0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2, 0xe0, 0x2}, 0x18) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r5, 0xba56) lseek(r5, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xff, &(0x7f00000002c0)=[r6], 0x1, 0x0, 0x1}, 0x400) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) mq_notify(r3, &(0x7f0000000140)={0x0, 0x3, 0x2, @thr={&(0x7f0000000040)="d40ca143087d1ebd7390eaf254c2bc34e5173b8217f2d6de5f9558c35d1d362b7ccb9dc0e39bc078b87fc31ff912ca5f4b915d23b49a3321804fba2014ba4b6093afa34effaa7c3bdeeb5e50c55ffdd32c22252e6091f458403be73fa2d3e70af444d0814dac76ffc8c4d152efa6294b9f80725571210d14b713b4b48cd4e9638f652c63349219a6cac32eb847", &(0x7f0000000100)="645f8a04c7425bb7713af59839b6cc1112c9376a30bd058c842f87a041506dcc274769ecb8"}}) 21:10:37 executing program 7: timer_create(0x3, &(0x7f0000000080)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000140)="cefae3087163f65245a52ef9f14b8c086ffa230394608c802804fbbc1d54445d19142d37968aaadc47e6f8e19dfbcc3128f5996e59e7a1efd3d8ee00564c2f6e765572944c7d44462441a70b57dd90771d8a5cf5ccdc6ee028c9087143022c4c3dee1113f8ab80b2977fde7f51d0655697c6d23b8e21ebd337e6c2df9cda014e6b2eee594c4b2c8b2d5d8f072077375b05a5ebe2043d722adad4c359875cda6e1c10bd2fde", &(0x7f0000000240)="c4c91f0271a8799692ea32b985e6af311dd184f6808ba1bebb16077306920fcb861dcf677981e3c9dc26ca385fe0c0e2cc265a22ffc5a78fd7ca1a63ff8203e8715cad32475ec5f6d9b3aad7cd1bd8603c4aee01c30ce247d199cf4abd34a6cf85506a78c4c6dc1ec9bb2be4c1eaa5043e4da7c3e8b8106df66050a260"}}, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x100000001) 21:10:37 executing program 3: wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:10:37 executing program 6: set_mempolicy(0x4003, 0x0, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:10:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x5) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) r5 = dup2(r2, r2) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x20040000) r6 = openat(0xffffffffffffffff, 0x0, 0x36400, 0xe375d1901a7fcc3b) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB]) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7ff]}, 0x8) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000180)=""/155, 0x9b}], 0x1, 0x0, 0x0) lseek(r7, 0x7, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 21:10:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000140)={0x1, 0x102, 0x6, 0x9, 0x92e, 0x4}) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00ed04000041899b091ab554b9d40a38fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000ac25b3577dd467454d3a02e68d10de79b1f22b4166973215c76a9c0aeea6726b474bc810b9c1381c84edef7ab82346576362e238f93736d2bd7e0d4bb0333b4a4d90290177e1c1c186d3429e9c8b4c5f30620b4593b897cc89d808afd9df5a547dd7bd104bdb55d4ea1c15e1fc724219aa235a1bafd6eb0afc7b52a2d68fa9853add7bce2caf5eabe1340e3e7c90fed879c2ef407d8551c9fd9e83817cb6d9b2e56febe8"]) clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x7, &(0x7f0000000100)) 21:10:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 971.733378] kauditd_printk_skb: 23 callbacks suppressed [ 971.733399] audit: type=1326 audit(1764191437.862:2237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 971.747135] audit: type=1326 audit(1764191437.875:2238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 971.752019] loop5: detected capacity change from 0 to 33559552 [ 971.767841] FAULT_INJECTION: forcing a failure. [ 971.767841] name failslab, interval 1, probability 0, space 0, times 0 [ 971.770250] CPU: 1 PID: 8172 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 971.771698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.773479] Call Trace: [ 971.774043] dump_stack+0x107/0x167 [ 971.774827] should_fail.cold+0x5/0xa [ 971.775636] ? create_object.isra.0+0x3a/0xa30 [ 971.776608] should_failslab+0x5/0x20 [ 971.777430] kmem_cache_alloc+0x5b/0x310 [ 971.778291] ? auditd_test_task+0x11e/0x300 [ 971.779213] create_object.isra.0+0x3a/0xa30 [ 971.780150] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 971.781235] kmem_cache_alloc+0x159/0x310 [ 971.782118] audit_log_start.part.0+0x27e/0x730 [ 971.783104] ? audit_log_task_context+0x170/0x170 [ 971.784120] ? audit_filter+0x5d6/0xb10 [ 971.784978] ? __bpf_prog_run64+0xe0/0xe0 [ 971.785854] ? audit_compare_dname_path+0x120/0x120 [ 971.786642] audit: type=1326 audit(1764191437.876:2239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 971.786902] ? find_held_lock+0x2c/0x110 [ 971.786933] audit_log_start+0x5f/0x90 [ 971.793110] audit_seccomp+0x5d/0x200 [ 971.793917] ? lock_downgrade+0x6d0/0x6d0 [ 971.794793] __seccomp_filter+0x669/0x1530 [ 971.795695] ? seccomp_notify_ioctl+0xda0/0xda0 [ 971.796680] ? __mutex_unlock_slowpath+0xe1/0x600 [ 971.797710] ? wait_for_completion_io+0x270/0x270 [ 971.798735] ? fput_many+0x2f/0x1a0 [ 971.799504] ? ksys_write+0x1a9/0x260 [ 971.800318] __secure_computing+0x191/0x2f0 [ 971.801244] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 971.802370] do_syscall_64+0xf/0x40 [ 971.803141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 971.804220] RIP: 0033:0x7faa61231b19 [ 971.805023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.808927] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 971.810539] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 971.812051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.813568] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 971.815422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.816947] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 971.820826] FAT-fs (loop5): bogus number of reserved sectors [ 971.822302] FAT-fs (loop5): Can't find a valid FAT filesystem [ 971.832733] audit: type=1326 audit(1764191437.876:2240): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:10:38 executing program 3: wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) [ 971.882046] audit: type=1326 audit(1764191437.876:2241): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 971.899655] audit: type=1326 audit(1764191437.876:2242): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 971.921626] audit: type=1326 audit(1764191437.876:2243): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:10:38 executing program 6: set_mempolicy(0x4003, 0x0, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:10:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 971.952350] audit: type=1326 audit(1764191437.876:2244): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:10:38 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x18000, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB="2c776654dd646e6f3d", @ANYRESHEX, @ANYBLOB="2c63616368651d6d6d61702c64666c746769643dbadb86a5fb1236e7c735e05590df1549135a76cad5ad1a930c4d54da7068fed50198fda2da0cfe16e245ead0cba0fa9a300c55033f47ceb28ed7b8aacb7257fd605f0609f915093e288d2aba56beef241f52cd7c5a860f5bc6e41d", @ANYRESHEX=r0, @ANYBLOB=',cache=none,appraise_type=imasig,seclabel,func=BPRM_CHECK,mask=^MAY_APPEND,fscontext=staff_u,obj_user=security.ima\x00,\x00']) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x3e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000000c0)) timer_delete(r1) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r3], 0x4, 0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1}, &(0x7f0000000340)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14ebfff81500410d000000eac6b5b1da0e4b57d0810000200000dd1822f9d4b22259bc2f2466848432f20432c634861790f42dd7a3675833d5e1103f19e967ebecbbe73b4b9d71f8dfb6a12cc12cebc2084fe3f92877605f4dd993b3114b74a6b926242169e2a1e4c123a842af7a2ea643055e1189c4e1dcbf2ff200000000000000"], 0x14}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 971.978503] audit: type=1326 audit(1764191437.876:2245): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8169 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 971.994158] audit: type=1326 audit(1764191437.876:2246): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8165 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:10:38 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) dup(r0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000779703d2fa0c26ee0005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x20091, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x90, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) write$vga_arbiter(r2, &(0x7f0000000000), 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)="e10de7241ead01197b740010c0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc00e0ca725f43d1effea1973bbea76c068670cb8a3e0712eb0ad27b4ecca6ffe2788e474323398fbed8c3e3720315302393d70bd288ca5d3391def8d2e401c97e234adad19af360eae15d53c7c8c8033f45d47fceca6dcec03c8a544736aacd5a5aa7a70678b759e9ba29c805e2c670290236675", 0xffffffffffffff28}, {&(0x7f0000000980)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629c04000000ac1112747616f5b7262d230885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) [ 972.085784] FAULT_INJECTION: forcing a failure. [ 972.085784] name failslab, interval 1, probability 0, space 0, times 0 [ 972.088226] CPU: 1 PID: 8195 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 972.089714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 972.091486] Call Trace: [ 972.092050] dump_stack+0x107/0x167 [ 972.092828] should_fail.cold+0x5/0xa [ 972.093661] ? __alloc_skb+0x6d/0x5b0 [ 972.094471] should_failslab+0x5/0x20 [ 972.095284] kmem_cache_alloc_node+0x55/0x330 [ 972.096247] ? trace_hardirqs_on+0x5b/0x180 [ 972.097186] __alloc_skb+0x6d/0x5b0 [ 972.097968] audit_log_start.part.0+0x2a3/0x730 [ 972.098963] ? audit_log_task_context+0x170/0x170 [ 972.099989] ? audit_filter+0x5d6/0xb10 [ 972.100840] ? __bpf_prog_run64+0xe0/0xe0 [ 972.101731] ? audit_compare_dname_path+0x120/0x120 [ 972.102793] ? find_held_lock+0x2c/0x110 [ 972.103663] audit_log_start+0x5f/0x90 [ 972.104496] audit_seccomp+0x5d/0x200 [ 972.105316] ? lock_downgrade+0x6d0/0x6d0 [ 972.106195] __seccomp_filter+0x669/0x1530 [ 972.107100] ? seccomp_notify_ioctl+0xda0/0xda0 [ 972.108086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 972.109139] ? wait_for_completion_io+0x270/0x270 [ 972.110169] ? fput_many+0x2f/0x1a0 [ 972.110945] ? ksys_write+0x1a9/0x260 [ 972.111494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 972.111760] __secure_computing+0x191/0x2f0 [ 972.111786] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 972.111811] do_syscall_64+0xf/0x40 [ 972.116399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 972.117496] RIP: 0033:0x7faa61231b19 [ 972.118292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 972.122223] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 972.123856] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 972.125399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.126929] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 972.128453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.130001] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:10:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000080000000c00018008000100", @ANYRES32=r4, @ANYBLOB="1c0002801800038014"], 0x3c}}, 0x0) r5 = getpgrp(r0) tgkill(r5, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x5, 0xd9, 0x3, 0x0, 0x4, 0xd908c, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdeb1, 0x1, @perf_bp={&(0x7f0000000100), 0x5}, 0xb505, 0x2, 0x2, 0xc, 0xfffc, 0x3, 0x1, 0x0, 0x3ff, 0x0, 0x8}, r5, 0xa, 0xffffffffffffffff, 0x2) 21:10:38 executing program 3: wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) [ 972.167160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.168760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:10:38 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200), 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 972.190863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 972.225147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 21:10:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:10:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 988.504949] kauditd_printk_skb: 105 callbacks suppressed [ 988.504961] audit: type=1326 audit(1764191454.633:2350): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:10:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/107, 0x6b}, {&(0x7f00000000c0)=""/53, 0x35}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000140), 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/61, 0x3d}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x2, 0x2, &(0x7f0000000600)={0x77359400}) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) ptrace$peeksig(0x4209, r2, &(0x7f0000000c00)={0xc0, 0x1, 0x4}, &(0x7f0000000c40)=[{}, {}, {}, {}]) process_vm_writev(r1, &(0x7f0000000740)=[{&(0x7f0000000640)=""/213, 0xd5}], 0x1, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/226, 0xe2}, {&(0x7f0000000900)=""/76, 0x4c}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/61, 0x3d}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x6, 0x0) 21:10:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:10:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="01b402ddb74ef5efeb650deb5d721ac376d7ce22254e9e5152dff828ae9664b58db9ae32bc6658f02893787a1f0620063d620f271a8a68b48b9bd20e1c93e7d88b8b83bfc340d15df550ec2b399c821ed1ecc73c624d701ccf50552b5b1d042a6868e17dcbc4", 0x66}, {&(0x7f0000000080)="dd148c86570b984ac76f2df456bcf75836a4bf417498fc838ed50962d0fd79251b31804edc531aa4b9f426ed7722dd1bdf1885", 0x33}], 0x2, &(0x7f00000001c0)=[{0xb8, 0x10e, 0x7f, "85f9625d5a85c95a7b0ef6b57c7f615a45ea7a9a27032c0ead9461332f2101a7ca30d2ce9f9b9ef7af12a586cb1b1001a548025083a86f933d5e93818d7f6f8bd9c573b2a020631e052aa4ed31ec0274256b4c01a9f7606c48dd364bb122a870d2c8975e56a35e9726e36996950dc52c59868ee7e7da36da2eafe1dd571bc37f81b3ebe4c5b8cc7bb2c6c64dcad60a54f489b09717c6a30c514bb9a7a46164e77be6d4a3d3ca8b"}, {0x98, 0x88, 0x1, "c330d98fa90ca3aeb6a4deb003635455b9c89bafedff9c99cb2b3eb5586eb59d9d8c20aeff197394e04bd3915f9d83df0c2702a9dbfc40c835a33795ab3ae39b1d58cbfa8d0f013feffe31e31638630575c63159780d055b7bd02ad1bf9e96259344139096d016eaa5106e963d41e82e8789172574635c70b8daf5ebc7ee8b7fd3e0acadfa"}, {0x1010, 0x204, 0x1f, "c219b7987a435778896c072c684a424aa59dfb81f9d09d8f98e4a834a9c992a7cfda2e381db4d103eba50f554a13153055430611cba831284e8ea39270083b85be6fffed3666f35092edce41bcad8a2886f1cc492d263813e8c385bca73ff26065a0a4c344c9915044d682bef03aa487cc6956e6b82d60541730dff7def35066782ec8fc55f63190fc8c03eb1e7e28699b3259ff241c6648d0e9d4a3be935d110e418e1f49005f2c31aba072f4008d345ebc030806002ce598651d389f779ce6554b638d601b00336b64be237af199c2598bd11f1d8a5dafd42a1c7c9edd5e5805fd0b406107c6cce20129a220859ab44a6cbf41b6531a07f86eda5c26fa5067ee1709458f000c413a764797f15cb564bf5ab2e832030f2f1f0f666989c3cf0ba421acf1367550feeaddce23ced1ccbfb57d6f906c4cd6d2aab6d5e124eaafb3270556ac9896c3422af4d7a6e2f4b1aa19fccd936ec4e563dc6cb341f45dceed468c1c70365f133b880e2ed2be513653ccad7ddb0ef5ec39c1169f191c47dd021ff34cc07d4e3b268070b76edfc6cd8640a7ddaadaac12f4107d3feecfe436f5e44ef8204deef3719dc572853bd559011e5f8d47c6ee62c414ad927416c7ca19d3f67f427ef50b71671d294d122f21a8890301086c111e6388c01e87bf29de995ff357fd5dd2e2cc6471c7a99c4ddd77cc9ade5714f3666450c10d51a4c96096f413a163794bff55ea948b332721875f682e060777721745a43feb0ec84bd4c36a1ad5831203c2adc645a2ab7c1a5a9f228fc6bc60ccb392e71864573af446301b263649855714c45d2a89b58dd1e49fcff572799cfab8b43d48af01a5a5ba73c4d19548d6c53c6fcfe3981b8b36a7738b420d1541d4efab1f3042d89c51f8062dfae69a8fdff8d7ded06ce92d3177334626051768ae7689b4240328771a4c8cf53f941310cdfda4e1debffc9c5a0cbde6b19726478602db3523821ac42e35bea2c323d110583fa79a966b83afbb4f96822add3770de4922a24715084062959ad751ff57fe9da11af08cac3c06e7927acbb9f27b19c41bb3b53815863cfa5eebb95bba275774209810f134015132febf52f81ca864a53097ba07cd2baac407dcabccbb662277a683a963636500610e2e4f3c39f20d6fb296d8e2c24088da73609d2dd028c42699969310ba85dcd4a8919cdb67ed9d9f5e0d323786b0b0de39d3b6d83b017aa93bf22a85dfa15d5a0a79ce76b9c74be6f55c7e354d21df5b424c953834438a92d2d988ed5411a96910ae849c8a52e765b2a38eb4b290d4dce49f399cd29dae2cf0a07d8bcae51c28c56589c3d203d8f530da119520b35a6a47534a0221ce865ac18ae963f5416bfb81026c1f9e32c7fc9100bd3ab088ca8dbe6e89ceea5a85ab04ca935ab5f4ce0ee8d542b4fbd9041191b198307a7b203ddd77c8c4d93f6a0c36b87827be515b96fc7d4b46a28015ba383446a2654bc81b4bd2b6d13a9a9d6f1797b5e455df5acc6d91e0add4287841db2e43c7eb228fdefa6e21a63996c5f03b1708a08b5f8d65523ffb7b85e41c2b8be958a1615f4f3d6b9da43e3ee0389cf449a1be6baed1373da101bde0b27491eee0321594a7ed321e7593a4facbcb0e94bba220e0ca3c39fb65db5bf594103e25b9f2ed448e05ef992cd5bae610aafc2910cd18694062b87cb494ab166f9766e02ee92d8d708bd69b89361e0ba9c8146500bda9b1abea01ded395581863a27506e0bb2b3c92926401affc53ba2e12bfd470d12924ddba42c004958fe55209fc35b9ee96822c0f1a9bde14d7c80ba701b67390572c16d62dfac3285fea21c56ce76bdcfb42827f91559e406f17b3d95461d3cbb125140618b2cdfc9309aa79e792badecaec9642ef6744e2e004d3c5195cccbaef04f10a2258c6271422525be0a4f0501e26c859ec510b9ab5a2dd583cc39bda8ca2b3914dfdbd95c1e7a2866933af516fea1572d914e86ebd24022a1a149743957b9409fc616db1cc97073b7ea56c9e646169a4af9a9893ab84b9bba9d4b9caad732162ae8035073da883b009095c4854c81a1e9b8c338cd0ad9018d2580ab4c8cfebcb964f6a00efe65790be71e3360acb90072d4d730bca9ca3f6754f8fcd0f3ce5fba313864c87a6a294c463632483baf8ba9fe1faa1682c947efa9db345b97c9e54d47f24a1e7daa001d8dcc708b00b86811e8045c64a2d717c86f7d1ced23cad7d0193c2bedea1deb06a551f0d7c3af0a1c4873c9ce6ee8f567eb1251494bfbaa42bc5a9f8deb908e457cbf5fc356b242ee799208a01538c5f91981d180e70815e56699d513d36b8979170093d40d76bcfdd20b48fd05b84119e01e993a64f44e2df6af59542e59c440649585f2fb80b73046a8314ea635cf87795ae0c29c3efcff7ef95131890a0e446932c5a2b0cc25fcd4c2574451ee01fa452ab1bb3029a525b3d8df16c83212207b28b204970bc1ee90be30efabbb2662479130416d407ca039229cf005eace11c2e417c129e42d594cfe8413298509ebed4317b8ec31cb1375376a5b7d7c3fa5f2986e1d2290875f05db643ad91a3b567d89970b95cf5885ff1169edfaed0e68267b2fc0b64ce127fb09015780db39e85db26483259f43262c81ccb8239f88b8c37a0bc96c1ced53f09da81c1ea610a9acb5b4d294c415229abc180752219f947fc75185a90ef13b4f5a90c69f00f0df9643cbb6355de8382aa1c48997bd56ca358e0b3803c91344a244dd59916abb6a1d203486321c22dcbca9197363dbf3c9c67e5cd32f21ddb2003894ab6f5e8dca8e16db9fddf9e0f5d8be1e65be7a44a5354a31a05c974746744ab4b166fae3c379ef6209cdd79b87f56bdb0a502f6300b901778658079b7649c25d453ba1956b6d5f9eeef3301f156cad625e9b64859a71a1d8544a8e1b83d6be0465347f0965369dd4eb0bdf49ec45b5ea62a042161274a0ea43b4a6322d6d2fce03a82a445351135c239f05f722505fd18bb1aa17801e8ffa9032a1493135c6a85f716b8f2293f7d5a393516a35564aac15b61ec39e661d40b58afcd5fd36f710cade69fa0f018cb4754080ef1a676b388ae47a179621872b8f553f6a20abe47033629d1531ec96d75733ae1bcf9f41d2c8fa1fb028196ce39b48850a9c7ec5493ebc39d50d5ba80f43db4517445be55c6806e8d794db21fae9169ae7b30111bb142e0f9434b3ce84a694aac54df5cd9ee30b3b4b4858ffe25d8a7517d22036aa81301fb6ec6ba9d413b554f71a6f9af3d65f49f5fe9e33025fbb193cf3d7b3e1c44cad5edac5235d087dffa3df5cb5c4cca756af748de8a27bf6cdbdeaaa8695961dc6b46db3b4e2579431567b500a1fd3fe764c173778e47607cc6f3410e472fb00cb85f4d33648d6d20dc4ce78902215cbb11171caf204f8341aa07010ba85853fe17531280d28e674e382c51ea0d51ba7ecd2107a315d6ab231a8ea1378b2c9661e526558861a412ea86596b278ac93c2eb45d8bbe860336421021c6d375de16f0ac95cddde3f785f5da7a55886cc9b605bce44d4ad2da852dc80569efcbbeb78f7b86de896e82036fec30264c59b42c174c9d9c2bf06887fb7ef6782c317304db69558688d761479bd51c48b49ba1e6d33e98d5ac87d03459317074304366334dd04741569c2d049ac1f05a1f629a04e8142941506c3b99fc536181a01672bc78b1a1963fff260539245b3567580f5b580c76d7f2b3b4a5f3fa7903dad5f5b7593d1a966d667e7b616d1cbd183430e6f866607a6ab8a8364ed81ab7c7d055694d516481fafed00c78e06f625fb2d25d74603e9d21240ed8cb700fff4ecb48d35ec302323c654ec70b9640949f4f474637d9e70e543264cf267d99b6d5ac81dff521dd9d0818bf394ce565857195d140032a92f7a1e83ca75355aee9c7951ab055a5acfd189127e3941e6f7b1d7779065809de9e504164d6fa12f7ef6d4f8fddfe6a6b6709a063a368b878ea9559c015ffdeebeb55c28be997459c099c4887648323135256a0c48585cd762ecaf6c4d4c0c71efa60042d97b315f10176d0a47afd2c5f65299ad685465132bd5b8f4726702d36309464d8ce56b7475e9f106c1156c6d2307434ef0af564a173b3183ae956b826fdc79261300e30ab98fc3578fabce612b2b03a4087308ccde513139acbd3459a430b21bd3de8568b17cbb814afc8bb3b79ec469d51ed32250fa14b0a2f3720377ac084c5cb8dffd84fdbce0054ff96261a72e29f85ac736523b8f7093df00d3d8dbe589c01e353e7712ec9e8d057563c12ca2f508ae080a698f7184f987d76ad4f12ee3d4bfe22c0a606490edaec7e5e66fff4534e5c537d1f79368cbe925cf529ed0dd7a6b3897e4c60746fb0c195abc8cf4d4881c4119a257566fe8c2068705d243025f24d8a3665f989ae535047a5a769e3089d83e33c3e5a2bfdbbc79bc88b569221d1043cca5feecf93238fc5b4bf08f6ac73a373fffcfa41f63f4fee9c7eb84568483b65d9d1b7194b87ba9efa7d9af596fbf1fe8bcafa9639610ee528631febd43dda920d6efb86cf137c75dcd9433226f662438bf36fda146dbb3f922e2da1ec904c673500e49603636d51b6a4e03eff2739a9bdf0830bb5f9ba5f1190d31b18ee5dc62a2cf30e60578e558e378b8f6515e253b5462301265d3096f45d36d8081cfbef80f5633febae5b80a9eab561b549e13eb65ff54e8f45b4d38db29964c47accf60953cbfb1682e070fafe42ad46248b190fefe231b472da548d4db10cf59bd772fb61ba90175332cd6589ef4c14b910bc0553dd738f065d2ee5f6e8cdba02af7bd3a98eea09fb263202d22cba358a8a7c2760b8aee493017bb1098194df43b93f7c9c4481a579636240f21f7dcaed15b293a3c77bee0c4fd9995a82c78c4911e3ff019b9f11378e6e4b51fef6711b8e0d4f69fe43ad4040b2a5703e1b007cadaaa22b03dcec6b348e7007621cabe1f5eddae8181e805a1c934f7e36426f0d58e441b926fc0671dfcd12c1cb13a2497a2bab3e408ed9349c29999a5849cd4d6b6d6a81ff38b0ee186c10e1a4d42af54e21ff21406d6f22ce92fa6a6e7a2c4248b98e922ef5a28fdcdbee009538e970ed3119c24ad538068f1efeb856deaf2a77728b3db8ca020cc91766587d0296d51c7e0af279092994cadf1d78782d9712dcd1630c9deb4d7b85bb95e5ea3c1c16552d9a4ce01ba99c571c5cf0df0460e81308c987d4285fa629ac448157c916a4555364f202420ec6e2d3c06523446f18784b178d2c76cf3e53f480023d8a64102d4d225a2d985bd9d256faa1e420c87557586d3e3892663d05f471ae67ea8fa3efada69d6df91b3b5ad10d284ccb64e746cebe910164a63bf81611e973cc3e600be3af3c50605e1556073032aca0517ddb889aa7c510a155a97802dccc7f402f91f760da5c13a56c2eab9a3d839165765d8421e3b844d1dc748536dba96da265ec05aa129ee3ee5deeed6bc21bad274736175d0dd1ab2cc75c1d558948bbf3917d2db9af3fdf2832a2bd759d30851e92c59c736e3165b7841573c9d2d92e7678519330585b2d31024f136e2e4aafb7e80d5f806648f69d890d511b9e9e2628ec0223f8abb9889b3afab7faf68d4c65ed1650b51e821a964094475db0b138fe7fd57d9ff501bc7c2c6d38eb69d0f78c148b00f7b0443693810bd429275b19aa52f27eb925ed1d2567b8b7fef343472e48e36c49ea1e12737e9e9bc32da516b87999da72860df070f514927094b1ff164f440be54adb61"}, {0xf0, 0x111, 0x0, "8b2af198ea7250e2084fe940f8cdfcedd9342363b6487ed9fb9eb2fc592f725a64376d3a02399eed70c4036c1e187bfa4a2ebfd00ea454ce2b01af37d5bef6a172e2569e9caae0c9f0f6b8aed315095fffe7afb8e7efce419eb39f1a725a7b6db3c4bdb4dca088851710de384d0671bf31df255f4efdbc0ddd3e130367331fa41a2622cb3c80fd2ca70b0a717d4d509f5e8d61b176bb956452600f77f82422826c21422f28acae611fb1bfd5de484ada51388a3de14f3802e7031ed5a6ec0ee241254dd7cceed2eb9e68c4092bbc02be5bbb068d4e4dc34f14fd3855bc5aeb"}, {0x70, 0x88, 0xfffffffc, "00e772142f30c5b1689ffcdc2fc3ea9594ae1e160f439d676512e2373b69437e433d4ff1931338f8692a2a51af55d679fe502a8871ec9b80d1905dd183d8aa08c6fec7bd16b92922c96e9ea974960481ad76395c7987ddf96a0f306cbaaa"}, {0x20, 0x1, 0x3, "891bae3e008a42f2d3852e13"}, {0x110, 0x110, 0x8, "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"}], 0x13f0}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6gre0\x00', 0x0, 0x2d, 0x0, 0x8, 0x1, 0x44, @private2, @loopback, 0x40, 0x1, 0x3ff, 0x5}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001780)={r1, 0x1, 0x6, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) [ 988.512626] audit: type=1326 audit(1764191454.634:2351): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.516771] loop5: detected capacity change from 0 to 33559552 [ 988.522405] audit: type=1326 audit(1764191454.639:2352): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.531585] FAT-fs (loop5): bogus number of reserved sectors [ 988.532481] FAT-fs (loop5): Can't find a valid FAT filesystem [ 988.534585] audit: type=1326 audit(1764191454.639:2353): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.538041] audit: type=1326 audit(1764191454.639:2354): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.541527] audit: type=1326 audit(1764191454.642:2355): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.543121] FAULT_INJECTION: forcing a failure. [ 988.543121] name failslab, interval 1, probability 0, space 0, times 0 [ 988.545076] audit: type=1326 audit(1764191454.642:2356): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.547588] CPU: 0 PID: 8223 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 988.551026] audit: type=1326 audit(1764191454.642:2357): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.552523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.552530] Call Trace: [ 988.552559] dump_stack+0x107/0x167 [ 988.552583] should_fail.cold+0x5/0xa [ 988.556061] audit: type=1326 audit(1764191454.647:2358): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8216 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 988.557931] ? create_object.isra.0+0x3a/0xa30 [ 988.557951] should_failslab+0x5/0x20 [ 988.557976] kmem_cache_alloc+0x5b/0x310 [ 988.558493] audit: type=1326 audit(1764191454.647:2359): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8217 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 988.559233] ? kmem_cache_alloc+0x159/0x310 [ 988.559259] create_object.isra.0+0x3a/0xa30 [ 988.573631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 988.574736] kmem_cache_alloc_node+0x169/0x330 [ 988.575740] __alloc_skb+0x6d/0x5b0 [ 988.576537] audit_log_start.part.0+0x2a3/0x730 [ 988.577569] ? audit_log_task_context+0x170/0x170 [ 988.578621] ? audit_filter+0x5d6/0xb10 [ 988.579499] ? __bpf_prog_run64+0xe0/0xe0 [ 988.580400] ? audit_compare_dname_path+0x120/0x120 [ 988.581490] ? find_held_lock+0x2c/0x110 [ 988.582378] audit_log_start+0x5f/0x90 [ 988.583224] audit_seccomp+0x5d/0x200 [ 988.584057] ? lock_downgrade+0x6d0/0x6d0 [ 988.584960] __seccomp_filter+0x669/0x1530 [ 988.585891] ? seccomp_notify_ioctl+0xda0/0xda0 [ 988.586901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 988.587950] ? wait_for_completion_io+0x270/0x270 [ 988.589225] ? fput_many+0x2f/0x1a0 [ 988.590028] ? ksys_write+0x1a9/0x260 [ 988.590858] __secure_computing+0x191/0x2f0 [ 988.591800] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 988.592962] do_syscall_64+0xf/0x40 [ 988.593766] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 988.594881] RIP: 0033:0x7faa61231b19 [ 988.595688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.599680] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 988.601355] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 988.602933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.604486] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 988.606040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.607582] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:10:54 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200), 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:10:54 executing program 7: r0 = syz_io_uring_setup(0x3862, &(0x7f00000007c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000180)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040002}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000d00000008000300", @ANYRES32=r9, @ANYBLOB="23000100b371ff00"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250d00000008000100030000000c0006000100000001000000083a0c000600010000000100000008000100030000006b000300", @ANYRES32=r9, @ANYBLOB="080001000100000008000300", @ANYRES32=r10, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x240080c0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000600)={'wpan3\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:10:54 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x77359400}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x20040800, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x4}, 0x80) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2002) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000180)=0xa7de, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0xfffffffe, 0x20, 0x3}, &(0x7f0000b87000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd=r5, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)="82cb5857064c8f17250aef0d675f787ea9e6dcca8029a09b98dbadf4a8cf298bdd7c182273baee7adfe88ec82f2d3103e7e1f346a491347ae0c318ef9f812330171e81d5f0215c8ccd7939d258b1a52ef61479e809b09ea6ca3e202b92d25d567a59d94292a3d03ce5ac16de0f73e455ad0e", 0x72}, {&(0x7f00000003c0)="2c066b5c49a48140a579db3bd3aadfe40532c6eb532dc6c32fe055aa7b74e09b6be9b39a8b28c09fb4decd5d1028964f1d04b83d5fe18bd8", 0x38}, {&(0x7f0000000680)="c5e71920dbf4549abb336517f2f70b0a1d74e90b8b226d7db33e96c2c843fb29ed598b3d4379b33eae160069752e3a44500b3126211bd89b04f2abc7db3eafaa4963716599912a6a11dfd2b9a7d0bec13bbeb796d173bae0fbb6bf74fce9557a10872a4f665c0e034a85a15d7e438dffd5c87389635c64eaddac98fade370b6155acf48b3d01652d18ba55f2a3d86e6e4638da5637c0d360c5c5d0f44090e9d5898b6e233aaafa94b07911b30c462c494d84cc4177143a63197b34e90143b8afac900ff2e21d0ff044ead70ae7f9f85b", 0xffffffffffffff02}, {&(0x7f0000000780)="f3ad28d8dedc82c64cb52a8a898e92a62d69cb6fe7cbf8b7a22160697d19497b5acbeae0beb06fb116f141d47222513bfcaf1c2fe807628ba35e62358438d1d06db5184a905b4c735d24ef557ab2d75a7120ecaee22cb4a8e15cce831953277652c8c9c3c77868768dcbc3674d312dc59112ed51c76f16a1650f9496ec3c80ffe68395fc11ff814e17f8dd46593681f72b60e27a9223d4e6b9d9cb7d612943d485ec3ccd23109882", 0xa8}, {&(0x7f0000000840)="8bf63f9fd1b4f1a0bcccead1e7a890db444008bd5eb61f335838e0e3144ccdcec61b99d36f64f2872bdbf8f0a8f234ea026ba1e1e3756fcac1209f9f86781384c5d6302a4e4c6a18b0d33fc770dcb92ace962cc5b282acd197efd9d2b3063818", 0x60}, {&(0x7f00000008c0)="0c524c84e1a3b8a2f57265ced85aa1a71068964fc6583c6004ca1053c68e60929332850b6a90abfcd09a43e84e984eccfc94ce9f805815941d409b16", 0x3c}], 0x6, 0xe, 0x1, {0x2, r9}}, 0x10000) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd_index=0x6, 0x81, &(0x7f0000000080)="124ee2f91d95dba4fd739f12ecb9a2c935e9388b7b747bc4d073167c992fe335464695ddf69bfc4cd08ad4", 0x2b, 0x13, 0x0, {0x0, r9}}, 0xfffffff8) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x80, 0x18, 0x1}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x401) 21:10:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:10:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:10:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) 21:10:54 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200), 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:10:54 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xde, 0x7ffc0000}]}) io_uring_enter(0xffffffffffffffff, 0x62c2, 0x9d28, 0x1, &(0x7f0000000140), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x8, 0x6, 0x6, 0x2758}, {0x100, 0x4, 0x3f, 0x6}, {0x2, 0x3, 0x7f}, {0x3, 0x0, 0x0, 0x7}, {0x8, 0x4, 0x3a, 0x8}, {0xfb34, 0x7, 0x0, 0xffff}, {0x678, 0x3, 0x0, 0xa}]}) r2 = getpgrp(0x0) r3 = fcntl$getown(r0, 0x9) r4 = getpgrp(r2) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xa4}) tgkill(r2, r2, 0x0) 21:10:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 21:10:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1081, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ftruncate(0xffffffffffffffff, 0xba56) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) connect(0xffffffffffffffff, &(0x7f0000000240)=@isdn={0x22, 0x1, 0x0, 0x5, 0x1}, 0x80) syz_io_uring_setup(0x2c9b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), 0x0) r2 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x382, 0x0, r0}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d77", 0x14}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5fb3, 0x0, 0x0, 0x3de}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000003c0)=0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 988.846064] FAULT_INJECTION: forcing a failure. [ 988.846064] name failslab, interval 1, probability 0, space 0, times 0 [ 988.847852] CPU: 1 PID: 8256 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 988.848885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.850251] Call Trace: [ 988.850612] dump_stack+0x107/0x167 [ 988.851132] should_fail.cold+0x5/0xa [ 988.851705] should_failslab+0x5/0x20 [ 988.852260] __kmalloc_node_track_caller+0x74/0x3b0 [ 988.853035] ? audit_log_start.part.0+0x2a3/0x730 [ 988.853710] __alloc_skb+0xb1/0x5b0 [ 988.854203] audit_log_start.part.0+0x2a3/0x730 [ 988.854849] ? audit_log_task_context+0x170/0x170 [ 988.855495] ? audit_filter+0x5d6/0xb10 [ 988.856046] ? __bpf_prog_run64+0xe0/0xe0 [ 988.856604] ? audit_compare_dname_path+0x120/0x120 [ 988.857281] ? find_held_lock+0x2c/0x110 [ 988.857832] audit_log_start+0x5f/0x90 [ 988.858461] audit_seccomp+0x5d/0x200 [ 988.859073] ? lock_downgrade+0x6d0/0x6d0 [ 988.859647] __seccomp_filter+0x669/0x1530 [ 988.860225] ? seccomp_notify_ioctl+0xda0/0xda0 [ 988.860849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 988.861501] ? wait_for_completion_io+0x270/0x270 [ 988.862151] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 988.862780] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 988.863653] ? ksys_write+0x1a9/0x260 [ 988.864168] __secure_computing+0x191/0x2f0 [ 988.864763] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 988.865635] do_syscall_64+0xf/0x40 [ 988.866168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 988.867044] RIP: 0033:0x7faa61231b19 [ 988.867547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.870161] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 988.871335] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 988.872497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.873520] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 988.874479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.875444] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:11:10 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x0) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:10 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28020600) r0 = fork() tkill(r0, 0x3) r1 = fork() tkill(r1, 0x3) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) r4 = dup(r3) setns(r4, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket(0x21, 0x800, 0x7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)={0x2, 'rose0\x00', {0x8}, 0x40}) 21:11:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1003.932468] kauditd_printk_skb: 73 callbacks suppressed [ 1003.932479] audit: type=1326 audit(1764191470.061:2431): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8263 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1003.935691] audit: type=1326 audit(1764191470.061:2432): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8263 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1003.939677] audit: type=1326 audit(1764191470.068:2433): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8263 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa611e4a04 code=0x7ffc0000 [ 1003.939694] FAULT_INJECTION: forcing a failure. [ 1003.939694] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.939715] CPU: 0 PID: 8264 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1003.946249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.948154] Call Trace: [ 1003.948769] dump_stack+0x107/0x167 21:11:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) gettid() tgkill(r0, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cgroup', 0x2, 0xaddcae58d769112f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) syz_open_procfs(r0, &(0x7f0000000040)='net/wireless\x00') 21:11:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x44001, 0x100) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:11:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 21:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x6685afde8cda1b10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) [ 1003.949626] should_fail.cold+0x5/0xa [ 1003.950613] ? create_object.isra.0+0x3a/0xa30 [ 1003.951658] should_failslab+0x5/0x20 [ 1003.952532] kmem_cache_alloc+0x5b/0x310 [ 1003.953486] create_object.isra.0+0x3a/0xa30 [ 1003.953529] audit: type=1326 audit(1764191470.068:2434): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8263 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa611e45ff code=0x7ffc0000 [ 1003.954488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.954520] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1003.959228] ? audit_log_start.part.0+0x2a3/0x730 [ 1003.960344] __alloc_skb+0xb1/0x5b0 [ 1003.961198] audit_log_start.part.0+0x2a3/0x730 [ 1003.962277] ? audit_log_task_context+0x170/0x170 [ 1003.963376] ? audit_filter+0x5d6/0xb10 [ 1003.964296] ? __bpf_prog_run64+0xe0/0xe0 [ 1003.965255] ? audit_compare_dname_path+0x120/0x120 [ 1003.966395] ? find_held_lock+0x2c/0x110 [ 1003.967329] audit_log_start+0x5f/0x90 [ 1003.968224] audit_seccomp+0x5d/0x200 [ 1003.969095] ? lock_downgrade+0x6d0/0x6d0 [ 1003.970060] __seccomp_filter+0x669/0x1530 [ 1003.971037] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1003.972105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1003.973229] ? wait_for_completion_io+0x270/0x270 [ 1003.974341] ? fput_many+0x2f/0x1a0 [ 1003.975177] ? ksys_write+0x1a9/0x260 [ 1003.976047] __secure_computing+0x191/0x2f0 [ 1003.977043] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1003.978272] do_syscall_64+0xf/0x40 [ 1003.979110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.980279] RIP: 0033:0x7faa61231b19 [ 1003.981135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.985377] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1003.987119] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 1003.988771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.990420] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.992075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.993509] audit: type=1326 audit(1764191470.122:2435): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8262 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1003.993718] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 1004.003756] audit: type=1326 audit(1764191470.122:2436): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8262 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1004.019360] loop5: detected capacity change from 0 to 33559552 [ 1004.024829] audit: type=1326 audit(1764191470.141:2438): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8262 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1004.033655] audit: type=1326 audit(1764191470.141:2439): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8262 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1004.046640] FAT-fs (loop5): bogus number of reserved sectors [ 1004.047317] FAT-fs (loop5): Can't find a valid FAT filesystem 21:11:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:10 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x0) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6f12, &(0x7f0000000080)={0x0, 0x4, 0x10}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000a00), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x3f69, &(0x7f0000000380)={0x0, 0x6b9e}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000500)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2000, 0x90) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000480)={0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_io_uring_setup(0x268a, &(0x7f00000002c0)={0x0, 0x1b89, 0x2, 0x0, 0xac, 0x0, r2}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000340), &(0x7f0000000400)) r3 = accept(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000040)=0x80) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, 0xcf8e, 0x8, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r4, 0xba56) lseek(r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bind(r5, &(0x7f0000000100)=@generic={0x22, "5918190a765acc8997b62102a228ae566a3f230b9c4a519969128d6a3e5b066d5f2be0cd39d2ea7d8411411f2d1defd26aaf3181f74566ac137b29111688868a43c01c614f04a8d0169d71952278d51a3a21edb4b85ed9b7e8ee9c107f1c3c01aa762838d63bd9d9df111f047b45ad73ba46d496d3fc09099f0e54bff6b2"}, 0x80) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) [ 1004.084458] audit: type=1326 audit(1764191470.141:2440): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8262 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xc8, 0x464, 0x100, 0x70bd2c, 0x25dfdbfd, "7f73247efe3410dc9bee82484d956285a9c0d308a11de2c9d62d9961938049880539ae00dcd80fb7580590e8c8f6653a9041050503d6fe479e750c9fa60154e495ca287f45ad92410796a140988b0c9b56ab1e073b2cf91e86b1994b8846bb2fc88af5fc4f559ba71bb5a9eb16b084aff6aa5446761c2b06e57757a62d923c2d2d2e04a6964dfa5b3e7cf9f823849931827d34d352ff5b25f9525a4a9af91dc51f30521713df87683389913cab88900a457c660b6b4bff", ["", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x20044840}, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x170) tgkill(r0, r0, 0x0) [ 1004.116914] audit: type=1326 audit(1764191470.141:2441): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8262 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1004.203798] FAULT_INJECTION: forcing a failure. [ 1004.203798] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.205174] CPU: 1 PID: 8302 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1004.205983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.206939] Call Trace: [ 1004.207249] dump_stack+0x107/0x167 [ 1004.207673] should_fail.cold+0x5/0xa [ 1004.208119] should_failslab+0x5/0x20 [ 1004.208560] __kmalloc_track_caller+0x79/0x370 [ 1004.209094] ? sidtab_sid2str_get+0x17e/0x720 [ 1004.209634] kmemdup+0x23/0x50 [ 1004.210004] sidtab_sid2str_get+0x17e/0x720 [ 1004.210504] ? audit_log_format+0xca/0x120 [ 1004.210996] sidtab_entry_to_string+0x33/0x110 [ 1004.211536] security_sid_to_context_core+0x33c/0x5d0 [ 1004.212141] security_secid_to_secctx+0x72/0xc0 [ 1004.212686] audit_log_task_context+0xf0/0x170 [ 1004.213228] ? audit_log_format+0x120/0x120 [ 1004.213738] ? from_kuid+0x85/0xc0 [ 1004.214158] audit_log_task+0x1cd/0x310 [ 1004.214619] ? __audit_log_nfcfg+0x210/0x210 [ 1004.215141] audit_seccomp+0x76/0x200 [ 1004.215586] ? lock_downgrade+0x6d0/0x6d0 [ 1004.216069] __seccomp_filter+0x669/0x1530 [ 1004.216563] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1004.217107] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1004.217684] ? wait_for_completion_io+0x270/0x270 [ 1004.218250] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1004.218779] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1004.219404] ? ksys_write+0x1a9/0x260 [ 1004.219850] __secure_computing+0x191/0x2f0 [ 1004.220356] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1004.220975] do_syscall_64+0xf/0x40 [ 1004.221415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.222010] RIP: 0033:0x7faa61231b19 [ 1004.222442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.224570] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1004.225484] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 1004.226320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.227151] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.227974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.228799] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:11:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:10 