299] skb_mac_gso_segment+0x273/0x570 [ 1864.406949] ? inet_sock_destruct+0x840/0x840 [ 1864.407646] ? skb_network_protocol+0x650/0x650 [ 1864.408357] ? skb_crc32c_csum_help+0x80/0x80 [ 1864.409043] ? lock_acquire+0x197/0x470 [ 1864.409653] ? __dev_queue_xmit+0x1c6/0x2690 [ 1864.410369] __skb_gso_segment+0x32d/0x6d0 [ 1864.411055] ? mark_lock+0xf5/0x2df0 [ 1864.411745] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1864.412733] ? lock_chain_count+0x20/0x20 [ 1864.413490] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1864.414327] __dev_queue_xmit+0x825/0x2690 [ 1864.415080] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1864.416023] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1864.416853] ? mark_held_locks+0x9e/0xe0 [ 1864.417592] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1864.418550] neigh_connected_output+0x382/0x4d0 [ 1864.419408] ip_finish_output2+0x6f1/0x21f0 [ 1864.420203] ? nf_hook_slow+0xfc/0x1e0 [ 1864.420765] loop7: detected capacity change from 0 to 131072 [ 1864.420908] ? ip_frag_next+0x9e0/0x9e0 [ 1864.420928] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1864.420961] __ip_finish_output.part.0+0x5f3/0xb50 [ 1864.424646] ? ip_fragment.constprop.0+0x240/0x240 [ 1864.425445] ? netif_rx_ni+0xe7/0x300 [ 1864.426044] ip_mc_output+0x401/0xa30 [ 1864.426393] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1864.426649] ip_send_skb+0xdd/0x260 [ 1864.428746] udp_send_skb+0x6da/0x11d0 [ 1864.429358] udp_sendmsg+0x139a/0x2160 [ 1864.429956] ? mark_lock+0xf5/0x2df0 [ 1864.430525] ? ip_frag_init+0x350/0x350 [ 1864.431126] ? lock_chain_count+0x20/0x20 [ 1864.431768] ? udp_setsockopt+0xc0/0xc0 [ 1864.432378] ? mark_lock+0xf5/0x2df0 [ 1864.432948] ? lock_acquire+0x197/0x470 [ 1864.433562] ? lock_chain_count+0x20/0x20 [ 1864.434203] ? mark_lock+0xf5/0x2df0 [ 1864.434772] ? mark_lock+0xf5/0x2df0 [ 1864.435344] ? lock_chain_count+0x20/0x20 [ 1864.435993] ? __lock_acquire+0xbb1/0x5b00 [ 1864.436626] ? lock_chain_count+0x20/0x20 [ 1864.437275] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.438072] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1864.438705] ? udp_v6_push_pending_frames+0x360/0x360 [ 1864.439494] ? mark_lock+0xf5/0x2df0 [ 1864.440085] ? lock_acquire+0x197/0x470 [ 1864.440681] ? find_held_lock+0x2c/0x110 [ 1864.441306] ? __might_fault+0xd3/0x180 [ 1864.441904] ? lock_downgrade+0x6d0/0x6d0 [ 1864.442535] ? lock_downgrade+0x6d0/0x6d0 [ 1864.443169] ? sock_has_perm+0x1ea/0x280 [ 1864.443797] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1864.444571] ? _copy_from_user+0xfb/0x1b0 [ 1864.445199] ? __import_iovec+0x458/0x590 [ 1864.445822] ? udp_v6_push_pending_frames+0x360/0x360 [ 1864.446602] inet6_sendmsg+0x105/0x140 [ 1864.447191] ? inet6_compat_ioctl+0x320/0x320 [ 1864.447887] __sock_sendmsg+0xf2/0x190 [ 1864.448481] ____sys_sendmsg+0x70d/0x870 [ 1864.449102] ? sock_write_iter+0x3d0/0x3d0 [ 1864.449738] ? do_recvmmsg+0x6d0/0x6d0 [ 1864.450339] ? lock_downgrade+0x6d0/0x6d0 [ 1864.450963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.451754] ___sys_sendmsg+0xf3/0x170 [ 1864.452342] ? sendmsg_copy_msghdr+0x160/0x160 [ 1864.453066] ? __fget_files+0x2cf/0x520 [ 1864.453768] ? lock_downgrade+0x6d0/0x6d0 [ 1864.454499] ? find_held_lock+0x2c/0x110 [ 1864.455230] ? __fget_files+0x2f8/0x520 [ 1864.455955] ? __fget_light+0xea/0x290 [ 1864.456655] __sys_sendmsg+0xe5/0x1b0 [ 1864.457327] ? __sys_sendmsg_sock+0x40/0x40 [ 1864.458087] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.458925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.459751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.460650] ? trace_hardirqs_on+0x5b/0x180 [ 1864.461429] do_syscall_64+0x33/0x40 [ 1864.462081] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.462980] RIP: 0033:0x7fb8c885ab19 [ 1864.463634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.466874] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1864.468100] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1864.468991] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1864.469898] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.470778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.471671] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1864.475239] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1864.476435] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1864.477571] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1864.481031] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1864.483705] EXT4-fs (loop3): get root inode failed [ 1864.484355] EXT4-fs (loop3): mount failed [ 1864.492462] FAULT_INJECTION: forcing a failure. [ 1864.492462] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.494953] CPU: 1 PID: 10958 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1864.496412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.498147] Call Trace: [ 1864.498699] dump_stack+0x107/0x167 [ 1864.499460] should_fail.cold+0x5/0xa [ 1864.500268] ? create_object.isra.0+0x3a/0xa20 [ 1864.501217] should_failslab+0x5/0x20 [ 1864.502022] kmem_cache_alloc+0x5b/0x310 [ 1864.502879] create_object.isra.0+0x3a/0xa20 [ 1864.503809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.504867] kmem_cache_alloc+0x159/0x310 [ 1864.505743] __kernfs_new_node+0xd4/0x860 [ 1864.506609] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1864.507587] ? kernfs_add_one+0x36e/0x4d0 [ 1864.508471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.509484] ? wait_for_completion_io+0x270/0x270 [ 1864.510491] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1864.511594] kernfs_new_node+0x18d/0x250 [ 1864.512460] __kernfs_create_file+0x51/0x350 [ 1864.513382] sysfs_add_file_mode_ns+0x221/0x560 [ 1864.514363] internal_create_group+0x324/0xb30 [ 1864.515338] ? sysfs_remove_group+0x170/0x170 [ 1864.516282] ? lockdep_init_map_type+0x2c7/0x780 [ 1864.517280] ? blk_queue_flag_set+0x22/0x30 [ 1864.518187] ? __loop_update_dio+0x2d2/0x690 [ 1864.519111] loop_configure+0x953/0x1410 [ 1864.519977] lo_ioctl+0xa57/0x16b0 [ 1864.520717] ? avc_has_extended_perms+0x7f1/0xf40 [ 1864.521721] ? loop_set_status_old+0x250/0x250 [ 1864.522675] ? avc_ss_reset+0x180/0x180 [ 1864.523504] ? find_held_lock+0x2c/0x110 [ 1864.524373] ? __lock_acquire+0xbb1/0x5b00 [ 1864.525301] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1864.526401] ? generic_block_fiemap+0x60/0x60 [ 1864.527341] ? lock_downgrade+0x6d0/0x6d0 [ 1864.528210] ? build_open_flags+0x6f0/0x6f0 [ 1864.529114] ? loop_set_status_old+0x250/0x250 [ 1864.530061] blkdev_ioctl+0x291/0x710 [ 1864.530853] ? blkdev_common_ioctl+0x1930/0x1930 [ 1864.531848] ? selinux_file_ioctl+0xb6/0x270 [ 1864.532770] block_ioctl+0xf9/0x140 [ 1864.533533] ? blkdev_read_iter+0x1c0/0x1c0 [ 1864.534439] __x64_sys_ioctl+0x19a/0x210 [ 1864.535290] do_syscall_64+0x33/0x40 [ 1864.536081] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.537154] RIP: 0033:0x7fe2f6eaa8d7 [ 1864.537932] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.541780] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1864.543359] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1864.544849] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1864.546349] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1864.547835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1864.549310] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:16:48 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 18) 01:16:48 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 61) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1864.555368] loop4: detected capacity change from 0 to 262144 [ 1864.559780] loop6: detected capacity change from 0 to 131072 [ 1864.580140] FAT-fs (loop5): bogus number of reserved sectors [ 1864.580886] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1864.584013] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1864.585202] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1864.587167] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1864.612488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1864.624367] FAULT_INJECTION: forcing a failure. [ 1864.624367] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.625970] CPU: 0 PID: 10977 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1864.626781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.627765] Call Trace: [ 1864.628083] dump_stack+0x107/0x167 [ 1864.628515] should_fail.cold+0x5/0xa [ 1864.628968] ? vm_area_dup+0x78/0x290 [ 1864.629428] should_failslab+0x5/0x20 [ 1864.629880] kmem_cache_alloc+0x5b/0x310 [ 1864.630366] vm_area_dup+0x78/0x290 [ 1864.630798] ? lock_release+0x680/0x680 [ 1864.631274] ? mark_lock+0xf5/0x2df0 [ 1864.631724] ? lock_chain_count+0x20/0x20 [ 1864.632222] ? mark_lock+0xf5/0x2df0 [ 1864.632666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.633288] ? lock_chain_count+0x20/0x20 [ 1864.633773] ? mark_lock+0xf5/0x2df0 [ 1864.634218] ? vm_area_alloc+0x110/0x110 [ 1864.634698] ? __lock_acquire+0x1657/0x5b00 [ 1864.635225] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.635870] ? vmacache_find+0x55/0x2a0 [ 1864.636340] __split_vma+0xa8/0x4e0 [ 1864.636773] __do_munmap+0x365/0x1260 [ 1864.637225] ? arch_get_unmapped_area+0x450/0x450 [ 1864.637794] ? lock_release+0x680/0x680 [ 1864.638265] mmap_region+0x7c8/0x1500 [ 1864.638724] do_mmap+0xcdb/0x11e0 [ 1864.639139] vm_mmap_pgoff+0x198/0x1f0 [ 1864.639609] ? randomize_page+0xb0/0xb0 [ 1864.640094] ksys_mmap_pgoff+0x41c/0x560 [ 1864.640574] ? find_mergeable_anon_vma+0x250/0x250 [ 1864.641157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.641779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.642394] do_syscall_64+0x33/0x40 [ 1864.642835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.643446] RIP: 0033:0x7eff19607b62 [ 1864.643898] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1864.646077] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1864.646978] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1864.647831] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1864.648672] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1864.649519] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1864.650357] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:16:48 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 62) 01:16:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40302, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:16:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000000240)="002e05d455e6e1e6112c1b8a1bf43fc7ac4a0a36df406eb855761645718bd970a9a5f9d8db0ec80d2f4cd55dd9ca854042624f50706d7ee2d5710b9b1859c98d0bcceafa032fcb76a0785e9e4e1574aa29a12324935e996211d5d260412f8cc84c47c1603d02d81778b87fae387efb3eccb5958a072d19b9d2f7d4669face12fd01022880954f092eb16a073bc9dc6750be474dc683820a884879232bd5679d33e071739a597eb566d057d237604a2e43378de0f16bc010cdd537f0afaa6eb4ff154087578d3b80f5cb9d64919e851a2e9a160b498dedb3a9b6935954eefd69030c524", 0xe3, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x6}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:16:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 38) 01:16:48 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1864.697765] FAULT_INJECTION: forcing a failure. [ 1864.697765] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.699039] CPU: 0 PID: 10979 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1864.699820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.700748] Call Trace: [ 1864.701048] dump_stack+0x107/0x167 [ 1864.701453] should_fail.cold+0x5/0xa [ 1864.701874] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1864.702452] ? create_object.isra.0+0x3a/0xa20 [ 1864.702966] should_failslab+0x5/0x20 [ 1864.703392] kmem_cache_alloc+0x5b/0x310 [ 1864.703851] ? mark_held_locks+0x9e/0xe0 [ 1864.704305] create_object.isra.0+0x3a/0xa20 [ 1864.704793] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.705355] kmem_cache_alloc_node+0x169/0x330 [ 1864.705867] __alloc_skb+0x6d/0x5b0 [ 1864.706273] skb_segment+0x9d8/0x3aa0 [ 1864.706693] ? __lock_acquire+0xbb1/0x5b00 [ 1864.707181] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1864.707739] ? lock_acquire+0x197/0x470 [ 1864.708181] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.708770] __udp_gso_segment+0x11c6/0x1830 [ 1864.709260] ? __sk_receive_skb+0x830/0x830 [ 1864.709746] udp4_ufo_fragment+0x528/0x720 [ 1864.710225] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1864.710786] inet_gso_segment+0x4fb/0x11a0 [ 1864.711263] skb_mac_gso_segment+0x273/0x570 [ 1864.711755] ? inet_sock_destruct+0x840/0x840 [ 1864.712249] ? skb_network_protocol+0x650/0x650 [ 1864.712766] ? skb_crc32c_csum_help+0x80/0x80 [ 1864.713267] ? lock_acquire+0x197/0x470 [ 1864.713712] ? __dev_queue_xmit+0x1c6/0x2690 [ 1864.714207] __skb_gso_segment+0x32d/0x6d0 [ 1864.714684] ? mark_lock+0xf5/0x2df0 [ 1864.715109] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1864.715699] ? lock_chain_count+0x20/0x20 [ 1864.716180] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1864.716696] __dev_queue_xmit+0x825/0x2690 [ 1864.717176] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1864.717757] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1864.718275] ? mark_held_locks+0x9e/0xe0 [ 1864.718733] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1864.719324] neigh_connected_output+0x382/0x4d0 [ 1864.719874] ip_finish_output2+0x6f1/0x21f0 [ 1864.720427] ? nf_hook_slow+0xfc/0x1e0 [ 1864.720916] ? ip_frag_next+0x9e0/0x9e0 [ 1864.721416] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1864.722047] __ip_finish_output.part.0+0x5f3/0xb50 [ 1864.722661] ? ip_fragment.constprop.0+0x240/0x240 [ 1864.723273] ? netif_rx_ni+0xe7/0x300 [ 1864.723698] ip_mc_output+0x401/0xa30 [ 1864.724142] ip_send_skb+0xdd/0x260 [ 1864.724553] udp_send_skb+0x6da/0x11d0 [ 1864.724991] udp_sendmsg+0x139a/0x2160 [ 1864.725426] ? mark_lock+0xf5/0x2df0 [ 1864.725843] ? ip_frag_init+0x350/0x350 [ 