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x0) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x6, 0x40, 0x8, 0x0, 0x8, 0x45260d5b78a8f02, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x4000, 0x8, 0x4, 0x5, 0x5, 0x80000001, 0xd49, 0x0, 0x200, 0x0, 0x2}, r2, 0x10, r3, 0xa) 21:11:10 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x3, 0x6}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680)={0x0, 0x0, 0x10}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596ca3) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x4000, 0x7681b861}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0xfffffffe, 0x10, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x10000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x8001) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000340)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:11:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 21:11:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000180)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="008b9d260d13f8283f5b22d2fb924a5786b5c18c0370f971ecae848294b20025d2a513470f8d308fe8c95ed732f40010000000000000"]) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffa, 0x7fffffff}}, './file0\x00'}) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x50) 21:11:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x2, 0x1}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xb853, 0x1, @void, @val={0x1, 0x7, [{0x4, 0x1}, {0xb}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x5, 0x0, {0x4, 0x8, 0x0, 0xd7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x0, 0x327}}, @val={0x72, 0x6}, @void}, 0x51) [ 1019.139472] kauditd_printk_skb: 107 callbacks suppressed [ 1019.139483] audit: type=1326 audit(1764191485.268:2547): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1392e49b19 code=0x7ffc0000 [ 1019.144736] audit: type=1326 audit(1764191485.268:2548): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1392e49b19 code=0x7ffc0000 21:11:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:11:25 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) 21:11:25 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20800, 0x65) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80464c453f) fcntl$dupfd(r0, 0x0, r1) r3 = syz_io_uring_setup(0x620e, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pidfd_open(0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB='g'], 0x40) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="4c7b7edc258e00aaba8fc4c915d3730c95354f7946228a870d37c94c9f7e57e0741222d765a0dae468d129438020f1bc5361a43e2a84e088cc1932797943df438f27e168f32dc86eb0bdc9e6b53763a9b5ee28b62028f63251cc23fa44cf0d1526936e0495e3e7528b2145406ea59ce3a759942be2e08f4861c6b6ec452bac9f48d7abd4ab99603f5f67c0a88bbf46918a2973ad", 0x94}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1019.161706] audit: type=1326 audit(1764191485.290:2549): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8339 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1019.169001] audit: type=1326 audit(1764191485.293:2550): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1392e49b19 code=0x7ffc0000 [ 1019.171655] FAULT_INJECTION: forcing a failure. [ 1019.171655] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.171889] loop5: detected capacity change from 0 to 33559552 [ 1019.172997] CPU: 0 PID: 8347 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1019.175345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.177465] Call Trace: [ 1019.178155] dump_stack+0x107/0x167 [ 1019.179089] should_fail.cold+0x5/0xa [ 1019.180258] ? create_object.isra.0+0x3a/0xa30 [ 1019.181573] should_failslab+0x5/0x20 [ 1019.182557] kmem_cache_alloc+0x5b/0x310 [ 1019.183465] FAT-fs (loop5): bogus number of reserved sectors [ 1019.183588] ? sidtab_sid2str_get+0x65/0x720 [ 1019.183620] create_object.isra.0+0x3a/0xa30 [ 1019.184257] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1019.188512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1019.189832] __kmalloc_track_caller+0x177/0x370 [ 1019.191281] ? sidtab_sid2str_get+0x17e/0x720 [ 1019.192438] kmemdup+0x23/0x50 [ 1019.193489] sidtab_sid2str_get+0x17e/0x720 [ 1019.194593] ? audit_log_format+0xca/0x120 [ 1019.195922] sidtab_entry_to_string+0x33/0x110 [ 1019.197095] security_sid_to_context_core+0x33c/0x5d0 [ 1019.198438] security_secid_to_secctx+0x72/0xc0 [ 1019.199620] audit_log_task_context+0xf0/0x170 [ 1019.200775] ? audit_log_format+0x120/0x120 [ 1019.201888] ? from_kuid+0x85/0xc0 [ 1019.202504] audit_log_task+0x1cd/0x310 [ 1019.203282] ? __audit_log_nfcfg+0x210/0x210 [ 1019.204168] audit_seccomp+0x76/0x200 [ 1019.204923] ? lock_downgrade+0x6d0/0x6d0 [ 1019.205757] __seccomp_filter+0x669/0x1530 [ 1019.206449] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1019.207116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1019.207800] ? wait_for_completion_io+0x270/0x270 [ 1019.208485] ? fput_many+0x2f/0x1a0 [ 1019.209003] ? ksys_write+0x1a9/0x260 [ 1019.209562] __secure_computing+0x191/0x2f0 [ 1019.210184] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1019.210943] do_syscall_64+0xf/0x40 [ 1019.211460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1019.212187] RIP: 0033:0x7faa61231b19 [ 1019.212721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.215332] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1019.216411] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 1019.217430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.218441] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.219438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.220443] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:11:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:25 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 1019.251468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.268382] audit: type=1326 audit(1764191485.293:2551): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f1392e49ad7 code=0x7ffc0000 [ 1019.283184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:11:25 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tgkill(r2, r1, 0x22) recvmsg$unix(r0, &(0x7f0000000800)={&(0x7f0000000080), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/57, 0x39}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/132, 0x84}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000002450e2aa3cb4139ec38b05c6ba000000000100000001000000a1e0d83c2063f874925e85f3c8338cc5eb37266179d00c67bd898028524952321cb0a08ed024027e6dace2e138f21541ae3ae5fa3884572e24", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x1) pidfd_open(r3, 0x0) 21:11:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:25 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24508) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/209, 0xd1}], 0x5, 0xfffffffd, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001500)={0x4, 0xc8d, 0x3, 0xfffffffa, 0x2, [{0x4, 0x9, 0x80, '\x00', 0x10c}, {0x100000000, 0x6, 0x5, '\x00', 0xa82}]}) [ 1019.315879] audit: type=1326 audit(1764191485.294:2552): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1392dfcab7 code=0x7ffc0000 [ 1019.352323] audit: type=1326 audit(1764191485.294:2553): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1392dfcab7 code=0x7ffc0000 [ 1019.367695] audit: type=1326 audit(1764191485.294:2554): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1392dfcab7 code=0x7ffc0000 [ 1019.397544] audit: type=1326 audit(1764191485.294:2555): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1392dfcab7 code=0x7ffc0000 [ 1019.405002] audit: type=1326 audit(1764191485.294:2556): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8333 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1392dfca04 code=0x7ffc0000 [ 1019.629707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.631896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:11:40 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:40 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0xfecb6000) ioctl$KDMKTONE(r4, 0x4b30, 0x40cf1b60) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="e50000010000000000000000"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_complete(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) read(r6, &(0x7f0000000080)=""/65, 0x41) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/2907], 0xb54) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) perf_event_open(&(0x7f0000001440)={0x3, 0x80, 0x96, 0x7, 0x2, 0x80, 0x0, 0x7, 0xae660c1478ad868f, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x2862b, 0x9, 0xbc8c, 0x0, 0x3, 0x85e, 0x2, 0x0, 0x80000000, 0x0, 0x9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8}, 0x5) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1034.379859] kauditd_printk_skb: 40 callbacks suppressed [ 1034.379875] audit: type=1326 audit(1764191500.509:2597): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:40 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x5, 0x80000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="56a75eb6604f3bd4e2d50f4a24ee4f384b8daabfa1f001cbcfcdecdd2a13ee5db3e5bc7377ef43e2a81650c4ef7d9280c7315e3fd5038eb91c65d266c2340a96631aececdcfd7c9388703155bb47671168e2b11f128864adc1b8801b739c4fec3cdba40ff3688972239563ba9ed59e404404b3f8e83d917136bec66553cb6fb353135d7bb8fe733faaeefbfe86a593628da2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1, 0x9}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r4, 0x8001}) r5 = getpgrp(0x0) tgkill(r5, r5, 0x0) 21:11:40 executing program 0: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@empty, 0x0, r4}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x100, 0x0, 0x124, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x20009094) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x1, 0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r6, r5, 0x0, 0x9bbb) recvmsg(r5, &(0x7f0000000640)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/202, 0xca}], 0x5}, 0x10001) getsockopt$inet6_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000680), &(0x7f00000006c0)=0x4) 21:11:40 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f6436c451acb0585", "58cd2716bcc2cb5a330e21f82a83369a", "02595c1b", "56d69d2e6b2488d1"}, 0x28) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80000) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4600002800000000004000000000000100000000158237b9fc45b14100400000000000000095000000000001720501341bddebdd0000008c0000000000000000000000000000ce5c53976e1e41cb0a98f1b8bc41eb1c0c494a460f2caf3a94cd01cea415b7564468c1d2fa85f0ab17d952f702631dd86ccce0b4b067ebc15af9c50aff5d3c5998c019c2053e4182c354c03025fa27a64da42df138700ffafacc7436b0c2a1b157b6d49d916f14b95fd88ad05e576656a9867face4af3343818100000000000000c2c03115d05220fb6f01cd4df5375eca21"], 0x40) 21:11:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:11:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1034.392449] audit: type=1326 audit(1764191500.520:2598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.400562] FAULT_INJECTION: forcing a failure. [ 1034.400562] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.401148] loop5: detected capacity change from 0 to 33559552 [ 1034.403050] CPU: 0 PID: 8385 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1034.405531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1034.407310] Call Trace: [ 1034.407882] dump_stack+0x107/0x167 [ 1034.408666] should_fail.cold+0x5/0xa [ 1034.409480] ? audit_log_d_path+0xce/0x190 [ 1034.410399] should_failslab+0x5/0x20 [ 1034.411222] kmem_cache_alloc_trace+0x55/0x320 [ 1034.412208] audit_log_d_path+0xce/0x190 [ 1034.413082] audit_log_d_path_exe+0x40/0x70 [ 1034.414017] audit_log_task+0x278/0x310 [ 1034.414873] ? __audit_log_nfcfg+0x210/0x210 [ 1034.415827] audit_seccomp+0x76/0x200 [ 1034.416642] ? lock_downgrade+0x6d0/0x6d0 [ 1034.417447] FAT-fs (loop5): bogus number of reserved sectors [ 1034.417545] __seccomp_filter+0x669/0x1530 [ 1034.418608] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1034.419477] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1034.421482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1034.422530] ? wait_for_completion_io+0x270/0x270 [ 1034.423565] ? fput_many+0x2f/0x1a0 [ 1034.424340] ? ksys_write+0x1a9/0x260 [ 1034.425155] __secure_computing+0x191/0x2f0 [ 1034.426099] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1034.427238] do_syscall_64+0xf/0x40 [ 1034.428017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1034.429112] RIP: 0033:0x7faa61231b19 [ 1034.429924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1034.433862] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1034.435500] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 1034.437038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1034.438577] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1034.440095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.441640] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 1034.458893] audit: type=1326 audit(1764191500.520:2599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.463636] audit: type=1326 audit(1764191500.521:2600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.467707] audit: type=1326 audit(1764191500.521:2601): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.472495] audit: type=1326 audit(1764191500.521:2602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.476622] audit: type=1326 audit(1764191500.521:2603): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:40 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 1034.492146] audit: type=1326 audit(1764191500.526:2604): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.503260] audit: type=1326 audit(1764191500.526:2605): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1034.513555] audit: type=1326 audit(1764191500.526:2606): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:40 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:40 executing program 7: semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000880)=""/4096) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x48) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) clock_gettime(0x0, &(0x7f0000006ec0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000003c0)=""/37, 0x25}, {&(0x7f0000001880)=""/69, 0x45}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000001900)=""/10, 0xa}], 0x8, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a80)=""/206, 0xce}, {&(0x7f0000001b80)=""/214, 0xd6}, {&(0x7f0000001c80)=""/90, 0x5a}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000001dc0)=""/66, 0x42}], 0x5, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/71, 0x47}, {&(0x7f0000002fc0)=""/155, 0x9b}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/40, 0x28}, {&(0x7f00000040c0)=""/212, 0xd4}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/40, 0x28}, {&(0x7f0000005200)=""/30, 0x1e}, {&(0x7f0000005240)=""/191, 0xbf}], 0xa, &(0x7f00000053c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000005480)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005500)=""/166, 0xa6}], 0x1, &(0x7f0000005600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000005700)=""/81, 0x51}, {&(0x7f0000005780)=""/218, 0xda}, {&(0x7f0000005880)=""/86, 0x56}, {&(0x7f0000005900)=""/235, 0xeb}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/202, 0xca}, {&(0x7f0000006b00)=""/68, 0x44}], 0x7, &(0x7f0000006c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x6, 0x2000, &(0x7f0000006f00)={r2, r3+60000000}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000006f40)="b57205ff3dc437364b6faa7badab13b48b46") keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000002c0)='\x00', 0x0) unshare(0x48020200) 21:11:40 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 21:11:40 executing program 2: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) read$ptp(r0, &(0x7f0000000100)=""/200, 0xc8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x80464c453f) 21:11:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) pidfd_open(r1, 0x0) tgkill(r0, r0, 0x0) 21:11:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1034.842953] FAULT_INJECTION: forcing a failure. [ 1034.842953] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1034.845167] CPU: 1 PID: 8421 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1034.846408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1034.847928] Call Trace: [ 1034.848400] dump_stack+0x107/0x167 [ 1034.848940] should_fail.cold+0x5/0xa [ 1034.849533] __alloc_pages_nodemask+0x182/0x600 [ 1034.850234] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1034.851168] ? kmem_cache_alloc_trace+0x305/0x320 [ 1034.851909] alloc_pages_current+0x187/0x280 [ 1034.852590] allocate_slab+0x26f/0x380 [ 1034.853193] ___slab_alloc+0x470/0x700 [ 1034.853798] ? audit_log_d_path+0xce/0x190 [ 1034.854448] ? audit_log_format+0xca/0x120 [ 1034.855099] ? get_mm_exe_file+0x139/0x310 [ 1034.855753] ? audit_log_d_path+0xce/0x190 [ 1034.856409] ? kmem_cache_alloc_trace+0x305/0x320 [ 1034.857150] ? audit_log_d_path+0xce/0x190 [ 1034.857811] kmem_cache_alloc_trace+0x305/0x320 [ 1034.858531] audit_log_d_path+0xce/0x190 [ 1034.859152] audit_log_d_path_exe+0x40/0x70 [ 1034.859811] audit_log_task+0x278/0x310 [ 1034.860433] ? __audit_log_nfcfg+0x210/0x210 [ 1034.861124] audit_seccomp+0x76/0x200 [ 1034.861716] ? lock_downgrade+0x6d0/0x6d0 [ 1034.862349] __seccomp_filter+0x669/0x1530 [ 1034.862998] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1034.863702] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1034.864437] ? wait_for_completion_io+0x270/0x270 [ 1034.865172] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1034.865873] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1034.866700] ? ksys_write+0x1a9/0x260 [ 1034.867277] __secure_computing+0x191/0x2f0 [ 1034.867934] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1034.868745] do_syscall_64+0xf/0x40 [ 1034.869296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1034.870098] RIP: 0033:0x7faa61231b19 [ 1034.870663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1034.873475] RSP: 002b:00007faa5e7a7188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1034.874648] RAX: ffffffffffffffda RBX: 00007faa61344f60 RCX: 00007faa61231b19 [ 1034.875726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1034.876794] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1034.877892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1034.878973] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 1051.978422] kauditd_printk_skb: 70 callbacks suppressed [ 1051.978432] audit: type=1326 audit(1764191518.107:2677): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1051.982185] audit: type=1326 audit(1764191518.111:2678): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:58 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000600)) 21:11:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:11:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 21:11:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6c1bc82937cd0aa5}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20048040) readv(r0, &(0x7f0000000ac0)=[{0x0}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000530c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x1000, 0x0, 0x4, 0x8, 0x6, 0x2, 0xe4a, 0x7, 0x9, 0x100000000, 0x4, 0x3}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8001) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x0, 0x24) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r3, 0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000001380), 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000013c0)=0x3) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xfe, {0x2}}, 0x0) 21:11:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0xffffffffffffffff) tgkill(r0, r0, 0x0) [ 1051.997620] audit: type=1326 audit(1764191518.114:2679): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1052.000121] audit: type=1326 audit(1764191518.114:2680): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:11:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x10001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4001, 0x52) dup2(r0, r1) 21:11:58 executing program 7: semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000880)=""/4096) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x48) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) clock_gettime(0x0, &(0x7f0000006ec0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000003c0)=""/37, 0x25}, {&(0x7f0000001880)=""/69, 0x45}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000001900)=""/10, 0xa}], 0x8, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a80)=""/206, 0xce}, {&(0x7f0000001b80)=""/214, 0xd6}, {&(0x7f0000001c80)=""/90, 0x5a}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000001dc0)=""/66, 0x42}], 0x5, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/71, 0x47}, {&(0x7f0000002fc0)=""/155, 0x9b}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/40, 0x28}, {&(0x7f00000040c0)=""/212, 0xd4}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/40, 0x28}, {&(0x7f0000005200)=""/30, 0x1e}, {&(0x7f0000005240)=""/191, 0xbf}], 0xa, &(0x7f00000053c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000005480)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005500)=""/166, 0xa6}], 0x1, &(0x7f0000005600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000005700)=""/81, 0x51}, {&(0x7f0000005780)=""/218, 0xda}, {&(0x7f0000005880)=""/86, 0x56}, {&(0x7f0000005900)=""/235, 0xeb}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/202, 0xca}, {&(0x7f0000006b00)=""/68, 0x44}], 0x7, &(0x7f0000006c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x6, 0x2000, &(0x7f0000006f00)={r2, r3+60000000}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000006f40)="b57205ff3dc437364b6faa7badab13b48b46") keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000002c0)='\x00', 0x0) unshare(0x48020200) 21:11:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1052.028150] audit: type=1326 audit(1764191518.114:2681): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1052.033462] FAULT_INJECTION: forcing a failure. [ 1052.033462] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.036499] CPU: 0 PID: 8442 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1052.038280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1052.040412] Call Trace: [ 1052.041096] dump_stack+0x107/0x167 [ 1052.042043] should_fail.cold+0x5/0xa [ 1052.042685] audit: type=1326 audit(1764191518.114:2682): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1052.043035] ? audit_log_start.part.0+0x27e/0x730 [ 1052.046764] should_failslab+0x5/0x20 [ 1052.047748] kmem_cache_alloc+0x5b/0x310 [ 1052.048800] audit_log_start.part.0+0x27e/0x730 [ 1052.049997] ? audit_log_task_context+0x170/0x170 [ 1052.051018] ? audit_filter+0x5d6/0xb10 [ 1052.051870] ? __bpf_prog_run64+0xe0/0xe0 [ 1052.052755] ? audit_compare_dname_path+0x120/0x120 [ 1052.053833] ? put_pid.part.0+0xb9/0x150 [ 1052.054699] audit_log_start+0x5f/0x90 [ 1052.055530] audit_seccomp+0x5d/0x200 [ 1052.055878] audit: type=1326 audit(1764191518.114:2683): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1052.056344] __seccomp_filter+0x669/0x1530 [ 1052.056369] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1052.060619] ? __do_sys_wait4+0xb4/0x150 [ 1052.061480] ? kernel_wait4+0x260/0x260 [ 1052.062330] ? wait_for_completion_io+0x270/0x270 [ 1052.063359] ? fput_many+0x2f/0x1a0 [ 1052.064122] ? ksys_write+0x1a9/0x260 [ 1052.064258] audit: type=1326 audit(1764191518.115:2684): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1052.064937] __secure_computing+0x191/0x2f0 [ 1052.064963] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1052.069369] do_syscall_64+0xf/0x40 [ 1052.070153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1052.071242] RIP: 0033:0x7faa611e469c [ 1052.072041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1052.075970] RSP: 002b:00007faa5e7a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.077592] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007faa611e469c [ 1052.079117] RDX: 000000000000000f RSI: 00007faa5e7a71e0 RDI: 0000000000000003 [ 1052.080643] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.080707] audit: type=1326 audit(1764191518.115:2685): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8431 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1052.082170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.082181] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 1052.082299] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 21:11:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8) getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="452f6663cc065736"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x1}) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) r3 = getpgrp(r2) tgkill(r3, r3, 0xffffffff) [ 1052.109329] loop5: detected capacity change from 0 to 33559552 21:11:58 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x20, 0x3, 0x56, 0x5, 0x0, 0x80000ffff, 0x20, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x453364a0, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x84e0, 0x2, 0x9, 0x8, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x7b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000006c0)="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") openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c009c54dee6855206ab90c08b77dd2fb4de00221a001953321500b97a7f00ba1ee5355f921d25a09f50f85e95a3db74a4c6ec7d8275d84d93f2ba38309c1f6c662863a609aeb45d031b2187cd735bcb293865f01005d5767ff5d77ec3f04dd2aed1cf87048374aa8b844a866ecc58ba3d6af502822b6ced1e95b281138e0985600c311fe8dce2d582821f628c8953b5b4c73be6f4042236"], 0x1c}}, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000440)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) [ 1052.117967] FAT-fs (loop5): bogus number of reserved sectors [ 1052.118673] FAT-fs (loop5): Can't find a valid FAT filesystem 21:11:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd_index=0x9, 0x117c, 0x1, 0x4, 0xc, 0x0, {0x0, r1}}, 0xfffffffe) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000000000000e38e0294971cb7"]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) fallocate(r2, 0x10, 0x7e10, 0x6) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x2ba, 0x252900) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) getsockname$unix(r3, 0x0, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000000701080000000000000000010000030900010073797a310000000024000780200002400000000108030140000000d30800024000000e78080001400000000563232062a263fa995fa69f6258a39c4a67f2010e237fb268d454088561e87a23cd8a9e912d9963b96c82c4d8d14edebc055691cc2f55623a17ccb8b2a23d121e7c8b6a5c5eb23ed2c9dd36c7b33d14d9af60fb3c930726fcc03cf6f7970d76dc729fb79be5308f8c3fd50296e1e8195ecc1734c1b37b76e14d8e5f4419db312dd0714e1cf5cb89366c6bab59ed58d28ff1e01a47a3a80cbb79b1a2a1514ef9fd2206454695e5ea081157e160d8a3928fd0b6c69b64b4bf52006a2c71cf0f329f5a4ce92ffae8b7b3527cbdd9bbbd067bd67597792ada7e887354f058fb27"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000081) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) 21:11:58 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000600)) [ 1052.227356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.228376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.229359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:11:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0xc, 0xc4, 0x7ff}, {0x40, 0x2, 0xb7, 0x6}, {0x8001, 0x56, 0x80, 0x8001}, {0x0, 0x1, 0x0, 0x3f}]}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2280, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0)=0x1) 21:11:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 21:11:58 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x34, 0x400, 0x70bd25, 0x25dfdbfc, {0x1c}, [@generic="418e4bd20ac1402b8ae887ef1c4658c97928f36a26d8b6f9b7b3914395061e047e2dfc"]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc080) tgkill(r0, r0, 0x0) 21:11:58 executing program 7: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x5, [0xff, 0x8, 0xe9, 0x5, 0x96, 0x73d8]}) [ 1052.413059] FAULT_INJECTION: forcing a failure. [ 1052.413059] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.415643] CPU: 0 PID: 8476 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1052.417098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1052.418847] Call Trace: [ 1052.419418] dump_stack+0x107/0x167 [ 1052.420199] should_fail.cold+0x5/0xa [ 1052.421008] ? audit_log_start.part.0+0x27e/0x730 [ 1052.422041] should_failslab+0x5/0x20 [ 1052.422852] kmem_cache_alloc+0x5b/0x310 [ 1052.423718] audit_log_start.part.0+0x27e/0x730 [ 1052.424720] ? audit_log_task_context+0x170/0x170 [ 1052.425750] ? audit_filter+0x5d6/0xb10 [ 1052.426607] ? __bpf_prog_run64+0xe0/0xe0 [ 1052.427489] ? audit_compare_dname_path+0x120/0x120 [ 1052.428559] ? put_pid.part.0+0xb9/0x150 [ 1052.429429] audit_log_start+0x5f/0x90 [ 1052.430256] audit_seccomp+0x5d/0x200 [ 1052.431066] __seccomp_filter+0x669/0x1530 [ 1052.431947] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1052.432943] ? __do_sys_wait4+0xb4/0x150 [ 1052.433820] ? kernel_wait4+0x260/0x260 [ 1052.434668] ? wait_for_completion_io+0x270/0x270 [ 1052.435676] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1052.436625] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1052.437768] ? ksys_write+0x1a9/0x260 [ 1052.438551] __secure_computing+0x191/0x2f0 [ 1052.439441] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1052.440554] do_syscall_64+0xf/0x40 [ 1052.441326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1052.442423] RIP: 0033:0x7faa611e469c [ 1052.443213] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1052.447134] RSP: 002b:00007faa5e7a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.448756] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007faa611e469c [ 1052.450282] RDX: 000000000000000f RSI: 00007faa5e7a71e0 RDI: 0000000000000003 [ 1052.451800] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.453317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.454835] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:12:13 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000600)) 21:12:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r3) request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='@\xea$$--(@/\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "5aeb2e451a8229d5fc721c25f6b70de7997e738acd7e1ab5a8626beb176e827b7a45908c25def244c632a1d6b57e3b7aac84d815f548bae08539559f9ee57438", 0x31}, 0x48, r1) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='\x00', r4) unshare(0x48020200) 21:12:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000480)) 21:12:13 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xd) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/221, 0xdd, 0xba) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204ee2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r4, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x500000001) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) io_uring_enter(r5, 0x1f33, 0x4810, 0x1, &(0x7f0000000100)={[0x40]}, 0x8) 21:12:13 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 21:12:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1067.573465] kauditd_printk_skb: 62 callbacks suppressed 21:12:13 executing program 7: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/time_for_children\x00') close(r2) 21:12:13 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x4b, 0x7, 0x10000}]}) r1 = getpgrp(0x0) r2 = dup2(r0, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)) recvmmsg$unix(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000001000000001010000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000000580)=""/94, 0x5e}], 0x4}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/51, 0x33}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f00000009c0)=""/63, 0x3f}, {&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000000a80)=""/10, 0xa}, {&(0x7f0000000ac0)=""/147, 0x93}], 0x9, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/114, 0x72}, {&(0x7f0000000d40)=""/245, 0xf5}], 0x2, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}], 0x4, 0x1, &(0x7f0000000fc0)) pidfd_open(r3, 0x0) tgkill(r1, r1, 0x0) [ 1067.573486] audit: type=1326 audit(1764191533.702:2745): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1067.599011] loop5: detected capacity change from 0 to 33559552 [ 1067.603281] FAULT_INJECTION: forcing a failure. [ 1067.603281] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.604833] CPU: 0 PID: 8495 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1067.605751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.606876] Call Trace: [ 1067.607234] dump_stack+0x107/0x167 [ 1067.607720] should_fail.cold+0x5/0xa [ 1067.608235] ? __alloc_skb+0x6d/0x5b0 [ 1067.608733] should_failslab+0x5/0x20 [ 1067.609246] kmem_cache_alloc_node+0x55/0x330 [ 1067.609849] ? trace_hardirqs_on+0x5b/0x180 [ 1067.610431] __alloc_skb+0x6d/0x5b0 [ 1067.610918] audit_log_start.part.0+0x2a3/0x730 [ 1067.611522] ? audit_log_task_context+0x170/0x170 [ 1067.612163] ? audit_filter+0x5d6/0xb10 [ 1067.612663] audit: type=1326 audit(1764191533.718:2746): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8499 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x0 [ 1067.612702] ? __bpf_prog_run64+0xe0/0xe0 [ 1067.618525] ? audit_compare_dname_path+0x120/0x120 [ 1067.619185] ? put_pid.part.0+0xb9/0x150 [ 1067.619727] audit_log_start+0x5f/0x90 [ 1067.620244] audit_seccomp+0x5d/0x200 [ 1067.620756] __seccomp_filter+0x669/0x1530 [ 1067.621323] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1067.621948] ? __do_sys_wait4+0xb4/0x150 [ 1067.622476] ? kernel_wait4+0x260/0x260 [ 1067.623015] ? wait_for_completion_io+0x270/0x270 [ 1067.623659] ? fput_many+0x2f/0x1a0 [ 1067.624138] ? ksys_write+0x1a9/0x260 [ 1067.624644] __secure_computing+0x191/0x2f0 [ 1067.625221] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1067.625942] do_syscall_64+0xf/0x40 [ 1067.626424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.627100] RIP: 0033:0x7faa611e469c [ 1067.627606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1067.630044] RSP: 002b:00007faa5e7a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.631043] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007faa611e469c [ 1067.631988] RDX: 000000000000000f RSI: 00007faa5e7a71e0 RDI: 0000000000000003 [ 1067.632930] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.633989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.635019] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 1067.636104] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 1067.637321] audit: out of memory in audit_log_start [ 1067.639701] audit: type=1326 audit(1764191533.726:2747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:12:13 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), 0x0) [ 1067.656296] FAT-fs (loop5): bogus number of reserved sectors [ 1067.657588] FAT-fs (loop5): Can't find a valid FAT filesystem 21:12:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x10}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) [ 1067.687805] audit: type=1326 audit(1764191533.731:2748): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa611e4a04 code=0x7ffc0000 [ 1067.716280] audit: type=1326 audit(1764191533.732:2749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa611e45ff code=0x7ffc0000 [ 1067.720087] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 1067.725439] audit: type=1326 audit(1764191533.732:2750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1067.733471] audit: type=1326 audit(1764191533.778:2751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa611e45ff code=0x7ffc0000 21:12:13 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 1067.739634] audit: type=1326 audit(1764191533.778:2752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8492 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faa611e472b code=0x7ffc0000 [ 1067.809798] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1768304430 (only 16 groups) 21:12:13 executing program 7: r0 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/128) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/252) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000020c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301280, 0x188) [ 1067.859099] FAULT_INJECTION: forcing a failure. [ 1067.859099] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.860701] CPU: 0 PID: 8519 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1067.861501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.862492] Call Trace: [ 1067.862813] dump_stack+0x107/0x167 [ 1067.863241] should_fail.cold+0x5/0xa [ 1067.863688] ? create_object.isra.0+0x3a/0xa30 [ 1067.864227] should_failslab+0x5/0x20 [ 1067.864669] kmem_cache_alloc+0x5b/0x310 [ 1067.865152] ? kmem_cache_alloc+0x159/0x310 [ 1067.865656] create_object.isra.0+0x3a/0xa30 [ 1067.866189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.866792] kmem_cache_alloc_node+0x169/0x330 [ 1067.867339] __alloc_skb+0x6d/0x5b0 [ 1067.867770] audit_log_start.part.0+0x2a3/0x730 [ 1067.868324] ? audit_log_task_context+0x170/0x170 [ 1067.868879] ? audit_filter+0x5d6/0xb10 [ 1067.869352] ? __bpf_prog_run64+0xe0/0xe0 [ 1067.869858] ? audit_compare_dname_path+0x120/0x120 [ 1067.870445] ? find_held_lock+0x2c/0x110 [ 1067.870925] audit_log_start+0x5f/0x90 [ 1067.871386] audit_seccomp+0x5d/0x200 [ 1067.871835] __seccomp_filter+0x669/0x1530 [ 1067.872334] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1067.872877] ? __switch_to_asm+0x3a/0x60 [ 1067.873353] ? __switch_to_asm+0x34/0x60 [ 1067.873833] ? __schedule+0x82c/0x1ea0 [ 1067.874314] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1067.874844] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1067.875481] ? ksys_write+0x1a9/0x260 [ 1067.875936] __secure_computing+0x191/0x2f0 [ 1067.876442] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1067.877064] do_syscall_64+0xf/0x40 [ 1067.877491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.878118] RIP: 0033:0x7faa611e469c [ 1067.878561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1067.880720] RSP: 002b:00007faa5e7a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.881603] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007faa611e469c [ 1067.882447] RDX: 000000000000000f RSI: 00007faa5e7a71e0 RDI: 0000000000000003 [ 1067.883262] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.884091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.884907] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:12:13 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="010000120100000018000000b813ace5dc04df68d8ad1f8a984d941d00f1ab4f7da829e34f02126b9836df36c357765519238d9e68c54448f89a80507b014e1d3100c39f19c9b497adfbb69db97a06507d247df96ccb6840da4059f0be320e18dae4e8ac724ff40499cf9536ef2470631ed39d60c87806325fc2dc90dfb7a44b017d6ba20b2f9b1f", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c6530003b424dc9dd02f9e3ee6c7b"]) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) r5 = getpgrp(r3) tgkill(r5, r5, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 21:12:13 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), 0x0) 21:12:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@mcast1, 0x78, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000280)={'sit0\x00', r2, 0x2f, 0x1e, 0x20, 0x5, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x1, 0x9, 0x5}}) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) creat(&(0x7f0000000040)='./file0\x00', 0x1) pread64(r0, &(0x7f0000000300)=""/12, 0x5d, 0x3) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x60000006}, r3}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:12:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 21:12:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x4, 0x800) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x105142, 0x1a2) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40488d5}, 0x0) socketpair(0x5, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r5, 0x6) [ 1068.091847] FAULT_INJECTION: forcing a failure. [ 1068.091847] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.093200] CPU: 0 PID: 8532 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1068.094018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.094964] Call Trace: [ 1068.095282] dump_stack+0x107/0x167 [ 1068.095719] should_fail.cold+0x5/0xa [ 1068.096169] ? create_object.isra.0+0x3a/0xa30 [ 1068.096711] should_failslab+0x5/0x20 [ 1068.097157] kmem_cache_alloc+0x5b/0x310 [ 1068.097640] ? kmem_cache_alloc+0x159/0x310 [ 1068.098151] create_object.isra.0+0x3a/0xa30 [ 1068.098665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1068.099249] kmem_cache_alloc_node+0x169/0x330 [ 1068.099806] __alloc_skb+0x6d/0x5b0 [ 1068.100228] audit_log_start.part.0+0x2a3/0x730 [ 1068.100777] ? audit_log_task_context+0x170/0x170 [ 1068.101339] ? audit_filter+0x5d6/0xb10 [ 1068.101804] ? __bpf_prog_run64+0xe0/0xe0 [ 1068.102295] ? audit_compare_dname_path+0x120/0x120 [ 1068.102883] ? put_pid.part.0+0xb9/0x150 [ 1068.103359] audit_log_start+0x5f/0x90 [ 1068.103822] audit_seccomp+0x5d/0x200 [ 1068.104268] __seccomp_filter+0x669/0x1530 [ 1068.104772] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1068.105315] ? __do_sys_wait4+0xb4/0x150 [ 1068.105781] ? kernel_wait4+0x260/0x260 [ 1068.106253] ? wait_for_completion_io+0x270/0x270 [ 1068.106824] ? fput_many+0x2f/0x1a0 [ 1068.107249] ? ksys_write+0x1a9/0x260 [ 1068.107692] __secure_computing+0x191/0x2f0 [ 1068.108196] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1068.108831] do_syscall_64+0xf/0x40 [ 1068.109259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.109876] RIP: 0033:0x7faa611e469c [ 1068.110303] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1068.112459] RSP: 002b:00007faa5e7a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1068.113339] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007faa611e469c [ 1068.114186] RDX: 000000000000000f RSI: 00007faa5e7a71e0 RDI: 0000000000000003 [ 1068.115008] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.115849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.116693] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 21:12:14 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), 0x0) 21:12:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1068.221169] FAULT_INJECTION: forcing a failure. [ 1068.221169] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.222674] CPU: 0 PID: 8540 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1068.223519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.224462] Call Trace: [ 1068.224766] dump_stack+0x107/0x167 [ 1068.225188] should_fail.cold+0x5/0xa [ 1068.225628] ? create_object.isra.0+0x3a/0xa30 [ 1068.226155] should_failslab+0x5/0x20 [ 1068.226591] kmem_cache_alloc+0x5b/0x310 [ 1068.227053] create_object.isra.0+0x3a/0xa30 [ 1068.227549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1068.228127] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1068.228701] ? audit_log_start.part.0+0x2a3/0x730 [ 1068.229272] __alloc_skb+0xb1/0x5b0 [ 1068.229695] audit_log_start.part.0+0x2a3/0x730 [ 1068.230248] ? audit_log_task_context+0x170/0x170 [ 1068.230796] ? audit_filter+0x5d6/0xb10 [ 1068.231263] ? __bpf_prog_run64+0xe0/0xe0 [ 1068.231736] ? audit_compare_dname_path+0x120/0x120 [ 1068.232321] ? put_pid.part.0+0xb9/0x150 [ 1068.232802] audit_log_start+0x5f/0x90 [ 1068.233258] audit_seccomp+0x5d/0x200 [ 1068.233699] __seccomp_filter+0x669/0x1530 [ 1068.234208] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1068.234742] ? __do_sys_wait4+0xb4/0x150 [ 1068.235213] ? kernel_wait4+0x260/0x260 [ 1068.235672] ? wait_for_completion_io+0x270/0x270 [ 1068.236223] ? fput_many+0x2f/0x1a0 [ 1068.236638] ? ksys_write+0x1a9/0x260 [ 1068.237076] __secure_computing+0x191/0x2f0 [ 1068.237583] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1068.238199] do_syscall_64+0xf/0x40 [ 1068.238627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.239207] RIP: 0033:0x7faa611e469c [ 1068.239643] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1068.241733] RSP: 002b:00007faa5e7a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1068.242639] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007faa611e469c [ 1068.243473] RDX: 000000000000000f RSI: 00007faa5e7a71e0 RDI: 0000000000000003 [ 1068.244307] RBP: 00007faa5e7a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.245134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.245976] R13: 00007ffd610c5cff R14: 00007faa5e7a7300 R15: 0000000000022000 [ 1068.453672] FAULT_INJECTION: forcing a failure. [ 1068.453672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.455111] CPU: 0 PID: 8551 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1068.455905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.456846] Call Trace: [ 1068.457157] dump_stack+0x107/0x167 [ 1068.457574] should_fail.cold+0x5/0xa [ 1068.458030] _copy_from_user+0x2e/0x1b0 [ 1068.458494] io_uring_setup+0x9b/0x2980 [ 1068.458963] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1068.459525] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1068.460112] ? wait_for_completion_io+0x270/0x270 [ 1068.460674] ? rcu_read_lock_any_held+0x75/0xa0 [ 1068.461208] ? vfs_write+0x354/0xb10 [ 1068.461639] ? fput_many+0x2f/0x1a0 [ 1068.462062] ? ksys_write+0x1a9/0x260 [ 1068.462501] ? __ia32_sys_read+0xb0/0xb0 [ 1068.462976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1068.463588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.464194] do_syscall_64+0x33/0x40 [ 1068.464626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.465202] RIP: 0033:0x7f42229ceb19 [ 1068.465635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.467789] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1068.468674] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1068.469488] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1068.470319] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1068.471126] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1068.471945] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1068.480391] loop5: detected capacity change from 0 to 33559552 21:12:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) 21:12:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 21:12:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 21:12:14 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 1) 21:12:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:12:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x0, 0x9}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) 21:12:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4048f6, 0x30, 0x0, 0x306}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x3}, 0x80000000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}) fcntl$lock(r4, 0x7, &(0x7f00000005c0)={0x1, 0x0, 0x1fc}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000017c0)=@flushpolicy={0x2ec, 0x1d, 0x1, 0x70bd26, 0x25dfdbfc, "", [@replay_thresh={0x8, 0xb, 0x100}, @policy={0xac, 0x7, {{@in6=@empty, @in=@local, 0x4e21, 0xfff, 0x7, 0x100, 0x2, 0x0, 0x1a0, 0x3a, 0x0, r5}, {0x0, 0x5, 0x0, 0x3, 0x6, 0x9, 0x1, 0x3}, {0x98, 0x82, 0x7ff, 0x6}, 0x516, 0x0, 0x1, 0x0, 0x0, 0x3}}, @algo_comp={0x9b, 0x3, {{'deflate\x00'}, 0x298, "8eea0761c521f82bf4f5774f05fa8aa8c8d57c11167c5426463e37d01598382a34c4f62f35bd8a69085b8a44c867e914b2f60b6c217f9d3686e3cb105fcfadacb6a5b0556ea34c65ca1b05627469afba85c5bf"}}, @migrate={0x180, 0x11, [{@in=@private=0xa010101, @in=@broadcast, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in=@remote, @in=@private=0xa010102, @in6=@mcast2, 0x6c, 0x0, 0x0, 0x3500, 0xa, 0xa}, {@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x8}, {@in=@private=0xa010101, @in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@mcast2, 0x6c, 0x1539bb66dcb122dc, 0x0, 0x3502, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @in=@multicast1, @in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @lastused={0xc, 0xf, 0xd32e}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20040805}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000001d00)=ANY=[@ANYBLOB="b81100001b0000012dbd7000fddbc5dd4b609262b907df9e2c7daff658e79e71aafc861707c12422b14c18812c6950ae31cf73d52c670b2b5beae584f2caf6b4385db4ec683651d748378475cf617ac53f928a0bee740f28d6b2b7c0756cf1fae4f1fb0d14000500fc0000000000000000000000000000011810418008006c00", @ANYRES32=r8, @ANYBLOB="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"], 0x11b8}, 0x1, 0x0, 0x0, 0x2000c041}, 0x80) [ 1068.491054] FAT-fs (loop5): invalid media value (0x00) [ 1068.492363] FAT-fs (loop5): Can't find a valid FAT filesystem 21:12:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x4, 0x80, 0x3, 0x0, 0x100, 0x2430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x8000, 0x9, 0x5, 0x7, 0x80000000, 0xd6ea, 0x2, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x0) 21:12:29 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x1, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x1d5000, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) getuid() keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='%\x00', 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="b4b54a2a2bb44c5034373f1d379eb8a856b1d3496b3a4cc02bdb921e5f2fd9347054184e32560d4b124ac49bba151cf9334d21972b6ce47c0de64f619045814e28cb23afd3472070ad73f16da7ecf0d239e4d285ee7f224d2bd93f0c7201d41ccb33c7dd5d659296bee089d1fb007488509dd1c30ce4a3c0689cb8b0b1c79f5d360dae579a9e7e574d59476cd12e807ca60cebb0e8920c1743e36d4ca4f1e377ead43e403603f101846b49c01c31a203b33ce574604b55d67091a5a41025cc3e2bd0", 0xc2}, {&(0x7f0000000080)="07f1963c0aa0c0ec4c03e07b0f2dfc6c1402d4d73fc5acca995e9bbf4ff26328768d3abd62fea93dc134d5090756d101162650ec64734163783dd5f30a560c8f22a6cfe48144e3653a28b8eb0136c677d69a467af0824246f6f5b3ab306d99514e750fdaa93ef88b677ec9ff203c2a85c4250c15b6d29250ae216f874ddb94a9613531ea", 0x84}, {&(0x7f0000000180)="dbdefb1ee940e7fd6bdc49319e87cc8441312540425bc0c8686a449e2a57db278469b06e4d18d4a1b23243182917c1614c75226c61f5b06658d24af020626e73ca62185d833d2dcd14a2e3e2bb15821f6e1aa4ebfbd25699d1", 0x59}], 0x3, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8bff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xc0}, 0x4008000) 21:12:29 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x2}]) 21:12:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) 21:12:29 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 2) 21:12:29 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 21:12:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ftruncate(0xffffffffffffffff, 0xba56) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x80000000, 0x86bf}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getpgrp(0x0) r3 = getpid() r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) r5 = getpgrp(r3) tgkill(r5, r5, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x30100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000200)) [ 1083.015230] FAULT_INJECTION: forcing a failure. [ 1083.015230] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.017162] CPU: 1 PID: 8573 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1083.018294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.019641] Call Trace: [ 1083.020081] dump_stack+0x107/0x167 [ 1083.020660] should_fail.cold+0x5/0xa [ 1083.021276] ? io_uring_setup+0x258/0x2980 [ 1083.021957] should_failslab+0x5/0x20 [ 1083.022592] kmem_cache_alloc_trace+0x55/0x320 [ 1083.023336] io_uring_setup+0x258/0x2980 [ 1083.023999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1083.024773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1083.025582] ? wait_for_completion_io+0x270/0x270 [ 1083.026387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.027198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.028021] do_syscall_64+0x33/0x40 [ 1083.028633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.029454] RIP: 0033:0x7f42229ceb19 [ 1083.030063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.033006] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1083.034234] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1083.035395] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1083.036543] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1083.037696] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1083.038856] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1083.050214] kauditd_printk_skb: 114 callbacks suppressed [ 1083.050227] audit: type=1326 audit(1764191549.179:2867): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8578 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1083.058448] FAULT_INJECTION: forcing a failure. [ 1083.058448] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.060309] CPU: 1 PID: 8585 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1083.061423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.062772] Call Trace: [ 1083.063200] dump_stack+0x107/0x167 [ 1083.063789] should_fail.cold+0x5/0xa [ 1083.064405] ? audit_log_start.part.0+0x27e/0x730 [ 1083.065171] should_failslab+0x5/0x20 [ 1083.065799] kmem_cache_alloc+0x5b/0x310 [ 1083.066474] audit_log_start.part.0+0x27e/0x730 [ 1083.067230] ? audit_log_task_context+0x170/0x170 [ 1083.068002] ? audit_filter+0x5d6/0xb10 [ 1083.068647] ? __bpf_prog_run64+0xe0/0xe0 [ 1083.069301] ? audit_compare_dname_path+0x120/0x120 [ 1083.070116] ? find_held_lock+0x2c/0x110 [ 1083.070776] audit_log_start+0x5f/0x90 [ 1083.071405] audit_seccomp+0x5d/0x200 [ 1083.072014] ? lock_downgrade+0x6d0/0x6d0 [ 1083.072684] __seccomp_filter+0x669/0x1530 [ 1083.073368] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1083.074124] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1083.074905] ? wait_for_completion_io+0x270/0x270 21:12:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:12:29 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x1e6, &(0x7f0000000040)={0x6, 0x10000004, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 1083.075697] ? fput_many+0x2f/0x1a0 [ 1083.076689] ? ksys_write+0x1a9/0x260 [ 1083.077615] __secure_computing+0x191/0x2f0 [ 1083.078685] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1083.079969] do_syscall_64+0xf/0x40 [ 1083.080844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.082082] RIP: 0033:0x7fa1fe936b19 [ 1083.082979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.087422] RSP: 002b:00007fa1fbeac188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1083.089261] RAX: ffffffffffffffda RBX: 00007fa1fea49f60 RCX: 00007fa1fe936b19 [ 1083.090996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1083.092727] RBP: 00007fa1fbeac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.094454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.096174] R13: 00007fff1b2fd7ef R14: 00007fa1fbeac300 R15: 0000000000022000 [ 1083.098122] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.099830] audit: out of memory in audit_log_start [ 1083.103729] audit: type=1326 audit(1764191549.181:2868): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8578 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1083.109713] audit: type=1326 audit(1764191549.181:2869): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8578 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1083.110644] loop5: detected capacity change from 0 to 33559552 [ 1083.114971] audit: type=1326 audit(1764191549.186:2870): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8574 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1083.121130] audit: type=1326 audit(1764191549.186:2871): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8574 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1083.126667] audit: type=1326 audit(1764191549.187:2872): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8574 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1fe8e9a04 code=0x7ffc0000 21:12:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x2, 0x0) [ 1083.132055] audit: type=1326 audit(1764191549.187:2873): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8574 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1fe8e95ff code=0x7ffc0000 [ 1083.140331] audit: type=1326 audit(1764191549.267:2874): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8571 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1083.163852] FAT-fs (loop5): invalid media value (0x00) [ 1083.164812] FAT-fs (loop5): Can't find a valid FAT filesystem 21:12:29 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 3) [ 1083.199528] FAULT_INJECTION: forcing a failure. [ 1083.199528] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.201348] CPU: 0 PID: 8594 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1083.202467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.203810] Call Trace: [ 1083.204233] dump_stack+0x107/0x167 [ 1083.204823] should_fail.cold+0x5/0xa [ 1083.205441] ? create_object.isra.0+0x3a/0xa30 [ 1083.206183] should_failslab+0x5/0x20 [ 1083.206808] kmem_cache_alloc+0x5b/0x310 [ 1083.207470] create_object.isra.0+0x3a/0xa30 [ 1083.208185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1083.209023] kmem_cache_alloc_trace+0x151/0x320 [ 1083.209779] io_uring_setup+0x258/0x2980 [ 1083.210438] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1083.211219] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1083.212037] ? wait_for_completion_io+0x270/0x270 [ 1083.212828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.213670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.214502] do_syscall_64+0x33/0x40 [ 1083.215094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.215931] RIP: 0033:0x7f42229ceb19 [ 1083.216529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.219493] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1083.220713] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1083.221873] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1083.223030] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1083.224170] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1083.225313] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:12:29 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 21:12:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x3, 0x0) 21:12:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r1, 0xb9216000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(r2) 21:12:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x2, 0x10, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) pidfd_open(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x4, 0x40, 0x5, 0x9, 0x0, 0x7, 0x41084, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x577, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x4000, 0xef5, 0x10001, 0x1, 0x28, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9}, r0, 0x8, r2, 0xb) [ 1083.303312] FAULT_INJECTION: forcing a failure. [ 1083.303312] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.305306] CPU: 0 PID: 8600 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1083.306517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.307884] Call Trace: [ 1083.308322] dump_stack+0x107/0x167 [ 1083.308931] should_fail.cold+0x5/0xa [ 1083.309576] ? create_object.isra.0+0x3a/0xa30 [ 1083.310350] should_failslab+0x5/0x20 [ 1083.310986] kmem_cache_alloc+0x5b/0x310 [ 1083.311663] ? auditd_test_task+0x11e/0x300 [ 1083.312384] create_object.isra.0+0x3a/0xa30 [ 1083.313111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1083.313962] kmem_cache_alloc+0x159/0x310 [ 1083.314665] audit_log_start.part.0+0x27e/0x730 [ 1083.315442] ? audit_log_task_context+0x170/0x170 [ 1083.316256] ? audit_filter+0x5d6/0xb10 [ 1083.316921] ? __bpf_prog_run64+0xe0/0xe0 [ 1083.317601] ? audit_compare_dname_path+0x120/0x120 [ 1083.318431] ? find_held_lock+0x2c/0x110 [ 1083.319110] audit_log_start+0x5f/0x90 [ 1083.319762] audit_seccomp+0x5d/0x200 [ 1083.320390] ? lock_downgrade+0x6d0/0x6d0 [ 1083.321078] __seccomp_filter+0x669/0x1530 [ 1083.321783] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1083.322567] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1083.323380] ? wait_for_completion_io+0x270/0x270 [ 1083.324195] ? fput_many+0x2f/0x1a0 [ 1083.324804] ? ksys_write+0x1a9/0x260 [ 1083.325466] __secure_computing+0x191/0x2f0 [ 1083.326211] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1083.327110] do_syscall_64+0xf/0x40 [ 1083.327725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.328587] RIP: 0033:0x7fa1fe936b19 [ 1083.329214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.332377] RSP: 002b:00007fa1fbeac188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1083.333672] RAX: ffffffffffffffda RBX: 00007fa1fea49f60 RCX: 00007fa1fe936b19 [ 1083.334884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1083.336088] RBP: 00007fa1fbeac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.337290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.338509] R13: 00007fff1b2fd7ef R14: 00007fa1fbeac300 R15: 0000000000022000 21:12:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4, 0x0) 21:12:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x100000003}, 0x0, 0x8, 0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x101201, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) sendfile(r1, r1, &(0x7f0000000140)=0x8001, 0x9) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, r3, 0x0) pread64(r3, &(0x7f0000000200)=""/78, 0x4e, 0x98ce) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000002c0)={0x80000000, 0x9}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) [ 1083.543779] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1083.652542] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 21:12:43 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tgkill(r2, r1, 0x0) 21:12:43 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x1, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x1d5000, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) getuid() keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='%\x00', 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="b4b54a2a2bb44c5034373f1d379eb8a856b1d3496b3a4cc02bdb921e5f2fd9347054184e32560d4b124ac49bba151cf9334d21972b6ce47c0de64f619045814e28cb23afd3472070ad73f16da7ecf0d239e4d285ee7f224d2bd93f0c7201d41ccb33c7dd5d659296bee089d1fb007488509dd1c30ce4a3c0689cb8b0b1c79f5d360dae579a9e7e574d59476cd12e807ca60cebb0e8920c1743e36d4ca4f1e377ead43e403603f101846b49c01c31a203b33ce574604b55d67091a5a41025cc3e2bd0", 0xc2}, {&(0x7f0000000080)="07f1963c0aa0c0ec4c03e07b0f2dfc6c1402d4d73fc5acca995e9bbf4ff26328768d3abd62fea93dc134d5090756d101162650ec64734163783dd5f30a560c8f22a6cfe48144e3653a28b8eb0136c677d69a467af0824246f6f5b3ab306d99514e750fdaa93ef88b677ec9ff203c2a85c4250c15b6d29250ae216f874ddb94a9613531ea", 0x84}, {&(0x7f0000000180)="dbdefb1ee940e7fd6bdc49319e87cc8441312540425bc0c8686a449e2a57db278469b06e4d18d4a1b23243182917c1614c75226c61f5b06658d24af020626e73ca62185d833d2dcd14a2e3e2bb15821f6e1aa4ebfbd25699d1", 0x59}], 0x3, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8bff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xc0}, 0x4008000) 21:12:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100fffa0000000018659004368bb637", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b34e299a6f58891345a899ad573f96d35d70d1ed01f4b4131815a9a1bf80731a71"]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d400000014000268e872002a36e58c2516000000309195bcedd4a355ffd0b57d36c80aa3cd5c00a209ab410588e2acf39f612a058aca019d424c1cfefa9bd84118e7b9a3dc7b648488e3b314280151f16e53c3b34d356001432e0e37dbfac2e264d49dde22ffb05d71782e4588a22964e120c9b3e8ac10a180903c642a26553943488705f8f9389f0dc82f10989f62b3874701ee49da692b47f3a2374ddcf5407ac1d8d6ece93e8156a83bca75748906b35121f4bfbcd532464798ecfcbf0151eccc1703000000e09aefabad56510f51901f721fb776488673f91400"/230], 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r3, 0xba56) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0xd, &(0x7f0000000100)=@hopopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x4, [0x2, 0x1, 0x1, 0x10000]}}, @ra={0x5, 0x2, 0x20}, @calipso={0x7, 0x8, {0x3, 0x0, 0x1, 0x5}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x48) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = signalfd4(r2, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) dup(r1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4, 0x16ba}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) unshare(0x48020200) 21:12:43 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 4) 21:12:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x5, 0x0) [ 1097.810622] FAULT_INJECTION: forcing a failure. [ 1097.810622] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.813042] CPU: 0 PID: 8622 Comm: syz-executor.6 Not tainted 5.10.246 #1 21:12:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1097.814501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.816456] Call Trace: [ 1097.817020] dump_stack+0x107/0x167 [ 1097.817794] should_fail.cold+0x5/0xa [ 1097.818617] ? io_uring_setup+0x33c/0x2980 [ 1097.819515] should_failslab+0x5/0x20 [ 1097.820319] __kmalloc+0x72/0x390 [ 1097.821050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.822130] io_uring_setup+0x33c/0x2980 [ 1097.823007] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1097.823919] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1097.824981] ? tick_program_event+0xa8/0x140 [ 1097.825940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.827064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.828160] do_syscall_64+0x33/0x40 [ 1097.828948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.830032] RIP: 0033:0x7f42229ceb19 [ 1097.830826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.834731] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1097.836348] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1097.837868] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1097.839396] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1097.840909] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1097.842441] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:12:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:12:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x100000003}, 0x0, 0x8, 0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x101201, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) sendfile(r1, r1, &(0x7f0000000140)=0x8001, 0x9) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="98000000200039040000000000000000020000000dc0c23671f1a964651e4d52c3dc9432e6af519d60c901a7ea83dce8f6a9c36adbbf7c23348ed7953cfd897913c1f6e530c124f0f2e2f1324bf1187b4e1f5a7bf5116e03f38056144e579e46004fbfb9ae99572129d57aa41a4c792b56978ebd2e72f57ca14145d7bcd879afed4e97abd691d56cf2d815f272170c001100000000000000bb3e3c7562af739c74b82fd57e7bd51e163e9c2394948632056b9357f234b64631cba457c59e6d0eae9098c89e3c7aa8b1cbc03bd674263161cff69945516e14595dfad881c353d7fb9bbdc2fb19f3306b4f29f5ac8dddb92ee4fe33f6e190dffd186aa055b9a9547a834f1d619073f3ccf4b3acda5d78a8cff254a2de72f20938d689ca4044fab0a3ee36278183e00f05d56ee58c70cc78f1fe11e55c898d61e09dd9ec4bdefd952f33df697d06ffd93de78dd16ff6fabb99fb6b42eb449d317ff0f62c982878d984496c08a7a672102affbb245b18bb39d4a7b9a75298857b75fa243b23c8cf9643bb00000000005fcbe43f062951cd61eb7f009947c9213bca5dc0b85ccc521acda794895462c77f5ff370f89a2e870f5d485e58951dd7d1e27236dc52ce2c5ad9c73e0a61401a4a516c41604d7981f0c5d28db9d69e06008070a1c8a29ab4b046f86a311abc00000000000000000000000021d58c77edb293cc9578f585bdd701f9ee2106436f5fcf55fe6240095b6b3d472798f8f9275542afa54cb35bead6ff06f9faacfe22aecf3a338b66d6b6d7493b8154647492b7504ee04560f3f09be3740b31fc8e83b0d8d71b009490cc8c05463d87a3dc636dd21e096d9d81c6d82e6476e7d92eac37b40eabf6c87bcf97f4e8375843edc446a639842cc11c20d6cbc305948014b499ce164cd61e37a219f9e9d6192530a1e19508041dee4e6388131d075a48f73d985675042259c55328516aa0d7714a86cb42c54b353075a75bd6c97f07e67799bb3c4acdf717de323a07b094965969ea17dedd4e913cc697ce6454df791c397f653bc1d2408fe440060c11d098bba54b0d10a129c468dc1c556c6554994e3f2993f60563fbb3017e10130ba23b7a165e98be854f41773afda6d73adb0f00d1a977cbdb5c3cb7e008bf15b1feb75397420f0df622573b78076504d38822a800000000000000fe9b13010e182ad77a6d7186202d8177d60129be4d487ab48759eabcb23ff4fc1a149c01dff17dca8148be0262812a277768d75a4d43d5a68c3de30bcfaa3c084af876fd561231a0b0e045a39f1668b2936b6bbcbd724ec98fd9c5d833b85a0b6914162a02e2b3bc7a691c589ee0adac135ace3a3eacb0ce207ba0d8b1d6d7e8e3521d1ce6049f2ebda21a093b11220a98ba572e7b20f96cfc31c209a2d15fc29401ca2ca5ee340e9106b5797ce81742ea6836c8d0cd5303d11af4795cd953b428d630b27471f983fd78887aed2f03eba58776eae7599afd9ca687faf02ef6e805d349950554086d73961e6ac3e6cbdcb5573d08cad3cd21d59a081fe5aa03e7fb772a48e0fa349ba844d84e665f7ffb8c460db950132b561d79ab33cb09d7290d9ad5ae1c90835861756e88e41ea2bee93130a6b8fe12009b84eb210a874373e15ecda9a4dc65aec5a47d0c6f20675f1058a4b1afd437db7495a4f71a5748d3538b8c153f7ea4dfb64e285c0a063f5fe62a217f3bd8b83ba3fc104f067767b39591f4c8232bf2a33082c2903ae4682afdafb2eafe1b3b7d2f681bc09ccf50d722aeedc7aa234fb3fa12b6bcf27330bf830fe6467123862c110437403108477c13267c9a34daf12411419239cd83e8c4d5694e6a42c170d3153f3043e1e79c03c6a7c4fb6cd600ef68cb3b19a8038d526cbe7520d7c3c2821023a24676ed9df1a73261f6ec3e768ed358a26d2c6784accbff342929b25b0b8eefa4e5edc394a531d6d3ee55934694fcf034d80212d6e9553d056080a9ac66c0efc3383346befd313f8a8b521fbf1b1585952c25332c78c36360aef4918eb394a415dd4f882b51f7a733856f4ccc55eae00c77dfe57da9ebde276cb8d7326c4d490c8ddc1ebf6f03e9df88c64c3f5274c5c366a84f64dd747910f8eb6f9cd59b41e06586cc10ab937275cfbb5c4343183b5533983d6d74000a94edecacc88f7d94edee9f6480cf80aa90848873600f41e5455382a77a623f8d0e7e0ea272ba12ec67cf6edb65f1dfbdc099424b5ab8"], 0x98}}, 0x0) close_range(r4, r3, 0x0) pread64(r3, &(0x7f0000000200)=""/78, 0x4e, 0x98ce) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000002c0)={0x80000000, 0x9}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) [ 1097.858022] kauditd_printk_skb: 73 callbacks suppressed [ 1097.858039] audit: type=1326 audit(1764191563.985:2948): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8619 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1097.879907] audit: type=1326 audit(1764191563.985:2949): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8619 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1097.893719] loop5: detected capacity change from 0 to 33559552 [ 1097.905273] audit: type=1326 audit(1764191563.986:2950): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8619 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1097.910381] audit: type=1326 audit(1764191563.986:2951): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8619 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1097.915622] audit: type=1326 audit(1764191563.987:2952): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8619 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1097.915867] FAT-fs (loop5): invalid media value (0x00) [ 1097.920519] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1097.921388] FAT-fs (loop5): Can't find a valid FAT filesystem 21:12:44 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6, 0x0) [ 1097.926298] audit: type=1326 audit(1764191564.005:2953): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8628 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1097.931461] audit: type=1326 audit(1764191564.005:2954): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8628 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1097.936391] audit: type=1326 audit(1764191564.011:2955): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8628 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1097.941321] audit: type=1326 audit(1764191564.012:2956): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8628 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1097.946312] audit: type=1326 audit(1764191564.012:2957): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8628 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:12:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) 21:13:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:13:02 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x50, r0, 0x1f244000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000200)={0x4, 0x7, {0x9, @usage=0x8449, 0x0, 0x400, 0x9, 0xb7, 0x80e6, 0x9, 0x4a0, @usage=0x51, 0x7fff, 0x1466753a, [0xa4, 0x5, 0x8, 0x2, 0x4, 0x6]}, {0x6, @usage=0x1, 0x0, 0x0, 0x20, 0xfffffffffffff800, 0x8, 0x3, 0x20, @struct={0xff, 0x1}, 0x6, 0x8, [0x8ffc, 0x3, 0x20, 0x1ff, 0x3, 0x1000]}, {0x4, @usage=0xa17, 0x0, 0x1, 0x19, 0xe8, 0x800, 0x3, 0x440, @usage=0x8, 0x2, 0x2, [0x1f, 0x8, 0x0, 0x8000, 0xb000, 0x8]}, {0x26, 0xda9, 0x3f}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000600)={r1, 0x1, 0xff, 0x1}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x3f, 0x7ffc0000}]}) r3 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r4, 0xfffffffffffffffe, 0x800) tgkill(r3, r3, 0x0) 21:13:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000000c0)=0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@lazytime}, {@jqfmt_vfsold}]}) 21:13:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x100000003}, 0x0, 0x8, 0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x101201, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="00f9ff00000000000100606e74a8f6b546147dc85e0000000000000000000000010000000000000000000000000000000000000000000000000000000000eaff0200000003000000ffff000000000000090000000000000006000000000000000200000000000000000000000000000000000000000000000000000000000000800000030000000200007f000000002a84000000000000fcffffffffffffff08000000000000000000000000000000000000000000000000000000c91d84c300000000000000000000000000000000000000000000000000000000000000000000010000030000000000000000e2ffffff00000000000000000000000000bd060000005a07f198d746b9157e5bb66ca4c3317884d539c0cb07f0432fa5c0cc6d215b3df4f314661a87189c60f4929c4a7670c2842f392523cc352833ca0900000000000000bbbbe1626566e7cb7f908feb74133e10edb36e004febd9bdd5666aba350b1e4871fe1d3d3163daea343193f8158a0f52566e068efc69ae2467ed0521131580f063b47145fd3b05e83dcc89ec6faa226f316174181770836d9ccf8467f3fcf34e54f752b6ee5868cbd58a1db6558002ff5d649ad2c97a97f20001429d9b7e372a482eb01212441b00e000fced28271e93d9dab7bdac1216a8079ed78855280d8dd43707a5c7d02f319a5734da3ee6b0472dcc445a25d926262158d88d5b4e89417a5058265cbff3ba73688a2cae77beded481c418a692d60e654b298d30dc9364f5416debe322ce29c683b794987a5d7c554c6fdc1d128ea419e6ee16a3888ebac4183184f959ceb67a68dc0cc2a4bda5b77006f865304f5dc7a11376efaffc5de90027f8a6d9f996705d4bbf35957e166b70ddf2602a62855fed505759603d7301e3a8432423e855a4a00c7b6d332600b2ee155a5917b35c1de6c6bf2ff2ddf5a13e67466a4424dbda35cc6013fc0b1ce75d59d2a6e315de"]) sendfile(r1, r1, &(0x7f0000000140)=0x8001, 0x9) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r4, r3, 0x0) pread64(r3, &(0x7f0000000200)=""/78, 0x4e, 0x98ce) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000002c0)={0x80000000, 0x9}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) 21:13:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x2, 0x0) 21:13:02 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7, 0x0) 21:13:02 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 5) 21:13:02 executing program 0: close(0xffffffffffffffff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x800, 0x40, 0x6}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x125142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f00000000c0)=@lsasf={0x8, 0x0, 0x1}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x111, 0xf, &(0x7f0000000100)="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"}) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000040)=@hsk={0x2, 0x2, '=\x00'}) [ 1116.183417] kauditd_printk_skb: 23 callbacks suppressed [ 1116.183438] audit: type=1326 audit(1764191582.312:2981): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8647 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1116.195693] FAULT_INJECTION: forcing a failure. [ 1116.195693] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.198683] CPU: 1 PID: 8650 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1116.200415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.202691] Call Trace: [ 1116.203387] dump_stack+0x107/0x167 [ 1116.204321] should_fail.cold+0x5/0xa [ 1116.205313] ? create_object.isra.0+0x3a/0xa30 [ 1116.206491] should_failslab+0x5/0x20 [ 1116.207498] kmem_cache_alloc+0x5b/0x310 [ 1116.208521] create_object.isra.0+0x3a/0xa30 [ 1116.209616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1116.210906] __kmalloc+0x16e/0x390 [ 1116.211818] io_uring_setup+0x33c/0x2980 [ 1116.212846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1116.214072] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1116.215618] ? wait_for_completion_io+0x270/0x270 [ 1116.216900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1116.218231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1116.219584] do_syscall_64+0x33/0x40 [ 1116.220535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1116.221836] RIP: 0033:0x7f42229ceb19 [ 1116.223003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1116.227767] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1116.229684] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1116.231494] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1116.233300] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1116.235119] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1116.236914] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1116.259810] audit: type=1326 audit(1764191582.370:2982): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.267848] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 21:13:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open(0x0, 0x0) r1 = creat(&(0x7f0000000440)='./file0\x00', 0x20) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) fcntl$addseals(r2, 0x409, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000001980)=ANY=[@ANYBLOB="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"]}) clone3(&(0x7f0000000480)={0x2080, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x2}, &(0x7f0000000380)=""/10, 0xa, &(0x7f0000000900)=""/4096, &(0x7f0000000380)}, 0x58) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) pidfd_open(r3, 0x0) preadv(r2, &(0x7f0000001900)=[{&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f00000005c0)=""/95, 0x5f}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/93, 0x5d}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000840)=""/78, 0x4e}], 0x7, 0x9, 0xede9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000001b40)=""/251, 0xfb}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x48020200) [ 1116.277489] audit: type=1326 audit(1764191582.370:2983): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.290186] loop5: detected capacity change from 0 to 33559552 21:13:02 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa, 0x0) [ 1116.305221] audit: type=1326 audit(1764191582.371:2984): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.316252] audit: type=1326 audit(1764191582.371:2985): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:13:02 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) 21:13:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x3, 0x0) [ 1116.322735] audit: type=1326 audit(1764191582.371:2986): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.331320] audit: type=1326 audit(1764191582.371:2987): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.338295] audit: type=1326 audit(1764191582.371:2988): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.345703] audit: type=1326 audit(1764191582.371:2989): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.348468] audit: type=1326 audit(1764191582.371:2990): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8652 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1116.386234] FAT-fs (loop5): invalid media value (0x00) [ 1116.386953] FAT-fs (loop5): Can't find a valid FAT filesystem 21:13:02 executing program 7: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x966}}, './file0\x00'}) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000140)=0xb2a, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 21:13:17 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 6) [ 1131.485720] kauditd_printk_skb: 50 callbacks suppressed [ 1131.485737] audit: type=1326 audit(1764191597.614:3041): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8687 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:13:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4, 0x0) 21:13:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:13:17 executing program 2: semget$private(0x0, 0x0, 0x0) semget$private(0x0, 0x4, 0x431) r0 = semget$private(0x0, 0x0, 0x180) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/20) r1 = semget(0x3, 0x0, 0x20) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000080)=""/36) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) statx(r3, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000780)) semget$private(0x0, 0x1, 0x1) sendfile(r2, r3, &(0x7f00000000c0)=0x9, 0x1ff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) 21:13:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x48, 0x0) 21:13:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x40000000) tgkill(r0, r2, 0x0) 21:13:17 executing program 7: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x542, 0x10c) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)={{0xcc, 0x1, 0x6, 0x355, 0x212, 0x7, 0x17, 0x401}, "2d928925549974cea75aa84042fbbc089f5b6352cdc01f0964cf205d747e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x63e) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x630401) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x1, &(0x7f00000001c0)=ANY=[]) 21:13:17 executing program 0: r0 = memfd_create(&(0x7f00000003c0)='s{.