1864.726283] ? lock_chain_count+0x20/0x20 [ 1864.726748] ? udp_setsockopt+0xc0/0xc0 [ 1864.727193] ? mark_lock+0xf5/0x2df0 [ 1864.727626] ? lock_acquire+0x197/0x470 [ 1864.728074] ? lock_chain_count+0x20/0x20 [ 1864.728534] ? mark_lock+0xf5/0x2df0 [ 1864.728953] ? mark_lock+0xf5/0x2df0 [ 1864.729373] ? lock_chain_count+0x20/0x20 [ 1864.729831] ? __lock_acquire+0xbb1/0x5b00 [ 1864.730302] ? lock_chain_count+0x20/0x20 [ 1864.730774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.731365] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1864.731831] ? udp_v6_push_pending_frames+0x360/0x360 [ 1864.732415] ? mark_lock+0xf5/0x2df0 [ 1864.732774] FAULT_INJECTION: forcing a failure. [ 1864.732774] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.732840] ? lock_acquire+0x197/0x470 [ 1864.735684] ? find_held_lock+0x2c/0x110 [ 1864.736247] ? __might_fault+0xd3/0x180 [ 1864.736773] ? lock_downgrade+0x6d0/0x6d0 [ 1864.737320] ? lock_downgrade+0x6d0/0x6d0 [ 1864.737808] ? sock_has_perm+0x1ea/0x280 [ 1864.738255] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1864.738826] ? _copy_from_user+0xfb/0x1b0 [ 1864.739287] ? __import_iovec+0x458/0x590 [ 1864.739792] ? udp_v6_push_pending_frames+0x360/0x360 [ 1864.740494] inet6_sendmsg+0x105/0x140 [ 1864.741022] ? inet6_compat_ioctl+0x320/0x320 [ 1864.741576] __sock_sendmsg+0xf2/0x190 [ 1864.742041] ____sys_sendmsg+0x70d/0x870 [ 1864.742592] ? sock_write_iter+0x3d0/0x3d0 [ 1864.743154] ? do_recvmmsg+0x6d0/0x6d0 [ 1864.743687] ? lock_downgrade+0x6d0/0x6d0 [ 1864.744255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.744962] ___sys_sendmsg+0xf3/0x170 [ 1864.745488] ? sendmsg_copy_msghdr+0x160/0x160 [ 1864.746106] ? __fget_files+0x2cf/0x520 [ 1864.746641] ? lock_downgrade+0x6d0/0x6d0 [ 1864.747200] ? find_held_lock+0x2c/0x110 [ 1864.747771] ? __fget_files+0x2f8/0x520 [ 1864.748327] ? __fget_light+0xea/0x290 [ 1864.748861] __sys_sendmsg+0xe5/0x1b0 [ 1864.749383] ? __sys_sendmsg_sock+0x40/0x40 [ 1864.749962] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.750609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.751319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.752020] ? trace_hardirqs_on+0x5b/0x180 [ 1864.752605] do_syscall_64+0x33/0x40 [ 1864.753110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.753806] RIP: 0033:0x7fb8c885ab19 [ 1864.754314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.756806] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1864.757836] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1864.758800] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1864.759767] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.760569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.761366] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1864.762184] CPU: 1 PID: 10987 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1864.763646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.765388] Call Trace: [ 1864.765939] dump_stack+0x107/0x167 [ 1864.766699] should_fail.cold+0x5/0xa [ 1864.767497] ? __kernfs_new_node+0xd4/0x860 [ 1864.768402] should_failslab+0x5/0x20 [ 1864.769196] kmem_cache_alloc+0x5b/0x310 [ 1864.770048] __kernfs_new_node+0xd4/0x860 [ 1864.770919] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1864.771917] ? kernfs_add_one+0x36e/0x4d0 [ 1864.772772] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.773764] ? wait_for_completion_io+0x270/0x270 [ 1864.774750] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1864.775839] kernfs_new_node+0x18d/0x250 [ 1864.776667] __kernfs_create_file+0x51/0x350 [ 1864.777572] sysfs_add_file_mode_ns+0x221/0x560 [ 1864.778535] internal_create_group+0x324/0xb30 [ 1864.779485] ? sysfs_remove_group+0x170/0x170 [ 1864.780411] ? lockdep_init_map_type+0x2c7/0x780 [ 1864.781532] ? blk_queue_flag_set+0x22/0x30 [ 1864.782401] ? __loop_update_dio+0x2d2/0x690 [ 1864.783320] loop_configure+0x953/0x1410 [ 1864.784172] lo_ioctl+0xa57/0x16b0 [ 1864.784910] ? avc_has_extended_perms+0x7f1/0xf40 [ 1864.785914] ? loop_set_status_old+0x250/0x250 [ 1864.786854] ? avc_ss_reset+0x180/0x180 [ 1864.787689] ? find_held_lock+0x2c/0x110 [ 1864.788558] ? __lock_acquire+0xbb1/0x5b00 [ 1864.789487] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1864.790570] ? generic_block_fiemap+0x60/0x60 [ 1864.791491] ? lock_downgrade+0x6d0/0x6d0 [ 1864.792358] ? build_open_flags+0x6f0/0x6f0 [ 1864.793253] ? loop_set_status_old+0x250/0x250 [ 1864.794203] blkdev_ioctl+0x291/0x710 [ 1864.794992] ? blkdev_common_ioctl+0x1930/0x1930 [ 1864.795986] ? selinux_file_ioctl+0xb6/0x270 [ 1864.796905] block_ioctl+0xf9/0x140 [ 1864.797663] ? blkdev_read_iter+0x1c0/0x1c0 [ 1864.798552] __x64_sys_ioctl+0x19a/0x210 [ 1864.799386] do_syscall_64+0x33/0x40 [ 1864.800174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.801233] RIP: 0033:0x7fe2f6eaa8d7 [ 1864.801997] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.805790] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1864.807355] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1864.808827] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1864.810282] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1864.811762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1864.813229] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:16:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40303, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:16:48 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) 01:16:48 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 3) 01:16:48 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 62) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) [ 1864.829522] loop4: detected capacity change from 0 to 262144 [ 1864.842000] FAULT_INJECTION: forcing a failure. [ 1864.842000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1864.844478] CPU: 1 PID: 10992 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1864.845908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.847610] Call Trace: [ 1864.848176] dump_stack+0x107/0x167 [ 1864.848922] should_fail.cold+0x5/0xa [ 1864.849735] _copy_from_user+0x2e/0x1b0 [ 1864.850710] __do_sys_memfd_create+0x16d/0x450 [ 1864.851979] ? memfd_file_seals_ptr+0x170/0x170 [ 1864.853115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.854401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.855687] do_syscall_64+0x33/0x40 [ 1864.856539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.857725] RIP: 0033:0x7f06f1ea3b19 [ 1864.858578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.862551] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1864.864106] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1864.865553] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1864.866993] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1864.868428] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1864.869865] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1864.876958] loop7: detected capacity change from 0 to 131072 [ 1864.888868] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1864.894629] FAULT_INJECTION: forcing a failure. [ 1864.894629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1864.896154] CPU: 0 PID: 11001 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1864.896923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.897838] Call Trace: [ 1864.898130] dump_stack+0x107/0x167 [ 1864.898537] should_fail.cold+0x5/0xa [ 1864.898958] __alloc_pages_nodemask+0x182/0x600 [ 1864.899475] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1864.900159] alloc_pages_current+0x187/0x280 [ 1864.900654] allocate_slab+0x26f/0x380 [ 1864.901083] ___slab_alloc+0x470/0x700 [ 1864.901517] ? vm_area_dup+0x78/0x290 [ 1864.901938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.902516] ? obj_cgroup_charge+0xc6/0x490 [ 1864.902986] ? trace_hardirqs_on+0x5b/0x180 [ 1864.903468] ? vm_area_dup+0x78/0x290 [ 1864.903895] ? kmem_cache_alloc+0x301/0x310 [ 1864.904372] ? vm_area_dup+0x78/0x290 [ 1864.904790] kmem_cache_alloc+0x301/0x310 [ 1864.905247] vm_area_dup+0x78/0x290 [ 1864.905659] ? lock_release+0x680/0x680 [ 1864.906096] ? mark_lock+0xf5/0x2df0 [ 1864.906570] ? lock_chain_count+0x20/0x20 [ 1864.907026] ? mark_lock+0xf5/0x2df0 [ 1864.907446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.908030] ? lock_chain_count+0x20/0x20 [ 1864.908573] ? mark_lock+0xf5/0x2df0 [ 1864.909057] ? vm_area_alloc+0x110/0x110 [ 1864.909590] ? __lock_acquire+0x1657/0x5b00 [ 1864.910106] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1864.910691] ? vmacache_find+0x55/0x2a0 [ 1864.911126] __split_vma+0xa8/0x4e0 [ 1864.911539] __do_munmap+0x365/0x1260 [ 1864.912062] ? arch_get_unmapped_area+0x450/0x450 [ 1864.912695] ? lock_release+0x680/0x680 [ 1864.913225] mmap_region+0x7c8/0x1500 [ 1864.913711] do_mmap+0xcdb/0x11e0 [ 1864.914097] vm_mmap_pgoff+0x198/0x1f0 [ 1864.914535] ? randomize_page+0xb0/0xb0 [ 1864.914978] ksys_mmap_pgoff+0x41c/0x560 [ 1864.915434] ? find_mergeable_anon_vma+0x250/0x250 [ 1864.915983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.916565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.917132] do_syscall_64+0x33/0x40 [ 1864.917552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.918115] RIP: 0033:0x7eff19607b62 [ 1864.918532] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1864.920583] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1864.921424] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1864.922203] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1864.922990] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1864.923783] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1864.924572] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1864.925287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:16:48 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 4) [ 1864.950498] FAULT_INJECTION: forcing a failure. [ 1864.950498] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.952892] CPU: 1 PID: 11005 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1864.954270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.955895] Call Trace: [ 1864.956400] dump_stack+0x107/0x167 [ 1864.957127] should_fail.cold+0x5/0xa [ 1864.957887] ? shmem_alloc_inode+0x18/0x40 [ 1864.958730] should_failslab+0x5/0x20 [ 1864.959495] kmem_cache_alloc+0x5b/0x310 [ 1864.960312] ? shmem_destroy_inode+0x70/0x70 [ 1864.961194] shmem_alloc_inode+0x18/0x40 [ 1864.962016] ? shmem_destroy_inode+0x70/0x70 [ 1864.962895] alloc_inode+0x63/0x240 [ 1864.963614] new_inode+0x23/0x250 [ 1864.964318] shmem_get_inode+0x15e/0xbc0 [ 1864.965122] __shmem_file_setup+0xb8/0x320 [ 1864.965965] ? _copy_from_user+0xfb/0x1b0 [ 1864.966770] __do_sys_memfd_create+0x275/0x450 [ 1864.967675] ? memfd_file_seals_ptr+0x170/0x170 [ 1864.968617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.969659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.970668] do_syscall_64+0x33/0x40 [ 1864.971392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.972408] RIP: 0033:0x7f06f1ea3b19 [ 1864.973135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.976737] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1864.978225] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1864.979628] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1864.981032] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1864.982437] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1864.983841] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1864.998392] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1865.047651] loop3: detected capacity change from 0 to 262656 [ 1865.051526] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1865.052922] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1865.054208] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1865.055423] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1865.060814] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1865.062787] EXT4-fs (loop3): get root inode failed [ 1865.063420] EXT4-fs (loop3): mount failed [ 1865.073430] loop3: detected capacity change from 0 to 262656 [ 1865.078428] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1865.079569] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1865.080633] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1865.081641] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1865.083312] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1865.084809] EXT4-fs (loop3): get root inode failed [ 1865.085408] EXT4-fs (loop3): mount failed 01:17:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40402, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:17:02 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 5) 01:17:02 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 19) [ 1878.722463] loop3: detected capacity change from 0 to 263168 [ 1878.743218] FAULT_INJECTION: forcing a failure. [ 1878.743218] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.745774] CPU: 0 PID: 11026 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1878.747270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.749129] Call Trace: [ 1878.749721] dump_stack+0x107/0x167 [ 1878.750499] should_fail.cold+0x5/0xa [ 1878.751324] ? create_object.isra.0+0x3a/0xa20 [ 1878.752384] should_failslab+0x5/0x20 [ 1878.753182] kmem_cache_alloc+0x5b/0x310 [ 1878.754052] create_object.isra.0+0x3a/0xa20 [ 1878.754984] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.756129] kmem_cache_alloc+0x159/0x310 [ 1878.757063] ? shmem_destroy_inode+0x70/0x70 [ 1878.758000] shmem_alloc_inode+0x18/0x40 [ 1878.758866] ? shmem_destroy_inode+0x70/0x70 [ 1878.759791] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1878.759858] alloc_inode+0x63/0x240 [ 1878.759881] new_inode+0x23/0x250 [ 1878.762979] shmem_get_inode+0x15e/0xbc0 [ 1878.763859] __shmem_file_setup+0xb8/0x320 [ 1878.764778] ? _copy_from_user+0xfb/0x1b0 [ 1878.765660] __do_sys_memfd_create+0x275/0x450 [ 1878.766631] ? memfd_file_seals_ptr+0x170/0x170 [ 1878.767644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.768786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.769884] do_syscall_64+0x33/0x40 [ 1878.770691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.771792] RIP: 0033:0x7f06f1ea3b19 [ 1878.772618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.776634] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1878.778272] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1878.779824] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1878.781401] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1878.782949] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1878.784524] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 01:17:02 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 63) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:17:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) chmod(&(0x7f0000000300)='./file0\x00', 0x248c539b1c26c3bb) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) setfsuid(r0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x3000812, &(0x7f00000001c0)={'trans=unix,', {[{@fscache}, {@fscache}, {@aname={'aname', 0x3d, 'wlan1\x00'}}, {@cache_none}, {@version_L}, {@uname={'uname', 0x3d, '+'}}, {@afid={'afid', 0x3d, 0x5}}, {@dfltuid={'dfltuid', 0x3d, r0}}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, '%,)%m'}}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, '@$!}.,-+!'}}, {@fsname={'fsname', 0x3d, ']:}!\\\'})'}}, {@smackfsroot={'smackfsroot', 0x3d, 'wlan1\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'*,#:,[}%q:()^/]\x12@'}}, {@fowner_lt={'fowner<', 0xee00}}]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 01:17:02 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) 01:17:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 39) 01:17:02 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1878.790492] loop6: detected capacity change from 0 to 131072 [ 1878.796186] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1878.799784] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1878.801853] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1878.803781] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1878.816176] FAT-fs (loop5): bogus number of reserved sectors [ 1878.817934] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1878.825991] FAULT_INJECTION: forcing a failure. [ 1878.825991] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.829025] CPU: 1 PID: 11035 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1878.830775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.832837] Call Trace: [ 1878.833508] dump_stack+0x107/0x167 [ 1878.834429] should_fail.cold+0x5/0xa [ 1878.835392] ? anon_vma_clone+0xdc/0x590 [ 1878.836431] should_failslab+0x5/0x20 [ 1878.837393] kmem_cache_alloc+0x5b/0x310 [ 1878.838424] anon_vma_clone+0xdc/0x590 [ 1878.839418] __split_vma+0x17c/0x4e0 [ 1878.840371] __do_munmap+0x365/0x1260 [ 1878.841335] ? arch_get_unmapped_area+0x450/0x450 [ 1878.842553] ? lock_release+0x680/0x680 [ 1878.843558] mmap_region+0x7c8/0x1500 [ 1878.844546] do_mmap+0xcdb/0x11e0 [ 1878.845214] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1878.845432] vm_mmap_pgoff+0x198/0x1f0 [ 1878.848511] EXT4-fs (loop3): get root inode failed [ 1878.849000] ? randomize_page+0xb0/0xb0 [ 1878.850097] EXT4-fs (loop3): mount failed [ 1878.851036] ksys_mmap_pgoff+0x41c/0x560 [ 1878.852909] ? find_mergeable_anon_vma+0x250/0x250 [ 1878.854145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.855458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.856765] do_syscall_64+0x33/0x40 [ 1878.857694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.858978] RIP: 0033:0x7eff19607b62 [ 1878.859909] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1878.864536] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1878.866452] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1878.868252] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1878.870042] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1878.871826] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1878.873626] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 01:17:02 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 6) [ 1878.883418] loop7: detected capacity change from 0 to 131072 [ 1878.891940] FAULT_INJECTION: forcing a failure. [ 1878.891940] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.892334] FAULT_INJECTION: forcing a failure. [ 1878.892334] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.894683] CPU: 1 PID: 11039 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1878.898656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.900667] Call Trace: [ 1878.901312] dump_stack+0x107/0x167 [ 1878.902199] should_fail.cold+0x5/0xa [ 1878.903126] ? create_object.isra.0+0x3a/0xa20 [ 1878.904239] should_failslab+0x5/0x20 [ 1878.905157] kmem_cache_alloc+0x5b/0x310 [ 1878.906148] create_object.isra.0+0x3a/0xa20 [ 1878.907263] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.908766] kmem_cache_alloc+0x159/0x310 [ 1878.910045] __kernfs_new_node+0xd4/0x860 [ 1878.911214] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1878.912514] ? kernfs_add_one+0x36e/0x4d0 [ 1878.913607] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1878.914745] ? wait_for_completion_io+0x270/0x270 [ 1878.915877] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1878.917129] kernfs_new_node+0x18d/0x250 [ 1878.918084] __kernfs_create_file+0x51/0x350 [ 1878.919124] sysfs_add_file_mode_ns+0x221/0x560 [ 1878.920223] internal_create_group+0x324/0xb30 [ 1878.921315] ? sysfs_remove_group+0x170/0x170 [ 1878.922372] ? lockdep_init_map_type+0x2c7/0x780 [ 1878.923479] ? blk_queue_flag_set+0x22/0x30 [ 1878.924494] ? __loop_update_dio+0x2d2/0x690 [ 1878.925525] loop_configure+0x953/0x1410 [ 1878.926495] lo_ioctl+0xa57/0x16b0 [ 1878.927329] ? avc_has_extended_perms+0x7f1/0xf40 [ 1878.928471] ? loop_set_status_old+0x250/0x250 [ 1878.929558] ? avc_ss_reset+0x180/0x180 [ 1878.930493] ? find_held_lock+0x2c/0x110 [ 1878.931462] ? __lock_acquire+0xbb1/0x5b00 [ 1878.932528] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1878.933760] ? generic_block_fiemap+0x60/0x60 [ 1878.934795] ? lock_downgrade+0x6d0/0x6d0 [ 1878.935761] ? build_open_flags+0x6f0/0x6f0 [ 1878.936773] ? loop_set_status_old+0x250/0x250 [ 1878.937815] blkdev_ioctl+0x291/0x710 [ 1878.938695] ? blkdev_common_ioctl+0x1930/0x1930 [ 1878.939794] ? selinux_file_ioctl+0xb6/0x270 [ 1878.940823] block_ioctl+0xf9/0x140 [ 1878.941665] ? blkdev_read_iter+0x1c0/0x1c0 [ 1878.942669] __x64_sys_ioctl+0x19a/0x210 [ 1878.943609] do_syscall_64+0x33/0x40 [ 1878.944498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.945697] RIP: 0033:0x7fe2f6eaa8d7 [ 1878.946562] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.950834] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1878.952613] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1878.954264] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1878.955916] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1878.957562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1878.959195] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1878.960872] CPU: 0 PID: 11025 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1878.962350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.964069] Call Trace: [ 1878.964631] dump_stack+0x107/0x167 [ 1878.965387] should_fail.cold+0x5/0xa [ 1878.966181] should_failslab+0x5/0x20 [ 1878.966971] __kmalloc_node_track_caller+0x74/0x3b0 [ 1878.968001] ? skb_segment+0x9d8/0x3aa0 [ 1878.968883] __alloc_skb+0xb1/0x5b0 [ 1878.969637] skb_segment+0x9d8/0x3aa0 [ 1878.970420] ? __lock_acquire+0xbb1/0x5b00 [ 1878.971328] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1878.972358] ? lock_acquire+0x197/0x470 [ 1878.973176] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1878.974257] __udp_gso_segment+0x11c6/0x1830 [ 1878.975154] ? __sk_receive_skb+0x830/0x830 [ 1878.976043] udp4_ufo_fragment+0x528/0x720 [ 1878.976924] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1878.977946] inet_gso_segment+0x4fb/0x11a0 [ 1878.978826] skb_mac_gso_segment+0x273/0x570 [ 1878.979727] ? inet_sock_destruct+0x840/0x840 [ 1878.980647] ? skb_network_protocol+0x650/0x650 [ 1878.981601] ? skb_crc32c_csum_help+0x80/0x80 [ 1878.982536] ? lock_acquire+0x197/0x470 [ 1878.983353] ? __dev_queue_xmit+0x1c6/0x2690 [ 1878.984273] __skb_gso_segment+0x32d/0x6d0 [ 1878.985139] ? mark_lock+0xf5/0x2df0 [ 1878.985910] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1878.986985] ? lock_chain_count+0x20/0x20 [ 1878.987849] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1878.988869] __dev_queue_xmit+0x825/0x2690 [ 1878.989747] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1878.990811] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1878.991760] ? mark_held_locks+0x9e/0xe0 [ 1878.992638] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1878.993749] neigh_connected_output+0x382/0x4d0 [ 1878.993997] loop4: detected capacity change from 0 to 262144 [ 1878.994728] ip_finish_output2+0x6f1/0x21f0 [ 1878.994750] ? nf_hook_slow+0xfc/0x1e0 [ 1878.994775] ? ip_frag_next+0x9e0/0x9e0 [ 1878.998604] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1878.999646] __ip_finish_output.part.0+0x5f3/0xb50 [ 1879.000691] ? ip_fragment.constprop.0+0x240/0x240 [ 1879.001723] ? netif_rx_ni+0xe7/0x300 [ 1879.002523] ip_mc_output+0x401/0xa30 [ 1879.003320] ip_send_skb+0xdd/0x260 [ 1879.004071] udp_send_skb+0x6da/0x11d0 [ 1879.004938] udp_sendmsg+0x139a/0x2160 [ 1879.005743] ? mark_lock+0xf5/0x2df0 [ 1879.006517] ? ip_frag_init+0x350/0x350 [ 1879.007338] ? lock_chain_count+0x20/0x20 [ 1879.008194] ? udp_setsockopt+0xc0/0xc0 [ 1879.009017] ? mark_lock+0xf5/0x2df0 [ 1879.009792] ? lock_acquire+0x197/0x470 [ 1879.010621] ? lock_chain_count+0x20/0x20 [ 1879.011494] ? mark_lock+0xf5/0x2df0 [ 1879.012290] ? mark_lock+0xf5/0x2df0 [ 1879.013073] ? lock_chain_count+0x20/0x20 [ 1879.013940] ? __lock_acquire+0xbb1/0x5b00 [ 1879.014831] ? lock_chain_count+0x20/0x20 [ 1879.015711] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1879.016829] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1879.017695] ? udp_v6_push_pending_frames+0x360/0x360 [ 1879.018777] ? mark_lock+0xf5/0x2df0 [ 1879.019570] ? lock_acquire+0x197/0x470 [ 1879.020408] ? find_held_lock+0x2c/0x110 [ 1879.021262] ? __might_fault+0xd3/0x180 [ 1879.022091] ? lock_downgrade+0x6d0/0x6d0 [ 1879.022960] ? lock_downgrade+0x6d0/0x6d0 [ 1879.023829] ? sock_has_perm+0x1ea/0x280 [ 1879.024697] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1879.025783] ? _copy_from_user+0xfb/0x1b0 [ 1879.026670] ? __import_iovec+0x458/0x590 [ 1879.027536] ? udp_v6_push_pending_frames+0x360/0x360 [ 1879.028628] inet6_sendmsg+0x105/0x140 [ 1879.029440] ? inet6_compat_ioctl+0x320/0x320 [ 1879.030380] __sock_sendmsg+0xf2/0x190 [ 1879.031189] ____sys_sendmsg+0x70d/0x870 [ 1879.032040] ? sock_write_iter+0x3d0/0x3d0 [ 1879.032928] ? do_recvmmsg+0x6d0/0x6d0 [ 1879.033743] ? lock_downgrade+0x6d0/0x6d0 [ 1879.034631] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1879.035728] ___sys_sendmsg+0xf3/0x170 [ 1879.036554] ? sendmsg_copy_msghdr+0x160/0x160 [ 1879.037517] ? __fget_files+0x2cf/0x520 [ 1879.038347] ? lock_downgrade+0x6d0/0x6d0 [ 1879.039210] ? find_held_lock+0x2c/0x110 [ 1879.040065] ? __fget_files+0x2f8/0x520 [ 1879.040908] ? __fget_light+0xea/0x290 [ 1879.041729] __sys_sendmsg+0xe5/0x1b0 [ 1879.042524] ? __sys_sendmsg_sock+0x40/0x40 [ 1879.043424] ? rcu_read_lock_any_held+0x75/0xa0 [ 1879.044428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.045534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.046617] ? trace_hardirqs_on+0x5b/0x180 [ 1879.047518] do_syscall_64+0x33/0x40 [ 1879.048304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.049373] RIP: 0033:0x7fb8c885ab19 [ 1879.050148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.053996] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1879.055580] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1879.057078] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1879.058562] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.060056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1879.061544] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1879.092872] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1879.112555] FAULT_INJECTION: forcing a failure. [ 1879.112555] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.115413] CPU: 0 PID: 11048 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1879.116880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.118609] Call Trace: [ 1879.119166] dump_stack+0x107/0x167 [ 1879.119934] should_fail.cold+0x5/0xa [ 1879.120749] ? security_inode_alloc+0x34/0x160 [ 1879.121721] should_failslab+0x5/0x20 [ 1879.122523] kmem_cache_alloc+0x5b/0x310 [ 1879.123390] security_inode_alloc+0x34/0x160 [ 1879.124323] inode_init_always+0xa4e/0xd10 [ 1879.125217] ? shmem_destroy_inode+0x70/0x70 [ 1879.126143] alloc_inode+0x84/0x240 [ 1879.126915] new_inode+0x23/0x250 [ 1879.127649] shmem_get_inode+0x15e/0xbc0 [ 1879.128524] __shmem_file_setup+0xb8/0x320 [ 1879.129414] ? _copy_from_user+0xfb/0x1b0 [ 1879.130298] __do_sys_memfd_create+0x275/0x450 [ 1879.131265] ? memfd_file_seals_ptr+0x170/0x170 [ 1879.132279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.133375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.134466] do_syscall_64+0x33/0x40 [ 1879.135245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.136334] RIP: 0033:0x7f06f1ea3b19 [ 1879.137111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.140975] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1879.142578] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1879.144076] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1879.145572] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1879.147076] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1879.148583] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1879.166222] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1879.192270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 