\x00\a)\xe1\xc7\xe3\x00`&\x19\x1ezzG\xe4d\xf7+\x92\xb1\xda\xc52\xf7q\x9cU\xcep\xd3\xaf\xff\xc1\x87}\x00\xe6\a\x9f\xc6\xb2\xd7\v', 0x0) write(r0, &(0x7f0000000180)="d9739d", 0x3) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@unspec, 0xc) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f0000000400)='\xff\xff', 0x1, 0x0, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/25, 0x19}, {0x0}], 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@initdev}, &(0x7f00000002c0)=0x14) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002000210c00000000000000000200000008000000", @ANYRES32=0xee01, @ANYBLOB="08019de625f1e92f"], 0x24}}, 0x0) write(r3, &(0x7f0000000340)="ba35730b755b7625a8a1a5fe8372580110b2d876c0b96c1d2d4a", 0x1a) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xff, 0x0, 0x8, 0xfd, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x18084, 0xfffffffffffffffe, 0xfffffffe, 0x4, 0x9b, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1131.511816] audit: type=1326 audit(1764191597.615:3042): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8687 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1131.532552] FAULT_INJECTION: forcing a failure. [ 1131.532552] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.536036] CPU: 1 PID: 8699 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1131.538150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1131.540063] Call Trace: [ 1131.540616] dump_stack+0x107/0x167 [ 1131.541372] should_fail.cold+0x5/0xa [ 1131.542170] ? io_uring_setup+0x40b/0x2980 [ 1131.543055] should_failslab+0x5/0x20 [ 1131.543964] kmem_cache_alloc_trace+0x55/0x320 [ 1131.544892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1131.545924] io_uring_setup+0x40b/0x2980 [ 1131.546417] audit: type=1326 audit(1764191597.615:3043): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8687 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1131.546781] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1131.546807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1131.546834] ? wait_for_completion_io+0x270/0x270 [ 1131.554921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1131.555993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1131.557055] do_syscall_64+0x33/0x40 [ 1131.557813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1131.558863] RIP: 0033:0x7f42229ceb19 [ 1131.559641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1131.563409] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1131.564973] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1131.566440] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1131.567912] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1131.569385] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1131.570857] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1131.573831] audit: type=1326 audit(1764191597.615:3044): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8687 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1131.583781] loop5: detected capacity change from 0 to 33559552 [ 1131.599784] FAT-fs (loop5): invalid media value (0x00) [ 1131.600955] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1131.613851] audit: type=1326 audit(1764191597.622:3045): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8687 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1131.618461] audit: type=1326 audit(1764191597.628:3046): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8687 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1131.623530] audit: type=1326 audit(1764191597.649:3047): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8691 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1131.628761] audit: type=1326 audit(1764191597.660:3049): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8695 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1131.635221] audit: type=1326 audit(1764191597.660:3050): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8695 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1131.643918] audit: type=1326 audit(1764191597.650:3048): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8691 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:13:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x5, 0x0) 21:13:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c, 0x0) 21:13:17 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1131.692285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:13:17 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 7) 21:13:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x0, 0x7, 0x81, 0x0, 0x400, 0x882, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x1000, 0x3, 0xffffff81, 0x2, 0x0, 0x8, 0xc350, 0x0, 0x4, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) 21:13:17 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7f, 0x6, 0x7f, 0xf2fb}, {0x2, 0x6, 0x5, 0x2}, {0x5, 0x7f, 0xfe}, {0x61a, 0x20, 0x1, 0x3}, {0x3, 0x1, 0x4, 0x200}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 21:13:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6, 0x0) [ 1131.864556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1131.874530] FAULT_INJECTION: forcing a failure. [ 1131.874530] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.876943] CPU: 1 PID: 8720 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1131.878385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1131.880296] Call Trace: [ 1131.880841] dump_stack+0x107/0x167 [ 1131.881600] should_fail.cold+0x5/0xa [ 1131.882389] ? io_uring_setup+0x40b/0x2980 [ 1131.883285] should_failslab+0x5/0x20 [ 1131.884069] kmem_cache_alloc_trace+0x55/0x320 [ 1131.885007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1131.886054] io_uring_setup+0x40b/0x2980 [ 1131.886895] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1131.887889] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1131.888927] ? wait_for_completion_io+0x270/0x270 [ 1131.889932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1131.891003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1131.892077] do_syscall_64+0x33/0x40 [ 1131.892842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1131.893889] RIP: 0033:0x7f42229ceb19 [ 1131.894654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1131.898392] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1131.899950] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1131.901415] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1131.902887] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1131.904329] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1131.905761] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:13:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x68, 0x0) 21:13:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000", 0x15}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:13:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7, 0x0) 21:13:34 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 8) 21:13:34 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:13:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0xffffffffffffffff) tgkill(r0, r0, 0x0) 21:13:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x0, 0x7, 0x81, 0x0, 0x400, 0x882, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x1000, 0x3, 0xffffff81, 0x2, 0x0, 0x8, 0xc350, 0x0, 0x4, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) 21:13:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x300) sync_file_range(0xffffffffffffffff, 0x0, 0x5, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2001, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) r1 = socket$inet(0x2, 0x3, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x0) [ 1147.941942] kauditd_printk_skb: 105 callbacks suppressed [ 1147.941961] audit: type=1326 audit(1764191614.036:3156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1147.950846] audit: type=1326 audit(1764191614.079:3157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8741 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1147.956438] loop5: detected capacity change from 0 to 33559552 [ 1147.970408] FAULT_INJECTION: forcing a failure. [ 1147.970408] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.972970] CPU: 0 PID: 8750 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1147.974416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.976209] Call Trace: [ 1147.976777] dump_stack+0x107/0x167 [ 1147.977563] should_fail.cold+0x5/0xa [ 1147.978382] ? create_object.isra.0+0x3a/0xa30 [ 1147.979371] should_failslab+0x5/0x20 [ 1147.980184] kmem_cache_alloc+0x5b/0x310 [ 1147.981059] create_object.isra.0+0x3a/0xa30 [ 1147.982010] kmemleak_alloc_percpu+0xa0/0x100 [ 1147.982976] pcpu_alloc+0x4e2/0x1240 [ 1147.983780] ? io_tctx_exit_cb+0xf0/0xf0 [ 1147.984641] percpu_ref_init+0x31/0x3d0 [ 1147.985495] io_uring_setup+0x47a/0x2980 [ 1147.986357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1147.987390] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1147.988466] ? wait_for_completion_io+0x270/0x270 [ 1147.989521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1147.990640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1147.991746] do_syscall_64+0x33/0x40 [ 1147.992540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1147.993625] RIP: 0033:0x7f42229ceb19 [ 1147.994417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.998327] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1147.999957] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1148.001488] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1148.003023] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1148.004545] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1148.006055] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1148.012300] FAT-fs (loop5): invalid media value (0x00) [ 1148.013578] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1148.040249] audit: type=1326 audit(1764191614.079:3158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:13:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa, 0x0) [ 1148.059730] audit: type=1326 audit(1764191614.079:3159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1148.075671] audit: type=1326 audit(1764191614.079:3160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:13:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c, 0x0) [ 1148.118326] audit: type=1326 audit(1764191614.085:3161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8741 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1148.128967] audit: type=1326 audit(1764191614.085:3162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8741 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1148.155879] audit: type=1326 audit(1764191614.092:3163): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1148.158625] audit: type=1326 audit(1764191614.092:3164): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:13:34 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 9) [ 1148.188820] audit: type=1326 audit(1764191614.093:3165): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8733 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:13:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x48, 0x0) [ 1148.209084] FAULT_INJECTION: forcing a failure. [ 1148.209084] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.210447] CPU: 1 PID: 8761 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1148.211251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.212218] Call Trace: [ 1148.212538] dump_stack+0x107/0x167 [ 1148.212961] should_fail.cold+0x5/0xa [ 1148.213413] ? create_object.isra.0+0x3a/0xa30 [ 1148.213949] should_failslab+0x5/0x20 [ 1148.214403] kmem_cache_alloc+0x5b/0x310 [ 1148.214892] create_object.isra.0+0x3a/0xa30 [ 1148.215416] kmemleak_alloc_percpu+0xa0/0x100 [ 1148.215942] pcpu_alloc+0x4e2/0x1240 [ 1148.216386] ? io_tctx_exit_cb+0xf0/0xf0 [ 1148.216860] percpu_ref_init+0x31/0x3d0 [ 1148.217328] io_uring_setup+0x47a/0x2980 [ 1148.217797] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1148.218367] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1148.218971] ? wait_for_completion_io+0x270/0x270 [ 1148.219555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.220167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.220775] do_syscall_64+0x33/0x40 [ 1148.221212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.221847] RIP: 0033:0x7f42229ceb19 [ 1148.222284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.224469] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1148.225367] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1148.226192] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1148.227042] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1148.227872] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1148.228711] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:13:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x0, 0x7, 0x81, 0x0, 0x400, 0x882, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x1000, 0x3, 0xffffff81, 0x2, 0x0, 0x8, 0xc350, 0x0, 0x4, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) 21:13:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x74, 0x0) 21:13:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c, 0x0) 21:13:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="e96de9819c593b2e16d7003491954f23766f811e5bf1a7a054d1af7ca540cbda0485f749fb5b4c0c8a93b6878170077ed522e1c54dc446de64d78c3280ac9625a7188aa04c2cb569325556520213be056d00afa71e74d5aae88938"], 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setfsuid(0xee00) r0 = getpgrp(0x0) tgkill(r0, r0, 0x15) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)=""/28, 0x1c}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000c859ab7a39f7f1243faf8eb49ae2953a34000028340806d413b3ffcc9ab2c3f32b014d00000000000001e91073e17d44f4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000032e2f66696c653200fb7270e3a2def0ed42a5970dbab5b7026789bf2740849e2f97ed2fb6f6de04fff026dafb434f129b57b7abd0bdea14a08377c87849191b964df6cf5e958df30baa048d57dad516bafe"]) tgkill(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)=[{&(0x7f0000001e00)=ANY=[@ANYBLOB="182c00003200000226bd7000fcdbdf252400128004000d0008006f00", @ANYRES32=0x0, @ANYBLOB="13002200273a2e5c5ef1212f5d5d7b2c294000001511048008006800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="fec7047736c2d8d8f4e8a5691b0d62219899bb7669ce24599eff16965807711a569ab884195616ddaafb90140e714219f224af8e44439fd1f46f3c699c8b1ce40ccabe4653e76df23c32709cc0dc7e732a8c48e50ba8b0c72b2f3e6a3fc40decefaacf22608acf49948a96f0ea377709766676790e7a1e98c3695d3b83dba7a4b85ac3c790b6104d961be79baab981595ad471e80563b8712a176661b5b926749a0b78d4e2c95e396a860ca7e35fe8f5c89b5ed572d2b9cf247ac5e193feb733e073753356c30dc9b42da20cbbb57227a158275ce40b2426a59c8969ba6c4a26c6ca2f8573ecd30c64a1784075b4599baf20f43054bf15bc1451f51f611eeacc2536267e7d7369046196108b545df8318482c218f5ac9479534b0db73a21b41f89c19f6ffbfc42fa9262beaf39cf34461300e47bad00"], 0x2c18}], 0x1, 0x0, 0x0, 0x8010}, 0x4000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x20, 0x0, 0xba, 0x8, 0x0, 0xff, 0x100, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9b, 0x2, @perf_config_ext={0xfff, 0x10001}, 0x1002, 0x200000, 0x96c, 0x6, 0x47, 0x2e, 0x80, 0x0, 0x2, 0x0, 0x3f}, r1, 0xf, r2, 0x3) 21:13:34 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:13:52 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 10) 21:13:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x68, 0x0) 21:13:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a, 0x0) 21:13:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x3ff, 0x7f, 0x6c, 0x40}, {0x1, 0x9, 0x5, 0xff}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x5, 0x7}, 0x0, 0x0, 0x20, 0x7, 0xfffffffeffffffff, 0x7, 0x7e, 0x1, 0x2, 0x8, r2, r0}) 21:13:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:13:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x0, 0x7, 0x81, 0x0, 0x400, 0x882, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x1000, 0x3, 0xffffff81, 0x2, 0x0, 0x8, 0xc350, 0x0, 0x4, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) 21:13:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000100)={[0x1]}, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000280)={0xce0, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x30c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x7}, {0x3, 0x9}, {0x1}, {0x0, 0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x9}, {0x2, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2}, {0x5, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x3, 0x60, 0x1, 0x6c, 0x4, 0x27, 0x16]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {}, {0x5, 0x4}, {0x3, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x3, 0x1f}, {0x6, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x24, 0x4, 0xc, 0x16, 0x18, 0x24, 0x1, 0x18, 0x30, 0x0, 0x9, 0x12, 0x60, 0x21, 0x5, 0x18]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x48, 0x16, 0x5, 0xb, 0x18, 0x3, 0x5, 0x36, 0x25, 0x9, 0x6, 0x12]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6c, 0x9, 0x2, 0x6c, 0x60, 0x60, 0x16, 0x5, 0x12, 0x9, 0x48, 0x2, 0xc, 0x9, 0x6c, 0x4, 0x6c, 0x6c, 0x5, 0x36, 0x9, 0x48, 0x16, 0x18, 0x6c, 0x5, 0x24, 0x60, 0x60, 0x0, 0x6c]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x48, 0x4, 0x16, 0x60, 0xc, 0x60, 0x1, 0x4, 0xb, 0x1b, 0x6, 0xc, 0xb, 0x24]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x7, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0xa}, {0x0, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x4}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x1f}, {0x0, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x3}, {0x4}, {0x7, 0x3}, {0x4, 0x7}, {0x4, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x3}, {0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {}, {0x0, 0x8}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x48, 0x24, 0x1, 0x18, 0x2, 0xb, 0x36, 0x24, 0x48]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x24, 0xb, 0xb, 0x12, 0x1b, 0x1, 0x37a7d882f2ea7342, 0x4, 0x16, 0x1b, 0x18, 0x4, 0x6f, 0x3, 0x5, 0xc, 0x16, 0x60, 0x9, 0x0, 0x30]}]}, @NL80211_BAND_6GHZ={0x140, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x12, 0x6, 0x12, 0x5, 0x6c, 0x2, 0x2, 0x9, 0x1, 0x18, 0x0, 0x30, 0x4, 0x4, 0x9, 0x4, 0x16, 0x60, 0x36, 0x10]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x71fd, 0x6, 0x100, 0x20, 0x4, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x1, 0x6c, 0x3, 0x6c, 0x2, 0x16, 0x6, 0x6c, 0x3, 0x16, 0x18, 0x48, 0x48, 0x5, 0x60, 0xc, 0x12, 0x4, 0xc, 0x3, 0x24, 0x6c, 0x6, 0x0, 0x30, 0x5]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x5}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x6, 0x8}, {}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0x9}, {0x3, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x7, 0x9}, {0x6, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x1}, {0x7}, {0x2}, {0x2, 0x4}, {0x7, 0x2}, {0x1}, {0x5}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x48, 0x36, 0x6c, 0x1, 0x6c, 0x6, 0x60, 0x16, 0xc, 0x18, 0x16, 0x5, 0x1, 0x1b, 0x24, 0x26, 0x26, 0x6c, 0x16, 0x5, 0x9, 0x5, 0x12, 0x1]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x2, 0x60, 0x1b, 0x16, 0x5, 0x76, 0xb, 0x5, 0x5, 0x30, 0x16, 0xb, 0x9, 0x9, 0x2, 0x1]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x2}, {0x3}, {}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {}, {0x7, 0x5}, {0x2, 0x8}, {0x4}, {0x7, 0x3}, {0x1, 0x3}, {0x7}, {0x1, 0x3}, {0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x6}, {0x6, 0x1}, {0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0xa}, {0x5, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0x2}, {}, {0x5, 0x8}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x1}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x2, 0x6, 0x8f, 0x2, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x400, 0x7, 0x8001, 0xab, 0x6, 0x100, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x6, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xffff, 0x7, 0x8, 0x8001, 0xe998, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x36, 0x9, 0x27, 0xdb23f7707b76b2f5, 0x48, 0x36, 0xb, 0x60, 0x0, 0x3, 0x3, 0xb, 0x16, 0x6, 0x3, 0x1b, 0x36, 0x6c, 0x36, 0x0, 0x60, 0x0, 0x12, 0x16, 0x1b, 0x2]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x9}, {0x2, 0x2}, {}, {0x3, 0x5}, {0x6}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5c3a, 0x400, 0x179, 0x1, 0x100, 0xea09, 0x7e, 0x225f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x81, 0x6, 0x4c81, 0x8000, 0x80, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x6, 0x1, 0x16, 0x6c, 0x12, 0x16, 0x48, 0x1b, 0x24, 0x12, 0x6c, 0x36, 0xb, 0x2, 0x6c, 0x60, 0x0, 0x6, 0x1b, 0x2, 0x48, 0x83557a5592bd06d5, 0x6, 0x2, 0x5, 0x0, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6e2, 0x952, 0x65, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0x0, 0xffff, 0x1, 0x101, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x8, 0x7fff, 0x1000, 0x401, 0x3, 0x6]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x2, 0xa}, {0x4, 0x1}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {}, {0x0, 0x9}, {0x4}, {0x5, 0x3}, {0x5, 0x5}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x6, 0x5}, {0x4}, {0x2, 0x9}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x6c, 0x727302c48ce21663, 0x6, 0x60, 0x60, 0x6c]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x12, 0x1b, 0x6c, 0x5, 0xc, 0x12, 0x5, 0x2, 0xd8]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb38d, 0x6, 0x2, 0x800, 0x8000, 0x100, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x50e8, 0x2, 0x3, 0x100, 0x1, 0x93, 0xe3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x9, 0x30, 0x12, 0x6c, 0x3, 0x5]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x6}, {}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x9}, {0x3, 0x8}, {0x5}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x3, 0x3}, {0x0, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x7, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0xe}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7f, 0x0, 0xc3, 0x100, 0x3f, 0x3f, 0xc8]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x9}, {0x7}, {0x2}, {0x1, 0x6}, {0x1}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x2}, {0x6, 0x2}, {0x2}, {0x6}, {0x2, 0xa}, {0x2, 0x9}, {0x4, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x7}, {0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x1}, {0x3}, {0x6, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0xa}, {0x4, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4d, 0x48, 0x12, 0x4, 0x18, 0x2, 0xb, 0x18, 0x60, 0x0, 0x1, 0x6, 0x5, 0x36, 0x36, 0x30, 0x36, 0x9, 0x18, 0x2, 0x24, 0x24, 0x36, 0x6, 0x1b, 0x30, 0x60, 0x6, 0x60, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xf7b5, 0xfffc, 0x5, 0xfff, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x263, 0x3, 0x4, 0x8001, 0xffff, 0x2, 0xd75, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0x20, 0x7, 0xffff, 0xff, 0xfff, 0x7fff]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0xa}, {0x4, 0x7}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x5}, {0x6}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x8}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x9}, {0x5, 0x5}, {0x4, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x6}, {0x2, 0x2}, {0x4, 0x6}, {}, {0x0, 0x6}, {0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xd02, 0xffff, 0xfffb, 0x5, 0x7, 0x44e, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x0, 0x101, 0x46f3, 0x3, 0x5, 0xa23]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x401, 0xb7, 0x2c7, 0x101, 0x4, 0x3ff, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x10}, {0x2, 0xd}, {0x2, 0x8}, {0x4, 0x5}, {0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x7fff, 0x2f8, 0xff, 0x0, 0x8c]}}]}]}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x2}, {0x7, 0x3}, {0x5}, {0x5, 0xa}, {0x5}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0xa}, {0x4}, {0x3, 0x1}, {0x7, 0xa}, {0x2, 0x8}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {}, {0x6, 0x3}, {0x3, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x0, 0x3}, {0x3}, {0x6, 0x17}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0x9}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1fc2, 0x7, 0x3, 0x101, 0x800, 0x0, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0x9, 0xffff, 0x7, 0x10, 0x0, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x3, 0x24, 0x24, 0x18, 0x6c, 0x12, 0x3, 0x60, 0x16, 0x3, 0xb, 0x1, 0xb, 0x6, 0x18, 0x1, 0x12, 0x2, 0x9, 0x60, 0x6c, 0x5, 0x36, 0x18, 0x5]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x5}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x6}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {}, {0x5, 0x2}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {}, {0x4, 0x1}, {0x4, 0x9}, {}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x5}, {0x4, 0xa}, {0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x9}, {0x2}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x4, 0x2}, {0x2, 0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x2, 0x4}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {}, {0x2, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x8000, 0x0, 0x20, 0x3ff, 0x1, 0x9d9]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8e9, 0x4, 0x8, 0xffc0, 0x8000, 0x5, 0xa0, 0x13d1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc, 0x2, 0x92, 0x5, 0x7fff, 0xffff, 0x40, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x9, 0x24, 0xc, 0x30, 0xb, 0x3, 0x3, 0x5, 0x4, 0x30, 0x30, 0x24, 0x3, 0x5, 0x367feef52403e4ea, 0x1b]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x9, 0x200, 0x9, 0x1, 0x6a6, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x417b, 0x8000, 0xec, 0x4, 0x3f, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x6c, 0x48, 0x36, 0x36, 0xc, 0x1, 0x24, 0x36, 0x18]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x2, 0x48, 0x3, 0x1b, 0xc, 0x12, 0x4, 0xb, 0x16, 0x58, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x9}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xffff, 0x1, 0x1ff, 0x2, 0x5, 0x8f3, 0x800]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x1b, 0x5, 0x6e, 0x6, 0x18, 0x60, 0x6, 0x5, 0x1b, 0x4, 0x30, 0x3, 0x16, 0x28, 0x6c, 0xb, 0x0, 0xc, 0x0, 0x18, 0xc, 0x30, 0x36, 0x48, 0x3, 0xb, 0x36]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x44ad, 0x3, 0x3, 0x8, 0x0, 0x7476, 0x1f]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x3}, {0x3, 0x1}, {0x7, 0x8}, {0x7, 0x17}, {0x3, 0xa}, {0x1, 0x3}, {0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x7}, {0x3, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x5}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x40, 0x1, 0x6, 0x7, 0x1000, 0x7, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff9, 0x62d, 0x80, 0x0, 0x84, 0x7a29, 0xc07]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x8, 0xfff, 0x0, 0x9, 0x0, 0xfff]}}]}, @NL80211_BAND_6GHZ={0x10c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x48, 0x36, 0x3, 0x36, 0xb, 0x12, 0x1, 0x1b, 0x1, 0x5, 0x6c, 0x60, 0x9, 0x6, 0x1b, 0x4, 0x2, 0x6, 0xe, 0x5, 0x24, 0x31a15b20158d54bb, 0x27, 0x24, 0x60, 0x6c, 0xc]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x6}, {0x3, 0x3}, {0x5, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x5, 0x8}, {0x7, 0x5}, {0x6, 0x2}, {0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x2}, {0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0xa}, {}, {0x5, 0x1}, {0x4, 0x6}, {0x6}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x6}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x60, 0x60, 0xb, 0x5, 0x48, 0xb, 0x12, 0x9, 0x36, 0x0, 0x79, 0x8, 0x16, 0xda5482c97bf24bd7, 0x16, 0x6c, 0x36, 0x26, 0xb, 0x6c, 0x16, 0x1, 0x6c, 0x12, 0x30, 0x48]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x12, 0xc, 0x60]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {0x3, 0x8}, {0x3}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0xa}, {0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x2}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf32, 0x1, 0x8, 0x7, 0x6, 0x40, 0x400, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff03, 0x8, 0x4b7, 0x256, 0x4, 0x4, 0x1000, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0xbebb, 0x6, 0x9, 0x9, 0x5, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0x9, 0x1, 0x800, 0x3f, 0x400, 0xff7f]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x2}, {0x5, 0x3}, {0x4, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x1}, {0x3, 0x3}, {0x3}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x8}, {0x4}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0xa}, {0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x5, 0x36, 0xb, 0x6c, 0xc, 0xb, 0x9, 0x24, 0x4, 0x48, 0x6, 0xb, 0x18, 0x30, 0x59, 0x16, 0x24, 0x5, 0x16, 0x24, 0x3, 0x1b, 0xc, 0x5, 0x6, 0x1b, 0x5, 0x16, 0x28, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33af, 0x1f, 0x96a, 0x8, 0x400, 0x7ff, 0xfbff, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x3, 0x24, 0x6c, 0xb, 0x6, 0x48, 0x60, 0x18, 0x9, 0x12, 0x30, 0x1b, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x4}, {0x5, 0x4}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x1}, {0x0, 0x7}, {}, {0x6, 0x5}, {0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xc]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0xb, 0x60, 0x6, 0x5, 0x6c, 0x18, 0x4, 0x6c, 0x2, 0x6, 0x3, 0x18, 0x3, 0x60, 0xb]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x7, 0x8}, {0x2, 0x5}]}]}]}]}, 0xce0}, 0x1, 0x0, 0x0, 0x14}, 0x10) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c0000000000069078ac1e0001ac1414bb4404da01000000008cda65", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c47f5b77f18503e51c45013cf2b1c1cc9c32b71de06675e624619df33df5bc0c19b6e8ad4c66d3e9aae12557daaaa125ccbf88e9000df8300f70839cbab045e29bac21bef9df98cc9c1ee7c2f84fb5d302b143f7a36c70c4f426785a648c88a22b49cb23a0c514dc9e1639f9acc29e50265a7aaba4b5b19c18d30642e1306138286"], 0x0) [ 1166.041945] loop5: detected capacity change from 0 to 33559552 [ 1166.050524] kauditd_printk_skb: 122 callbacks suppressed 21:13:52 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1166.050552] audit: type=1326 audit(1764191632.179:3288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.087788] audit: type=1326 audit(1764191632.179:3289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.109891] FAT-fs (loop5): bogus number of FAT sectors [ 1166.110699] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1166.124261] audit: type=1326 audit(1764191632.200:3290): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:13:52 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1166.133663] FAULT_INJECTION: forcing a failure. [ 1166.133663] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.136389] CPU: 1 PID: 8795 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1166.137862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1166.139636] Call Trace: [ 1166.140204] dump_stack+0x107/0x167 [ 1166.140816] audit: type=1326 audit(1764191632.200:3291): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.141121] should_fail.cold+0x5/0xa [ 1166.141146] ? percpu_ref_init+0xd8/0x3d0 [ 1166.141165] should_failslab+0x5/0x20 [ 1166.141185] kmem_cache_alloc_trace+0x55/0x320 [ 1166.141208] ? io_tctx_exit_cb+0xf0/0xf0 [ 1166.141226] percpu_ref_init+0xd8/0x3d0 [ 1166.141250] io_uring_setup+0x47a/0x2980 [ 1166.141272] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1166.141295] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1166.141310] ? wait_for_completion_io+0x270/0x270 [ 1166.141354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1166.141375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1166.141397] do_syscall_64+0x33/0x40 [ 1166.141417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1166.141436] RIP: 0033:0x7f42229ceb19 [ 1166.144501] audit: type=1326 audit(1764191632.200:3292): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.145010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1166.145022] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1166.145043] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1166.145054] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1166.145065] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1166.145081] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1166.148509] audit: type=1326 audit(1764191632.203:3293): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.148645] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1166.149396] audit: type=1326 audit(1764191632.203:3294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.172848] audit: type=1326 audit(1764191632.203:3295): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.175862] audit: type=1326 audit(1764191632.203:3296): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8777 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1166.178690] audit: type=1326 audit(1764191632.213:3297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8786 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:13:52 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 11) [ 1166.217436] 9pnet: Insufficient options for proto=fd 21:13:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c, 0x0) 21:13:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x300, 0x0) 21:13:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x4, 0x7f, 0x1, 0x2}, {0x5, 0xb3, 0x7, 0x1}, {0x1, 0x8, 0x5, 0xc0000000}, {0xfff, 0x7, 0x2}, {0x0, 0x5, 0x7f, 0x7f}, {0x1, 0x80, 0x7, 0x8}, {0x3, 0xe8, 0x2, 0x7}, {0x40, 0x9, 0x0, 0xfffff001}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) 21:13:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x74, 0x0) [ 1166.306207] FAULT_INJECTION: forcing a failure. [ 1166.306207] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.308660] CPU: 1 PID: 8807 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1166.310114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1166.311883] Call Trace: [ 1166.312446] dump_stack+0x107/0x167 [ 1166.313222] should_fail.cold+0x5/0xa [ 1166.314033] ? create_object.isra.0+0x3a/0xa30 [ 1166.315006] should_failslab+0x5/0x20 [ 1166.315816] kmem_cache_alloc+0x5b/0x310 [ 1166.316679] create_object.isra.0+0x3a/0xa30 [ 1166.317606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1166.318683] kmem_cache_alloc_trace+0x151/0x320 [ 1166.319690] ? io_tctx_exit_cb+0xf0/0xf0 [ 1166.320555] percpu_ref_init+0xd8/0x3d0 [ 1166.321401] io_uring_setup+0x47a/0x2980 [ 1166.322271] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1166.323304] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1166.324371] ? wait_for_completion_io+0x270/0x270 [ 1166.325417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1166.326524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1166.327627] do_syscall_64+0x33/0x40 [ 1166.328417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1166.329497] RIP: 0033:0x7f42229ceb19 [ 1166.330287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1166.334213] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1166.335847] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1166.337362] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1166.338893] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1166.340415] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1166.341935] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:13:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x500, 0x0) 21:13:52 executing program 0: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000001480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @empty}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010004000100000018000000", @ANYRES32, @ANYRES32=r4, @ANYRES16, @ANYRESHEX=r4, @ANYRESHEX, @ANYBLOB="bee3c92a81a8a32ce7ad3f705a", @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESHEX]) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e1e, 0x65899913, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0xffffffff}, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @loopback}}}, 0x108) close(r2) 21:13:52 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:13:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x600, 0x0) [ 1166.450526] 9pnet: Insufficient options for proto=fd 21:13:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = getpgrp(r0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3f, 0x8, 0x40, 0x20, 0x0, 0x3, 0x40, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000040)}, 0xc0c0, 0x10001, 0x2f, 0x5, 0x0, 0x8096, 0xfffc, 0x0, 0x800, 0x0, 0x23184e8}, r2, 0xc, 0xffffffffffffffff, 0x0) tgkill(r1, r1, 0x0) r3 = getpgrp(0x0) tgkill(r3, r3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) pwrite64(r4, &(0x7f0000000140)="821cebe685db494d37ad7bf4fe0eeed3acc39d3376aeb2476930b3e0c6152fd41d37e7ed4dedb3581199deeed2a58a5bc4e8aa55621284fdd4e0ceebc221e525", 0x40, 0x1) wait4(r1, &(0x7f0000000180), 0x8, &(0x7f00000002c0)) wait4(r3, &(0x7f0000000100), 0x1, &(0x7f0000000200)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r5, 0xba56) lseek(r5, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 21:13:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x0, 0x7, 0x81, 0x0, 0x400, 0x882, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x1000, 0x3, 0xffffff81, 0x2, 0x0, 0x8, 0xc350, 0x0, 0x4, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 21:14:06 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 12) 21:14:06 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:14:06 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a, 0x0) [ 1180.594915] kauditd_printk_skb: 194 callbacks suppressed [ 1180.594927] audit: type=1326 audit(1764191646.724:3492): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8833 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:14:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:14:06 executing program 0: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf25010000000000000007410000004c00180000000175647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20004044}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = add_key(&(0x7f00000005c0)='syzkaller\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="f20647ca9c5079d507610473d30c2affdc2cd913", 0x14, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0) r3 = openat2(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x40101, 0x101, 0x2}, 0x18) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="1fc3424ee0feef111bcd7095a4464abfa4b21ac700a507659c491ad971c0b5", 0x1f, r4) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000380)={0x2, 0x3}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x3, 0x3}, 0x6) 21:14:06 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc2000}, {0x8, 0x0, 0x8, 0x9ce7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r4 = getpgrp(r3) tgkill(r4, r4, 0x0) syz_open_procfs(r4, &(0x7f0000000180)='net/fib_triestat\x00') ptrace$pokeuser(0x6, r4, 0x5, 0x81) r5 = fcntl$getown(r0, 0x9) ptrace(0x10, r5) 21:14:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 21:14:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x700, 0x0) [ 1180.599129] audit: type=1326 audit(1764191646.728:3493): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8833 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1180.603338] audit: type=1326 audit(1764191646.732:3494): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8833 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1180.608286] audit: type=1326 audit(1764191646.732:3495): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8833 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1180.614964] FAULT_INJECTION: forcing a failure. [ 1180.614964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1180.616466] CPU: 1 PID: 8837 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1180.617344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1180.618356] Call Trace: [ 1180.618694] dump_stack+0x107/0x167 [ 1180.619166] should_fail.cold+0x5/0xa [ 1180.619650] __alloc_pages_nodemask+0x182/0x600 [ 1180.620242] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1180.620864] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1180.621637] ? trace_hardirqs_on+0x5b/0x180 [ 1180.622186] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1180.622819] alloc_page_interleave+0x22/0x130 [ 1180.623396] ? __next_node_in+0x72/0x80 [ 1180.623898] alloc_pages_current+0x237/0x280 [ 1180.624465] __get_free_pages+0xc/0xa0 [ 1180.624962] io_uring_setup+0xe27/0x2980 [ 1180.625463] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1180.626118] ? wait_for_completion_io+0x270/0x270 [ 1180.626746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1180.627424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1180.628075] do_syscall_64+0x33/0x40 [ 1180.628544] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1180.629185] RIP: 0033:0x7f42229ceb19 [ 1180.629645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1180.631942] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1180.632861] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1180.633752] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1180.634640] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1180.635538] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1180.636429] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1180.647778] audit: type=1326 audit(1764191646.732:3496): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8833 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1180.647912] 9pnet: Insufficient options for proto=fd 21:14:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa00, 0x0) [ 1180.663303] audit: type=1326 audit(1764191646.786:3497): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8842 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1180.665767] loop5: detected capacity change from 0 to 33559552 [ 1180.680916] FAT-fs (loop5): bogus number of FAT sectors [ 1180.682167] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1180.690991] audit: type=1326 audit(1764191646.786:3498): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8842 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1180.700191] audit: type=1326 audit(1764191646.789:3499): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8842 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1180.702896] audit: type=1326 audit(1764191646.789:3500): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8842 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1180.706264] audit: type=1326 audit(1764191646.789:3501): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8842 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f8", 0x16}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:14:20 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xf8c2, 0x0, 0x1, 0x2}, {0x3, 0x9, 0x3, 0xfffffffa}]}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2c, 0x7, 0x13, 0x80, 0x0, 0x401, 0x300, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x52001, 0x9, 0x0, 0x3, 0x52, 0x3, 0x7fff, 0x0, 0x800, 0x0, 0xff}, r1, 0xa, r2, 0x0) 21:14:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4000, 0x0) 21:14:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, 0x0, 0x0, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) flistxattr(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)) dup3(0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000001140)={0x3, 0x80, 0xfe, 0x3f, 0x1f, 0x9, 0x0, 0x0, 0x1101, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10000, 0x2}, 0x1000, 0x9, 0xfffffff8, 0x1, 0x3, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x2) mq_timedsend(0xffffffffffffffff, &(0x7f0000001e00)="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", 0xfaa, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x0, 0x186) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 21:14:20 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:14:20 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 13) 21:14:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x300, 0x0) 21:14:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="08000000000000002e2f66696c653000e2199c517eccec93ecd84c7851c6faa13f49f43dad331dd08970fab64d85b251ca4f492725ef798c371ad301d7be92b9c12ccb418dbb3e076bdec8b7c9e6411abe72b44812aec36dc7544fced1fb3993841ba3fbfe0a39b4c190ba623498f24d949c98c174450b47ba595a89983c5e687b7365b55ec3d14267994b7a12beaa43d929fd54b7e16195fffebf0f6dae17efa6bfe419c4f1ad2400"/182]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) [ 1194.460652] kauditd_printk_skb: 35 callbacks suppressed [ 1194.460673] audit: type=1326 audit(1764191660.589:3537): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8857 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1194.482262] audit: type=1326 audit(1764191660.604:3538): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8861 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1194.487914] FAULT_INJECTION: forcing a failure. [ 1194.487914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1194.490587] CPU: 0 PID: 8871 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1194.492042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.493788] Call Trace: [ 1194.494345] dump_stack+0x107/0x167 [ 1194.495121] should_fail.cold+0x5/0xa [ 1194.495931] __alloc_pages_nodemask+0x182/0x600 [ 1194.496909] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1194.497936] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1194.497952] loop5: detected capacity change from 0 to 33559552 [ 1194.499202] ? trace_hardirqs_on+0x5b/0x180 [ 1194.499227] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1194.502095] alloc_page_interleave+0x22/0x130 [ 1194.503029] ? __next_node_in+0x72/0x80 [ 1194.503865] alloc_pages_current+0x237/0x280 [ 1194.504783] __get_free_pages+0xc/0xa0 [ 1194.505596] io_uring_setup+0xf9a/0x2980 [ 1194.506453] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1194.507525] ? wait_for_completion_io+0x270/0x270 [ 1194.508557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1194.509655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1194.510735] do_syscall_64+0x33/0x40 [ 1194.511519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1194.512589] RIP: 0033:0x7f42229ceb19 [ 1194.513364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.517213] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1194.518804] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1194.520303] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1194.521793] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1194.523293] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1194.524786] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1194.540128] FAT-fs (loop5): bogus number of FAT sectors [ 1194.541432] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1194.576269] audit: type=1326 audit(1764191660.605:3539): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8861 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:14:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x7f, 0x80, 0x0, 0xfffffffffffff800, 0x1a228, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffff186, 0x4, @perf_config_ext={0x80, 0x3ff}, 0x5012, 0x9, 0x6c3, 0x6, 0x7fffffff, 0x5, 0x8000, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x3) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) [ 1194.603941] audit: type=1326 audit(1764191660.605:3540): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8865 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:14:20 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x894c, 0x0) 21:14:20 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1194.636504] audit: type=1326 audit(1764191660.605:3541): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8861 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:14:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x500, 0x0) 21:14:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4800, 0x0) [ 1194.672268] audit: type=1326 audit(1764191660.606:3542): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8865 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:14:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x9, 0x0, 0x0, 0xfffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x101, 0x3, 0x2, 0x5}, {0x0, 0x7, 0xa7, 0x831e}, {0x2, 0x4, 0x1, 0x8}, {0x5, 0x40, 0x2, 0x3}, {0x1000, 0x1, 0x6, 0x7ff}, {0xfff, 0x1, 0x6, 0x9}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x9, 0xf4, 0x4, 0x3}, {0xff84, 0xf8, 0x4, 0x3e29}, {0x6, 0xf8, 0x68, 0x1}, {0x2, 0x0, 0x7, 0x7b85}, {0x988e, 0x80, 0x1, 0x9}, {0xfa, 0x7, 0x1, 0x8000}, {0x2, 0x9, 0xde, 0x2}, {0xc69, 0x7, 0x3e, 0x9}, {0x3f, 0x1, 0x1, 0x52c}, {0x3, 0x20, 0x9, 0x10000}]}, 0x10) 21:14:20 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 14) [ 1194.710878] audit: type=1326 audit(1764191660.606:3543): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8865 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:14:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) [ 1194.741645] audit: type=1326 audit(1764191660.606:3544): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8865 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1194.768878] audit: type=1326 audit(1764191660.608:3545): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8861 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1194.780918] audit: type=1326 audit(1764191660.609:3546): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8861 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1194.875889] FAULT_INJECTION: forcing a failure. [ 1194.875889] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.878291] CPU: 0 PID: 8896 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1194.879725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.881476] Call Trace: [ 1194.882034] dump_stack+0x107/0x167 [ 1194.882797] should_fail.cold+0x5/0xa [ 1194.883611] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1194.884785] should_failslab+0x5/0x20 [ 1194.885582] kmem_cache_alloc_trace+0x55/0x320 [ 1194.886532] ? alloc_page_interleave+0x6e/0x130 [ 1194.887510] ? __next_node_in+0x72/0x80 [ 1194.888338] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1194.889473] io_uring_setup+0x14f6/0x2980 [ 1194.890336] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1194.891401] ? wait_for_completion_io+0x270/0x270 [ 1194.892428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1194.893514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1194.894580] do_syscall_64+0x33/0x40 [ 1194.895354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1194.896417] RIP: 0033:0x7f42229ceb19 [ 1194.897184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.901000] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1194.902590] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1194.904086] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1194.905581] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1194.907067] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1194.908546] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1208.553520] FAULT_INJECTION: forcing a failure. [ 1208.553520] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.556052] CPU: 0 PID: 8906 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1208.557482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.559220] Call Trace: [ 1208.559819] dump_stack+0x107/0x167 [ 1208.560587] should_fail.cold+0x5/0xa [ 1208.561389] ? create_object.isra.0+0x3a/0xa30 [ 1208.562351] should_failslab+0x5/0x20 [ 1208.563151] kmem_cache_alloc+0x5b/0x310 [ 1208.564040] create_object.isra.0+0x3a/0xa30 [ 1208.564957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1208.566016] kmem_cache_alloc_trace+0x151/0x320 [ 1208.566984] ? alloc_page_interleave+0x6e/0x130 [ 1208.567984] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1208.569107] io_uring_setup+0x14f6/0x2980 [ 1208.569979] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1208.571042] ? wait_for_completion_io+0x270/0x270 [ 1208.572096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1208.573186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1208.574259] do_syscall_64+0x33/0x40 [ 1208.575031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1208.576124] RIP: 0033:0x7f42229ceb19 [ 1208.576896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.580732] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1208.582341] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1208.583857] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1208.585333] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1208.586807] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1208.588307] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:14:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c00, 0x0) 21:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:14:34 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 15) 21:14:34 executing program 1: prctl$PR_SET_FPEMU(0xa, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) prctl$PR_SET_FPEMU(0xa, 0x1) dup3(r1, 0xffffffffffffffff, 0x0) 21:14:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x600, 0x0) 21:14:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}, 0x3105, 0x0, 0x400, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) 21:14:34 executing program 0: r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x2, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f0000001280)={0x60000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:14:34 executing program 7: epoll_create(0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1208.598870] loop5: detected capacity change from 0 to 33559552 [ 1208.619651] kauditd_printk_skb: 82 callbacks suppressed [ 1208.619668] audit: type=1326 audit(1764191674.747:3629): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:14:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x700, 0x0) 21:14:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x3, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x88, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000000) r7 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001200390700fdffffff0000000a"], 0x14}}, 0x0) flock(r7, 0x6) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = fcntl$dupfd(r1, 0x0, r8) syz_emit_ethernet(0x1b1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e1b01a30067000007069078e0000002ac1414aa9404000089108bd8575c963778232468a49252ac9404010001940401000044288db000000007000008000000080000000000007f00000001441c900080000000ffffffff0000000009000000060000080000004e244e2400"/138, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2001fbff90780040130cfeb6fb1ea592bb1ff0c2051063f92efb9ff708864a770ba18f3c04023e0d0740f5d97cda5e514f6c620402fe06e2d4c3d9000d627f413e06f20b69ec2d6ea24c5d86a40dddef0baab5d5c4702f68b1e6599f7fef6ffbefed4cfc2eb249a89d798b103a6d69d159dbe7b80dfd6bdd37ee7c1f5f5eaab6d2422d947b34e767571296415c28e25484330ddb4763b0c64582d536045cd005f4065630757c911fd52ad9dfc7ab8ec468a5c51062863a5cf3b415c30ee53ec0414c085ddab0be93463ff6ab69c91baeaa4960849a6c99d8e1007f7f0a7187d32cf1be8734529574405212c451a3ed0bb032ec6be70c6b9d018db3033b7e88e06142dab0e47bd712f628becdbec796a90c8d8e1b8653e25db07cdb1d2f5d8a"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) tee(r10, r11, 0x7, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) [ 1208.655706] audit: type=1326 audit(1764191674.747:3630): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8910 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:34 executing program 7: epoll_create(0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1208.693982] audit: type=1326 audit(1764191674.747:3631): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1208.702631] audit: type=1326 audit(1764191674.747:3632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8910 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1208.712537] audit: type=1326 audit(1764191674.747:3633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1208.720727] audit: type=1326 audit(1764191674.748:3634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1208.728842] audit: type=1326 audit(1764191674.748:3635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8910 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6800, 0x0) [ 1208.739822] audit: type=1326 audit(1764191674.748:3636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8910 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1208.744528] audit: type=1326 audit(1764191674.748:3637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1208.762688] audit: type=1326 audit(1764191674.748:3638): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8910 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:34 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 16) 21:14:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x28) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x61) [ 1208.844508] FAULT_INJECTION: forcing a failure. [ 1208.844508] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.846772] CPU: 1 PID: 8931 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1208.848155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.849819] Call Trace: [ 1208.850348] dump_stack+0x107/0x167 [ 1208.851083] should_fail.cold+0x5/0xa [ 1208.851859] ? create_object.isra.0+0x3a/0xa30 [ 1208.852777] should_failslab+0x5/0x20 [ 1208.853547] kmem_cache_alloc+0x5b/0x310 [ 1208.854364] create_object.isra.0+0x3a/0xa30 [ 1208.855256] kmemleak_alloc_percpu+0xa0/0x100 [ 1208.856175] pcpu_alloc+0x4e2/0x1240 [ 1208.856942] ? io_async_queue_proc+0x80/0x80 [ 1208.857818] percpu_ref_init+0x31/0x3d0 [ 1208.858619] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1208.859701] io_uring_setup+0x14f6/0x2980 [ 1208.860540] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1208.861553] ? wait_for_completion_io+0x270/0x270 [ 1208.862549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1208.863600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1208.864620] do_syscall_64+0x33/0x40 [ 1208.865371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1208.866408] RIP: 0033:0x7f42229ceb19 [ 1208.867144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.870837] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1208.872371] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1208.873792] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1208.875233] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1208.876670] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1208.878093] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:14:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa00, 0x0) 21:14:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:14:35 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c00, 0x0) 21:14:51 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 17) 21:14:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:14:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:14:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:14:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4000, 0x0) 21:14:51 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd130, 0x0, @perf_config_ext, 0x1028, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)=ANY=[@ANYBLOB="25ceb0dca30fb00c55cfa8cb680b610eafee3fb5a91683ef1815bb9627c4484fd72ca6ffb8897c270b799832d40de7f65dec81e0534075b46b312facfcd4044ffda9095d9772ed22eb887e33b37b", @ANYRES32=r0, @ANYBLOB="59020000000000002e2f66696c653000"]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4752, &(0x7f00000002c0)={0x0, 0x6252, 0x8, 0x3, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) [ 1225.331275] FAULT_INJECTION: forcing a failure. [ 1225.331275] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.332773] CPU: 0 PID: 8948 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1225.333652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.334735] Call Trace: [ 1225.335091] dump_stack+0x107/0x167 [ 1225.335571] should_fail.cold+0x5/0xa [ 1225.336063] ? create_object.isra.0+0x3a/0xa30 [ 1225.336650] should_failslab+0x5/0x20 [ 1225.337160] kmem_cache_alloc+0x5b/0x310 [ 1225.337686] create_object.isra.0+0x3a/0xa30 [ 1225.338254] kmemleak_alloc_percpu+0xa0/0x100 [ 1225.338844] pcpu_alloc+0x4e2/0x1240 [ 1225.339333] ? io_async_queue_proc+0x80/0x80 [ 1225.339911] percpu_ref_init+0x31/0x3d0 [ 1225.340429] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1225.341126] io_uring_setup+0x14f6/0x2980 [ 1225.341666] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1225.342325] ? wait_for_completion_io+0x270/0x270 [ 1225.342976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.343661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.344331] do_syscall_64+0x33/0x40 [ 1225.344808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.345471] RIP: 0033:0x7f42229ceb19 [ 1225.345955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.348355] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1225.349343] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1225.350271] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1225.351200] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1225.352124] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1225.353064] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:14:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7400, 0x0) 21:14:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x4, &(0x7f0000000100)=[{0xfffc, 0x0, 0x0, 0x7ffc0000}, {0xeac2, 0x8, 0x9, 0x3c3}, {0x82, 0x3f, 0x17, 0x3}, {0x6, 0x8, 0x3, 0xa58}]}) r0 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x8, &(0x7f0000000380)=[0x0, 0x0, r3, r2, r3, r2, r3, r3]) getgroups(0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, r3]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) r5 = getpid() r6 = getpgrp(0x0) tgkill(r6, r6, 0x0) r7 = getpgrp(0x0) tgkill(r7, r7, 0x0) clone3(&(0x7f0000000400)={0x20c101800, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/191, 0xbf, &(0x7f0000000340)=""/26, &(0x7f00000003c0)=[r7, r5, r5, r5, r0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002740)={{0x1, 0xffffffffffffffff, r3, r4, 0x0, 0x4b, 0x1f}, 0x0, 0x0, 0x790, 0x5, 0xffffffffffffff80, 0x0, 0x1f, 0x3, 0x6, 0xce3e, r5, r6}) tgkill(r0, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r8, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)=""/37, 0x25}) [ 1225.373958] kauditd_printk_skb: 77 callbacks suppressed [ 1225.373979] audit: type=1326 audit(1764191691.502:3716): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8945 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1225.381450] loop5: detected capacity change from 0 to 33559552 [ 1225.396007] audit: type=1326 audit(1764191691.511:3717): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8954 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:14:51 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 18) [ 1225.431055] audit: type=1326 audit(1764191691.512:3718): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8954 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1225.436874] FAULT_INJECTION: forcing a failure. [ 1225.436874] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.439271] CPU: 1 PID: 8964 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1225.440724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.442472] Call Trace: [ 1225.443035] dump_stack+0x107/0x167 [ 1225.443811] should_fail.cold+0x5/0xa 21:14:51 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1225.444619] ? percpu_ref_init+0xd8/0x3d0 [ 1225.445645] should_failslab+0x5/0x20 [ 1225.446454] kmem_cache_alloc_trace+0x55/0x320 [ 1225.447417] ? io_async_queue_proc+0x80/0x80 [ 1225.448356] percpu_ref_init+0xd8/0x3d0 [ 1225.449194] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1225.450340] io_uring_setup+0x14f6/0x2980 [ 1225.451220] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1225.452286] ? wait_for_completion_io+0x270/0x270 [ 1225.453322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.454423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.455524] do_syscall_64+0x33/0x40 [ 1225.456301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.457379] RIP: 0033:0x7f42229ceb19 [ 1225.458166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.462033] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1225.463649] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1225.465162] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1225.466660] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1225.468167] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1225.469678] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1225.502709] audit: type=1326 audit(1764191691.512:3719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8954 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1225.534989] audit: type=1326 audit(1764191691.513:3720): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8954 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:14:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) [ 1225.571295] audit: type=1326 audit(1764191691.514:3721): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8951 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a00, 0x0) 21:14:51 executing program 2: move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:14:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4800, 0x0) [ 1225.597653] audit: type=1326 audit(1764191691.514:3722): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8951 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:51 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1225.617259] audit: type=1326 audit(1764191691.514:3723): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8951 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:51 executing program 2: move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1225.641745] audit: type=1326 audit(1764191691.515:3724): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8951 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xac540, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d7463702ca2457c5bf0b8fb0d525e3030303030303030303030303030302c6673636f6e7465787409"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f0000000080)=""/105, 0x69, 0x7) [ 1225.670302] audit: type=1326 audit(1764191691.515:3725): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8951 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:14:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c00, 0x0) 21:14:51 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:14:51 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 19) [ 1225.708719] FAULT_INJECTION: forcing a failure. [ 1225.708719] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.710027] CPU: 0 PID: 8987 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1225.710807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.711752] Call Trace: [ 1225.712058] dump_stack+0x107/0x167 [ 1225.712475] should_fail.cold+0x5/0xa [ 1225.712909] ? percpu_ref_init+0xd8/0x3d0 [ 1225.713382] should_failslab+0x5/0x20 [ 1225.713816] kmem_cache_alloc_trace+0x55/0x320 [ 1225.714334] ? io_async_queue_proc+0x80/0x80 [ 1225.714830] percpu_ref_init+0xd8/0x3d0 [ 1225.715287] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1225.715906] io_uring_setup+0x14f6/0x2980 [ 1225.716379] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1225.716953] ? wait_for_completion_io+0x270/0x270 [ 1225.717510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.718105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.718692] do_syscall_64+0x33/0x40 [ 1225.719113] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.719706] RIP: 0033:0x7f42229ceb19 [ 1225.720128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.722209] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1225.723075] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1225.723900] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1225.724708] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1225.725510] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1225.726314] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1225.787001] 9pnet: p9_fd_create_tcp (8985): problem connecting socket to 127.0.0.1 [ 1225.792890] 9pnet: p9_fd_create_tcp (8992): problem connecting socket to 127.0.0.1 21:15:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x1000000, 0x0) 21:15:08 executing program 2: move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:15:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:15:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xac540, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d7463702ca2457c5bf0b8fb0d525e3030303030303030303030303030302c6673636f6e7465787409"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f0000000080)=""/105, 0x69, 0x7) 21:15:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x5, 0x0, 0x89, 0xfffffffb}, {0x1, 0x9, 0xda, 0xffffffff}, {0x0, 0x40, 0x8, 0x5}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbbc7c33b2c74d1ab695ebbffbcbafe2179d000618e58014ffb0eb8a34df1a7f0000000917d745e53a349fed259ffd425005b9ab774af55f75"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x80010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x400, 0x3, &(0x7f0000000240)="e62dcfa8a8c08be1c34d8c83", 0x1ff, 0x0, 0x1, {0x1}}, 0xd15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r5, 0x1, r2, 0x9}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r5, 0x0, r6, 0x8, 0x80000}) r7 = getpgrp(0x0) tgkill(r7, r7, 0x0) 21:15:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6800, 0x0) 21:15:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1242.002345] 9pnet: Insufficient options for proto=fd 21:15:08 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 20) [ 1242.059279] FAULT_INJECTION: forcing a failure. [ 1242.059279] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.062360] CPU: 1 PID: 9008 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1242.064100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1242.066223] Call Trace: [ 1242.066803] dump_stack+0x107/0x167 [ 1242.067624] should_fail.cold+0x5/0xa [ 1242.068589] ? create_object.isra.0+0x3a/0xa30 [ 1242.069730] should_failslab+0x5/0x20 [ 1242.070661] kmem_cache_alloc+0x5b/0x310 [ 1242.071782] create_object.isra.0+0x3a/0xa30 [ 1242.072865] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1242.074162] kmem_cache_alloc_trace+0x151/0x320 [ 1242.075319] ? io_async_queue_proc+0x80/0x80 [ 1242.076414] percpu_ref_init+0xd8/0x3d0 [ 1242.077443] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1242.078855] io_uring_setup+0x14f6/0x2980 [ 1242.079748] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1242.081161] ? wait_for_completion_io+0x270/0x270 [ 1242.082328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1242.083647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.084746] do_syscall_64+0x33/0x40 [ 1242.085531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1242.086613] RIP: 0033:0x7f42229ceb19 [ 1242.087394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.091286] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1242.092895] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1242.094402] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1242.095913] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1242.097420] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1242.098917] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1242.103217] kauditd_printk_skb: 37 callbacks suppressed [ 1242.103234] audit: type=1326 audit(1764191708.232:3763): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.118732] audit: type=1326 audit(1764191708.232:3764): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9003 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1242.119895] loop5: detected capacity change from 0 to 33559552 [ 1242.124129] audit: type=1326 audit(1764191708.232:3765): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.131628] audit: type=1326 audit(1764191708.232:3766): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9003 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1242.145499] audit: type=1326 audit(1764191708.241:3767): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.170605] audit: type=1326 audit(1764191708.241:3768): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.193698] audit: type=1326 audit(1764191708.241:3769): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.207393] audit: type=1326 audit(1764191708.244:3770): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.216043] audit: type=1326 audit(1764191708.244:3771): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1242.224214] audit: type=1326 audit(1764191708.244:3772): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9001 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1257.329645] kauditd_printk_skb: 82 callbacks suppressed [ 1257.329658] audit: type=1326 audit(1764191723.455:3855): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9024 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1257.334791] audit: type=1326 audit(1764191723.456:3856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9024 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:15:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xac540, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d7463702ca2457c5bf0b8fb0d525e3030303030303030303030303030302c6673636f6e7465787409"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f0000000080)=""/105, 0x69, 0x7) 21:15:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:15:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:15:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x0) 21:15:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x2000000, 0x0) 21:15:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c00, 0x0) 21:15:23 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 21) [ 1257.354746] FAULT_INJECTION: forcing a failure. [ 1257.354746] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.356300] CPU: 0 PID: 9038 Comm: syz-executor.6 Not tainted 5.10.246 #1 21:15:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1257.357195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.358378] Call Trace: [ 1257.358731] dump_stack+0x107/0x167 [ 1257.359210] should_fail.cold+0x5/0xa [ 1257.359718] ? __d_alloc+0x2a/0x990 [ 1257.360125] 9pnet: Insufficient options for proto=fd [ 1257.360203] should_failslab+0x5/0x20 [ 1257.360225] kmem_cache_alloc+0x5b/0x310 [ 1257.362293] __d_alloc+0x2a/0x990 [ 1257.362748] ? find_held_lock+0x2c/0x110 [ 1257.362857] loop5: detected capacity change from 0 to 33559552 [ 1257.363284] d_alloc_pseudo+0x19/0x70 [ 1257.365037] alloc_file_pseudo+0xce/0x250 [ 1257.365584] ? trace_hardirqs_on+0x5b/0x180 [ 1257.366145] ? alloc_file+0x5a0/0x5a0 [ 1257.366655] anon_inode_getfile+0xc8/0x1f0 [ 1257.367217] io_uring_setup+0x138b/0x2980 [ 1257.367764] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1257.368435] ? wait_for_completion_io+0x270/0x270 [ 1257.369080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.369772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.370448] do_syscall_64+0x33/0x40 [ 1257.370945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.371615] RIP: 0033:0x7f42229ceb19 [ 1257.372125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.374545] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1257.375535] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1257.376485] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1257.377420] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1257.378360] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1257.379430] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1257.391394] audit: type=1326 audit(1764191723.463:3857): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9026 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1257.398743] audit: type=1326 audit(1764191723.463:3858): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9026 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1257.433123] audit: type=1326 audit(1764191723.469:3859): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9026 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:15:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:15:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:15:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xac540, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d7463702ca2457c5bf0b8fb0d525e3030303030303030303030303030302c6673636f6e7465787409"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) pread64(r0, &(0x7f0000000080)=""/105, 0x69, 0x7) [ 1257.457309] audit: type=1326 audit(1764191723.469:3860): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9026 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:15:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x3000000, 0x0) 21:15:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7400, 0x0) [ 1257.484901] audit: type=1326 audit(1764191723.469:3861): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9026 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1257.497329] 9pnet: Insufficient options for proto=fd 21:15:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/254) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) [ 1257.509382] audit: type=1326 audit(1764191723.471:3862): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9024 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:15:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:15:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4000000, 0x0) [ 1257.526835] audit: type=1326 audit(1764191723.471:3863): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9024 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1257.540184] audit: type=1326 audit(1764191723.471:3864): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9024 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:15:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:15:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1270.725275] FAULT_INJECTION: forcing a failure. [ 1270.725275] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.726920] CPU: 1 PID: 9076 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1270.727820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1270.728996] Call Trace: [ 1270.729355] dump_stack+0x107/0x167 [ 1270.729876] should_fail.cold+0x5/0xa [ 1270.730392] ? create_object.isra.0+0x3a/0xa30 [ 1270.731011] should_failslab+0x5/0x20 [ 1270.731514] kmem_cache_alloc+0x5b/0x310 [ 1270.732074] create_object.isra.0+0x3a/0xa30 [ 1270.732655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1270.733336] kmem_cache_alloc+0x159/0x310 [ 1270.733922] __d_alloc+0x2a/0x990 [ 1270.734372] ? find_held_lock+0x2c/0x110 [ 1270.734920] d_alloc_pseudo+0x19/0x70 [ 1270.735419] alloc_file_pseudo+0xce/0x250 [ 1270.735964] ? trace_hardirqs_on+0x5b/0x180 [ 1270.736539] ? alloc_file+0x5a0/0x5a0 [ 1270.737113] anon_inode_getfile+0xc8/0x1f0 [ 1270.737821] io_uring_setup+0x138b/0x2980 [ 1270.738524] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1270.739355] ? wait_for_completion_io+0x270/0x270 [ 1270.740171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1270.741037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1270.741888] do_syscall_64+0x33/0x40 [ 1270.742506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1270.743346] RIP: 0033:0x7f42229ceb19 [ 1270.743967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1270.746665] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1270.747682] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1270.748649] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1270.749549] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1270.750467] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1270.751393] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1270.754898] loop5: detected capacity change from 0 to 33559552 [ 1270.757967] selinux_netlink_send: 38 callbacks suppressed [ 1270.757990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=31248 sclass=netlink_audit_socket pid=9078 comm=syz-executor.0 [ 1270.763045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9078 comm=syz-executor.0 21:15:36 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x5000000, 0x0) 21:15:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:15:36 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000180)=0x10000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xb, &(0x7f00000000c0)=0xba, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="14000000107a010000000000000000000000000a140000000b0a050000000000000000000000000014000000110001000000000000f5ff000065dbb33f408d18f4e0406439e3b36db5f8fa02fcc272d8ffa4b576512646360da81aeebd25f1bb4ab1d072062f7cb23c998bff805155637622ea7624a883c20900000000000000503879ce77dd6ad66d5b073595c0185ca7ba0b0477a4"], 0x3c}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x10) sendfile(r1, r3, &(0x7f00000001c0)=0x10000, 0x4) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xac1414d3, {0x2, 0x0, @remote}, 'veth0_to_bridge\x00'}) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, &(0x7f0000000000)=0x80, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 21:15:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:15:36 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) tgkill(0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x8df, 0x10, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) 21:15:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:15:36 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 22) 21:15:36 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a00, 0x0) [ 1270.786693] kauditd_printk_skb: 60 callbacks suppressed [ 1270.786711] audit: type=1326 audit(1764191736.915:3925): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9074 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1270.823695] audit: type=1326 audit(1764191736.915:3926): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9074 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:15:36 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 23) [ 1270.839064] audit: type=1326 audit(1764191736.922:3927): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9071 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1270.846079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=31248 sclass=netlink_audit_socket pid=9087 comm=syz-executor.0 [ 1270.848915] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9087 comm=syz-executor.0 21:15:36 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x1000000, 0x0) [ 1270.873633] audit: type=1326 audit(1764191736.922:3928): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9071 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:15:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x2000000, 0x0) 21:15:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6000000, 0x0) [ 1270.915713] audit: type=1326 audit(1764191736.923:3929): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:15:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x3000000, 0x0) 21:15:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1270.942876] FAULT_INJECTION: forcing a failure. [ 1270.942876] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.944506] audit: type=1326 audit(1764191736.923:3930): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1270.944889] CPU: 1 PID: 9098 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1270.950506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1270.951655] Call Trace: [ 1270.952054] dump_stack+0x107/0x167 [ 1270.952481] should_fail.cold+0x5/0xa [ 1270.953026] ? __alloc_file+0x21/0x320 [ 1270.953547] should_failslab+0x5/0x20 [ 1270.954176] kmem_cache_alloc+0x5b/0x310 [ 1270.954881] __alloc_file+0x21/0x320 [ 1270.955318] alloc_empty_file+0x6d/0x170 [ 1270.955802] alloc_file+0x5e/0x5a0 [ 1270.956231] alloc_file_pseudo+0x16a/0x250 [ 1270.956733] ? alloc_file+0x5a0/0x5a0 [ 1270.957192] anon_inode_getfile+0xc8/0x1f0 [ 1270.957696] io_uring_setup+0x138b/0x2980 [ 1270.958184] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1270.958778] ? wait_for_completion_io+0x270/0x270 [ 1270.959390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1270.960160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1270.960769] do_syscall_64+0x33/0x40 [ 1270.961383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1270.962106] RIP: 0033:0x7f42229ceb19 [ 1270.962695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1270.964930] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1270.965821] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1270.966782] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1270.967096] audit: type=1326 audit(1764191736.924:3931): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1270.967657] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1270.967664] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1270.967670] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1270.978923] audit: type=1326 audit(1764191736.924:3932): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:15:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1270.996330] audit: type=1326 audit(1764191736.924:3933): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:15:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) [ 1271.001286] audit: type=1326 audit(1764191736.924:3934): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9071 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:15:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x80}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = fork() sendfile(r2, r0, &(0x7f00000000c0)=0xff, 0x6) r4 = getpgrp(r3) tgkill(r4, r4, 0x0) [ 1288.187633] FAULT_INJECTION: forcing a failure. [ 1288.187633] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.190608] CPU: 1 PID: 9122 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1288.192322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 21:15:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:15:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:15:54 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 24) 21:15:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4000000, 0x0) 21:15:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7000000, 0x0) 21:15:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:15:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:15:54 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) pidfd_open(r2, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x400) tgkill(r1, r1, 0x0) [ 1288.194579] Call Trace: [ 1288.195375] dump_stack+0x107/0x167 [ 1288.196308] should_fail.cold+0x5/0xa [ 1288.197266] ? create_object.isra.0+0x3a/0xa30 [ 1288.198397] should_failslab+0x5/0x20 [ 1288.199359] kmem_cache_alloc+0x5b/0x310 [ 1288.200398] create_object.isra.0+0x3a/0xa30 [ 1288.201619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1288.203023] kmem_cache_alloc+0x159/0x310 [ 1288.204080] __alloc_file+0x21/0x320 [ 1288.205027] alloc_empty_file+0x6d/0x170 [ 1288.206039] alloc_file+0x5e/0x5a0 [ 1288.206922] alloc_file_pseudo+0x16a/0x250 [ 1288.207978] ? alloc_file+0x5a0/0x5a0 [ 1288.208952] anon_inode_getfile+0xc8/0x1f0 [ 1288.210011] io_uring_setup+0x138b/0x2980 [ 1288.211050] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1288.212318] ? wait_for_completion_io+0x270/0x270 [ 1288.213557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.214858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.216145] do_syscall_64+0x33/0x40 [ 1288.217088] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1288.218394] RIP: 0033:0x7f42229ceb19 [ 1288.219329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.223946] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1288.225884] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1288.227683] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1288.229427] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1288.230912] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1288.232422] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1288.262050] loop5: detected capacity change from 0 to 33559552 21:15:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1, 0x8, 0x6, 0x81, 0x0, 0x4, 0x4a004, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x100, 0xb613, 0x4, 0x7, 0xffff, 0x0, 0x2, 0x0, 0x5, 0x0, 0x30}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x190b420, &(0x7f00000037c0)) 21:15:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:15:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1288.338795] kauditd_printk_skb: 89 callbacks suppressed [ 1288.338812] audit: type=1326 audit(1764191754.465:4024): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9125 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1288.352410] audit: type=1326 audit(1764191754.465:4025): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9125 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:15:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa000000, 0x0) 21:15:54 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x3f, 0x7, 0x7f, 0x0, 0x7fffffff, 0x2160, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x3}, 0x1000, 0x1, 0x5, 0x0, 0x20, 0x5, 0x3, 0x0, 0x7d, 0x0, 0x5}, r2, 0x2a, 0xffffffffffffffff, 0x2) pidfd_open(r1, 0x0) tgkill(r1, r1, 0x0) r3 = getpid() wait4(r3, 0x0, 0x2, &(0x7f0000000400)) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) ptrace(0x4208, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) [ 1288.400735] audit: type=1326 audit(1764191754.466:4026): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9132 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:15:54 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 25) [ 1288.441630] audit: type=1326 audit(1764191754.466:4027): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9119 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:15:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x5000000, 0x0) [ 1288.479518] audit: type=1326 audit(1764191754.466:4028): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9132 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1288.490333] FAULT_INJECTION: forcing a failure. [ 1288.490333] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.492948] CPU: 1 PID: 9156 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1288.494380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.496120] Call Trace: [ 1288.496686] dump_stack+0x107/0x167 [ 1288.497449] should_fail.cold+0x5/0xa [ 1288.498248] ? security_file_alloc+0x34/0x170 [ 1288.498734] audit: type=1326 audit(1764191754.466:4029): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9119 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1288.499187] should_failslab+0x5/0x20 [ 1288.499221] kmem_cache_alloc+0x5b/0x310 [ 1288.505270] security_file_alloc+0x34/0x170 [ 1288.506174] __alloc_file+0xb7/0x320 [ 1288.506953] alloc_empty_file+0x6d/0x170 [ 1288.507807] alloc_file+0x5e/0x5a0 [ 1288.508564] alloc_file_pseudo+0x16a/0x250 [ 1288.509441] ? alloc_file+0x5a0/0x5a0 [ 1288.510251] anon_inode_getfile+0xc8/0x1f0 [ 1288.511136] io_uring_setup+0x138b/0x2980 [ 1288.512010] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1288.513073] ? wait_for_completion_io+0x270/0x270 [ 1288.514102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.515219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.516307] do_syscall_64+0x33/0x40 [ 1288.517083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1288.518152] RIP: 0033:0x7f42229ceb19 [ 1288.518224] audit: type=1326 audit(1764191754.466:4030): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9132 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:15:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1288.518925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.518935] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1288.518956] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1288.518966] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1288.518977] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1288.518988] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1288.518999] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1288.587736] audit: type=1326 audit(1764191754.467:4031): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9132 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1288.604782] audit: type=1326 audit(1764191754.467:4032): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9132 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1288.615704] audit: type=1326 audit(1764191754.475:4033): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9125 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:16:09 executing program 0: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @loopback, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2d, 0x7, 0xff, 0x6, 0x74, @dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8, 0x7800, 0x10000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000002c0)={0x3b, @rand_addr=0x64010101, 0x4e24, 0x1, 'lblc\x00', 0x13, 0x1f, 0x3a}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000013e2f6669000030"]) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000240)={{0x2, 0x4e20, @private=0xa010100}, {0x6}, 0x8, {0x2, 0x4e23, @multicast1}, 'syzkaller1\x00'}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000c80)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 21:16:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0x81, 0x66, 0x7f, 0x0, 0x3, 0x28632, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x400, 0x10000000000000, 0x1000000, 0x3, 0x8, 0x1, 0x401, 0x0, 0x1f, 0x0, 0x400}, r2, 0x6, r3, 0x3) pidfd_open(r1, 0x0) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) pidfd_open(r4, 0x0) 21:16:09 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:16:09 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 26) 21:16:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(0x0) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:16:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x40000000, 0x0) [ 1303.270156] FAULT_INJECTION: forcing a failure. 