01:17:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 40) 01:17:17 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 7) 01:17:17 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x3, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) 01:17:17 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 20) [ 1893.159497] FAT-fs (loop5): bogus number of reserved sectors [ 1893.161285] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1893.164467] FAULT_INJECTION: forcing a failure. [ 1893.164467] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.166867] CPU: 0 PID: 11064 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1893.168295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.170067] Call Trace: [ 1893.170620] dump_stack+0x107/0x167 [ 1893.171377] should_fail.cold+0x5/0xa [ 1893.172185] ? create_object.isra.0+0x3a/0xa20 [ 1893.173166] should_failslab+0x5/0x20 [ 1893.173971] kmem_cache_alloc+0x5b/0x310 [ 1893.174831] create_object.isra.0+0x3a/0xa20 [ 1893.175743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.176837] kmem_cache_alloc+0x159/0x310 [ 1893.177712] security_inode_alloc+0x34/0x160 [ 1893.178637] inode_init_always+0xa4e/0xd10 [ 1893.179519] ? shmem_destroy_inode+0x70/0x70 [ 1893.180435] alloc_inode+0x84/0x240 [ 1893.181232] new_inode+0x23/0x250 [ 1893.181973] shmem_get_inode+0x15e/0xbc0 [ 1893.182829] __shmem_file_setup+0xb8/0x320 [ 1893.183718] ? _copy_from_user+0xfb/0x1b0 [ 1893.184585] __do_sys_memfd_create+0x275/0x450 [ 1893.185577] ? memfd_file_seals_ptr+0x170/0x170 [ 1893.186550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.187641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.188713] do_syscall_64+0x33/0x40 [ 1893.189533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.190600] RIP: 0033:0x7f06f1ea3b19 01:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 64) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:17:17 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:17:17 executing program 1: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)={'L+', 0xffffffffffffffff}, 0x16, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x4, &(0x7f00000001c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}, {&(0x7f0000000140)="78f99fd5f4a4bcf3", 0x8, 0x200}], 0x2e000, &(0x7f00000004c0)=ANY=[]) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) chown(&(0x7f00000002c0)='./file0\x00', r0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf32(r1, 0x0, 0x58) symlinkat(&(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00') 01:17:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40403, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1893.191387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.195474] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1893.197104] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1893.198590] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1893.200082] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1893.201596] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1893.203081] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1893.221251] FAULT_INJECTION: forcing a failure. [ 1893.221251] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.223904] CPU: 1 PID: 11063 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1893.225526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.226408] FAULT_INJECTION: forcing a failure. [ 1893.226408] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.227413] Call Trace: [ 1893.227442] dump_stack+0x107/0x167 [ 1893.227477] should_fail.cold+0x5/0xa [ 1893.232051] ? __kernfs_new_node+0xd4/0x860 [ 1893.233035] should_failslab+0x5/0x20 [ 1893.233897] kmem_cache_alloc+0x5b/0x310 [ 1893.234843] __kernfs_new_node+0xd4/0x860 [ 1893.235783] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1893.236893] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1893.237987] ? wait_for_completion_io+0x270/0x270 [ 1893.239082] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1893.240277] kernfs_new_node+0x18d/0x250 [ 1893.241209] __kernfs_create_file+0x51/0x350 [ 1893.242199] sysfs_add_file_mode_ns+0x221/0x560 [ 1893.243262] internal_create_group+0x324/0xb30 [ 1893.244299] ? sysfs_remove_group+0x170/0x170 [ 1893.245337] ? lockdep_init_map_type+0x2c7/0x780 [ 1893.246410] ? blk_queue_flag_set+0x22/0x30 [ 1893.247389] ? __loop_update_dio+0x2d2/0x690 [ 1893.248405] loop_configure+0x953/0x1410 [ 1893.249355] lo_ioctl+0xa57/0x16b0 [ 1893.250167] ? avc_has_extended_perms+0x7f1/0xf40 [ 1893.251272] ? loop_set_status_old+0x250/0x250 [ 1893.252320] ? avc_ss_reset+0x180/0x180 [ 1893.253240] ? find_held_lock+0x2c/0x110 [ 1893.254176] ? __lock_acquire+0xbb1/0x5b00 [ 1893.255202] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1893.256394] ? generic_block_fiemap+0x60/0x60 [ 1893.257442] ? lock_downgrade+0x6d0/0x6d0 [ 1893.258388] ? build_open_flags+0x6f0/0x6f0 [ 1893.259379] ? loop_set_status_old+0x250/0x250 [ 1893.260458] blkdev_ioctl+0x291/0x710 [ 1893.261361] ? blkdev_common_ioctl+0x1930/0x1930 [ 1893.262488] ? selinux_file_ioctl+0xb6/0x270 [ 1893.263499] block_ioctl+0xf9/0x140 [ 1893.264334] ? blkdev_read_iter+0x1c0/0x1c0 [ 1893.265339] __x64_sys_ioctl+0x19a/0x210 [ 1893.266281] do_syscall_64+0x33/0x40 [ 1893.267130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.268296] RIP: 0033:0x7fe2f6eaa8d7 [ 1893.269176] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.273367] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1893.275094] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1893.276708] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1893.278339] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1893.279962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1893.281598] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 [ 1893.283263] CPU: 0 PID: 11068 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1893.284718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.286480] Call Trace: [ 1893.287038] dump_stack+0x107/0x167 [ 1893.287804] should_fail.cold+0x5/0xa [ 1893.288601] ? create_object.isra.0+0x3a/0xa20 [ 1893.289598] should_failslab+0x5/0x20 [ 1893.290393] kmem_cache_alloc+0x5b/0x310 [ 1893.291253] create_object.isra.0+0x3a/0xa20 [ 1893.292176] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.293269] kmem_cache_alloc+0x159/0x310 [ 1893.294143] anon_vma_clone+0xdc/0x590 [ 1893.294958] __split_vma+0x17c/0x4e0 [ 1893.295736] __do_munmap+0x365/0x1260 [ 1893.296530] ? arch_get_unmapped_area+0x450/0x450 [ 1893.297573] ? lock_release+0x680/0x680 [ 1893.298411] mmap_region+0x7c8/0x1500 [ 1893.299222] do_mmap+0xcdb/0x11e0 [ 1893.299956] vm_mmap_pgoff+0x198/0x1f0 [ 1893.300803] ? randomize_page+0xb0/0xb0 [ 1893.301662] ksys_mmap_pgoff+0x41c/0x560 [ 1893.302509] ? find_mergeable_anon_vma+0x250/0x250 [ 1893.302752] FAULT_INJECTION: forcing a failure. [ 1893.302752] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.303530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.303552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.303573] do_syscall_64+0x33/0x40 [ 1893.303592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.303615] RIP: 0033:0x7eff19607b62 [ 1893.310927] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1893.314807] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1893.316413] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1893.317936] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1893.319420] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1893.320940] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1893.322443] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1893.323963] CPU: 1 PID: 11059 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1893.325634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.327518] Call Trace: [ 1893.328134] dump_stack+0x107/0x167 [ 1893.328997] should_fail.cold+0x5/0xa [ 1893.329872] ? ___slab_alloc+0x155/0x700 [ 1893.330797] ? create_object.isra.0+0x3a/0xa20 [ 1893.331846] should_failslab+0x5/0x20 [ 1893.332724] kmem_cache_alloc+0x5b/0x310 [ 1893.333697] create_object.isra.0+0x3a/0xa20 [ 1893.334715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.335892] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1893.337073] ? skb_segment+0x9d8/0x3aa0 [ 1893.337995] __alloc_skb+0xb1/0x5b0 [ 1893.338842] skb_segment+0x9d8/0x3aa0 [ 1893.339725] ? __lock_acquire+0xbb1/0x5b00 [ 1893.340752] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1893.341895] ? lock_acquire+0x197/0x470 [ 1893.342828] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1893.344052] __udp_gso_segment+0x11c6/0x1830 [ 1893.345082] ? __sk_receive_skb+0x830/0x830 [ 1893.346084] udp4_ufo_fragment+0x528/0x720 [ 1893.347059] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1893.348206] inet_gso_segment+0x4fb/0x11a0 [ 1893.349200] skb_mac_gso_segment+0x273/0x570 [ 1893.350207] ? inet_sock_destruct+0x840/0x840 [ 1893.350260] loop4: detected capacity change from 0 to 262144 [ 1893.351218] ? skb_network_protocol+0x650/0x650 [ 1893.351235] ? skb_crc32c_csum_help+0x80/0x80 [ 1893.351256] ? lock_acquire+0x197/0x470 [ 1893.351274] ? __dev_queue_xmit+0x1c6/0x2690 [ 1893.351301] __skb_gso_segment+0x32d/0x6d0 [ 1893.357381] ? mark_lock+0xf5/0x2df0 [ 1893.358236] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1893.359415] ? lock_chain_count+0x20/0x20 [ 1893.360374] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1893.361436] __dev_queue_xmit+0x825/0x2690 [ 1893.361588] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1893.362402] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1893.362425] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1893.362460] ? mark_held_locks+0x9e/0xe0 [ 1893.367087] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1893.368299] neigh_connected_output+0x382/0x4d0 [ 1893.369402] ip_finish_output2+0x6f1/0x21f0 [ 1893.370401] ? nf_hook_slow+0xfc/0x1e0 [ 1893.371293] ? ip_frag_next+0x9e0/0x9e0 [ 1893.372209] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1893.373363] __ip_finish_output.part.0+0x5f3/0xb50 [ 1893.374483] ? ip_fragment.constprop.0+0x240/0x240 [ 1893.375594] ? netif_rx_ni+0xe7/0x300 [ 1893.376470] ip_mc_output+0x401/0xa30 [ 1893.377362] ip_send_skb+0xdd/0x260 [ 1893.378204] udp_send_skb+0x6da/0x11d0 [ 1893.379117] udp_sendmsg+0x139a/0x2160 [ 1893.380002] ? mark_lock+0xf5/0x2df0 [ 1893.380867] ? ip_frag_init+0x350/0x350 [ 1893.381779] ? lock_chain_count+0x20/0x20 [ 1893.382723] ? udp_setsockopt+0xc0/0xc0 [ 1893.383630] ? mark_lock+0xf5/0x2df0 [ 1893.384483] ? lock_acquire+0x197/0x470 [ 1893.385410] ? lock_chain_count+0x20/0x20 [ 1893.386344] ? mark_lock+0xf5/0x2df0 [ 1893.387205] ? mark_lock+0xf5/0x2df0 [ 1893.388043] ? lock_chain_count+0x20/0x20 [ 1893.389003] ? __lock_acquire+0xbb1/0x5b00 [ 1893.389950] ? lock_chain_count+0x20/0x20 [ 1893.390912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1893.392118] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1893.393075] ? udp_v6_push_pending_frames+0x360/0x360 [ 1893.394249] ? mark_lock+0xf5/0x2df0 [ 1893.395103] ? lock_acquire+0x197/0x470 [ 1893.396011] ? find_held_lock+0x2c/0x110 [ 1893.396963] ? __might_fault+0xd3/0x180 [ 1893.397855] ? lock_downgrade+0x6d0/0x6d0 [ 1893.398805] ? lock_downgrade+0x6d0/0x6d0 [ 1893.399763] ? sock_has_perm+0x1ea/0x280 [ 1893.400683] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1893.401887] ? _copy_from_user+0xfb/0x1b0 [ 1893.402852] ? __import_iovec+0x458/0x590 [ 1893.403802] ? udp_v6_push_pending_frames+0x360/0x360 [ 1893.405031] inet6_sendmsg+0x105/0x140 [ 1893.405944] ? inet6_compat_ioctl+0x320/0x320 [ 1893.406976] __sock_sendmsg+0xf2/0x190 [ 1893.407870] ____sys_sendmsg+0x70d/0x870 [ 1893.408818] ? sock_write_iter+0x3d0/0x3d0 [ 1893.409777] ? do_recvmmsg+0x6d0/0x6d0 [ 1893.410672] ? lock_downgrade+0x6d0/0x6d0 [ 1893.411615] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1893.412819] ___sys_sendmsg+0xf3/0x170 [ 1893.413712] ? sendmsg_copy_msghdr+0x160/0x160 [ 1893.414773] ? __fget_files+0x2cf/0x520 [ 1893.415685] ? lock_downgrade+0x6d0/0x6d0 [ 1893.416635] ? find_held_lock+0x2c/0x110 [ 1893.417600] ? __fget_files+0x2f8/0x520 [ 1893.418526] ? __fget_light+0xea/0x290 [ 1893.419428] __sys_sendmsg+0xe5/0x1b0 [ 1893.420305] ? __sys_sendmsg_sock+0x40/0x40 [ 1893.421304] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.422379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.423579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.424751] ? trace_hardirqs_on+0x5b/0x180 [ 1893.425735] do_syscall_64+0x33/0x40 [ 1893.426589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.427751] RIP: 0033:0x7fb8c885ab19 [ 1893.428595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.432893] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1893.434704] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1893.436309] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1893.437930] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.439526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.441132] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1893.459605] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1893.485812] loop3: detected capacity change from 0 to 263168 01:17:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 1893.490904] loop7: detected capacity change from 0 to 131072 [ 1893.497295] loop6: detected capacity change from 0 to 131072 [ 1893.529187] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1893.529885] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1893.535249] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 01:17:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 41) [ 