21:16:09 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6000000, 0x0) [ 1303.270156] name failslab, interval 1, probability 0, space 0, times 0 21:16:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1303.272985] CPU: 0 PID: 9166 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1303.274569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1303.276493] Call Trace: [ 1303.277108] dump_stack+0x107/0x167 [ 1303.277958] should_fail.cold+0x5/0xa [ 1303.278844] ? create_object.isra.0+0x3a/0xa30 [ 1303.279107] kauditd_printk_skb: 74 callbacks suppressed [ 1303.279120] audit: type=1326 audit(1764191769.408:4108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1303.279897] should_failslab+0x5/0x20 [ 1303.279919] kmem_cache_alloc+0x5b/0x310 [ 1303.279941] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1303.279966] create_object.isra.0+0x3a/0xa30 [ 1303.280801] audit: type=1326 audit(1764191769.408:4109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1303.285615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1303.285644] kmem_cache_alloc+0x159/0x310 [ 1303.296239] security_file_alloc+0x34/0x170 [ 1303.297230] __alloc_file+0xb7/0x320 [ 1303.298076] alloc_empty_file+0x6d/0x170 [ 1303.298997] alloc_file+0x5e/0x5a0 [ 1303.299804] alloc_file_pseudo+0x16a/0x250 [ 1303.300789] ? alloc_file+0x5a0/0x5a0 [ 1303.301670] anon_inode_getfile+0xc8/0x1f0 [ 1303.302654] io_uring_setup+0x138b/0x2980 [ 1303.303616] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1303.304783] ? wait_for_completion_io+0x270/0x270 [ 1303.305925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1303.307126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1303.308313] do_syscall_64+0x33/0x40 [ 1303.309181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1303.310357] RIP: 0033:0x7f42229ceb19 [ 1303.311218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1303.315458] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1303.317214] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1303.318857] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1303.320501] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1303.322142] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1303.323783] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1303.326858] audit: type=1326 audit(1764191769.456:4110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9171 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1303.329838] loop5: detected capacity change from 0 to 33559552 [ 1303.332814] audit: type=1326 audit(1764191769.462:4111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9171 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1303.337293] audit: type=1326 audit(1764191769.465:4112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9171 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1303.355447] audit: type=1326 audit(1764191769.484:4113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1303.358590] audit: type=1326 audit(1764191769.484:4114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1303.363268] audit: type=1326 audit(1764191769.484:4115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1303.375316] audit: type=1326 audit(1764191769.491:4116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1303.385139] audit: type=1326 audit(1764191769.491:4117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9164 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:16:09 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 27) 21:16:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:16:09 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000081c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000007fc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f0000000200)=""/4089, 0xff9}, {&(0x7f0000001200)=""/71, 0x47}, {&(0x7f0000008200)=""/130, 0x82}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/77, 0x4d}], 0x8}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f0000001680)=""/49, 0x31}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/68, 0x44}], 0x4}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000003d40)=[{&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/85, 0x55}, {&(0x7f00000038c0)=""/162, 0xa2}, {&(0x7f0000003980)=""/180, 0xb4}, {&(0x7f0000003a40)=""/46, 0x2e}, {&(0x7f0000003a80)=""/159, 0x9f}, {&(0x7f0000003b40)=""/164, 0xa4}, {&(0x7f0000003c00)=""/71, 0x47}, {&(0x7f0000003c80)=""/134, 0x86}], 0x9, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000003e40)=""/202, 0xca}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/176, 0xb0}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000007680)=[{&(0x7f0000001280)=""/146, 0x92}, {&(0x7f0000006100)=""/76, 0x4c}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/139, 0x8b}, {&(0x7f0000007240)=""/85, 0x55}, {&(0x7f00000072c0)=""/254, 0xfe}, {&(0x7f00000073c0)=""/250, 0xfa}, {&(0x7f00000074c0)=""/235, 0xeb}, {&(0x7f00000075c0)=""/175, 0xaf}], 0x9, &(0x7f0000007740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x80}}, {{&(0x7f00000077c0), 0x6e, &(0x7f0000007c40)=[{&(0x7f0000007840)=""/105, 0x69}, {&(0x7f00000078c0)=""/160, 0xa0}, {&(0x7f0000007980)=""/134, 0x86}, {&(0x7f0000007a40)=""/148, 0x94}, {&(0x7f0000007b00)=""/72, 0x48}, {&(0x7f0000007b80)=""/51, 0x33}, {&(0x7f0000007bc0)=""/80, 0x50}], 0x7, &(0x7f0000007cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007d00)=@abs, 0x6e, &(0x7f0000007ec0)=[{&(0x7f0000007d80)=""/56, 0x38}, {&(0x7f00000082c0)=""/230, 0xe6}], 0x2, &(0x7f0000007f00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x7, 0x1, &(0x7f0000008180)={0x0, 0x989680}) tgkill(r3, r2, 0xfffffffc) 21:16:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x48000000, 0x0) 21:16:09 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7000000, 0x0) 21:16:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c000000, 0x0) 21:16:09 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) [ 1303.559850] FAULT_INJECTION: forcing a failure. [ 1303.559850] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.561239] CPU: 1 PID: 9197 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1303.562058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1303.563053] Call Trace: [ 1303.563375] dump_stack+0x107/0x167 [ 1303.563814] should_fail.cold+0x5/0xa [ 1303.564270] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1303.564892] should_failslab+0x5/0x20 [ 1303.565349] kmem_cache_alloc_trace+0x55/0x320 [ 1303.565893] io_uring_alloc_task_context+0x99/0x6a0 [ 1303.566489] ? io_import_iovec+0x1120/0x1120 [ 1303.567025] ? lock_downgrade+0x6d0/0x6d0 [ 1303.567517] ? do_raw_spin_lock+0x121/0x260 [ 1303.568023] ? rwlock_bug.part.0+0x90/0x90 [ 1303.568676] __io_uring_add_tctx_node+0x2c6/0x520 [ 1303.569278] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1303.569993] ? alloc_fd+0x2e7/0x670 [ 1303.570505] io_uring_setup+0x1fbb/0x2980 [ 1303.571211] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1303.571816] ? wait_for_completion_io+0x270/0x270 [ 1303.572441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1303.573068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1303.573686] do_syscall_64+0x33/0x40 [ 1303.574133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1303.574739] RIP: 0033:0x7f42229ceb19 [ 1303.575183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1303.577389] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1303.578300] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1303.579279] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1303.580190] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1303.581054] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1303.581875] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:16:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:16:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x14, @empty}, 0x31) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8c2c3, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x7, 0x9, 0x6, 0x8, 0x0, 0x8, 0x40009, 0x595e8a19b8bccbd8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000040)}, 0x80, 0x4, 0xfff, 0x8, 0xff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xf) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap(&(0x7f0000507000/0x3000)=nil, 0x3000, 0x3, 0x1f012, r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x3f, @remote, 0x5}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r2, 0x10000000) fadvise64(r1, 0x8001, 0x1, 0x1) 21:16:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x68000000, 0x0) 21:16:09 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 21:16:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa000000, 0x0) 21:16:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:16:25 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) fcntl$setsig(r1, 0xa, 0x2f) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x24000800) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r2, 0x3, 0x0, 0x3) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x900, 0x0) write$binfmt_script(r3, &(0x7f0000000880)={'#! ', './file0', [{}, {0x20, '--\\-$:'}, {0x20, '][^]B'}], 0xa, "4d7df6668d8163db058645cf6ea433e21dbdc9dc5429ef4bcd771c10f85916b62bace5fd5e07bd604edd2016a0bbe6ee25f5b9f29173169d570164f51e43f69498e5e2490140a81c65d1272118e0fb0735449992b97f9f8e5e4b2e43f1d847030e0ca288ad204e885fa8042a125a551435f2c255942d162eaba4cf86b80e56f65ffc18ae599dbc40e39bf0005c5d39775dd156d8e95f002f550a5afe3b56a172c35bcf572161088def7842dc765c9097f5e6e59c9bb024b8a424207a2a8f8b5ae3789ff681dbad77e367b3f061594b4576bf92466a005288150a8ca151d8c5ba"}, 0xf9) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180), 0x3) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) r4 = syz_io_uring_setup(0x6df8, &(0x7f0000000480)={0x0, 0x34f2, 0x0, 0x3, 0x8000ba}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x381202, 0x100) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="3a596700000073a53c0000000000f9bce940229895d103915444ddd1a809ddf46c60fc0144a3db0fe644651f26b2be32c05c29ab4a7f000000329c17", @ANYRES16=0x0, @ANYRES64=r4], 0x34}}, 0x405c804) 21:16:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(0x0) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:16:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c000000, 0x0) 21:16:25 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 28) 21:16:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 21:16:25 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) tgkill(r2, r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x25) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x1, 0x80000}) [ 1319.211044] kauditd_printk_skb: 86 callbacks suppressed [ 1319.211057] audit: type=1326 audit(1764191785.340:4204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9223 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1319.217194] audit: type=1326 audit(1764191785.346:4205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9223 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1319.221848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1319.225667] FAULT_INJECTION: forcing a failure. [ 1319.225667] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.227165] CPU: 1 PID: 9230 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1319.227969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1319.228936] Call Trace: [ 1319.229244] dump_stack+0x107/0x167 [ 1319.229666] should_fail.cold+0x5/0xa [ 1319.230114] ? create_object.isra.0+0x3a/0xa30 [ 1319.230647] should_failslab+0x5/0x20 [ 1319.231086] kmem_cache_alloc+0x5b/0x310 [ 1319.231554] create_object.isra.0+0x3a/0xa30 [ 1319.232061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1319.232661] kmem_cache_alloc_trace+0x151/0x320 [ 1319.233209] io_uring_alloc_task_context+0x99/0x6a0 [ 1319.233785] ? io_import_iovec+0x1120/0x1120 [ 1319.234297] ? lock_downgrade+0x6d0/0x6d0 [ 1319.234777] ? do_raw_spin_lock+0x121/0x260 [ 1319.235273] ? rwlock_bug.part.0+0x90/0x90 [ 1319.235764] __io_uring_add_tctx_node+0x2c6/0x520 [ 1319.236317] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1319.236918] ? alloc_fd+0x2e7/0x670 [ 1319.237341] io_uring_setup+0x1fbb/0x2980 [ 1319.237820] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1319.238403] ? wait_for_completion_io+0x270/0x270 [ 1319.238969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1319.239575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1319.240169] do_syscall_64+0x33/0x40 [ 1319.240608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1319.241193] RIP: 0033:0x7f42229ceb19 [ 1319.241628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.243712] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1319.244599] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1319.245427] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1319.246238] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1319.247048] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1319.247853] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1319.252434] audit: type=1326 audit(1764191785.346:4206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9223 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1319.261361] loop5: detected capacity change from 0 to 33559552 [ 1319.277230] audit: type=1326 audit(1764191785.354:4208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9223 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1319.280129] audit: type=1326 audit(1764191785.353:4207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1319.283334] audit: type=1326 audit(1764191785.379:4209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1319.286223] audit: type=1326 audit(1764191785.379:4210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1319.289779] audit: type=1326 audit(1764191785.379:4211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1319.293196] audit: type=1326 audit(1764191785.379:4212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1319.296350] 9pnet: Insufficient options for proto=fd 21:16:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) [ 1319.300481] audit: type=1326 audit(1764191785.379:4213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:16:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x74000000, 0x0) [ 1319.321260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x40000000, 0x0) 21:16:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:16:25 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) kcmp(r1, r1, 0x5, r2, r0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x41, 0x4, @thr={&(0x7f0000000040)="a02496dae754c113ed581593538a587f1cecfd5a2c2f923677a479e3496cf632ce0519f12bc76375e08efe0d00b08039f1f6a9723bf358b99e000de03b544f3a9aa2294d", &(0x7f00000000c0)="4c508bb687e728b6d3c165ce4f4ebc3aaea402eb351bd0baa5c881c72f799f5c33d4aff585d2610e4879820e17a3f2fd1dc625369a494083d3dce0bacea5f68058b101a7b549ac45cccfce8423c5fa1144068131b80ccee15b7ed9576f969b0cfd5c545bcefa469a071e75f8416bcd6f6f0063464fc035b20f988662a0e6fce5933c53377a29d2f4ff3d5cc7ec6256722bb9f91f5163edeb767671f258558d5c2fe4"}}) wait4(r1, &(0x7f00000001c0), 0x20000000, &(0x7f0000000200)) 21:16:25 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 29) [ 1319.401260] 9pnet: Insufficient options for proto=fd 21:16:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a000000, 0x0) 21:16:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x48000000, 0x0) 21:16:25 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e10634", 0x8, 0x32, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], "8cb6e80bc7bd5aad"}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e6dd26f074f2ce8c"}}}}, 0x0) 21:16:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000180)=""/25, 0x19}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/29, 0x1d}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/232, 0xe8}], 0xa, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/206, 0xce}, {&(0x7f0000000b80)=""/179, 0xb3}, {&(0x7f0000000c40)=""/71, 0x47}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/199, 0xc7}, {&(0x7f0000000f80)=""/205, 0xcd}], 0x7, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/93, 0x5d}, {&(0x7f0000001280)}], 0x2, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/191, 0xbf}, {&(0x7f0000002580)=""/244, 0xf4}, {&(0x7f0000002680)=""/15, 0xf}, {&(0x7f00000026c0)=""/207, 0xcf}, {&(0x7f00000027c0)=""/88, 0x58}, {&(0x7f0000002840)=""/228, 0xe4}, {&(0x7f0000002940)=""/125, 0x7d}, {&(0x7f00000029c0)=""/116, 0x74}], 0x9, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/17, 0x11}, {&(0x7f0000003c40)=""/255, 0xff}, {&(0x7f0000003d40)=""/12, 0xc}, {&(0x7f0000003d80)=""/169, 0xa9}, {&(0x7f0000003e40)=""/45, 0x2d}, {&(0x7f0000003e80)=""/14, 0xe}], 0x7, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003f80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000004000)=""/255, 0xff}, {&(0x7f0000004100)=""/38, 0x26}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x3}}], 0x6, 0x2, &(0x7f0000005300)={0x77359400}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000005340)={{r3}, "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"}) tgkill(r0, r0, 0x0) [ 1319.515274] FAULT_INJECTION: forcing a failure. [ 1319.515274] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.516901] CPU: 1 PID: 9263 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1319.517712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1319.518653] Call Trace: [ 1319.518972] dump_stack+0x107/0x167 [ 1319.519397] should_fail.cold+0x5/0xa [ 1319.519852] ? create_object.isra.0+0x3a/0xa30 [ 1319.520392] should_failslab+0x5/0x20 [ 1319.520852] kmem_cache_alloc+0x5b/0x310 [ 1319.521315] create_object.isra.0+0x3a/0xa30 [ 1319.521829] kmemleak_alloc_percpu+0xa0/0x100 [ 1319.522356] pcpu_alloc+0x4e2/0x1240 [ 1319.522803] __percpu_counter_init+0x10d/0x2d0 [ 1319.523348] io_uring_alloc_task_context+0xcc/0x6a0 [ 1319.523935] ? io_import_iovec+0x1120/0x1120 [ 1319.524453] ? lock_downgrade+0x6d0/0x6d0 [ 1319.524948] ? do_raw_spin_lock+0x121/0x260 [ 1319.525434] ? rwlock_bug.part.0+0x90/0x90 [ 1319.525934] __io_uring_add_tctx_node+0x2c6/0x520 [ 1319.526481] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1319.527098] ? alloc_fd+0x2e7/0x670 [ 1319.527522] io_uring_setup+0x1fbb/0x2980 [ 1319.528008] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1319.528606] ? wait_for_completion_io+0x270/0x270 [ 1319.529163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1319.529779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1319.530387] do_syscall_64+0x33/0x40 [ 1319.530817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1319.531414] RIP: 0033:0x7f42229ceb19 [ 1319.531843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.533998] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1319.534887] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1319.535702] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1319.536546] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1319.537360] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1319.538187] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1319.695469] FAULT_INJECTION: forcing a failure. [ 1319.695469] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.696909] CPU: 0 PID: 9276 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1319.697714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1319.698675] Call Trace: [ 1319.698996] dump_stack+0x107/0x167 [ 1319.699431] should_fail.cold+0x5/0xa [ 1319.699870] ? create_object.isra.0+0x3a/0xa30 [ 1319.700411] should_failslab+0x5/0x20 [ 1319.700858] kmem_cache_alloc+0x5b/0x310 [ 1319.701339] create_object.isra.0+0x3a/0xa30 [ 1319.701864] kmemleak_alloc_percpu+0xa0/0x100 [ 1319.702394] pcpu_alloc+0x4e2/0x1240 [ 1319.702845] __percpu_counter_init+0x10d/0x2d0 [ 1319.703385] io_uring_alloc_task_context+0xcc/0x6a0 [ 1319.703973] ? io_import_iovec+0x1120/0x1120 [ 1319.704483] ? lock_downgrade+0x6d0/0x6d0 [ 1319.704982] ? do_raw_spin_lock+0x121/0x260 [ 1319.705475] ? rwlock_bug.part.0+0x90/0x90 [ 1319.705973] __io_uring_add_tctx_node+0x2c6/0x520 [ 1319.706527] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1319.707145] ? alloc_fd+0x2e7/0x670 [ 1319.707579] io_uring_setup+0x1fbb/0x2980 [ 1319.708066] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1319.708656] ? wait_for_completion_io+0x270/0x270 [ 1319.709226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1319.709840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1319.710432] do_syscall_64+0x33/0x40 [ 1319.710864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1319.711455] RIP: 0033:0x7f42229ceb19 [ 1319.711895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.714021] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1319.714917] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1319.715750] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1319.716593] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1319.717430] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1319.718271] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:16:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x3f, 0x3, r1}) 21:16:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:16:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa1ffffff, 0x0) 21:16:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x19522}, {}], 0x2, &(0x7f00000002c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x20081, 0x184) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x10, 0xffffffffffffffff, 0x0) 21:16:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c000000, 0x0) 21:16:25 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 30) [ 1319.724019] 9pnet: Insufficient options for proto=fd 21:16:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:16:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xa4d9, 0x5, 0x84, 0x1}, {0x5, 0x7, 0x5, 0xfffff6a2}, {0x3, 0xaa, 0x81, 0x1ff}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) 21:16:40 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x1, [0xa4, 0x2, 0x3b, 0x800, 0x1], [0x6, 0x1, 0x8, 0xa0c, 0x6, 0x9, 0x1, 0x101, 0x10001, 0xfffffffffffffffe, 0x400, 0x10000, 0x7, 0xffffffff, 0x6, 0x1, 0xdd96, 0x2, 0xffff, 0x9, 0x4a26, 0x5, 0xf000000000000000, 0xffff, 0x9, 0x40, 0x35d, 0x7, 0x47, 0x1, 0x0, 0xfff, 0x2, 0x7b, 0x5, 0x8, 0x18, 0x1, 0x5, 0x1f, 0x3ff, 0x9, 0x0, 0x9c, 0x8001, 0xfc9, 0x8, 0xfff, 0x5, 0x9, 0x6aba268d, 0x4, 0x8, 0x50000000000000, 0x7fff80000000, 0x5, 0x8001, 0x6, 0x3, 0x1, 0x1, 0x5, 0x69, 0x2, 0x4, 0x6, 0x4f, 0x8, 0xffffffffffffffff, 0x6, 0x2, 0x5, 0x6, 0x1, 0x1, 0x1, 0x29d1, 0x4, 0xfffffffffffffffd, 0xf4, 0x6, 0x1000, 0x200, 0x80000000, 0x3, 0x6, 0x5, 0x0, 0x5, 0x9, 0x6, 0x8, 0x2, 0x5, 0x7fffffff, 0x3f, 0x29, 0xfffffffffffffffa, 0xd7, 0x6, 0x80000000, 0x2, 0x3, 0x9, 0x100, 0xff, 0x4, 0x800, 0x5, 0xefbe, 0xfffffffffffffffb, 0x0, 0x3, 0x81, 0x401, 0x8, 0x6, 0x400, 0x8, 0x100000000, 0x9]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(r8, r3, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)='./file0\x00', 0x100, 0x100, 0x1}, 0x6) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000580)="b15d4e809076601573c3b3ab52ca148c8296eb283ca48abe70482981302a1bafdb1b2238e907a61be879bdfbb8f798584c0533", 0x33}], 0x1) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0xb717, 0x4, 0x1, 0x0, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r7, 0x58ab, 0x82d7, 0x1, 0x0, 0x0) 21:16:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xfeffffff, 0x0) 21:16:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x68000000, 0x0) 21:16:40 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 31) 21:16:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(0x0) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:16:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) [ 1334.134839] kauditd_printk_skb: 121 callbacks suppressed [ 1334.134860] audit: type=1326 audit(1764191800.264:4335): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1334.135802] FAULT_INJECTION: forcing a failure. [ 1334.135802] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.136635] audit: type=1326 audit(1764191800.264:4336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1334.139385] CPU: 0 PID: 9292 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1334.145828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.146859] Call Trace: [ 1334.147191] dump_stack+0x107/0x167 [ 1334.147645] should_fail.cold+0x5/0xa [ 1334.148123] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1334.148784] should_failslab+0x5/0x20 [ 1334.149258] kmem_cache_alloc_trace+0x55/0x320 [ 1334.149832] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1334.150462] ? io_import_iovec+0x1120/0x1120 [ 1334.151016] ? lock_downgrade+0x6d0/0x6d0 [ 1334.151530] ? do_raw_spin_lock+0x121/0x260 [ 1334.152063] ? rwlock_bug.part.0+0x90/0x90 [ 1334.152593] __io_uring_add_tctx_node+0x2c6/0x520 [ 1334.153197] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1334.153846] ? alloc_fd+0x2e7/0x670 [ 1334.154301] io_uring_setup+0x1fbb/0x2980 [ 1334.154820] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1334.155444] ? wait_for_completion_io+0x270/0x270 [ 1334.156056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1334.156712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1334.157348] do_syscall_64+0x33/0x40 [ 1334.157803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1334.158438] RIP: 0033:0x7f42229ceb19 [ 1334.158893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.161155] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1334.162095] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1334.162971] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1334.163846] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1334.164729] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1334.165603] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1334.169839] 9pnet: Insufficient options for proto=fd [ 1334.177683] audit: type=1326 audit(1764191800.264:4337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1334.185991] loop5: detected capacity change from 0 to 33559552 [ 1334.202701] audit: type=1326 audit(1764191800.297:4338): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9287 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:16:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:16:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c000000, 0x0) [ 1334.224573] 9pnet: Insufficient options for proto=fd [ 1334.225948] audit: type=1326 audit(1764191800.300:4339): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1334.230882] audit: type=1326 audit(1764191800.300:4340): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1334.235825] audit: type=1326 audit(1764191800.300:4341): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1334.241196] audit: type=1326 audit(1764191800.300:4343): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:16:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xffffffa1, 0x0) [ 1334.256173] audit: type=1326 audit(1764191800.300:4342): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1334.262892] audit: type=1326 audit(1764191800.300:4344): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9288 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:16:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x1, 0x3, 0x3, 0x0, 0x7fffffff, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x70}, 0x4920, 0xdab, 0x1000, 0x1, 0x5, 0x1, 0x2, 0x0, 0x1f, 0x0, 0x966}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x6, 0x6, 0x7f, 0x0, 0x0, 0x20102, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x5}, 0x40401, 0x3, 0x8, 0x1, 0x0, 0x400, 0x7fff, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r0, 0x8) r1 = getpgrp(0x0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r3, 0x406, r4) tgkill(r2, r1, 0x400) r5 = getpgrp(0x0) tgkill(r5, r5, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='clear_refs\x00') 21:17:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x74000000, 0x0) 21:17:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:17:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(0x0, &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:17:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) tgkill(r1, r0, 0x34) 21:17:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}, {@cache_mmap}]}}) 21:17:03 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 32) [ 1357.106306] kauditd_printk_skb: 76 callbacks suppressed [ 1357.106327] audit: type=1326 audit(1764191823.235:4421): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:17:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xfffffffe, 0x0) 21:17:03 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x1, [0xa4, 0x2, 0x3b, 0x800, 0x1], [0x6, 0x1, 0x8, 0xa0c, 0x6, 0x9, 0x1, 0x101, 0x10001, 0xfffffffffffffffe, 0x400, 0x10000, 0x7, 0xffffffff, 0x6, 0x1, 0xdd96, 0x2, 0xffff, 0x9, 0x4a26, 0x5, 0xf000000000000000, 0xffff, 0x9, 0x40, 0x35d, 0x7, 0x47, 0x1, 0x0, 0xfff, 0x2, 0x7b, 0x5, 0x8, 0x18, 0x1, 0x5, 0x1f, 0x3ff, 0x9, 0x0, 0x9c, 0x8001, 0xfc9, 0x8, 0xfff, 0x5, 0x9, 0x6aba268d, 0x4, 0x8, 0x50000000000000, 0x7fff80000000, 0x5, 0x8001, 0x6, 0x3, 0x1, 0x1, 0x5, 0x69, 0x2, 0x4, 0x6, 0x4f, 0x8, 0xffffffffffffffff, 0x6, 0x2, 0x5, 0x6, 0x1, 0x1, 0x1, 0x29d1, 0x4, 0xfffffffffffffffd, 0xf4, 0x6, 0x1000, 0x200, 0x80000000, 0x3, 0x6, 0x5, 0x0, 0x5, 0x9, 0x6, 0x8, 0x2, 0x5, 0x7fffffff, 0x3f, 0x29, 0xfffffffffffffffa, 0xd7, 0x6, 0x80000000, 0x2, 0x3, 0x9, 0x100, 0xff, 0x4, 0x800, 0x5, 0xefbe, 0xfffffffffffffffb, 0x0, 0x3, 0x81, 0x401, 0x8, 0x6, 0x400, 0x8, 0x100000000, 0x9]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(r8, r3, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)='./file0\x00', 0x100, 0x100, 0x1}, 0x6) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000580)="b15d4e809076601573c3b3ab52ca148c8296eb283ca48abe70482981302a1bafdb1b2238e907a61be879bdfbb8f798584c0533", 0x33}], 0x1) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0xb717, 0x4, 0x1, 0x0, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r7, 0x58ab, 0x82d7, 0x1, 0x0, 0x0) [ 1357.125416] audit: type=1326 audit(1764191823.236:4422): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.140535] FAULT_INJECTION: forcing a failure. [ 1357.140535] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.143282] CPU: 1 PID: 9334 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1357.144832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1357.146717] Call Trace: [ 1357.147317] dump_stack+0x107/0x167 [ 1357.148145] should_fail.cold+0x5/0xa [ 1357.149024] ? create_object.isra.0+0x3a/0xa30 [ 1357.150065] should_failslab+0x5/0x20 [ 1357.150926] kmem_cache_alloc+0x5b/0x310 [ 1357.151859] create_object.isra.0+0x3a/0xa30 [ 1357.152853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1357.154022] kmem_cache_alloc_trace+0x151/0x320 [ 1357.155086] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1357.156234] ? io_import_iovec+0x1120/0x1120 [ 1357.157251] ? lock_downgrade+0x6d0/0x6d0 [ 1357.158188] ? do_raw_spin_lock+0x121/0x260 [ 1357.159166] ? rwlock_bug.part.0+0x90/0x90 [ 1357.160143] __io_uring_add_tctx_node+0x2c6/0x520 [ 1357.161248] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1357.162436] ? alloc_fd+0x2e7/0x670 [ 1357.163280] io_uring_setup+0x1fbb/0x2980 [ 1357.164233] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1357.165394] ? wait_for_completion_io+0x270/0x270 [ 1357.166520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1357.167712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1357.168891] do_syscall_64+0x33/0x40 [ 1357.169750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1357.170917] RIP: 0033:0x7f42229ceb19 [ 1357.171777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1357.175993] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1357.177757] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1357.179403] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1357.181081] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1357.182730] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1357.184386] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1357.189298] audit: type=1326 audit(1764191823.236:4423): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.190114] loop5: detected capacity change from 0 to 33559552 [ 1357.194611] 9pnet: Insufficient options for proto=fd [ 1357.205427] audit: type=1326 audit(1764191823.236:4424): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.218546] audit: type=1326 audit(1764191823.236:4425): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.253711] audit: type=1326 audit(1764191823.251:4427): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.282170] audit: type=1326 audit(1764191823.251:4428): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.300889] audit: type=1326 audit(1764191823.251:4429): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9321 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1357.309598] audit: type=1326 audit(1764191823.246:4426): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9326 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x0 [ 1357.316070] audit: type=1326 audit(1764191823.266:4430): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9331 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}, {@access_client}]}}) [ 1376.477423] kauditd_printk_skb: 10 callbacks suppressed [ 1376.477442] audit: type=1326 audit(1764191842.606:4441): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9348 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1376.495481] audit: type=1326 audit(1764191842.624:4442): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9352 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x1, 0x2, 0x7, 0xeae}, {0x1, 0x8, 0x5, 0x7}, {0x2, 0x6, 0x8, 0x9}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x6, 0x2, @tid=r0}, &(0x7f0000000080)) r1 = getpgid(r0) ptrace(0x10, r1) 21:17:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x61) 21:17:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(0x0, &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:17:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x8000000000, 0x0) 21:17:22 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 33) 21:17:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a000000, 0x0) 21:17:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @private0, 0x400000}, 0xfffffd4c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="2b02026900000000fc0004000000000000000000000000002f52349509fcef92c8d3ba4e9e7a1a4d13ae1835cd427862363459a390d6bd4b70d4e542055d3839c4907dbe91cadcaf789fefe6e327681a0da60602e0db0d881d2311dc04a710101808d0360519eaba240db56e5cbcbfd54dc2c6641377c1104f99a4ca284b149c365aa4ee824ad4e8b59dc4aca5d144c6271a567ecbb46195bd1a996192f8a1198e3f7c1741a00bb47282b7dd0d7673407c97364d124894c9db43e2d8dc6230980d0293336ded97fac3163457e12926350b7bfdad62"], 0x18) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400000000000070, 0x0) [ 1376.516254] audit: type=1326 audit(1764191842.639:4443): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9348 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1376.525664] loop5: detected capacity change from 0 to 33559552 [ 1376.532374] FAULT_INJECTION: forcing a failure. [ 1376.532374] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.534876] CPU: 0 PID: 9361 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1376.535328] audit: type=1326 audit(1764191842.639:4444): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9348 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1376.536340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.536347] Call Trace: [ 1376.536372] dump_stack+0x107/0x167 [ 1376.536397] should_fail.cold+0x5/0xa [ 1376.544792] ? create_object.isra.0+0x3a/0xa30 [ 1376.545762] should_failslab+0x5/0x20 [ 1376.546560] kmem_cache_alloc+0x5b/0x310 [ 1376.547429] create_object.isra.0+0x3a/0xa30 [ 1376.548362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.549446] kmem_cache_alloc_trace+0x151/0x320 [ 1376.550433] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1376.551509] ? io_import_iovec+0x1120/0x1120 [ 1376.552493] ? lock_downgrade+0x6d0/0x6d0 [ 1376.553437] ? do_raw_spin_lock+0x121/0x260 [ 1376.554350] ? rwlock_bug.part.0+0x90/0x90 [ 1376.555273] __io_uring_add_tctx_node+0x2c6/0x520 [ 1376.556274] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.557401] ? alloc_fd+0x2e7/0x670 [ 1376.558183] io_uring_setup+0x1fbb/0x2980 [ 1376.559079] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.560147] ? wait_for_completion_io+0x270/0x270 [ 1376.561198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.562313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.563417] do_syscall_64+0x33/0x40 [ 1376.564207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.565290] RIP: 0033:0x7f42229ceb19 [ 1376.566081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.569983] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.571592] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1376.573094] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1376.574605] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1376.576128] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1376.577653] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:17:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x100000000000000, 0x0) 21:17:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x61) [ 1376.629710] audit: type=1326 audit(1764191842.642:4445): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9352 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1376.649861] audit: type=1326 audit(1764191842.642:4446): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9352 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1376.680166] audit: type=1326 audit(1764191842.643:4447): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9352 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x200000000000000, 0x0) [ 1376.708824] audit: type=1326 audit(1764191842.643:4448): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9352 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1376.721100] audit: type=1326 audit(1764191842.652:4449): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9354 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1376.732005] audit: type=1326 audit(1764191842.652:4450): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9356 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:17:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000016c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000001580)='cmdline\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000280)='net/ip_mr_cache\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a4514b54cb47cddf79def4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab2828997a9122f2c3dd4de86e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac40003d6c9439f94ef64000000000000fd10a8043847d417f882a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656ea9788030c4412e8a4d28b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c2d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000400378a2ae9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132e31297420000edd53995a09288f4c3f630b61dc95ab79abf43a18ff9e94c8b672da1d5120e15fa71435cd39da143a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf0100000082e2cad64177c6b90078a1b541e41ed642a405e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f596000000000000000000000000005901ccf1043f51a4cc65025709fe00000000000000000000003fd758ba6a23ad72fd8147ea8e074c406d558ab8e03157ffff2b218bf786bd08f5094ca3231dc9092c1291b7b32651bf90b6fd78756600000000e28f8e33c214207b3e260e869beb6caa550c7dbef3f1a520b6525651fb2c2dcfb9f05eee054f4625a02dcbc31e115acf5b9df6130f7f720ccd33"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x10001) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x41, 0x0, 0x16}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 21:17:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa1ffffff, 0x0) 21:17:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) pidfd_open(r1, 0x0) 21:17:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 21:17:22 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 34) 21:17:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}]}}) [ 1376.923407] FAULT_INJECTION: forcing a failure. [ 1376.923407] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.926326] CPU: 1 PID: 9384 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1376.927863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.929622] Call Trace: [ 1376.930178] dump_stack+0x107/0x167 [ 1376.930948] should_fail.cold+0x5/0xa [ 1376.931744] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1376.932829] should_failslab+0x5/0x20 [ 1376.933616] kmem_cache_alloc_trace+0x55/0x320 [ 1376.934594] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1376.935666] ? io_import_iovec+0x1120/0x1120 [ 1376.936571] ? lock_downgrade+0x6d0/0x6d0 [ 1376.937429] ? do_raw_spin_lock+0x121/0x260 [ 1376.938332] ? rwlock_bug.part.0+0x90/0x90 [ 1376.939226] __io_uring_add_tctx_node+0x2c6/0x520 [ 1376.940246] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.941319] ? alloc_fd+0x2e7/0x670 [ 1376.942096] io_uring_setup+0x1fbb/0x2980 [ 1376.942950] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.943991] ? wait_for_completion_io+0x270/0x270 [ 1376.945026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.946142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.947229] do_syscall_64+0x33/0x40 [ 1376.948020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.949089] RIP: 0033:0x7f42229ceb19 [ 1376.949852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.953679] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.955284] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1376.956783] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1376.958310] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1376.959804] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1376.961303] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:17:23 executing program 1: r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) [ 1391.968645] kauditd_printk_skb: 72 callbacks suppressed [ 1391.968657] audit: type=1326 audit(1764191858.095:4523): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9399 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1391.972386] audit: type=1326 audit(1764191858.096:4524): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9399 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1391.976809] audit: type=1326 audit(1764191858.105:4525): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9401 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1391.988659] audit: type=1326 audit(1764191858.106:4526): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9401 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:17:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 21:17:38 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xfeffffff, 0x0) 21:17:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(0x0, &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:17:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$vcsu(&(0x7f0000000040), 0x9c8f, 0x40001) pread64(r0, &(0x7f0000000100)=""/93, 0x5d, 0x0) 21:17:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) clone3(&(0x7f0000000380)={0x88280, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x2c}, &(0x7f0000000200)=""/120, 0x78, &(0x7f0000000280)=""/203, &(0x7f0000000180)=[r0], 0x1}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xff, 0xce, 0x85, 0x6}, {0x1ff, 0x3f, 0xaf, 0x8}, {0x4, 0x2, 0x5, 0x80}, {0x9, 0x1, 0x5, 0x1}, {0xfff9, 0x7d, 0x6, 0x4}, {0x5, 0x20, 0x58, 0x400}]}) 21:17:38 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 35) 21:17:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x300000000000000, 0x0) 21:17:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}]}}) [ 1392.006020] FAULT_INJECTION: forcing a failure. [ 1392.006020] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.007278] CPU: 0 PID: 9410 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1392.008035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.008951] Call Trace: [ 1392.009248] dump_stack+0x107/0x167 [ 1392.009659] should_fail.cold+0x5/0xa [ 1392.010082] ? io_wq_create+0x6ef/0xc00 [ 1392.010520] should_failslab+0x5/0x20 [ 1392.010947] kmem_cache_alloc_node_trace+0x59/0x340 [ 1392.011500] io_wq_create+0x6ef/0xc00 [ 1392.011924] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1392.012482] ? io_import_iovec+0x1120/0x1120 [ 1392.012966] ? io_apoll_task_func+0x2d0/0x2d0 [ 1392.013464] ? __io_req_find_next+0x300/0x300 [ 1392.013958] ? do_raw_spin_lock+0x121/0x260 [ 1392.014431] ? rwlock_bug.part.0+0x90/0x90 [ 1392.014900] __io_uring_add_tctx_node+0x2c6/0x520 [ 1392.015430] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1392.016008] ? alloc_fd+0x2e7/0x670 [ 1392.016414] io_uring_setup+0x1fbb/0x2980 [ 1392.016875] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1392.017440] ? wait_for_completion_io+0x270/0x270 [ 1392.017988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.018568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.019137] do_syscall_64+0x33/0x40 [ 1392.019549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.020113] RIP: 0033:0x7f42229ceb19 [ 1392.020524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.022547] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1392.023381] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1392.024161] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1392.024942] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1392.025731] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1392.026512] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1392.029636] audit: type=1326 audit(1764191858.106:4527): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9399 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8cb78ba04 code=0x7ffc0000 [ 1392.037218] loop5: detected capacity change from 0 to 33559552 [ 1392.038630] audit: type=1326 audit(1764191858.114:4528): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9403 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1392.048631] audit: type=1326 audit(1764191858.115:4529): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9403 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x400000000000000, 0x0) [ 1392.058459] audit: type=1326 audit(1764191858.115:4530): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9403 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1392.069630] audit: type=1326 audit(1764191858.115:4531): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9403 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1392.080108] audit: type=1326 audit(1764191858.115:4532): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9403 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@cache_none}]}}) 21:17:38 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xffffffa1, 0x0) 21:17:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x500000000000000, 0x0) 21:17:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) 21:17:38 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 36) 21:17:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x600000000000000, 0x0) [ 1392.284204] FAULT_INJECTION: forcing a failure. [ 1392.284204] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.286637] CPU: 1 PID: 9437 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1392.288075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.289828] Call Trace: 21:17:38 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xfffffffe, 0x0) [ 1392.290388] dump_stack+0x107/0x167 [ 1392.291270] should_fail.cold+0x5/0xa [ 1392.292075] ? create_object.isra.0+0x3a/0xa30 [ 1392.293036] should_failslab+0x5/0x20 [ 1392.293851] kmem_cache_alloc+0x5b/0x310 [ 1392.294712] ? io_wq_create+0x114/0xc00 [ 1392.295557] create_object.isra.0+0x3a/0xa30 [ 1392.296481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1392.297819] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1392.299005] io_wq_create+0x6ef/0xc00 [ 1392.299894] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1392.301058] ? io_import_iovec+0x1120/0x1120 [ 1392.302072] ? io_apoll_task_func+0x2d0/0x2d0 [ 1392.303045] ? __io_req_find_next+0x300/0x300 [ 1392.303995] ? do_raw_spin_lock+0x121/0x260 [ 1392.304900] ? rwlock_bug.part.0+0x90/0x90 [ 1392.305812] __io_uring_add_tctx_node+0x2c6/0x520 [ 1392.306851] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1392.307964] ? alloc_fd+0x2e7/0x670 [ 1392.308746] io_uring_setup+0x1fbb/0x2980 [ 1392.309645] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1392.310710] ? wait_for_completion_io+0x270/0x270 [ 1392.311765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.312864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.313954] do_syscall_64+0x33/0x40 [ 1392.314749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.315835] RIP: 0033:0x7f42229ceb19 [ 1392.316619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.320505] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1392.322108] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1392.323607] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1392.325372] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1392.327237] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1392.329120] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:17:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) [ 1406.084131] kauditd_printk_skb: 63 callbacks suppressed [ 1406.084149] audit: type=1326 audit(1764191872.213:4596): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1406.101878] audit: type=1326 audit(1764191872.230:4597): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:17:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000003140)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x97, 0x3, 0x5, 0x5, 0x800}, {0x9, 0x8, 0x401, 0x2, 0x9, 0x7fff}], ['\x00', '\x00', '\x00', '\x00']}) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1406.114586] audit: type=1326 audit(1764191872.237:4598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1406.125443] loop5: detected capacity change from 0 to 33559552 [ 1406.133170] audit: type=1326 audit(1764191872.237:4599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1406.150274] audit: type=1326 audit(1764191872.238:4600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1406.159431] FAULT_INJECTION: forcing a failure. [ 1406.159431] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.162018] CPU: 0 PID: 9464 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1406.163555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.165460] Call Trace: [ 1406.166063] dump_stack+0x107/0x167 [ 1406.167034] should_fail.cold+0x5/0xa [ 1406.167879] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1406.168986] should_failslab+0x5/0x20 [ 1406.169851] kmem_cache_alloc_trace+0x55/0x320 [ 1406.170860] __io_uring_add_tctx_node+0x15c/0x520 [ 1406.171963] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1406.173156] ? alloc_fd+0x2e7/0x670 [ 1406.173991] io_uring_setup+0x1fbb/0x2980 [ 1406.174940] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1406.176098] ? wait_for_completion_io+0x270/0x270 [ 1406.177226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.178438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.179599] do_syscall_64+0x33/0x40 [ 1406.180410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.181559] RIP: 0033:0x7f42229ceb19 [ 1406.182408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.186564] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1406.188287] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1406.189904] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1406.191544] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1406.193170] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1406.194818] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f000000b300)=ANY=[@ANYBLOB="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"], 0x4294}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r5 = getpgrp(0x0) tgkill(r5, r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000100)="c1b2dc071a426cc423b92040cca42a4a05c46a18ed7c424307d6d96bc5a27d5e1d8e025c7b02f5f39e5e", 0x2a}, {&(0x7f0000000380)="12557711ebd44e934bc609fa1b0520ce51a70152c957a084091901554e2c16c6f74516cc8cb0c257b0ea1829eec5921f2498f207", 0x34}, {&(0x7f00000003c0)="7e446acb6c4d20192c8e0b40a62018a303990ae21b927273aa44d93c4f795afea0dc1ae4a26f", 0x26}, {&(0x7f0000000400)="78406fba63ab1a0dff61223cdf0a90bc10bcb4320ca9843c6afa876ae47b2ef79a175cc37e7d4d47e540a885d5565e05a63b00e64cbc68920b4333e6b4b603fb6815d868a31a134570e3a504d9320cb742ceb7ad103e6f25921818878dc59d50728038", 0x63}], 0x5, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}], 0x80}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)="c4aa02f5ad4f92eb0e696ba313cde5570f2b470d8177c6c682e3a8dd27a7c4a9ce5847f979bfb50f43591c", 0x2b}, {&(0x7f0000000780)="1c42adae297605d183a1555e743fbc", 0xf}, {&(0x7f00000007c0)="100b81c520d7e15051c38a044e63b850332b71be1e4fef0d4d4f524973a737b05601c23fd3deeab1763d61ab9e08a21f91bddcf3d6a0b9abf720b494e0011deb6960742b4c31a2f7a226f5637b1985ffe2c332bcb3f2b3a0d4c54b7336f6dbed6fc3065ea064ac07d8fa3438b1e71c2b679fb5b6ccb3da20ffb831610794934f7758b520a78358c5fa", 0x89}, {&(0x7f0000000880)="fecb1a284a06359c7c6d21fbffbd5ab1606fe658c75763c6ab8977c29128732e2fe7fd4914fe7ded972b8824417cf14be7df8cc9aadc75e33aaa3a5c61552d5e654455c1c83b7e8c780219784b08876fca31cab7da1c23be21a5f2901a0cddaabbe21284989d", 0x66}, {&(0x7f0000000900)="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", 0xfc}, {&(0x7f0000000a00)="15acc6815321037584b96572ff6fea90fc9a0165c307344173c049b4b0ece2ff8bbea1488eac5f22faa5ce011c84103735ccf0c41c78aeb22f39ca05f1d78d25110e117a1d5e3c34288a44bafc644c6a8f930f7b589ec239c7b3d06b0ff2bb106d4c6954370129", 0x67}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18e2eb89f1d42208b1000000210000f29c00f86004f781347d4662eb2395aa9c9f384376c4c858a1cc03687b1c6f5a99339335", @ANYRES32=r7, @ANYRES32], 0x18}}], 0x2, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="242000001100010000000000000000ef07000000050000000000000008fbff8004001a00"], 0x24}}, 0x0) 21:17:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:17:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:17:52 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x20}]}) r1 = getpgrp(0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xac540, 0x0) mount$9p_tcp(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x3b3, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={r3, "ce6e765f732580663ee20319cf5555dd"}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ddcf44f91b9f7a5dae65522ecc3be06f5345591d6c160d296cd943940b99210d13ef1e0bdcf01838e9652b60395991045465a20e02df501bd2e9aa5673e9cc4a903713e91e8ecdf32b3335b7aeab1d0f6f18156334", @ANYRESDEC=r3, @ANYBLOB="3a31383434bf373434303733371d3935353136303950"]) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x8, 0x6, 0x3, 0x8, 0x0, 0x800, 0x4100, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x400, 0xdf7, 0x4, 0x3, 0x0, 0x7fffffff, 0x8, 0x0, 0x7, 0x0, 0x7}, r1, 0x7, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000200)={r3, 0x4, 0x2ef}) tgkill(r1, r1, 0x0) 21:17:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) 21:17:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x8000000000, 0x0) 21:17:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x700000000000000, 0x0) 21:17:52 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 37) [ 1406.217106] audit: type=1326 audit(1764191872.259:4601): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9451 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x0 21:17:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa00000000000000, 0x0) 21:17:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x100000000000000, 0x0) [ 1406.254778] audit: type=1326 audit(1764191872.270:4602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9456 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:17:52 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 38) [ 1406.300755] audit: type=1326 audit(1764191872.275:4603): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9456 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:17:52 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6009f77f00383a00fc020000000000000000000000000400ff0200000000ed990000000000000000000000600009e600003a0000000000000000000000ffffac1414aafc0200000000003a6e438ed5be0a00001ecaee9bb51b0f678aa8ff3f4dd9b1a5ff99"], 0x0) [ 1406.328307] FAULT_INJECTION: forcing a failure. [ 1406.328307] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.330851] CPU: 1 PID: 9473 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1406.332309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.334068] Call Trace: [ 1406.334632] dump_stack+0x107/0x167 [ 1406.335402] should_fail.cold+0x5/0xa [ 1406.336211] ? create_object.isra.0+0x3a/0xa30 [ 1406.336861] audit: type=1326 audit(1764191872.275:4604): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9456 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1406.337172] should_failslab+0x5/0x20 [ 1406.337193] kmem_cache_alloc+0x5b/0x310 [ 1406.337219] create_object.isra.0+0x3a/0xa30 [ 1406.344537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1406.345630] kmem_cache_alloc_trace+0x151/0x320 [ 1406.346626] __io_uring_add_tctx_node+0x15c/0x520 [ 1406.347648] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1406.348752] ? alloc_fd+0x2e7/0x670 [ 1406.349543] io_uring_setup+0x1fbb/0x2980 [ 1406.350420] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1406.351494] ? wait_for_completion_io+0x270/0x270 [ 1406.352540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.353651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.354735] do_syscall_64+0x33/0x40 [ 1406.355516] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.356590] RIP: 0033:0x7f42229ceb19 [ 1406.357365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.361232] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1406.362837] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1406.364330] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1406.365838] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1406.367339] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1406.368847] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1406.390485] audit: type=1326 audit(1764191872.275:4605): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9456 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1421.160869] kauditd_printk_skb: 22 callbacks suppressed [ 1421.160880] audit: type=1326 audit(1764191887.287:4628): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:18:07 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 39) 21:18:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4000000000000000, 0x0) 21:18:07 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x5, 0x7, 0x3, 0x0, 0xfffffffffffffc00, 0x20000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x810, 0x4b0a3223, 0x4, 0x4, 0x0, 0x6, 0x75, 0x0, 0x32d, 0x0, 0xffffffffffffff8b}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) tgkill(r1, r1, 0xffffffff) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x345, 0x0, [0x0, 0x10003, 0x100001, 0x1], &(0x7f0000000040)}) 21:18:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1421.167152] audit: type=1326 audit(1764191887.287:4629): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:18:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x200000000000000, 0x0) 21:18:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@access_client}]}}) 21:18:07 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)="01434430303101004c494e55582020202020202020202020202020202020202020a70900002020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000029000000000000290000000000000000004aa3000000000000000100000101000001000808001800000000000018140000fb", 0x82, 0x8000}, {&(0x7f00000002c0)="024344303031ecffff4b0049004e0055005800200020002001200020002000200020002000200020004300440052004f004d000a002000200020002000200020000000000000092907000000000000002f000000000000000000643488dd5dd6db624745c60370a839c20104f30d59d93cb8ef1341c0252aced53a89", 0x7c, 0x87ff}], 0x2000, &(0x7f0000000400)={[{@map_off}, {@utf8}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@mode={'mode', 0x3d, 0x2}}], [{@dont_appraise}]}) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x60100, 0x3) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)='iso9660\x00', 0x8, 0x2) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x4, 0x402080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 21:18:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) [ 1421.184437] FAULT_INJECTION: forcing a failure. [ 1421.184437] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.186167] CPU: 0 PID: 9490 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1421.187009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.188021] Call Trace: [ 1421.188351] dump_stack+0x107/0x167 [ 1421.188799] should_fail.cold+0x5/0xa [ 1421.189268] ? xas_alloc+0x336/0x440 [ 1421.189736] should_failslab+0x5/0x20 [ 1421.190207] kmem_cache_alloc+0x5b/0x310 [ 1421.190712] ? stack_trace_consume_entry+0x160/0x160 [ 1421.191335] xas_alloc+0x336/0x440 [ 1421.191772] xas_create+0x34a/0x10d0 [ 1421.192241] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.192892] xas_store+0x8c/0x1c40 [ 1421.193335] __xa_store+0x164/0x2d0 [ 1421.193795] ? xa_delete_node+0x280/0x280 [ 1421.194312] ? trace_hardirqs_on+0x5b/0x180 [ 1421.194842] xa_store+0x31/0x50 [ 1421.195248] __io_uring_add_tctx_node+0x1cf/0x520 [ 1421.195845] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1421.196486] ? alloc_fd+0x2e7/0x670 [ 1421.196937] io_uring_setup+0x1fbb/0x2980 [ 1421.197448] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1421.198076] ? wait_for_completion_io+0x270/0x270 [ 1421.198677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.199313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.199948] do_syscall_64+0x33/0x40 [ 1421.200397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.201015] RIP: 0033:0x7f42229ceb19 [ 1421.201466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.203704] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1421.204622] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1421.205484] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1421.206354] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1421.207218] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1421.208078] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1421.213471] loop5: detected capacity change from 0 to 33559552 [ 1421.215606] audit: type=1326 audit(1764191887.304:4630): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1421.222811] audit: type=1326 audit(1764191887.304:4631): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1421.228852] audit: type=1326 audit(1764191887.305:4632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:18:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x911, 0x8, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, 0x0, 0x0) syz_io_uring_setup(0x3d20, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x3, 0x3d6}, &(0x7f000062d000/0x9000)=nil, &(0x7f0000d35000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x235765fc) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r3}}, 0x7) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0xff, 0x0, 0x401, 0x0, 0x0, {0x0, r8}}, 0x9) 21:18:07 executing program 0: syz_emit_ethernet(0x411, &(0x7f0000000000)={@local, @dev, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "99e6e2", 0x3d7, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@hopopts={0x3c, 0x1c, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0x1, [0x1000000000000000, 0x1, 0x3, 0x5, 0x3]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0xc8, 0x8, [0x4, 0x2, 0x1ff, 0xb60, 0x7, 0x8, 0x84]}}, @jumbo={0xc2, 0x4, 0x8001}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0x1, [0x3, 0x7, 0x0, 0x6, 0x3, 0xffffffffffff8001, 0x6, 0x8]}}]}, @routing={0x84, 0xc, 0x0, 0x9, 0x0, [@private0, @local, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00', @empty]}, @dstopts={0x48f1d26bdf552516, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x16, 0x34, '\x00', [@enc_lim={0x4, 0x1, 0x57}, @ra={0x5, 0x2, 0x1}, @ra, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x8001}, @generic={0x6, 0x99, "4cfe3bef425bf5916e9d0414def3a4fef477d74aceab96a107cb4854f7befdcb9ff60e6ef902ee24c5f34e0a91a0d3e16c38c9e82eba9cbccd0eb5f61e8ca9c5ef30a103e183c398d2381d2ebdbab58fdfce63efa7152613c790d17128afe5cccd15d761a0184a0615e55314667d29e0f26f4d07a415663642222cf25acf3de27bfd73f92f452a0e5e1ac3ff55457053be6baea4a9c9f1477c"}, @jumbo={0xc2, 0x4, 0x10000}, @generic={0x6, 0xd5, "3a83f440552f86f3e8bfd03b3f9e02e9c53cfc4169abf662a1994757e4c77b789caa7409bff72932b257e8bacdcca4ce2413ef74ab633df9e4fdd8194f9c82950b58f4b901b7e447c3606cec3886a8fd389b7bdbceeecb5890feff7053c7fe607e8e8eecdf82c9e5440162bcfbc6ba4cb6922e0d2f4932fec82f0fd0dc603bba6eea28f35447840117936d5ff9e86c67a45b16d0309972b2c693e28e75f9b035f78e2d477996b1c7235c5f1ee9e95486cf9e1bb5e5ca804bd2e2bb9e162ca6ed61f9b4fc30c830422c8454624aa990b51b21af7343"}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @local}]}, @dstopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}], @ni={0x8b, 0x0, 0x0, 0x0, 0x1f, 0x40, "2e49780da38886cd45af2fb4330adf8715cbc532eee64019bbdba75414b4d46735f067fef323c9ec0585f60d2930f6fea5a8a25dde9f6ef4baae2a4ac229a351e27b4a183bbe150da7c83716448b1fa0146880fd9d2eb4b0868ad2b0cb338c02d3254d3f87be18ea13453896ee17cb720131fb006a31062c27dcc2ad09c79184858031c9edef165899a25ace9d6915"}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "113f96797c7405585f99cf67ee276af052c7bc766823faab94aa20f9fd2a7354fe54b6c31abdcb2c3238b5d1ca46e1eaf9ebcd0359a868b6db04183ecac29278"}}}}, &(0x7f00000004c0)={0x1, 0x2, [0xd5d, 0x100d1c, 0x2a9, 0x73]}) [ 1421.259379] audit: type=1326 audit(1764191887.305:4633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1421.267433] audit: type=1326 audit(1764191887.305:4634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:18:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x300000000000000, 0x0) 21:18:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4800000000000000, 0x0) [ 1421.296618] audit: type=1326 audit(1764191887.305:4635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1421.299223] audit: type=1326 audit(1764191887.306:4636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:18:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) [ 1421.337295] audit: type=1326 audit(1764191887.306:4637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9486 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:18:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c00000000000000, 0x0) 21:18:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) recvfrom$unix(r1, &(0x7f0000000600)=""/94, 0x5e, 0x40000080, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x7) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1000000005e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockname$unix(r1, &(0x7f0000000580), &(0x7f0000000100)=0x6e) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x8, 0xbeb5921) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x81, 0xc7, 0x6, 0x8, 0x3, 0x3e, 0x2, 0x13b, 0x40, 0x1c5, 0x7fffffff, 0x1000, 0x38, 0x2, 0x8e0, 0x8, 0x8}, [{0x4, 0x7, 0x0, 0x6, 0x7, 0x81, 0x2c0e, 0x7}, {0x70000000, 0x2, 0x7, 0x7ff, 0x7fff, 0x8001, 0x0, 0x8}], "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", ['\x00']}, 0x2ac) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 21:18:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6800000000000000, 0x0) 21:18:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:18:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) [ 1436.206358] kauditd_printk_skb: 59 callbacks suppressed [ 1436.206370] audit: type=1326 audit(1764191902.335:4697): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9526 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:18:22 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 40) 21:18:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x301080, 0x8) ftruncate(r3, 0xba56) lseek(r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x7c801b8ec481842d) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x11) pipe2(&(0x7f0000000540), 0x0) eventfd2(0x6, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x94940, 0x0) ftruncate(r6, 0xba56) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffe) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:18:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@access_client}]}}) [ 1436.221785] FAULT_INJECTION: forcing a failure. [ 1436.221785] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.223281] CPU: 1 PID: 9529 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1436.224177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.225266] Call Trace: [ 1436.225617] dump_stack+0x107/0x167 [ 1436.225694] audit: type=1326 audit(1764191902.349:4698): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9532 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1436.226105] should_fail.cold+0x5/0xa [ 1436.229258] ? xas_alloc+0x336/0x440 [ 1436.229760] should_failslab+0x5/0x20 [ 1436.230256] kmem_cache_alloc+0x5b/0x310 [ 1436.230786] ? stack_trace_consume_entry+0x160/0x160 [ 1436.231447] xas_alloc+0x336/0x440 [ 1436.231912] xas_create+0x34a/0x10d0 [ 1436.232405] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1436.233086] xas_store+0x8c/0x1c40 [ 1436.233561] __xa_store+0x164/0x2d0 [ 1436.234046] ? xa_delete_node+0x280/0x280 [ 1436.234594] ? trace_hardirqs_on+0x5b/0x180 [ 1436.235160] xa_store+0x31/0x50 [ 1436.235593] __io_uring_add_tctx_node+0x1cf/0x520 [ 1436.236218] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1436.236896] ? alloc_fd+0x2e7/0x670 [ 1436.237374] io_uring_setup+0x1fbb/0x2980 [ 1436.237930] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1436.238589] ? wait_for_completion_io+0x270/0x270 [ 1436.239232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1436.239908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1436.240575] do_syscall_64+0x33/0x40 [ 1436.241056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1436.241716] RIP: 0033:0x7f42229ceb19 [ 1436.242205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1436.244593] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1436.245581] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1436.246513] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1436.247428] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1436.248346] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1436.249261] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:18:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000015d60000000008002600641400000500180101000000bf794fde3eade0d2763853fd"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x2c, r4, 0x8, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_CQM={0x4}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4, 0x7, 0x6, 0x7f, 0x0, 0x7, 0x44006, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0x80000000}, 0x8c80, 0x3f, 0x2, 0x6, 0x1a69, 0x20, 0x6, 0x0, 0x5, 0x0, 0x1ff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000040)={0x7}, 0x7) fallocate(r5, 0x20, 0x0, 0x8000) 21:18:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c00000000000000, 0x0) 21:18:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x400000000000000, 0x0) [ 1436.263068] audit: type=1326 audit(1764191902.349:4699): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9532 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1436.269269] loop5: detected capacity change from 0 to 33559552 [ 1436.270190] audit: type=1326 audit(1764191902.350:4700): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9532 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1436.279907] audit: type=1326 audit(1764191902.358:4701): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9526 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1436.289502] audit: type=1326 audit(1764191902.358:4702): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9526 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:18:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7400000000000000, 0x0) 21:18:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x500000000000000, 0x0) [ 1436.322336] audit: type=1326 audit(1764191902.358:4703): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9526 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1436.326629] audit: type=1326 audit(1764191902.388:4704): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9532 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1436.331673] audit: type=1326 audit(1764191902.388:4705): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9532 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1436.335628] audit: type=1326 audit(1764191902.389:4706): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9541 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:18:22 executing program 1: syz_emit_ethernet(0x8b, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96363f", 0x55, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x88, 0x1, '\x00', [@jumbo, @enc_lim]}], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "001000", 0x0, 0x0, 0x0, @private0, @private2, [], "7df2d21a83ffe1577f325d2606"}}}}}}}, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) syz_emit_ethernet(0x90, &(0x7f0000001500)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "5efe96", 0x5a, 0x2c, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[], "ef28632b645076f251cc7049c5430112408a81e9e50dac851a26abbaa2df06a47ade2767bfa7600bde4221c461b266eb3c0254f5a4560bb8c733d8596dbad19a730b967899e736c7cd874f437e25adcf8e304ec964f7ecbf1fca"}}}}}, &(0x7f00000015c0)={0x0, 0x2, [0x957, 0xb98, 0x6eb, 0xa8b]}) ftruncate(r0, 0x2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x80a1, 0x0, 0x800, 0x5, 0x0, 0x800, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000130a01080000000000000000050000050900010073797a30000000000900d3dd5b0300000000000000a0a381010073797a30000000000900010073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) flistxattr(r1, &(0x7f0000001600)=""/102, 0x66) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x1000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0011cd"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="09a9266dd076fb2a2930e184bb0000000000f3042e2f8e0b0c"]) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x7, 0x2, &(0x7f0000000480)=[{&(0x7f0000000400)="9ebcc296d27547369abc2677efbffddbc46d3aa485d56541a9a5d332ab6ec4e1fde8a718fd0d6ecb8c5eca2ced4eb945588f178afce0912e9b5ec3f4728d71850049f658fd5bb3075d4d4e81e3e0c305d48c23a185936bf862da626d16a915d5", 0x60, 0x1f}, {&(0x7f00000001c0)="78d2886f4223a72585cd", 0xa, 0x200}], 0x200000, &(0x7f0000001680)=ANY=[]) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) syz_extract_tcp_res$synack(&(0x7f00000014c0), 0x1, 0x0) 21:18:22 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 41) 21:18:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x2, 0x6}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000004640)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/176, 0xb0}, {&(0x7f0000000100)=""/6, 0x6}], 0x2, &(0x7f0000000280)=""/120, 0x78}, 0xffff}, {{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/63, 0x3f}, {&(0x7f00000025c0)=""/157, 0x9d}], 0x6}, 0xfffffffe}, {{&(0x7f0000002700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002780)=""/197, 0xc5}, {&(0x7f0000002880)=""/175, 0xaf}, {&(0x7f0000002940)=""/32, 0x20}], 0x3}, 0x1}, {{&(0x7f00000029c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a40)=""/189, 0xbd}, {&(0x7f0000002b00)=""/219, 0xdb}, {&(0x7f0000002c00)=""/46, 0x2e}, {&(0x7f0000002c40)=""/54, 0x36}], 0x4, &(0x7f0000002cc0)=""/9, 0x9}, 0x334e}, {{&(0x7f0000002d00), 0x80, &(0x7f0000004000)=[{&(0x7f0000002d80)=""/100, 0x64}, {&(0x7f0000002e00)=""/131, 0x83}, {&(0x7f0000002ec0)=""/146, 0x92}, {&(0x7f0000002f80)=""/66, 0x42}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000004080)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004100)=""/22, 0x16}, {&(0x7f0000004140)=""/188, 0xbc}, {&(0x7f0000004200)=""/73, 0x49}, {&(0x7f0000004280)=""/52, 0x34}, {&(0x7f00000042c0)=""/84, 0x54}, {&(0x7f0000004340)=""/5, 0x5}, {&(0x7f0000004380)=""/29, 0x1d}, {&(0x7f00000043c0)=""/154, 0x9a}, {&(0x7f0000004480)=""/140, 0x8c}], 0x9, &(0x7f0000004600)}, 0x7}], 0x6, 0x2040, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000047c0)={r5, 0x1, 0x6, @broadcast}, 0x10) dup3(r0, r3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000040)={r7, 0x2, 0x6, @random="754089a04d39"}, 0x10) 21:18:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x600000000000000, 0x0) 21:18:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8) 21:18:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a00000000000000, 0x0) [ 1436.437171] FAULT_INJECTION: forcing a failure. [ 1436.437171] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.438569] CPU: 0 PID: 9559 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1436.439382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.440374] Call Trace: [ 1436.440702] dump_stack+0x107/0x167 [ 1436.441135] should_fail.cold+0x5/0xa [ 1436.441590] ? xas_alloc+0x336/0x440 [ 1436.442038] should_failslab+0x5/0x20 [ 1436.442487] kmem_cache_alloc+0x5b/0x310 [ 1436.442972] xas_alloc+0x336/0x440 [ 1436.443400] xas_create+0x34a/0x10d0 [ 1436.443853] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1436.444475] xas_store+0x8c/0x1c40 [ 1436.444905] __xa_store+0x164/0x2d0 [ 1436.445337] ? xa_delete_node+0x280/0x280 [ 1436.445844] ? trace_hardirqs_on+0x5b/0x180 [ 1436.446355] xa_store+0x31/0x50 [ 1436.446749] __io_uring_add_tctx_node+0x1cf/0x520 [ 1436.447317] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1436.447937] ? alloc_fd+0x2e7/0x670 [ 1436.448373] io_uring_setup+0x1fbb/0x2980 [ 1436.448881] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1436.449482] ? wait_for_completion_io+0x270/0x270 [ 1436.450076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1436.450697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1436.451308] do_syscall_64+0x33/0x40 [ 1436.451753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1436.452363] RIP: 0033:0x7f42229ceb19 [ 1436.452803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1436.454979] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1436.455875] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1436.456717] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1436.457554] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1436.458409] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1436.459256] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:18:35 executing program 1: mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000440)={'trans=xen,', {[{@cache_mmap}, {@debug={'debug', 0x3d, 0x7}}, {@msize={'msize', 0x3d, 0xa078}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xff\xff'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @empty, 0x2}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000500)={{r0}, 0x0, 0xb5e, 0x7}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x80, 0xc0c00) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c) dup2(0xffffffffffffffff, r2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x4, 0xff, 0x9, 0x26, 0x0, 0xfffffffffffffffb, 0x18010, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x40ba1, 0x6, 0x1, 0x3, 0x3, 0x0, 0x4200, 0x0, 0xffffffd5, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 1449.175152] kauditd_printk_skb: 42 callbacks suppressed [ 1449.175171] audit: type=1326 audit(1764191915.304:4749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1449.193740] audit: type=1326 audit(1764191915.304:4750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:18:35 executing program 0: prctl$PR_SVE_SET_VL(0x32, 0xb26a) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2002) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2000}, 0x1, {0x0, r8}}, 0x2000) r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x10000000c) dup(0xffffffffffffffff) syz_io_uring_setup(0x77d5, &(0x7f0000000140)={0x0, 0x6d76, 0x10, 0x1000003, 0xb9}, &(0x7f000008e000/0x1000)=nil, &(0x7f0000a6d000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) openat(r9, &(0x7f00000001c0)='./file1\x00', 0x40, 0xcf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 21:18:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:18:35 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 42) 21:18:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_any}, {@access_client}]}}) 21:18:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x700000000000000, 0x0) 21:18:35 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa1ffffff00000000, 0x0) 21:18:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) [ 1449.215146] loop5: detected capacity change from 0 to 33559552 [ 1449.215191] audit: type=1326 audit(1764191915.304:4751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1449.221873] FAULT_INJECTION: forcing a failure. [ 1449.221873] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.224309] CPU: 1 PID: 9585 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1449.225766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1449.227527] Call Trace: [ 1449.228097] dump_stack+0x107/0x167 [ 1449.228872] should_fail.cold+0x5/0xa [ 1449.229684] ? create_object.isra.0+0x3a/0xa30 [ 1449.230669] should_failslab+0x5/0x20 [ 1449.231468] kmem_cache_alloc+0x5b/0x310 [ 1449.232335] ? mark_held_locks+0x9e/0xe0 [ 1449.233197] create_object.isra.0+0x3a/0xa30 [ 1449.234132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1449.235218] kmem_cache_alloc+0x159/0x310 [ 1449.236110] xas_alloc+0x336/0x440 [ 