1893.551201] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1893.553271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1893.555138] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 01:17:17 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 21) 01:17:17 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) 01:17:17 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 1) [ 1893.610274] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1893.640190] EXT4-fs (loop3): get root inode failed [ 1893.641371] EXT4-fs (loop3): mount failed [ 1893.656034] FAULT_INJECTION: forcing a failure. [ 1893.656034] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.658748] CPU: 1 PID: 11087 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 1893.660288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.662158] Call Trace: [ 1893.662760] dump_stack+0x107/0x167 [ 1893.663581] should_fail.cold+0x5/0xa [ 1893.664443] ? __do_sys_memfd_create+0xfb/0x450 [ 1893.665506] should_failslab+0x5/0x20 [ 1893.666355] __kmalloc+0x72/0x390 [ 1893.667140] __do_sys_memfd_create+0xfb/0x450 [ 1893.668110] ? ksys_write+0x1a9/0x260 [ 1893.668939] ? memfd_file_seals_ptr+0x170/0x170 [ 1893.670002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.671196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.672385] do_syscall_64+0x33/0x40 [ 1893.673238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.674386] RIP: 0033:0x7f7d85e00b19 [ 1893.675226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.679344] RSP: 002b:00007f7d83375f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1893.681057] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f7d85e00b19 [ 1893.682663] RDX: 00007f7d83376000 RSI: 0000000000000000 RDI: 00007f7d85e5a0fb [ 1893.684270] RBP: 0000000000000000 R08: 00007f7d83375ff8 R09: ffffffffffffffff [ 1893.685874] R10: 00007f7d83375ffc R11: 0000000000000246 R12: 0000000020000180 [ 1893.687461] R13: 00000000200002c0 R14: 0000000000000000 R15: 0000000020000480 01:17:17 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 8) 01:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 65) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:17:17 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) [ 1893.714629] FAULT_INJECTION: forcing a failure. [ 1893.714629] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.717158] CPU: 0 PID: 11093 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1893.718502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.720101] Call Trace: [ 1893.720614] dump_stack+0x107/0x167 [ 1893.721340] should_fail.cold+0x5/0xa [ 1893.722070] ? create_object.isra.0+0x3a/0xa20 [ 1893.722950] should_failslab+0x5/0x20 [ 1893.723680] kmem_cache_alloc+0x5b/0x310 [ 1893.724473] create_object.isra.0+0x3a/0xa20 [ 1893.725332] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.726298] kmem_cache_alloc+0x159/0x310 [ 1893.727094] __kernfs_new_node+0xd4/0x860 [ 1893.727889] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1893.728825] ? kernfs_add_one+0x36e/0x4d0 [ 1893.729628] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1893.730551] ? wait_for_completion_io+0x270/0x270 [ 1893.731472] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1893.732479] kernfs_new_node+0x18d/0x250 [ 1893.733289] __kernfs_create_file+0x51/0x350 [ 1893.734129] sysfs_add_file_mode_ns+0x221/0x560 [ 1893.735024] internal_create_group+0x324/0xb30 [ 1893.735901] ? sysfs_remove_group+0x170/0x170 [ 1893.736780] ? lockdep_init_map_type+0x2c7/0x780 [ 1893.737705] ? blk_queue_flag_set+0x22/0x30 [ 1893.738531] ? __loop_update_dio+0x2d2/0x690 [ 1893.739377] loop_configure+0x953/0x1410 [ 1893.740161] lo_ioctl+0xa57/0x16b0 [ 1893.740874] ? avc_has_extended_perms+0x7f1/0xf40 [ 1893.741799] ? loop_set_status_old+0x250/0x250 [ 1893.742666] ? avc_ss_reset+0x180/0x180 [ 1893.743421] ? find_held_lock+0x2c/0x110 [ 1893.744209] ? __lock_acquire+0xbb1/0x5b00 [ 1893.745100] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1893.746099] ? generic_block_fiemap+0x60/0x60 [ 1893.746942] ? lock_downgrade+0x6d0/0x6d0 [ 1893.747729] ? build_open_flags+0x6f0/0x6f0 [ 1893.748557] ? loop_set_status_old+0x250/0x250 [ 1893.749456] blkdev_ioctl+0x291/0x710 [ 1893.750180] ? blkdev_common_ioctl+0x1930/0x1930 [ 1893.751077] ? selinux_file_ioctl+0xb6/0x270 [ 1893.751914] block_ioctl+0xf9/0x140 [ 1893.752602] ? blkdev_read_iter+0x1c0/0x1c0 [ 1893.753452] __x64_sys_ioctl+0x19a/0x210 [ 1893.754223] do_syscall_64+0x33/0x40 [ 1893.754927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.755901] RIP: 0033:0x7fe2f6eaa8d7 [ 1893.756608] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.760075] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1893.761528] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1893.762854] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1893.764194] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1893.765554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1893.766885] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:17:17 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 2) [ 1893.771796] FAULT_INJECTION: forcing a failure. [ 1893.771796] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.773989] CPU: 0 PID: 11096 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1893.775294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.776882] Call Trace: [ 1893.777376] dump_stack+0x107/0x167 [ 1893.778057] should_fail.cold+0x5/0xa [ 1893.778771] ? vm_area_alloc+0x1c/0x110 [ 1893.779528] should_failslab+0x5/0x20 [ 1893.780240] kmem_cache_alloc+0x5b/0x310 [ 1893.781045] vm_area_alloc+0x1c/0x110 [ 1893.781749] mmap_region+0x97e/0x1500 [ 1893.782466] do_mmap+0xcdb/0x11e0 [ 1893.783123] vm_mmap_pgoff+0x198/0x1f0 [ 1893.783847] ? randomize_page+0xb0/0xb0 [ 1893.784600] ksys_mmap_pgoff+0x41c/0x560 [ 1893.785379] ? find_mergeable_anon_vma+0x250/0x250 [ 1893.786297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.787264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.788222] do_syscall_64+0x33/0x40 [ 1893.788945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.789887] RIP: 0033:0x7eff19607b62 [ 1893.790572] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1893.793987] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1893.795403] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1893.796719] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1893.798076] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1893.799405] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1893.800730] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1893.800840] FAULT_INJECTION: forcing a failure. [ 1893.800840] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.805005] CPU: 1 PID: 11092 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1893.806636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.808581] Call Trace: [ 1893.809200] dump_stack+0x107/0x167 [ 1893.810032] should_fail.cold+0x5/0xa [ 1893.810894] ? trace_hardirqs_on+0x5b/0x180 [ 1893.811861] ? __alloc_skb+0x6d/0x5b0 [ 1893.812722] should_failslab+0x5/0x20 [ 1893.813316] FAULT_INJECTION: forcing a failure. [ 1893.813316] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.813608] kmem_cache_alloc_node+0x55/0x330 [ 1893.816609] __alloc_skb+0x6d/0x5b0 [ 1893.817457] skb_segment+0x9d8/0x3aa0 [ 1893.818335] ? __lock_acquire+0xbb1/0x5b00 [ 1893.819341] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1893.820472] ? lock_acquire+0x197/0x470 [ 1893.821387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1893.822587] __udp_gso_segment+0x11c6/0x1830 [ 1893.823577] ? __sk_receive_skb+0x830/0x830 [ 1893.824564] udp4_ufo_fragment+0x528/0x720 [ 1893.825526] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1893.826645] inet_gso_segment+0x4fb/0x11a0 [ 1893.827614] skb_mac_gso_segment+0x273/0x570 [ 1893.828617] ? inet_sock_destruct+0x840/0x840 [ 1893.829647] ? skb_network_protocol+0x650/0x650 [ 1893.830693] ? skb_crc32c_csum_help+0x80/0x80 [ 1893.831699] ? lock_acquire+0x197/0x470 [ 1893.832580] ? __dev_queue_xmit+0x1c6/0x2690 [ 1893.833580] __skb_gso_segment+0x32d/0x6d0 [ 1893.834535] ? mark_lock+0xf5/0x2df0 [ 1893.835373] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1893.836551] ? lock_chain_count+0x20/0x20 [ 1893.837479] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1893.838520] __dev_queue_xmit+0x825/0x2690 [ 1893.839474] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1893.840629] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1893.841672] ? mark_held_locks+0x9e/0xe0 [ 1893.842581] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1893.843757] neigh_connected_output+0x382/0x4d0 [ 1893.844829] ip_finish_output2+0x6f1/0x21f0 [ 1893.845793] ? nf_hook_slow+0xfc/0x1e0 [ 1893.846663] ? ip_frag_next+0x9e0/0x9e0 [ 1893.847553] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1893.848681] __ip_finish_output.part.0+0x5f3/0xb50 [ 1893.849876] ? ip_fragment.constprop.0+0x240/0x240 [ 1893.851046] ? netif_rx_ni+0xe7/0x300 [ 1893.851976] ip_mc_output+0x401/0xa30 [ 1893.852908] ip_send_skb+0xdd/0x260 [ 1893.853757] udp_send_skb+0x6da/0x11d0 [ 1893.854651] udp_sendmsg+0x139a/0x2160 [ 1893.855531] ? mark_lock+0xf5/0x2df0 [ 1893.856383] ? ip_frag_init+0x350/0x350 [ 1893.857285] ? lock_chain_count+0x20/0x20 [ 1893.858177] ? udp_setsockopt+0xc0/0xc0 [ 1893.859069] ? mark_lock+0xf5/0x2df0 [ 1893.859927] ? lock_acquire+0x197/0x470 [ 1893.860863] ? lock_chain_count+0x20/0x20 [ 1893.861810] ? mark_lock+0xf5/0x2df0 [ 1893.862659] ? mark_lock+0xf5/0x2df0 [ 1893.863513] ? lock_chain_count+0x20/0x20 [ 1893.864451] ? __lock_acquire+0xbb1/0x5b00 [ 1893.865409] ? lock_chain_count+0x20/0x20 [ 1893.866447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1893.867602] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1893.868504] ? udp_v6_push_pending_frames+0x360/0x360 [ 1893.869630] ? mark_lock+0xf5/0x2df0 [ 1893.870457] ? lock_acquire+0x197/0x470 [ 1893.871322] ? find_held_lock+0x2c/0x110 [ 1893.872214] ? __might_fault+0xd3/0x180 [ 1893.873087] ? lock_downgrade+0x6d0/0x6d0 [ 1893.874004] ? lock_downgrade+0x6d0/0x6d0 [ 1893.875052] ? sock_has_perm+0x1ea/0x280 [ 1893.876089] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1893.877321] ? _copy_from_user+0xfb/0x1b0 [ 1893.878259] ? __import_iovec+0x458/0x590 [ 1893.879257] ? udp_v6_push_pending_frames+0x360/0x360 [ 1893.880413] inet6_sendmsg+0x105/0x140 [ 1893.881305] ? inet6_compat_ioctl+0x320/0x320 [ 1893.882301] __sock_sendmsg+0xf2/0x190 [ 1893.883162] ____sys_sendmsg+0x70d/0x870 [ 1893.884079] ? sock_write_iter+0x3d0/0x3d0 [ 1893.885042] ? do_recvmmsg+0x6d0/0x6d0 [ 1893.885926] ? lock_downgrade+0x6d0/0x6d0 [ 1893.886883] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1893.888071] ___sys_sendmsg+0xf3/0x170 [ 1893.888949] ? sendmsg_copy_msghdr+0x160/0x160 [ 1893.889990] ? __fget_files+0x2cf/0x520 [ 1893.890906] ? lock_downgrade+0x6d0/0x6d0 [ 1893.891865] ? find_held_lock+0x2c/0x110 [ 1893.892792] ? __fget_files+0x2f8/0x520 [ 1893.893675] ? __fget_light+0xea/0x290 [ 1893.894618] __sys_sendmsg+0xe5/0x1b0 [ 1893.895542] ? __sys_sendmsg_sock+0x40/0x40 [ 1893.896579] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.897738] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.898960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.900167] ? trace_hardirqs_on+0x5b/0x180 [ 1893.901167] do_syscall_64+0x33/0x40 [ 1893.902030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.903178] RIP: 0033:0x7fb8c885ab19 [ 1893.904016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.908201] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1893.909917] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1893.911526] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1893.913142] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.914752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.916347] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1893.917988] CPU: 0 PID: 11098 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1893.919186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.920592] Call Trace: [ 1893.921058] dump_stack+0x107/0x167 [ 1893.921675] should_fail.cold+0x5/0xa [ 1893.922318] ? __d_alloc+0x2a/0x990 [ 1893.922935] should_failslab+0x5/0x20 [ 1893.923574] kmem_cache_alloc+0x5b/0x310 [ 1893.924261] ? trace_hardirqs_on+0x5b/0x180 [ 1893.925015] __d_alloc+0x2a/0x990 [ 1893.925602] d_alloc_pseudo+0x19/0x70 [ 1893.925689] loop4: detected capacity change from 0 to 262144 [ 1893.926240] alloc_file_pseudo+0xce/0x250 [ 1893.926255] ? alloc_file+0x5a0/0x5a0 [ 1893.926278] ? shmem_get_inode+0x55c/0xbc0 [ 1893.929567] __shmem_file_setup+0x144/0x320 [ 1893.930288] ? _copy_from_user+0xfb/0x1b0 [ 1893.930982] __do_sys_memfd_create+0x275/0x450 [ 1893.931743] ? memfd_file_seals_ptr+0x170/0x170 [ 1893.932520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.933411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.934265] do_syscall_64+0x33/0x40 [ 1893.934888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.935735] RIP: 0033:0x7f06f1ea3b19 [ 1893.936351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.939422] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1893.940691] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1893.941891] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1893.943090] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1893.944281] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1893.945486] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1893.970118] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 01:17:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40500, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) [ 1894.005000] loop3: detected capacity change from 0 to 263168 [ 1894.010103] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1894.010148] FAT-fs (loop5): bogus number of reserved sectors [ 1894.012672] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1894.013681] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1894.015288] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1894.015478] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1894.018680] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1894.030707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1894.033493] EXT4-fs (loop3): get root inode failed [ 1894.034350] EXT4-fs (loop3): mount failed [ 1894.036435] FAULT_INJECTION: forcing a failure. [ 1894.036435] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.039020] CPU: 1 PID: 11110 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 1894.040576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.042473] Call Trace: [ 1894.043068] dump_stack+0x107/0x167 [ 1894.043887] should_fail.cold+0x5/0xa [ 1894.044739] ? create_object.isra.0+0x3a/0xa20 [ 1894.045763] should_failslab+0x5/0x20 [ 1894.046610] kmem_cache_alloc+0x5b/0x310 [ 1894.047520] create_object.isra.0+0x3a/0xa20 [ 1894.048498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1894.049629] __kmalloc+0x16e/0x390 [ 1894.050423] __do_sys_memfd_create+0xfb/0x450 [ 1894.051413] ? ksys_write+0x1a9/0x260 [ 1894.052249] ? memfd_file_seals_ptr+0x170/0x170 [ 1894.053287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.054447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.055579] do_syscall_64+0x33/0x40 [ 1894.056410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1894.057551] RIP: 0033:0x7f7d85e00b19 [ 1894.058366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.062461] RSP: 002b:00007f7d83375f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1894.064154] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f7d85e00b19 [ 1894.065750] RDX: 00007f7d83376000 RSI: 0000000000000000 RDI: 00007f7d85e5a0fb [ 1894.067333] RBP: 0000000000000000 R08: 00007f7d83375ff8 R09: ffffffffffffffff [ 1894.068971] R10: 00007f7d83375ffc R11: 0000000000000246 R12: 0000000020000180 [ 1894.070604] R13: 00000000200002c0 R14: 0000000000000000 R15: 0000000020000480 01:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 66) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:17:17 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 22) 01:17:18 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 9) [ 1894.107124] loop7: detected capacity change from 0 to 131072 [ 1894.111692] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1894.125278] FAT-fs (loop1): bogus number of reserved sectors [ 1894.126691] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1894.144923] FAULT_INJECTION: forcing a failure. [ 1894.144923] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.147540] CPU: 1 PID: 11114 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1894.149110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.151000] Call Trace: [ 1894.151601] dump_stack+0x107/0x167 [ 1894.152336] FAULT_INJECTION: forcing a failure. [ 1894.152336] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.152421] should_fail.cold+0x5/0xa [ 1894.154920] ? create_object.isra.0+0x3a/0xa20 [ 1894.155951] should_failslab+0x5/0x20 [ 1894.156823] kmem_cache_alloc+0x5b/0x310 [ 1894.157741] create_object.isra.0+0x3a/0xa20 [ 1894.158728] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1894.159877] kmem_cache_alloc+0x159/0x310 [ 1894.160824] ? trace_hardirqs_on+0x5b/0x180 [ 1894.161807] __d_alloc+0x2a/0x990 [ 1894.162589] d_alloc_pseudo+0x19/0x70 [ 1894.163442] alloc_file_pseudo+0xce/0x250 [ 1894.164372] ? alloc_file+0x5a0/0x5a0 [ 1894.165250] ? shmem_get_inode+0x55c/0xbc0 [ 1894.166210] __shmem_file_setup+0x144/0x320 [ 1894.167182] ? _copy_from_user+0xfb/0x1b0 [ 1894.168120] __do_sys_memfd_create+0x275/0x450 [ 1894.169155] ? memfd_file_seals_ptr+0x170/0x170 [ 1894.170210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.171380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.172543] do_syscall_64+0x33/0x40 [ 1894.173392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1894.174537] RIP: 0033:0x7f06f1ea3b19 [ 1894.175374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.179516] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1894.181259] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1894.182868] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1894.184485] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1894.186122] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1894.187745] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1894.189422] CPU: 0 PID: 11118 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1894.190407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.191560] Call Trace: [ 1894.191938] dump_stack+0x107/0x167 [ 1894.192448] should_fail.cold+0x5/0xa [ 1894.193019] ? create_object.isra.0+0x3a/0xa20 [ 1894.193656] should_failslab+0x5/0x20 [ 1894.194189] kmem_cache_alloc+0x5b/0x310 [ 1894.194756] create_object.isra.0+0x3a/0xa20 [ 1894.195364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1894.196071] kmem_cache_alloc+0x159/0x310 [ 1894.196652] vm_area_alloc+0x1c/0x110 [ 1894.197206] mmap_region+0x97e/0x1500 [ 1894.197743] ? do_mmap+0x2ea/0x11e0 [ 1894.198255] do_mmap+0xcdb/0x11e0 [ 1894.198743] vm_mmap_pgoff+0x198/0x1f0 [ 1894.199287] ? randomize_page+0xb0/0xb0 [ 1894.199864] ksys_mmap_pgoff+0x41c/0x560 [ 1894.200426] ? find_mergeable_anon_vma+0x250/0x250 [ 1894.201130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.201855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.202569] do_syscall_64+0x33/0x40 [ 1894.203089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1894.203798] RIP: 0033:0x7eff19607b62 [ 1894.204317] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1894.206355] loop6: detected capacity change from 0 to 131072 [ 1894.206859] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1894.209248] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1894.210248] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1894.211231] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1894.212217] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1894.213227] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1894.223656] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 1894.231313] FAULT_INJECTION: forcing a failure. [ 1894.231313] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.233115] CPU: 0 PID: 11117 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1894.234031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.235129] Call Trace: [ 1894.235490] dump_stack+0x107/0x167 [ 1894.235977] should_fail.cold+0x5/0xa [ 1894.236486] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1894.237199] ? create_object.isra.0+0x3a/0xa20 [ 1894.237814] should_failslab+0x5/0x20 [ 1894.238320] kmem_cache_alloc+0x5b/0x310 [ 1894.238864] ? mark_held_locks+0x9e/0xe0 [ 1894.239407] create_object.isra.0+0x3a/0xa20 [ 1894.240005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1894.240687] kmem_cache_alloc_node+0x169/0x330 [ 1894.241303] __alloc_skb+0x6d/0x5b0 [ 1894.241800] skb_segment+0x9d8/0x3aa0 [ 1894.242308] ? __lock_acquire+0xbb1/0x5b00 [ 1894.242902] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1894.243558] ? lock_acquire+0x197/0x470 [ 1894.244096] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1894.244816] __udp_gso_segment+0x11c6/0x1830 [ 1894.245401] ? __sk_receive_skb+0x830/0x830 [ 1894.245992] udp4_ufo_fragment+0x528/0x720 [ 1894.246550] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1894.247218] inet_gso_segment+0x4fb/0x11a0 [ 1894.247786] skb_mac_gso_segment+0x273/0x570 [ 1894.248381] ? inet_sock_destruct+0x840/0x840 [ 1894.248984] ? skb_network_protocol+0x650/0x650 [ 1894.249625] ? skb_crc32c_csum_help+0x80/0x80 [ 1894.250224] ? lock_acquire+0x197/0x470 [ 1894.250755] ? __dev_queue_xmit+0x1c6/0x2690 [ 1894.251338] __skb_gso_segment+0x32d/0x6d0 [ 1894.251910] ? mark_lock+0xf5/0x2df0 [ 1894.252403] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1894.253115] ? lock_chain_count+0x20/0x20 [ 1894.253664] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1894.254270] __dev_queue_xmit+0x825/0x2690 [ 1894.254848] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1894.255519] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1894.256133] ? mark_held_locks+0x9e/0xe0 [ 1894.256679] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1894.257374] neigh_connected_output+0x382/0x4d0 [ 1894.258003] ip_finish_output2+0x6f1/0x21f0 [ 1894.258579] ? nf_hook_slow+0xfc/0x1e0 [ 1894.259089] ? ip_frag_next+0x9e0/0x9e0 [ 1894.259618] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1894.260273] __ip_finish_output.part.0+0x5f3/0xb50 [ 1894.260970] ? ip_fragment.constprop.0+0x240/0x240 [ 1894.261626] ? netif_rx_ni+0xe7/0x300 [ 1894.262144] ip_mc_output+0x401/0xa30 [ 1894.262658] ip_send_skb+0xdd/0x260 [ 1894.263146] udp_send_skb+0x6da/0x11d0 [ 1894.263675] udp_sendmsg+0x139a/0x2160 [ 1894.264183] ? mark_lock+0xf5/0x2df0 [ 1894.264685] ? ip_frag_init+0x350/0x350 [ 1894.265215] ? lock_chain_count+0x20/0x20 [ 1894.265771] ? udp_setsockopt+0xc0/0xc0 [ 1894.266285] ? mark_lock+0xf5/0x2df0 [ 1894.266780] ? lock_acquire+0x197/0x470 [ 1894.267298] ? lock_chain_count+0x20/0x20 [ 1894.267850] ? mark_lock+0xf5/0x2df0 [ 1894.268348] ? mark_lock+0xf5/0x2df0 [ 1894.268868] ? lock_chain_count+0x20/0x20 [ 1894.269412] ? __lock_acquire+0xbb1/0x5b00 [ 1894.269976] ? lock_chain_count+0x20/0x20 [ 1894.270533] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1894.271220] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1894.271772] ? udp_v6_push_pending_frames+0x360/0x360 [ 1894.272443] ? mark_lock+0xf5/0x2df0 [ 1894.272958] ? lock_acquire+0x197/0x470 [ 1894.273470] ? find_held_lock+0x2c/0x110 [ 1894.274011] ? __might_fault+0xd3/0x180 [ 1894.274526] ? lock_downgrade+0x6d0/0x6d0 [ 1894.275080] ? lock_downgrade+0x6d0/0x6d0 [ 1894.275628] ? sock_has_perm+0x1ea/0x280 [ 1894.276177] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1894.276870] ? _copy_from_user+0xfb/0x1b0 [ 1894.277430] ? __import_iovec+0x458/0x590 [ 1894.277974] ? udp_v6_push_pending_frames+0x360/0x360 [ 1894.278644] inet6_sendmsg+0x105/0x140 [ 1894.279160] ? inet6_compat_ioctl+0x320/0x320 [ 1894.279750] __sock_sendmsg+0xf2/0x190 [ 1894.280265] ____sys_sendmsg+0x70d/0x870 [ 1894.280810] ? sock_write_iter+0x3d0/0x3d0 [ 1894.281363] ? do_recvmmsg+0x6d0/0x6d0 [ 1894.281886] ? lock_downgrade+0x6d0/0x6d0 [ 1894.282423] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1894.283111] ___sys_sendmsg+0xf3/0x170 [ 1894.283635] ? sendmsg_copy_msghdr+0x160/0x160 [ 1894.284226] ? __fget_files+0x2cf/0x520 [ 1894.284742] ? lock_downgrade+0x6d0/0x6d0 [ 1894.285293] ? find_held_lock+0x2c/0x110 [ 1894.285830] ? __fget_files+0x2f8/0x520 [ 1894.286363] ? __fget_light+0xea/0x290 [ 1894.286869] __sys_sendmsg+0xe5/0x1b0 [ 1894.287374] ? __sys_sendmsg_sock+0x40/0x40 [ 1894.287934] ? rcu_read_lock_any_held+0x75/0xa0 [ 1894.288547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.289244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.289920] ? trace_hardirqs_on+0x5b/0x180 [ 1894.290478] do_syscall_64+0x33/0x40 [ 1894.290966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1894.291647] RIP: 0033:0x7fb8c885ab19 [ 1894.292127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.294501] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1894.295478] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1894.296396] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1894.297316] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1894.298226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.299134] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 01:17:33 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x5, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) 01:17:33 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 23) 01:17:33 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (fail_nth: 67) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @isdn={0x22, 0xa4, 0x20, 0x2, 0x1}, @sco, @can={0x1d, 0x0}, 0x9ca0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6tnl0\x00', 0x0, 0x4, 0xd64}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) 01:17:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40501, 0x1, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x11, &(0x7f00000004c0)=ANY=[]) 01:17:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f00000006c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) (fail_nth: 42) 01:17:33 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 3) 01:17:33 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x78, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) 01:17:33 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 10) [ 1909.510045] FAULT_INJECTION: forcing a failure. [ 1909.510045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.512875] FAULT_INJECTION: forcing a failure. [ 1909.512875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1909.513159] CPU: 1 PID: 11144 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 1909.517185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.519299] Call Trace: [ 1909.519995] dump_stack+0x107/0x167 [ 1909.520925] should_fail.cold+0x5/0xa [ 1909.521924] _copy_from_user+0x2e/0x1b0 [ 1909.522941] __do_sys_memfd_create+0x16d/0x450 [ 1909.524106] ? memfd_file_seals_ptr+0x170/0x170 [ 1909.525307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.526638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.527944] do_syscall_64+0x33/0x40 [ 1909.528882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.530184] RIP: 0033:0x7f7d85e00b19 [ 1909.531125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.535470] RSP: 002b:00007f7d83375f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1909.537066] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f7d85e00b19 [ 1909.538576] RDX: 00007f7d83376000 RSI: 0000000000000000 RDI: 00007f7d85e5a0fb [ 1909.540071] RBP: 0000000000000000 R08: 00007f7d83375ff8 R09: ffffffffffffffff [ 1909.541568] R10: 00007f7d83375ffc R11: 0000000000000246 R12: 0000000020000180 [ 1909.543063] R13: 00000000200002c0 R14: 0000000000000000 R15: 0000000020000480 [ 1909.544586] CPU: 0 PID: 11142 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1909.546056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.547793] Call Trace: [ 1909.548356] dump_stack+0x107/0x167 [ 1909.549128] should_fail.cold+0x5/0xa [ 1909.549954] __alloc_pages_nodemask+0x182/0x600 [ 1909.550506] FAULT_INJECTION: forcing a failure. [ 1909.550506] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.550929] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1909.550959] ? walk_mem_res+0x170/0x170 [ 1909.555340] alloc_pages_current+0x187/0x280 [ 1909.556267] pte_alloc_one+0x16/0x1a0 [ 1909.557062] __pte_alloc+0x1d/0x330 [ 1909.557836] remap_pfn_range_internal+0x9a3/0xf60 [ 1909.558854] ? lookup_memtype+0x5b/0x200 [ 1909.559720] ? apply_to_existing_page_range+0x40/0x40 [ 1909.560808] remap_pfn_range+0xcd/0x160 [ 1909.561652] ? remap_pfn_range_notrack+0x70/0x70 [ 1909.562641] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1909.563727] io_uring_mmap+0x398/0x530 [ 1909.564545] mmap_file+0x5e/0xe0 [ 1909.565253] mmap_region+0xc49/0x1500 [ 1909.566067] do_mmap+0xcdb/0x11e0 [ 1909.566808] vm_mmap_pgoff+0x198/0x1f0 [ 1909.567624] ? randomize_page+0xb0/0xb0 [ 1909.568468] ksys_mmap_pgoff+0x41c/0x560 [ 1909.569324] ? find_mergeable_anon_vma+0x250/0x250 [ 1909.570367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.571465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.572538] do_syscall_64+0x33/0x40 [ 1909.573323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.574398] RIP: 0033:0x7eff19607b62 [ 1909.575178] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1909.579038] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1909.580635] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1909.582146] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1909.583648] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1909.585141] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1909.586648] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1909.588181] CPU: 1 PID: 11140 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1909.589711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.591460] Call Trace: [ 1909.591856] ------------[ cut here ]------------ [ 1909.592031] dump_stack+0x107/0x167 [ 1909.593051] WARNING: CPU: 0 PID: 11142 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1909.593771] should_fail.cold+0x5/0xa [ 1909.593793] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1909.593812] ? create_object.isra.0+0x3a/0xa20 [ 1909.593840] should_failslab+0x5/0x20 [ 1909.595718] Modules linked in: [ 1909.596451] kmem_cache_alloc+0x5b/0x310 [ 1909.596470] ? mark_held_locks+0x9e/0xe0 [ 1909.596495] create_object.isra.0+0x3a/0xa20 [ 1909.596510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1909.596536] kmem_cache_alloc_node+0x169/0x330 [ 1909.597721] [ 1909.598567] __alloc_skb+0x6d/0x5b0 [ 1909.598595] skb_segment+0x9d8/0x3aa0 [ 1909.599498] CPU: 0 PID: 11142 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1909.600032] ? __lock_acquire+0xbb1/0x5b00 [ 1909.600933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.601750] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1909.601773] ? lock_acquire+0x197/0x470 [ 1909.602777] RIP: 0010:get_pat_info+0x216/0x270 [ 1909.603727] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.603752] __udp_gso_segment+0x11c6/0x1830 [ 1909.603774] ? __sk_receive_skb+0x830/0x830 [ 1909.604834] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 91 81 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 7a 81 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 75 79 5a 00 e9 [ 1909.605063] udp4_ufo_fragment+0x528/0x720 [ 1909.605086] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1909.605865] RSP: 0018:ffff88803abd7898 EFLAGS: 00010246 [ 1909.612212] inet_gso_segment+0x4fb/0x11a0 [ 1909.612247] skb_mac_gso_segment+0x273/0x570 [ 1909.612267] ? inet_sock_destruct+0x840/0x840 [ 1909.612289] ? skb_network_protocol+0x650/0x650 [ 1909.613807] [ 1909.614610] ? skb_crc32c_csum_help+0x80/0x80 [ 1909.614630] ? lock_acquire+0x197/0x470 [ 1909.614646] ? __dev_queue_xmit+0x1c6/0x2690 [ 1909.614671] __skb_gso_segment+0x32d/0x6d0 [ 1909.614693] ? mark_lock+0xf5/0x2df0 [ 1909.616576] RAX: 0000000000040000 RBX: ffff88804635aa00 RCX: ffffc90002a1c000 [ 1909.617466] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1909.617497] ? lock_chain_count+0x20/0x20 [ 1909.618385] RDX: 0000000000040000 RSI: ffffffff81123696 RDI: 0000000000000007 [ 1909.619246] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1909.619268] __dev_queue_xmit+0x825/0x2690 [ 1909.619294] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1909.619316] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1909.620424] RBP: ffff88803abd7950 R08: 0000000000000000 R09: ffff88803abd7820 [ 1909.621325] ? mark_held_locks+0x9e/0xe0 [ 1909.621360] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1909.622345] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1909.626116] neigh_connected_output+0x382/0x4d0 [ 1909.626152] ip_finish_output2+0x6f1/0x21f0 [ 1909.627028] R13: 1ffff1100757af13 R14: 0000000000000000 R15: ffff88804635aa50 [ 1909.628047] ? nf_hook_slow+0xfc/0x1e0 [ 1909.628068] ? ip_frag_next+0x9e0/0x9e0 [ 1909.628086] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1909.628118] __ip_finish_output.part.0+0x5f3/0xb50 [ 1909.629364] FS: 00007eff16b7d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1909.630086] ? ip_fragment.constprop.0+0x240/0x240 [ 1909.630112] ? netif_rx_ni+0xe7/0x300 [ 1909.631103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1909.631955] ip_mc_output+0x401/0xa30 [ 1909.631983] ip_send_skb+0xdd/0x260 [ 1909.632957] CR2: 00007eff16b7cf78 CR3: 00000000485f4000 CR4: 0000000000350ef0 [ 1909.633275] udp_send_skb+0x6da/0x11d0 [ 1909.633315] udp_sendmsg+0x139a/0x2160 [ 1909.633333] ? mark_lock+0xf5/0x2df0 [ 1909.633355] ? ip_frag_init+0x350/0x350 [ 1909.634305] Call Trace: [ 1909.635101] ? lock_chain_count+0x20/0x20 [ 1909.635117] ? mark_lock+0xf5/0x2df0 [ 1909.635135] ? udp_setsockopt+0xc0/0xc0 [ 1909.635158] ? mark_lock+0xf5/0x2df0 [ 1909.636224] ? __warn+0xe2/0x1f0 [ 1909.636935] ? lock_chain_count+0x20/0x20 [ 1909.637744] ? get_pat_info+0x216/0x270 [ 1909.639196] ? lock_chain_count+0x20/0x20 [ 1909.639216] ? perf_output_begin+0x589/0xc60 [ 1909.639239] ? mark_lock+0xf5/0x2df0 [ 1909.640490] ? report_bug+0x1c1/0x210 [ 1909.641178] ? mark_lock+0xf5/0x2df0 [ 1909.641208] ? lock_chain_count+0x20/0x20 [ 1909.642878] ? handle_bug+0x41/0x90 [ 1909.643719] ? lock_chain_count+0x20/0x20 [ 1909.643758] ? mark_lock+0xf5/0x2df0 [ 1909.644756] ? exc_invalid_op+0x14/0x50 [ 1909.645689] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1909.645728] ? udp_v6_push_pending_frames+0x360/0x360 [ 1909.646815] ? asm_exc_invalid_op+0x12/0x20 [ 1909.648147] ? mark_lock+0xf5/0x2df0 [ 1909.648174] ? lock_acquire+0x197/0x470 [ 1909.649244] ? get_pat_info+0x216/0x270 [ 1909.650088] ? find_held_lock+0x2c/0x110 [ 1909.650123] ? __might_fault+0xd3/0x180 [ 1909.651789] ? get_pat_info+0x216/0x270 [ 1909.652544] ? lock_downgrade+0x6d0/0x6d0 [ 1909.652579] ? lock_downgrade+0x6d0/0x6d0 [ 1909.655381] ? get_pat_info+0x216/0x270 [ 1909.655759] ? sock_has_perm+0x1ea/0x280 [ 1909.657068] ? pgprot_writethrough+0xc0/0xc0 [ 1909.657615] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1909.658673] ? finish_task_switch+0x126/0x5d0 [ 1909.660312] ? _copy_from_user+0xfb/0x1b0 [ 1909.660345] ? __import_iovec+0x458/0x590 [ 1909.660364] ? udp_v6_push_pending_frames+0x360/0x360 [ 1909.660389] inet6_sendmsg+0x105/0x140 [ 1909.661600] untrack_pfn+0xdc/0x240 [ 1909.662198] ? inet6_compat_ioctl+0x320/0x320 [ 1909.662216] __sock_sendmsg+0xf2/0x190 [ 1909.662240] ____sys_sendmsg+0x70d/0x870 [ 1909.663560] ? track_pfn_insert+0x150/0x150 [ 1909.664215] ? sock_write_iter+0x3d0/0x3d0 [ 1909.664232] ? do_recvmmsg+0x6d0/0x6d0 [ 1909.664257] ? lock_downgrade+0x6d0/0x6d0 [ 1909.665023] ? lock_downgrade+0x6d0/0x6d0 [ 1909.666492] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.666519] ___sys_sendmsg+0xf3/0x170 [ 1909.666542] ? sendmsg_copy_msghdr+0x160/0x160 [ 1909.666566] ? __fget_files+0x2cf/0x520 [ 1909.667447] ? uprobe_munmap+0x1c/0x560 [ 1909.668150] ? lock_downgrade+0x6d0/0x6d0 [ 1909.668170] ? find_held_lock+0x2c/0x110 [ 1909.668201] ? __fget_files+0x2f8/0x520 [ 1909.669107] unmap_single_vma+0x1bc/0x300 [ 1909.669792] ? __fget_light+0xea/0x290 [ 1909.669820] __sys_sendmsg+0xe5/0x1b0 [ 1909.669843] ? __sys_sendmsg_sock+0x40/0x40 [ 1909.670554] zap_page_range_single+0x2ce/0x450 [ 1909.671217] ? rcu_read_lock_any_held+0x75/0xa0 [ 1909.671257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.672161] ? unmap_single_vma+0x300/0x300 [ 1909.672841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.673645] ? remap_pfn_range_internal+0xc56/0xf60 [ 1909.674377] ? trace_hardirqs_on+0x5b/0x180 [ 1909.674399] do_syscall_64+0x33/0x40 [ 1909.674425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.675454] ? lookup_memtype+0x5b/0x200 [ 1909.676089] RIP: 0033:0x7fb8c885ab19 [ 1909.676111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.676128] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 [ 1909.677255] ? apply_to_existing_page_range+0x40/0x40 [ 1909.677893] ORIG_RAX: 000000000000002e [ 1909.677911] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1909.678869] remap_pfn_range+0x139/0x160 [ 1909.679450] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1909.679462] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1909.679472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1909.679484] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1909.699863] FAT-fs (loop5): bogus number of reserved sectors [ 1909.699878] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1909.711218] FAULT_INJECTION: forcing a failure. [ 1909.711218] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.711904] ? remap_pfn_range_notrack+0x70/0x70 [ 1909.712725] CPU: 1 PID: 11145 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 1909.713821] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1909.714474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.714481] Call Trace: [ 1909.714503] dump_stack+0x107/0x167 [ 1909.714524] should_fail.cold+0x5/0xa [ 1909.715516] io_uring_mmap+0x398/0x530 [ 1909.716192] ? __alloc_file+0x21/0x320 [ 1909.716209] ? __alloc_file+0x21/0x320 [ 1909.716236] should_failslab+0x5/0x20 [ 1909.717241] mmap_file+0x5e/0xe0 [ 1909.717905] kmem_cache_alloc+0x5b/0x310 [ 1909.718833] mmap_region+0xc49/0x1500 [ 1909.719555] __alloc_file+0x21/0x320 [ 1909.719573] alloc_empty_file+0x6d/0x170 [ 1909.719593] alloc_file+0x5e/0x5a0 [ 1909.720557] do_mmap+0xcdb/0x11e0 [ 1909.721263] alloc_file_pseudo+0x16a/0x250 [ 1909.721291] ? alloc_file+0x5a0/0x5a0 [ 1909.722430] vm_mmap_pgoff+0x198/0x1f0 [ 1909.723218] ? shmem_get_inode+0x55c/0xbc0 [ 1909.723248] __shmem_file_setup+0x144/0x320 [ 1909.724500] ? randomize_page+0xb0/0xb0 [ 1909.725223] ? _copy_from_user+0xfb/0x1b0 [ 1909.725257] __do_sys_memfd_create+0x275/0x450 [ 1909.726507] ksys_mmap_pgoff+0x41c/0x560 [ 1909.727358] ? memfd_file_seals_ptr+0x170/0x170 [ 1909.727382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.727407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.728462] ? find_mergeable_anon_vma+0x250/0x250 [ 1909.729062] do_syscall_64+0x33/0x40 [ 1909.730204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.730984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.730998] RIP: 0033:0x7f06f1ea3b19 [ 1909.731022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.731947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.735652] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1909.735672] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1909.735684] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1909.735702] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1909.736982] do_syscall_64+0x33/0x40 [ 1909.737864] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1909.737877] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1909.799564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.800795] RIP: 0033:0x7eff19607b62 [ 1909.801676] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 01:17:33 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)) (fail_nth: 11) 01:17:33 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 4) [ 1909.805698] RSP: 002b:00007eff16b7d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1909.807678] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007eff19607b62 [ 1909.809355] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 1909.810932] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 1909.812494] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1909.814104] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 1909.815822] irq event stamp: 4391 [ 1909.816605] hardirqs last enabled at (4401): [] console_unlock+0x92d/0xb40 [ 1909.818528] hardirqs last disabled at (4416): [] sysvec_apic_timer_interrupt+0xb/0xa0 [ 1909.820568] softirqs last enabled at (3038): [] asm_call_irq_on_stack+0x12/0x20 [ 1909.822611] softirqs last disabled at (3003): [] asm_call_irq_on_stack+0x12/0x20 [ 1909.824655] ---[ end trace 1418838199b61149 ]--- 01:17:33 executing program 0: mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x80, "5fabd34a60e47f"}) r6 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 24) [ 1909.851826] FAULT_INJECTION: forcing a failure. [ 1909.851826] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.854296] CPU: 1 PID: 11141 Comm: syz-executor.4 Tainted: G W 5.10.234 #1 [ 1909.856002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.857753] Call Trace: [ 1909.858323] dump_stack+0x107/0x167 [ 1909.859087] should_fail.cold+0x5/0xa [ 1909.859901] ? __kernfs_new_node+0xd4/0x860 [ 1909.860806] should_failslab+0x5/0x20 [ 1909.861680] kmem_cache_alloc+0x5b/0x310 [ 1909.862530] __kernfs_new_node+0xd4/0x860 [ 1909.863404] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1909.864386] ? kernfs_add_one+0x36e/0x4d0 [ 1909.865258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1909.866292] ? wait_for_completion_io+0x270/0x270 [ 1909.867315] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1909.868401] kernfs_new_node+0x18d/0x250 [ 1909.869254] __kernfs_create_file+0x51/0x350 [ 1909.870215] sysfs_add_file_mode_ns+0x221/0x560 [ 1909.871206] internal_create_group+0x324/0xb30 [ 1909.872164] ? sysfs_remove_group+0x170/0x170 [ 1909.873103] ? lockdep_init_map_type+0x2c7/0x780 [ 1909.874103] ? blk_queue_flag_set+0x22/0x30 [ 1909.874998] ? __loop_update_dio+0x2d2/0x690 [ 1909.875920] loop_configure+0x953/0x1410 [ 1909.876785] lo_ioctl+0xa57/0x16b0 [ 1909.877590] ? avc_has_extended_perms+0x7f1/0xf40 [ 1909.878677] ? loop_set_status_old+0x250/0x250 [ 1909.879653] ? avc_ss_reset+0x180/0x180 [ 1909.880489] ? find_held_lock+0x2c/0x110 [ 1909.881365] ? __lock_acquire+0xbb1/0x5b00 [ 1909.882296] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1909.883384] ? generic_block_fiemap+0x60/0x60 [ 1909.884314] ? lock_downgrade+0x6d0/0x6d0 [ 1909.885179] ? build_open_flags+0x6f0/0x6f0 [ 1909.886103] ? loop_set_status_old+0x250/0x250 [ 1909.887053] blkdev_ioctl+0x291/0x710 [ 1909.887844] ? blkdev_common_ioctl+0x1930/0x1930 [ 1909.888829] ? selinux_file_ioctl+0xb6/0x270 [ 1909.889751] block_ioctl+0xf9/0x140 [ 1909.890514] ? blkdev_read_iter+0x1c0/0x1c0 [ 1909.891409] __x64_sys_ioctl+0x19a/0x210 [ 1909.892258] do_syscall_64+0x33/0x40 [ 1909.893038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.894124] RIP: 0033:0x7fe2f6eaa8d7 [ 1909.894908] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.898781] RSP: 002b:00007fe2f441ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.900380] RAX: ffffffffffffffda RBX: 00007fe2f6ef4970 RCX: 00007fe2f6eaa8d7 [ 1909.901885] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1909.903386] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1909.904884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1909.906419] R13: 0000000000000004 R14: 0000000020000708 R15: 0000000000000003 01:17:33 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x6, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro}]}) [ 1909.916356] loop4: detected capacity change from 0 to 262144 [ 1909.920638] loop7: detected capacity change from 0 to 131072 [ 1909.939767] loop3: detected capacity change from 0 to 263168 [ 1909.947339] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1909.947543] FAULT_INJECTION: forcing a failure. [ 1909.947543] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.950389] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1909.951475] CPU: 0 PID: 11153 Comm: syz-executor.1 Tainted: G W 5.10.234 #1 [ 1909.951486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.951492] Call Trace: [ 1909.951517] dump_stack+0x107/0x167 [ 1909.951541] should_fail.cold+0x5/0xa [ 1909.953443] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1909.955152] ? shmem_alloc_inode+0x18/0x40 [ 1909.955183] should_failslab+0x5/0x20 [ 1909.956937] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1909.957467] kmem_cache_alloc+0x5b/0x310 [ 1909.957493] ? shmem_destroy_inode+0x70/0x70 [ 1909.966104] shmem_alloc_inode+0x18/0x40 [ 1909.966951] ? shmem_destroy_inode+0x70/0x70 [ 1909.967867] alloc_inode+0x63/0x240 [ 1909.968619] new_inode+0x23/0x250 [ 1909.969357] shmem_get_inode+0x15e/0xbc0 [ 1909.970217] __shmem_file_setup+0xb8/0x320 [ 1909.971105] ? _copy_from_user+0xfb/0x1b0 [ 1909.971982] __do_sys_memfd_create+0x275/0x450 [ 1909.972939] ? memfd_file_seals_ptr+0x170/0x170 [ 1909.973930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.975030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.976114] do_syscall_64+0x33/0x40 [ 1909.976896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.977975] RIP: 0033:0x7f7d85e00b19 [ 1909.978758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.982631] RSP: 002b:00007f7d83375f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1909.984229] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f7d85e00b19 [ 1909.985729] RDX: 00007f7d83376000 RSI: 0000000000000000 RDI: 00007f7d85e5a0fb [ 1909.987228] RBP: 0000000000000000 R08: 00007f7d83375ff8 R09: ffffffffffffffff [ 1909.988738] R10: 00007f7d83375ffc R11: 0000000000000246 R12: 0000000020000180 [ 1909.990240] R13: 00000000200002c0 R14: 0000000000000000 R15: 0000000020000480 [ 1910.001219] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1910.006116] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1910.020870] EXT4-fs error (device loop3): __ext4_get_inode_loc:4405: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 1910.026627] FAULT_INJECTION: forcing a failure. [ 1910.026627] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.029628] CPU: 0 PID: 11157 Comm: syz-executor.0 Tainted: G W 5.10.234 #1 [ 1910.029660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1910.031691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1910.031701] Call Trace: [ 1910.031738] dump_stack+0x107/0x167 [ 1910.031770] should_fail.cold+0x5/0xa [ 1910.033747] FAULT_INJECTION: forcing a failure. [ 1910.033747] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.035358] ? create_object.isra.0+0x3a/0xa20 [ 1910.035388] should_failslab+0x5/0x20 [ 1910.035418] kmem_cache_alloc+0x5b/0x310 [ 1910.043575] create_object.isra.0+0x3a/0xa20 [ 1910.044731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1910.046089] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1910.047436] ? skb_segment+0x9d8/0x3aa0 [ 1910.048488] __alloc_skb+0xb1/0x5b0 [ 1910.049473] skb_segment+0x9d8/0x3aa0 [ 1910.050489] ? __lock_acquire+0xbb1/0x5b00 [ 1910.051670] ? skb_zerocopy_iter_stream+0x800/0x800 [ 1910.052968] ? lock_acquire+0x197/0x470 [ 1910.054022] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1910.055398] __udp_gso_segment+0x11c6/0x1830 [ 1910.056543] ? __sk_receive_skb+0x830/0x830 [ 1910.057695] udp4_ufo_fragment+0x528/0x720 [ 1910.058802] ? skb_udp_tunnel_segment+0x1db0/0x1db0 [ 1910.060116] inet_gso_segment+0x4fb/0x11a0 [ 1910.061260] skb_mac_gso_segment+0x273/0x570 [ 1910.062428] ? inet_sock_destruct+0x840/0x840 [ 1910.063597] ? skb_network_protocol+0x650/0x650 [ 1910.064801] ? skb_crc32c_csum_help+0x80/0x80 [ 1910.065977] ? lock_acquire+0x197/0x470 [ 1910.067008] ? __dev_queue_xmit+0x1c6/0x2690 [ 1910.068160] __skb_gso_segment+0x32d/0x6d0 [ 1910.069263] ? mark_lock+0xf5/0x2df0 [ 1910.070169] validate_xmit_skb.constprop.0+0x4f6/0xcd0 [ 1910.071268] ? lock_chain_count+0x20/0x20 [ 1910.072140] ? netdev_core_pick_tx+0x1d1/0x2f0 [ 1910.073106] __dev_queue_xmit+0x825/0x2690 [ 1910.074019] ? percpu_rwsem_wake_function+0x3d0/0x3f0 [ 1910.075103] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1910.076068] ? mark_held_locks+0x9e/0xe0 [ 1910.076936] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1910.078058] neigh_connected_output+0x382/0x4d0 [ 1910.079048] ip_finish_output2+0x6f1/0x21f0 [ 1910.079950] ? nf_hook_slow+0xfc/0x1e0 [ 1910.080760] ? ip_frag_next+0x9e0/0x9e0 [ 1910.081603] ? skb_gso_transport_seglen+0x1ca/0x360 [ 1910.082651] __ip_finish_output.part.0+0x5f3/0xb50 [ 1910.083672] ? ip_fragment.constprop.0+0x240/0x240 [ 1910.084694] ? netif_rx_ni+0xe7/0x300 [ 1910.085501] ip_mc_output+0x401/0xa30 [ 1910.086303] ip_send_skb+0xdd/0x260 [ 1910.087077] udp_send_skb+0x6da/0x11d0 [ 1910.087901] udp_sendmsg+0x139a/0x2160 [ 1910.088708] ? mark_lock+0xf5/0x2df0 [ 1910.089494] ? ip_frag_init+0x350/0x350 [ 1910.090329] ? lock_chain_count+0x20/0x20 [ 1910.091199] ? udp_setsockopt+0xc0/0xc0 [ 1910.092026] ? mark_lock+0xf5/0x2df0 [ 1910.092800] ? lock_acquire+0x197/0x470 [ 1910.093640] ? lock_chain_count+0x20/0x20 [ 1910.094507] ? mark_lock+0xf5/0x2df0 [ 1910.095285] ? mark_lock+0xf5/0x2df0 [ 1910.096060] ? lock_chain_count+0x20/0x20 [ 1910.096924] ? __lock_acquire+0xbb1/0x5b00 [ 1910.097813] ? lock_chain_count+0x20/0x20 [ 1910.098692] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1910.099795] udpv6_sendmsg+0x1bcf/0x2ad0 [ 1910.100654] ? udp_v6_push_pending_frames+0x360/0x360 [ 1910.101746] ? mark_lock+0xf5/0x2df0 [ 1910.102533] ? lock_acquire+0x197/0x470 [ 1910.103361] ? find_held_lock+0x2c/0x110 [ 1910.104211] ? __might_fault+0xd3/0x180 [ 1910.105039] ? lock_downgrade+0x6d0/0x6d0 [ 1910.105910] ? lock_downgrade+0x6d0/0x6d0 [ 1910.106775] ? sock_has_perm+0x1ea/0x280 [ 1910.107616] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1910.108691] ? _copy_from_user+0xfb/0x1b0 [ 1910.109574] ? __import_iovec+0x458/0x590 [ 1910.110436] ? udp_v6_push_pending_frames+0x360/0x360 [ 1910.111512] inet6_sendmsg+0x105/0x140 [ 1910.112318] ? inet6_compat_ioctl+0x320/0x320 [ 1910.113249] __sock_sendmsg+0xf2/0x190 [ 1910.114064] ____sys_sendmsg+0x70d/0x870 [ 1910.114911] ? sock_write_iter+0x3d0/0x3d0 [ 1910.115784] ? do_recvmmsg+0x6d0/0x6d0 [ 1910.116600] ? lock_downgrade+0x6d0/0x6d0 [ 1910.117475] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1910.118574] ___sys_sendmsg+0xf3/0x170 [ 1910.119475] ? sendmsg_copy_msghdr+0x160/0x160 [ 1910.120605] ? __fget_files+0x2cf/0x520 [ 1910.121593] ? lock_downgrade+0x6d0/0x6d0 [ 1910.122616] ? find_held_lock+0x2c/0x110 [ 1910.123640] ? __fget_files+0x2f8/0x520 [ 1910.124631] ? __fget_light+0xea/0x290 [ 1910.125614] __sys_sendmsg+0xe5/0x1b0 [ 1910.126562] ? __sys_sendmsg_sock+0x40/0x40 [ 1910.127622] ? rcu_read_lock_any_held+0x75/0xa0 [ 1910.128795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1910.130097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1910.131364] ? trace_hardirqs_on+0x5b/0x180 [ 1910.132438] do_syscall_64+0x33/0x40 [ 1910.133368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1910.134630] RIP: 0033:0x7fb8c885ab19 [ 1910.135550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1910.140097] RSP: 002b:00007fb8c5dd0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.141980] RAX: ffffffffffffffda RBX: 00007fb8c896df60 RCX: 00007fb8c885ab19 [ 1910.143742] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 1910.145521] RBP: 00007fb8c5dd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1910.147289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1910.149046] R13: 00007ffef72ce8af R14: 00007fb8c5dd0300 R15: 0000000000022000 [ 1910.150849] CPU: 1 PID: 11159 Comm: syz-executor.6 Tainted: G W 5.10.234 #1 [ 1910.152608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1910.154372] Call Trace: [ 1910.154932] dump_stack+0x107/0x167 [ 1910.155700] should_fail.cold+0x5/0xa [ 1910.156508] ? create_object.isra.0+0x3a/0xa20 [ 1910.157487] should_failslab+0x5/0x20 [ 1910.158300] kmem_cache_alloc+0x5b/0x310 [ 1910.159158] create_object.isra.0+0x3a/0xa20 [ 1910.160078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1910.161152] kmem_cache_alloc+0x159/0x310 [ 1910.162031] __alloc_file+0x21/0x320 [ 1910.162815] alloc_empty_file+0x6d/0x170 [ 1910.163668] alloc_file+0x5e/0x5a0 [ 1910.164419] alloc_file_pseudo+0x16a/0x250 [ 1910.165322] ? alloc_file+0x5a0/0x5a0 [ 1910.166127] ? shmem_get_inode+0x55c/0xbc0 [ 1910.167032] __shmem_file_setup+0x144/0x320 [ 1910.167948] ? _copy_from_user+0xfb/0x1b0 [ 1910.168831] __do_sys_memfd_create+0x275/0x450 [ 1910.169829] ? memfd_file_seals_ptr+0x170/0x170 [ 1910.170817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1910.171927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1910.173016] do_syscall_64+0x33/0x40 [ 1910.173811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1910.174887] RIP: 0033:0x7f06f1ea3b19 [ 1910.175678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1910.179529] RSP: 002b:00007f06ef418f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1910.181121] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f06f1ea3b19 [ 1910.182636] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f06f1efd0fb [ 1910.184131] RBP: 0000000000000003 R08: 0000000000010000 R09: ffffffffffffffff [ 1910.185631] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 1910.187128] R13: 0000000020000100 R14: 0000000000020000 R15: 0000000020011200 [ 1910.197245] EXT4-fs (loop3): get root inode failed [ 1910.198479] EXT4-fs (loop3): mount failed [ 1910.243625] FAT-fs (loop5): bogus number of reserved sectors [ 1910.245138] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1910.252254] loop3: detected capacity change from 0 to 263168 [ 1910.275342] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1910.297475] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1910.299848] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1910.302002] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1910.328135] loop6: detected capacity change from 0 to 131072 [ 1910.341284] EXT4-fs: failed to create workqueue [ 1910.342328] EXT4-fs (loop3): mount failed [ 1910.357162] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) VM DIAGNOSIS: 01:17:33 Registers: info registers vcpu 0 RAX=0000000000040000 RBX=0000000000000001 RCX=ffffc90002a1c000 RDX=0000000000040000 RSI=ffffffff8129cb61 RDI=0000000000000001 RBP=0000000000000200 RSP=ffff88803abd7590 R8 =0000000000000000 R9 =ffffffff8686c6e7 R10=0000000000000000 R11=0000000000000001 R12=000000000000002b R13=0000000000000246 R14=ffff888049353480 R15=0000000000000000 RIP=ffffffff8129cb63 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007eff16b7d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff16b7cf78 CR3=00000000485f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007eff196ee7c800007eff196ee7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822dde81 RDI=ffffffff879f3140 RBP=ffffffff879f3100 RSP=ffff88804513e590 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000065 R13=0000000000000065 R14=ffffffff879f3100 R15=dffffc0000000000 RIP=ffffffff822dded8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb8c5dd0700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020002000 CR3=0000000048e8c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000