1449.236876] xas_create+0x34a/0x10d0 [ 1449.237709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1449.238836] xas_store+0x8c/0x1c40 [ 1449.239606] __xa_store+0x164/0x2d0 [ 1449.240382] ? xa_delete_node+0x280/0x280 [ 1449.241271] ? trace_hardirqs_on+0x5b/0x180 [ 1449.242206] xa_store+0x31/0x50 [ 1449.242910] __io_uring_add_tctx_node+0x1cf/0x520 [ 1449.243944] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1449.245075] ? alloc_fd+0x2e7/0x670 [ 1449.245854] io_uring_setup+0x1fbb/0x2980 [ 1449.246750] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1449.247827] ? wait_for_completion_io+0x270/0x270 [ 1449.248876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1449.250001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1449.251101] do_syscall_64+0x33/0x40 [ 1449.251891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1449.252965] RIP: 0033:0x7f42229ceb19 [ 1449.253762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1449.257669] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1449.259308] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1449.260839] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1449.262365] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1449.263890] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1449.265418] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1449.273718] audit: type=1326 audit(1764191915.304:4752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1449.281933] audit: type=1326 audit(1764191915.304:4753): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1449.290093] audit: type=1326 audit(1764191915.310:4755): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9571 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1449.301746] audit: type=1326 audit(1764191915.306:4754): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:18:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa00000000000000, 0x0) [ 1449.346684] audit: type=1326 audit(1764191915.311:4756): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:18:35 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xfeffffff00000000, 0x0) [ 1449.395736] audit: type=1326 audit(1764191915.322:4757): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9570 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:18:35 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 43) 21:18:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x21) [ 1449.441980] audit: type=1326 audit(1764191915.329:4758): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9571 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:18:35 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xffffffff00000000, 0x0) 21:18:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1449.501710] FAULT_INJECTION: forcing a failure. [ 1449.501710] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.504221] CPU: 0 PID: 9600 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1449.505681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1449.507447] Call Trace: [ 1449.508012] dump_stack+0x107/0x167 [ 1449.508788] should_fail.cold+0x5/0xa [ 1449.509601] ? xas_alloc+0x336/0x440 [ 1449.510397] should_failslab+0x5/0x20 [ 1449.511202] kmem_cache_alloc+0x5b/0x310 [ 1449.512068] xas_alloc+0x336/0x440 [ 1449.512838] xas_create+0x34a/0x10d0 [ 1449.513640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1449.514760] xas_store+0x8c/0x1c40 [ 1449.515533] __xa_store+0x164/0x2d0 [ 1449.516305] ? xa_delete_node+0x280/0x280 [ 1449.517197] ? trace_hardirqs_on+0x5b/0x180 [ 1449.518162] xa_store+0x31/0x50 [ 1449.518861] __io_uring_add_tctx_node+0x1cf/0x520 [ 1449.519883] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1449.520984] ? alloc_fd+0x2e7/0x670 [ 1449.521774] io_uring_setup+0x1fbb/0x2980 [ 1449.522667] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1449.523741] ? wait_for_completion_io+0x270/0x270 [ 1449.524786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1449.525918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1449.527009] do_syscall_64+0x33/0x40 [ 1449.527775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1449.528842] RIP: 0033:0x7f42229ceb19 [ 1449.529645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1449.533585] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1449.535205] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1449.536729] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1449.538251] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1449.539764] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1449.541277] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:18:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4000000000000000, 0x0) 21:18:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', &(0x7f0000000440)='\x00', &(0x7f00000003c0)='securP\x1d0\xbcQ\x1cIwbility\x00', &(0x7f0000000340)='security.capability\x00', 0x0], &(0x7f00000003c0), 0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="5b6c072f3513e9b336fb5f75c2080000000000000000002e2f66696c65300086a9f86e79c51b0000000000000056f9e7d1c96bdacb72333adb5af3648ee2ad6e4423f42781ab4d43e3221a12434ffff7bacc3acd6fdd4222000000000000006567e5443f18135c3760805825510d2c58d14379befc0faa86c12ef3842088e148a59d3b92b44c281e969e737d159d2b6ddd0c3b3158aceee622a754bc793176f6349bf8b46a13e69a7d1c6a3e1a580e9af92f53d97739ab29aeae46a54d52a7cbf7a9550cc4f9282e527c4d4cbf968c8755f5aabfc9c14fdf68"]) sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ftruncate(r0, 0x1000003) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x25, 0xc21}, 0x14}}, 0x0) r4 = openat(r3, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x1f, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) lseek(r0, 0x5, 0x1) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000240)=""/12) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) [ 1449.597204] loop5: detected capacity change from 0 to 33559552 21:18:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r4, 0xba56) lseek(r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r6, 0xba56) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r8, 0xba56) lseek(r8, 0x0, 0x2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="949ddc547293688cd18ca53624f4031c74e2eafc16f50698c3ccdbf2fc0b801dc5b86801a210238bf0ec88854073f3918ab22b27c113d1e52c99af68b8b3c56d4241ab4ad2b2a75e", @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX, @ANYRES32], 0xffffffffffffff5b) sendfile(r2, r3, 0x0, 0x100000001) sendfile(r0, r1, 0x0, 0x100000001) 21:18:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4800000000000000, 0x0) 21:18:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:18:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:18:48 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 44) [ 1462.543813] kauditd_printk_skb: 34 callbacks suppressed 21:18:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000040), 0x40000000, &(0x7f0000000080)) [ 1462.543834] audit: type=1326 audit(1764191928.672:4793): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9618 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:18:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x48) 21:18:48 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000004c0)={0x0, @adiantum, 0x0, @desc3}) ioctl$VT_RELDISP(r0, 0x5605) r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="11663aec93e4143e3d1bb86a4b88d4d226eec281b18d2e8ca45fa0633579cd35a50502315183863a3edb266b9a9a41226edab66e595eb5197f886069ab3a959af0a9995489bb656e841eb47def39cf1326", 0x51, 0x60000}, {&(0x7f0000000200)="d22e90631042184863eaa9bae0fd8d8eed60c056bf2bd76ffae1e78097bd6cd826acf263863d036980bdd69f6503ce9fc93f48b6be2d801847fde3fc8c1e3179f4304cb3ee7a2d7e4ad188c0207ab4087b56a8d1490aac6027f759b684f50923deda4aafbbe17112209f6019774110abe888f85f33e67e841135c0ae54a107b8c8dc7526320b50266d35ea348946b737918106a74dda386274d10355c0747f0bf7c240ca5054a07b2fd11aa5df498a99f569cf878374853ba597de30f47064", 0xbf, 0xfffffffffffff645}, {&(0x7f00000002c0)="0674d08ba1f1a11b9fd0f22f3409f32f35c9007089550f7386b86cb42934d4c8aabf31ddc99a75fb06d4c5ddd48439428e7b0d69abc7b296b8dfbee08690cded74f64b80a54367b9f500aeded31b125cfd22d767bbef242002bdf34c385dfad510b61288643d9c5d9de14432bb8a1e1be6a72ccc8562e76344dad095a78195cfe964a42b3c67c8978cad3a8e1f2b27bee6e17fb47858783f058154f54f66115bb9a5a0c90713e102988c45ad27ffa57f2578c3299f69b41ea42f156fbcda978f7b50365e4eb477bb9244d81aaf52024952486773195602e0bf2590f5e9bfa20ff7", 0xe1, 0xffffffffffffff57}], 0x828410, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]) fallocate(r3, 0x1, 0xffff, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) [ 1462.565031] audit: type=1326 audit(1764191928.683:4794): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.571590] audit: type=1326 audit(1764191928.683:4795): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.577889] audit: type=1326 audit(1764191928.687:4796): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.581329] loop5: detected capacity change from 0 to 33559552 [ 1462.584680] FAULT_INJECTION: forcing a failure. [ 1462.584680] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.587648] CPU: 0 PID: 9627 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1462.589423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1462.590978] audit: type=1326 audit(1764191928.687:4797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.591583] Call Trace: [ 1462.591612] dump_stack+0x107/0x167 [ 1462.591638] should_fail.cold+0x5/0xa [ 1462.596724] ? create_object.isra.0+0x3a/0xa30 [ 1462.597899] should_failslab+0x5/0x20 [ 1462.598000] audit: type=1326 audit(1764191928.687:4798): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.598887] kmem_cache_alloc+0x5b/0x310 [ 1462.598911] ? mark_held_locks+0x9e/0xe0 [ 1462.598939] create_object.isra.0+0x3a/0xa30 [ 1462.598957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1462.598988] kmem_cache_alloc+0x159/0x310 [ 1462.599019] xas_alloc+0x336/0x440 [ 1462.599046] xas_create+0x34a/0x10d0 [ 1462.608300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1462.609219] audit: type=1326 audit(1764191928.687:4799): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.609512] xas_store+0x8c/0x1c40 [ 1462.609551] __xa_store+0x164/0x2d0 [ 1462.612487] audit: type=1326 audit(1764191928.687:4800): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.612892] ? xa_delete_node+0x280/0x280 [ 1462.612922] ? trace_hardirqs_on+0x5b/0x180 [ 1462.615889] audit: type=1326 audit(1764191928.688:4801): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.618263] xa_store+0x31/0x50 [ 1462.618288] __io_uring_add_tctx_node+0x1cf/0x520 [ 1462.620585] audit: type=1326 audit(1764191928.688:4802): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9620 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1462.624663] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1462.624681] ? alloc_fd+0x2e7/0x670 [ 1462.624715] io_uring_setup+0x1fbb/0x2980 [ 1462.634048] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1462.635228] ? wait_for_completion_io+0x270/0x270 [ 1462.636380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1462.637603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1462.638819] do_syscall_64+0x33/0x40 [ 1462.639688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1462.640886] RIP: 0033:0x7f42229ceb19 [ 1462.641752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.646048] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.647815] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1462.649470] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1462.651139] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1462.652799] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1462.654461] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:18:48 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x100, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x2) r2 = inotify_init1(0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) execveat(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)=[&(0x7f0000000140)='(:\x00', &(0x7f0000000180)='$\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00'], &(0x7f0000000340)=[&(0x7f00000002c0)='(/\xa4\x93\x00', &(0x7f0000000300)='\x00'], 0x800) sendfile(r0, r1, 0x0, 0x100000001) r4 = dup3(0xffffffffffffffff, r3, 0x80000) renameat(r4, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa780, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x0) 21:18:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4c) 21:18:48 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 45) 21:18:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x4c00000000000000, 0x0) [ 1462.712962] FAULT_INJECTION: forcing a failure. [ 1462.712962] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.714396] CPU: 1 PID: 9642 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1462.715217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1462.716203] Call Trace: [ 1462.716519] dump_stack+0x107/0x167 [ 1462.716958] should_fail.cold+0x5/0xa [ 1462.717415] ? xas_alloc+0x336/0x440 [ 1462.717856] should_failslab+0x5/0x20 [ 1462.718318] kmem_cache_alloc+0x5b/0x310 [ 1462.718804] xas_alloc+0x336/0x440 [ 1462.719228] xas_create+0x34a/0x10d0 [ 1462.719678] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1462.720307] xas_store+0x8c/0x1c40 [ 1462.720737] __xa_store+0x164/0x2d0 [ 1462.721171] ? xa_delete_node+0x280/0x280 [ 1462.721670] ? trace_hardirqs_on+0x5b/0x180 [ 1462.722195] xa_store+0x31/0x50 [ 1462.722590] __io_uring_add_tctx_node+0x1cf/0x520 [ 1462.723164] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1462.723784] ? alloc_fd+0x2e7/0x670 [ 1462.724222] io_uring_setup+0x1fbb/0x2980 [ 1462.724717] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1462.725318] ? wait_for_completion_io+0x270/0x270 [ 1462.725906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1462.726538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1462.727152] do_syscall_64+0x33/0x40 [ 1462.727597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1462.728204] RIP: 0033:0x7f42229ceb19 [ 1462.728646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.730840] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.731745] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1462.732590] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1462.733433] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1462.734680] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1462.736497] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:18:48 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 46) 21:18:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) [ 1462.815473] FAULT_INJECTION: forcing a failure. [ 1462.815473] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.818123] CPU: 1 PID: 9647 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1462.819595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1462.821396] Call Trace: [ 1462.821974] dump_stack+0x107/0x167 [ 1462.822783] should_fail.cold+0x5/0xa [ 1462.823612] ? create_object.isra.0+0x3a/0xa30 [ 1462.824599] should_failslab+0x5/0x20 [ 1462.825423] kmem_cache_alloc+0x5b/0x310 [ 1462.826313] ? mark_held_locks+0x9e/0xe0 [ 1462.827198] create_object.isra.0+0x3a/0xa30 [ 1462.828152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1462.829262] kmem_cache_alloc+0x159/0x310 [ 1462.830174] xas_alloc+0x336/0x440 [ 1462.830951] xas_create+0x34a/0x10d0 [ 1462.831773] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1462.832912] xas_store+0x8c/0x1c40 [ 1462.833701] __xa_store+0x164/0x2d0 [ 1462.834522] ? xa_delete_node+0x280/0x280 [ 1462.835431] ? trace_hardirqs_on+0x5b/0x180 [ 1462.836379] xa_store+0x31/0x50 [ 1462.837097] __io_uring_add_tctx_node+0x1cf/0x520 [ 1462.838167] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1462.839357] ? alloc_fd+0x2e7/0x670 [ 1462.840202] io_uring_setup+0x1fbb/0x2980 [ 1462.841158] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1462.842322] ? wait_for_completion_io+0x270/0x270 [ 1462.843413] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1462.844544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1462.845667] do_syscall_64+0x33/0x40 [ 1462.846485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1462.847595] RIP: 0033:0x7f42229ceb19 [ 1462.848401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.852396] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.854062] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1462.855602] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1462.857140] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1462.858694] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1462.860230] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:18:49 executing program 0: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000280)=""/152) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x800}, 0x0, 0xffffffffffeffffe, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x1a) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000003a94d8d76fb47973e5872715c2431a593ab4ef0e6b81e915fbd32886fbbbc89d393328a632417b3b8a9c3d5915d04f5faeca88477f5d9251add0d669415db58a7bde0d79b33285c69842dddc01058bd12b781cf1ceb082af03ab8d6fb7829ef7e8a2f472a4c581052945f1fd64d6506ad1bffe2edc219e83b2a2c81996f7feffc10e42ba9e6bf4dc0972f601f4f6189fae73fff2a630ad59f93ad1e5964e4f78a767df2418fbecfaf87f57da8363d67946287a10a05d7a7b23a020a42c49f7280351cb58ac2fd0ba25230f0de49112701e2b37725087b97889ca9f0fc2fda7c4d40760"], 0xeb, 0x0) fork() 21:18:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:18:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x25, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1}, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="018200000000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbeaa8ca75b1bf216113e67d96fd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d0", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) 21:18:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x68) 21:18:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:18:49 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x5d08, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) [ 1462.997936] loop5: detected capacity change from 0 to 33559552 21:18:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6800000000000000, 0x0) [ 1463.150893] TCP: TCP_TX_DELAY enabled 21:19:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x6c00000000000000, 0x0) 21:19:03 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xff, 0x0, 0x5, 0xb5, 0x0, 0x6, 0xc8412, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb24, 0x0, @perf_config_ext={0x5, 0x4}, 0x102, 0x1, 0x3, 0x7, 0x1, 0xffff7fff, 0xff, 0x0, 0x7f, 0x0, 0x21c}, 0xffffffffffffffff, 0x6, r2, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r4, 0xba56) lseek(r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) fcntl$dupfd(r4, 0x406, r0) dup(0xffffffffffffffff) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) 21:19:03 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 47) 21:19:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6c) 21:19:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x4ec, 0x16, 0x0, 0x70bd25, 0x25dfdbfe, {0x14}, [@generic="d50a1920ae49ff9247c99eed15c492afca9d2e4f4d7b0a9afe2e0bc530aa84c0c9974c0ddf7ae6b4b57031e56a9a86d4fc1c0190d8fc6fbffa447fbc857dff2bb226e301", @nested={0x2f4, 0x5b, 0x0, 0x1, [@typed={0xc, 0x90, 0x0, 0x0, @u64=0x1}, @generic="001afc77ea745994e450fef5b167cdd465f2dd22c486c284510ae809360a6e00dabe822637f1104386a59e79582823fa143d500a9f4516c8254e94a46835fcb98267c9dca08cc6c28d893fdc073f68a837f30813b5fe33310faeb7e8c5c7e09240d7dc6d25d59a0b97ac5ee5737a74e11df387e8a20c7dd13ee01adf9c0f61b718f22c90b97aece928befd93e0508702a214b3558755a4590b6b21b2a66e4bdc72063398a7b9f180e315dc88965a46e8b857609874aef55fa5da0b074b3b9f20811e7d0333d38f6b0d267fd13f203fad1fe1355907f13247d3bc", @generic="e701b9c104c2d1a01b55d1b0ab47279b6f463382609f095a43e767fb2efbbcdcd7503c96b6ae4ebc5b1b64adfb8a4dc85ca1962fcf2da524dde65d319a79dcd172b9357065f5c64058039d9cd66a703642b8757d563ebf4a8b2701b67328e2638b19f515ad1b1bd9a390a8213413b6436c4007d6f918db510d9ed4e93d232b615d002aff58", @generic="97e5e3812ba70848b3c259b6c7f77c053b7275a1f3fc3a2beb292ad1d23b8907c80dc55c39d372aa05ad02fa3dd902b4a23b0fb22bcfd84c43520652a0144548fc309cac8afd9881fe6790e4f079dc76b0e3195956f31134a52607886d003a3b42f26d0d2b6914b5e2a40d088c2cdff129369f6e72d705266146164130214f0c0d11044c3aacf8e6694d7eb60ae518a4615f4bfda5d03b3b45b41b3d9c804e535ad52f309a1b11816f861bd9c406fccac6f51a92b9c1baf74c1d6b2d7bdc0d200b919bce6380e4765846b65172f5cdc2af17fde11c93f0ed356d6b9b61", @generic="759a9beec03e22a29c6e22c2ebe04558b226fb9c3e73a4ee26474121d3710350aaa28325e732d5932e31651cdc7adad99f1c36ee6934de12b7b39c1839ee2f6e167ff91b3f6c54624ee53e6821", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="6473c25f6190a767c05d9eb111bc7ac6b83b668ca88743fa0f56a346b813304d270a0523169abd00341ce65add135f5d6b06b756ae64e92bf486a9a4b1671d706dec53673245c085eaa28c"]}, @generic="2d6696812d6c739e34f5fc48b97a093ca2664c218f083a57c839cf59320241118b00da37f93c4c63d5e4ff535264587e1306cb771108ba144396e91881c8a828432e5f3369f0cb3b6bb25d35dd96c9e97d1af9f3d905d9703a9ca17316d4f7278b3b018fbc77114e7995e03708d41d9ec303474d63a2cb12a3bb33dc3cb90d58d96a21cb2d31f356f938ba9517356c4422cfe07b43fbeb833db77f5fc6b16728a721a9e8ae9528829f6b872e4f4e05bc1d683317e0ebe111ac9162295faf6bf26cbb7521ba476f5f3c63d924865e6dc2f26651b6d3581636995d", @nested={0xc2, 0x96, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @u32=0x6}, @generic="893f3acea5d54d13a86d066d51cec229b0fec6183db5af3a9954ec620cbc88b5da74d86f37efb5c7a573515749f02e98946637ba6306f9a0751817b261214e3b6d6db2e1f211579e9f0577f96f19f6c812a02ce7f749637e6d79647f73144fa78c4c89be0c32640e30e5faff89800eb2cadf6d0463968ea98eb8e183881ffae9f2ee5c99a171d2d6379e82395b8d03b514c0df656a4bd91dd5a049c7a08e36c9924b7146ae543006f6aa66c46c4f9e06e7cbc99569a6"]}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) lseek(r0, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) ftruncate(0xffffffffffffffff, 0xba55) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000980)=""/48, 0x30) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000340)={{'\x00', 0x3}, {0x8}, 0x197, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="6b6792ea38dd03cdc70adb5e5374f5b68b40f7b7129deedc93412c6460145b89ad0b019216a3c09a1ccf52ac8744078354e03ae00ecea60aebdce38e0cdb451092346fbad97ed51c8970ba1b6155494808bdd33d5b8f8c1b507019f3ed5d26dc7a65058751442b41f18447c5f9215856a8f17d56163f08c3d7ba920382d97c16d779b2e11fa37caced235ea7e1593f5e6720f03e31923a1d45278f07333a3ce75874d6da0e2eddc67e4285086c50ad00c03667cc2fb92aeca97e0d0b43920228bb81f6a985cb242267b6", 0xca, 0x0, &(0x7f0000000200)={0x2, 0xc6, {0x1, 0xc, 0x95, "0d7d6d3320af0f5c15f50f9e52f9a33001e0e400bf102baaedfd86de78155cba4f57f66eeecdc3c51d520743f5e9225b78523d0f779168d42d082f4578eefc9377bfdaf7cb347e6e3fcc81d513fc91dede4ed674f61d7258a1d2c60aa521e910a77c3a22ff049af9377a1d54b8131553819f6deead1d0210a8bed609da31a7a2e1bd588e886cdfd67bbf16eea52be69c2b496d362f", 0x24, "aecff72d0ea547d8dd6ef2a1a7113ebead5ea3417c96b98baa7cc28711c7597a68b1d92e"}, 0x6e, "c6a65c5e621d4c518228aa76149f1c1ab5e676e7b06b0b5a6d4ca47007690ea1c31451141e9558cf7c3685e4cb1d841687482bc3a443a2cc19d571a82da45ca1116b987266be4f8eeec84cc13b8d8965a63f06daefc57c3798b80765bd88e75dabddfca6565cdce519366a9f2091"}, 0x140}) 21:19:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:19:03 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f75e9a5972980482fa7133c50b66cf33a569773af6c0ae71c2168f8a577f0ca05f0fef960dbf9e67720d348f4f05f6acbdc0b18fabbeb218749b0e0323cd497552ddc3e745234094d52db8061e7d3f72b5a0cd6cc992b6f0db58239ba35fd08fc265f172d3bb7c42754ad4dbf9663b0ab7327b48439a51a8bdaab15ff3cb060e8f4e5d71dc48c3dccb6820cec4d35671a83747098e0000000000000000000000000000000048172b576cb9891e93380f11e4ddca4596cf0d4b5792a61d74ac133de865240d0fa393e42e12dd2f68c09676cc655458f0131115dae34317112d272538f2b786bf58d4816139f0fcf9e2b314081bfddbd7027b12d9a834a930c4599669072d22b71e4b4327260ffac91f2f377fa30f80a5268e88cf77aaa940aa9bcc2b3278c0ba8640fb97caccc0067c3d5e349997404c353888f385189f7617fd99", @ANYRESHEX, @ANYBLOB="2c84bffe1e2b35", @ANYRESHEX, @ANYBLOB="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"]) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000500)=@hopopts={0x32, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xff, 0xcf, "b7a5dc7630a9256539d55a6073cbf6eaca05d09d91170f47b2b1e63d5e22c2baecf61f1b3739b0bfe32e59af5edf44d16dedb19819ca3ed5ee4172c86f05dacf8f0265bcb31fb14158466937efb277a189ce21c5786ce91735df3333b2a0c8bf254e4d93f808c7531fcce2bbb221d7d88a07ec198ecb6afd96889f8314505f041b367698a46fd28593c369e0178de576bfdca281f11b66297f5ce970510f057cbc6da07aa5381a7904a3f780f702e56561f42323e8dd813d84cef55b88ca973b8280d6ba6ca1559333f3e7d759bb83"}]}, 0xf0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='t\x82ans=?d,', &(0x7f00000000c0)='cwche=loosu', &(0x7f0000000200)='fs\xc11\x1aiext\x84\xba}\xbf\x95\xd6\x10\x04\x00\x00\x01c(tc\xa7\xd6:\xfe\x88\xfe\x96i/', &(0x7f0000000180)='cache=mmap'], &(0x7f0000000740)=[&(0x7f0000000380)='h\x00', &(0x7f0000000700)='trans=fd,'], 0x400) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x3c, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2}, 0xc4) pread64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0xffc0000000000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x11, 0xffffffffffffffff, 0x10000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 21:19:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) (fail_nth: 1) [ 1476.929729] kauditd_printk_skb: 53 callbacks suppressed [ 1476.929750] audit: type=1326 audit(1764191943.058:4856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9682 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1476.956998] audit: type=1326 audit(1764191943.059:4857): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7400000000000000, 0x0) [ 1476.968253] loop5: detected capacity change from 0 to 33559552 [ 1476.977433] FAULT_INJECTION: forcing a failure. [ 1476.977433] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.977960] audit: type=1326 audit(1764191943.059:4858): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1476.978899] CPU: 0 PID: 9694 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1476.978920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.985563] Call Trace: [ 1476.985909] dump_stack+0x107/0x167 [ 1476.986403] should_fail.cold+0x5/0xa [ 1476.986895] ? ___slab_alloc+0x155/0x700 [ 1476.987439] ? create_object.isra.0+0x3a/0xa30 [ 1476.987746] audit: type=1326 audit(1764191943.059:4859): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1476.988032] should_failslab+0x5/0x20 [ 1476.992921] audit: type=1326 audit(1764191943.059:4860): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1476.993185] kmem_cache_alloc+0x5b/0x310 [ 1476.998100] audit: type=1326 audit(1764191943.059:4861): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1476.998396] create_object.isra.0+0x3a/0xa30 [ 1477.003258] audit: type=1326 audit(1764191943.060:4862): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1477.003603] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1477.003620] kmem_cache_alloc+0x159/0x310 [ 1477.003638] xas_alloc+0x336/0x440 [ 1477.008559] audit: type=1326 audit(1764191943.060:4863): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1477.008946] xas_create+0x34a/0x10d0 [ 1477.010048] audit: type=1326 audit(1764191943.060:4864): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9677 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1477.010335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.015168] audit: type=1326 audit(1764191943.069:4865): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9682 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1477.015417] xas_store+0x8c/0x1c40 [ 1477.023736] __xa_store+0x164/0x2d0 [ 1477.024194] ? xa_delete_node+0x280/0x280 [ 1477.024717] ? trace_hardirqs_on+0x5b/0x180 [ 1477.025268] xa_store+0x31/0x50 [ 1477.025685] __io_uring_add_tctx_node+0x1cf/0x520 [ 1477.026298] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1477.026951] ? alloc_fd+0x2e7/0x670 [ 1477.027413] io_uring_setup+0x1fbb/0x2980 [ 1477.027933] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1477.028575] ? wait_for_completion_io+0x270/0x270 [ 1477.029191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.029848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.030511] do_syscall_64+0x33/0x40 [ 1477.030973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1477.031605] RIP: 0033:0x7f42229ceb19 [ 1477.032064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.034361] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.035313] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1477.036190] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1477.037070] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1477.037953] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1477.038850] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:19:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x74) 21:19:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) r1 = pidfd_open(0x0, 0x0) lseek(r1, 0x1, 0x3) copy_file_range(r0, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x81, 0x6, @remote}, 0x14) wait4(0x0, 0x0, 0x0, 0x0) 21:19:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1477.174974] loop5: detected capacity change from 0 to 33559552 [ 1494.361330] kauditd_printk_skb: 113 callbacks suppressed [ 1494.361349] audit: type=1326 audit(1764191960.490:4979): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9717 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1494.374838] audit: type=1326 audit(1764191960.503:4980): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9717 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1494.396496] FAULT_INJECTION: forcing a failure. [ 1494.396496] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.399207] CPU: 1 PID: 9725 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1494.400715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.402575] Call Trace: [ 1494.403203] dump_stack+0x107/0x167 [ 1494.403986] should_fail.cold+0x5/0xa [ 1494.404783] ? create_object.isra.0+0x3a/0xa30 [ 1494.405744] should_failslab+0x5/0x20 [ 1494.406572] kmem_cache_alloc+0x5b/0x310 [ 1494.407419] ? mark_held_locks+0x9e/0xe0 [ 1494.408279] create_object.isra.0+0x3a/0xa30 [ 1494.409212] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1494.410272] kmem_cache_alloc+0x159/0x310 [ 1494.411162] xas_alloc+0x336/0x440 [ 1494.411909] xas_create+0x34a/0x10d0 [ 1494.412712] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.413804] xas_store+0x8c/0x1c40 [ 1494.414570] __xa_store+0x164/0x2d0 [ 1494.415327] ? xa_delete_node+0x280/0x280 [ 1494.416200] ? trace_hardirqs_on+0x5b/0x180 [ 1494.417091] xa_store+0x31/0x50 [ 1494.417780] __io_uring_add_tctx_node+0x1cf/0x520 [ 1494.418788] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1494.419888] ? alloc_fd+0x2e7/0x670 [ 1494.420658] io_uring_setup+0x1fbb/0x2980 [ 1494.421523] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1494.421605] audit: type=1326 audit(1764191960.503:4981): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9717 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1494.422573] ? wait_for_completion_io+0x270/0x270 [ 1494.422620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.422648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.430199] do_syscall_64+0x33/0x40 [ 1494.430972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.432032] RIP: 0033:0x7f42229ceb19 [ 1494.432816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.436666] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1494.438241] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1494.439727] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1494.441204] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1494.442695] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1494.444184] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:19:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:19:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000200)={r3, 0x2}) wait4(0x0, 0x0, 0x0, 0x0) 21:19:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x7a00000000000000, 0x0) 21:19:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}], 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1494.452803] audit: type=1326 audit(1764191960.515:4982): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1494.464376] loop5: detected capacity change from 0 to 33559552 [ 1494.468114] audit: type=1326 audit(1764191960.515:4983): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @private2, 0x8c2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000500)="906a887a692f8e2cd114680a78863e5e84d9d969a1c19681be6619bd4993fc786d0239633afa48152b9c612f53a20bec76ba18638b47a4686c15da4635e004f6ba03e915f01a96e27d7eb0181d7e375429bef30147530176741f30ce86959d873f9cb39459dc69353f4de1bc41923e68cdb178de9fcada8109e823af6f85aa884d9dcb2a92772b6f1f8c943489b6bfd9818b378eff7c547f22e3ab252e36f1719e6ed1f4b70995d1e6297c73224a4921d038c34426caddea0388387c6289cf74bc526e0bf563e93363b80ee9a2047350396ce84fd3d9d4e70210816f663090ac12d5e164b68526d779f2526fc8bd1434546d1b6a", 0xf4}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e23, 0x8001, @mcast2, 0x11c1}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000300)="01598bd46efd428ebe61", 0xa}, {&(0x7f0000000600)="925d766904626f79efaae5dba406baf8ab6a2304b78dd50a97619d14a4d79ccd9984a53d831ec618e43724bab6bd668a2a5bf3d9437563e68ccd488381b6ae96469cdb70da3fa576c331601550eabdce4d4622ca0c44b8bcae06ac3a92555a5c7c3ebbf2eba60ecfb55199eb896b22a45bcaa5e334618129a311a95bb5fa0222a8f0b66a6ac2b11d1c3f4832f8b8273fb8c4be3bb3b0692b6da97130688cb015b31f66c063c73b1b3cef1ebfae1507f9a2fa5016d7", 0xb5}, {&(0x7f00000006c0)="cfa92395b16b9420da7ab8c8d1bf24e9d963bf7e21e90b69aa261679d9e5ae880b3cdbe67692b19a9672d93c11c678248599f6600adaa46aae706ed0bb7e5672a7f32f91cbec044a0775adbf8fea4bb07084e8d5bfba56677bf31c0760a26971c199d803fcec0fdced061a8b1daa547e1d0a7b58a09f803d122cdf6cbb1fb8b7b365d029d5e5105a1a94e46d43730390b8a13553fb08f50c1b207644129cd526342a4b1e5fe3e6363c4f7f8505068ccde84b68dc8e356046d337561f7e324b773cca2be0206a70185e5fb3bbd44ff864a621c1c2783431564c67e4b8b1bec328913b7016b98d55ae7e547853948f1a9f", 0xf0}, {&(0x7f00000007c0)="2d71facb18e2649745602da2bd242413ce2e33bf90473fc67ba84e177c105c3e571e682b6da166b147c84e14a40bbd0ee4ad58da7c0819f70b30e27b7f6e35b84e09c0dcd36bce361d63dba363270ed273c294aa192701df79c61f688ad55f021834d0605583745efc9268bf33b38005573bf04a037950d481bee6c841ebb3ec48cbba0144305b21857b77", 0x8b}, {&(0x7f0000000c00)="fd3e9c8f69f85e78f00086697243462d6686df46eeadc06e25953df917e201d24660977cf3be876a928a7ba78216c5d11a05ef241adc92a05f533713da10242f855f0db32a02facb7875da3e454a30ae6085e29d86f49a745238f73038368531efa5437927cb78f328d8bff857348759f251c000765ca2f4a11f84974d4bc9a617f61e83cc5648569e5782ec6ffd570ebe0f9c3951d81b5aec23fbdd2a78ba8ebab7f451208bd35e58d01b09796b31e353ef079cd4979341c654abbc9a0de929df6520dbb9d68ff2d18f99e59ef6e05246cd8088ca8d4c137817b764d40f3834f9f5b484c8f13acf3c3d2fbcb752999772fe", 0xf2}, {&(0x7f0000000d00)="5af52990caad666c6ed47dc79a62db7d5497b60a97324cf39b1e4ce85d487733d4a7cfe6c1bb04bfe4ea395cf851cb4a39b5351ce4252845c85285bb1b1f52d25b397b8799ea1d", 0x47}, {&(0x7f0000000d80)="5ea91e02dc34f6ca98bbeb71e268582e2faaddffad33681526aae431f9f7fcfd957f895bc8aee00e2e58c07c6b34c8ee276742a14b6f33e798696dea5bce7e69b1a410b1a4e7ac99f27427248a241a33140ef38453e3122a80adbed6b437e639223a9e3006aa6a377b0ea7f84ad68e1fdb4f7d30288377d73b431182dacda2fc6d546aa895f28216e8b91ae93ad63978a4b40dd71ba7d2b9f48a16f0c6875b1b046614fcb4485ad48cd9f3c0067b5120947251141caf3692a08184057dd05b5d56a656ab7e1bc3630f219bfa90e2ecdc093516a323b750", 0xd7}, {&(0x7f0000000e80)="27fa0eef57c32c1e5b20dc214cfba8ae5f87db6d4aba4a3b752c222ba0bc299419768ee8787cd38b1357109dd6d48a4f0857d1e552df8b4af2eabcdd782725ba4066e97b1b4a2b6d476c69a692e00526304ea43c3d29641b5ecf4a756e4f33c496b9944e369b3487febe9409f79e7922e4146c71934f84b79434cb80794df846ac3bfe9b4849b9741ba7ae56dddda2f687fd1bff679599a81c3bb6fa44de89b406d830805cbf0e8193f757f4fb6aff130209d90e55fbeebe146a1ff29577b7073eb13686a0df8f9ad290a472f029584c0c025fc4df6ada14024e4e8d64b5c1afd4d1ea7e36dfda4c66a335a883", 0xed}], 0x8}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x43, @mcast1, 0x3}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000001000)="310d3f34698194b4dddf59cc", 0xc}, {&(0x7f0000001040)="d732656f4a5af37838e62b810dc92c38498b801ae151a6debe2a325bf242a3761c2846d408b96e9e27e7f5ef216e85d83257e8fac9a084ac935c4f02b9b485632d110181142f9678e2946342402be5886938e3efad4cdda4672bb7d07fe8d9b4d5d2686f11", 0x65}, {&(0x7f00000010c0)="900393e18943d96e4a56a05b82f2af2ae20832ac62eb064f068dc84cb274dba2130b525d0747aa2d4a6352e7135d829c062c97ebd79587d4a1cb5ad56ba16f5db1496479edd4c444b30e83a53903b25a20a2781a2858576e65fd9beac03297ae4cb58d9ce741c18ddb183e8c4140afadf9d2c73a2edc9c22792269f6f77cf4decb649d6ff14c669b", 0x88}, {&(0x7f0000001180)="c9928f2ba209492c99472202e9dc6bbaccb0d45313123cdf46999bb25d073e05fa28902a100f1c784a4444ab56c897b1571ea60026c655f71b8932", 0x3b}, {&(0x7f00000011c0)="c9308d05e96dd1eb86999279a5", 0xd}, {&(0x7f0000001200)="28526f0c30b544944866e981900f7d5caa27fec2176c1f36987f95b7f52a39ad331ac216586f7ba4b87bd38868407288d9b41b00223f903d8a30134820638fb8e734599907dede3d2c4636c5389ec587247cf362605e536de993e975a918cc4830e53139be34cac4abab143bd1a00a6c77b22ff7a833cf06a10438a04f9502506d04e0c3649db95df2beb524de56199446aade8ede35f62f69dca6636b6dd95f1f39e93ed50520edea9525f0135065be3ca70d72e86ab13b21dec7381e4397761be655fb7aa77cc201e1f531cfbdefd181d9d4ccf703e917911d869aab5a62c9f1080b106ff0a151ece2ac9c", 0xec}, {&(0x7f0000001300)}, {&(0x7f0000001340)="9c4051eac663044a0aa113ef22c4d1228be9642880555c15a8f0e600826bf96886d88dc4692173a232427bf6e6b0c1197258b58fa40561198d5fe32e74c52d4efb14bd362ea5d6136d162bde5d9aceaebdd56ec16778337a5181cef895e7a0e1fefa1db4723a8c2fffeb4a9bcbd688a69022f9d841e8d12bd4145b3182052b20927d17629cf67b7c2bfc148576ddd4e7c4be7f30c3d399838e7b7abde059f1c986d3728f80c1909e21a12b2e5da75d935c536980480281c6e3ee0d99b73db1064d46c0710b4c85d56cba77e8f130181113afe1461cfaa09bcb9bfd63f6a6fac02059aed5c81e3a1b094e893d22ec6d6c9a0664a64f9ea5", 0xf7}], 0x9, &(0x7f0000001600)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x67, 0x4, 0x1, 0x3, 0x0, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x66f}}, @dstopts={{0x18}}, @hopopts_2292={{0x260, 0x29, 0x36, {0x2f, 0x48, '\x00', [@generic={0xc0, 0xce, "f5d8fd24b6bc410283c59fc07eac5dd20a39f60b76856ca214e3fd839df29ca08c3bec26ca5bb3a64240aded11c5f3f7f708e5be3910ee2eaf6148baa075b090fac8f775fe8668a88e180ed96866e2c93f94dfb61fee36eaed930654714f04933d870d5091efe8e7fd106e4d04accbafdf0976c78d4b628eb150ccad07c764593ff0b6822450f6bcb2bdee31966b3c8d07dae1e822e3400b7a8a35b7f899103d5b815469e34808bbe2b14cbeffd83c1b31ffb364aadb8485f76732baddf040e8a5a3d269964cfa783b5ad5b87b4b"}, @pad1, @generic={0x7f, 0x1e, "51e00ad4093e1625d89fb05ba3c9c3d884e56bd809c8ad5a9a9f26dabc55"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x48, {0x3, 0x10, 0x8, 0xfff, [0xfffffffffffffffe, 0xfffffffffffffff8, 0x81, 0xfffffffffffffffa, 0x6, 0x2, 0x1, 0x3ff]}}, @generic={0x3, 0xe8, "7cf21983bc5dd3b82b86e179b98e70df1d38331d70f3f5c5c5f8b3590d051b02f3211b39dd68df6630719a21dcfe4ec556a96588a1c7562e99a875f016a98c458043248a59dc07b2aff40ac73e28b473ef95f3a5bf5d6b7f97bf8adf0d08b561586e1681b133239625c3d15e2851a80688eba585e6418e54b6d91158a52d31aef6147728c359fe916b16024a2ffcf39f64f9845d577f5e3a9e09ec744a5b01367c905d2c8fa976f98e0dcad0c96cb678a41ea0e00b74d563aabd9145209bddaf44058bb1044fb4c7b16aaacf0fca6100f5b6aeb35e95c84fb1205dd2a96d770e8ccddd9a31b2b4b2"}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x657}}, @hopopts={{0x28, 0x29, 0x36, {0x62, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0xb8}, @enc_lim={0x4, 0x1, 0xff}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x1, 0x1, 0x0, [@private1, @local, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xf}, @rand_addr=' \x01\x00', @private1]}}}], 0x3b0}}], 0x3, 0x24008850) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="00f9ff00000000000100606e74a80fb646147dc85e0000000000000000000000010000000000000000000000000000000000000000000000000000000000eaff0200000003000000ffff00000000000009000000000000000600000000000000020000000000000000000000000000000000000000000000000000000000000000800000030000000200007f000000002a84000000000000fcffffffffffffff08000000000000000000000000000000000000000000000000000000c91d84c30000000000000000000000000000000000000000000000000000000000000000000000010000030000000000000000e2ffffff00000000000000000000000000bde386d63b5a07f198d746b9157e5bb66ca4c3317884d539c0cb07f0432fa5c0cc6d215b3df4f3146623cc352833ca0900000000000000bbbbe1626566e7cb7f908feb74133e10edb36e004febd9bdd5666aba350b1e4871fe1d3d3163daea34319314168a0f52566e068efc69ae2467ed0521131580f063b47145fd3b05e83dcc89ec6faa226f316174181770836d9ccf8467f3fcf34e54f752b6ee5868cbd58a1db6558002ff5d649ad2c97a97f20001429d9b7e372a480cb61ddd873a2cbd146b69ba038acbfbfe843411c124e8d22947f52368d0a977d4bea46832dc2d0efb9675f96687f1c3417d7d49aeb8045c21ffc969cfb704e450ba462050ff80588979a1d69879903f989bae9dc2c599441721234a84652ebf4218b6e0ce32fe10a1fa4d5e170c515229628131de71197e7387ec2eab018be7b4c6a4f2dfe76b5f9d2400f8452789bc066e95182d9d1fba63d800978b3f9845123490549ea944cb838f11ae968ef87cf524c9079f60b9dc621518e0039ec3f20f717ae0b38da93bd3ec9ae808a142cb8af18cd4142038d6e34429d561b257f6997e38d6cae1d4686aa4653cc972bf37a717695ff75b5d6339832bd4c6806617b12ee49a7c46ebaeaa65bb855f07737fbaa23820c7bd62591186c41483c3844693568008448d7b55ed9458db083cd38faa093aa5ce841060f969e1d9d689983bdf8da1a182718b38531d11c780721618c2745c4f45a6dee2a317fd2ad6101625c8c58500e7ca8eebee84ea984176c86f948c71611ce67da3f245fac7d2cb82f31d74b565a35b078c57bac994851fdd8e89de3744741964af78641c9f078091475447c3ce1d25268b3930966987d5b0c0b524ff000000d32c86c01a3696e1ffedb72f6f34462c64"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) pread64(r3, &(0x7f0000000380)=""/220, 0xdc, 0x100) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB='\x00']) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)={0x5}) [ 1494.486237] audit: type=1326 audit(1764191960.516:4984): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7a) 21:19:20 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 48) 21:19:20 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/netstat\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x5, 0x0) pread64(r0, &(0x7f00000003c0)=""/152, 0x98, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES64]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x9, 0x20, 0x4, 0x0, 0xfffffffffffffffb, 0xc0081, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x2000, 0x4, 0x3, 0x9, 0x81, 0x5, 0x81, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x1, r4, 0x1) r5 = dup3(r1, r3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) pivot_root(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="05000000000000fbffffff696c650b12747689e2ae97000367bf01ed54b9c8"]) [ 1494.506809] audit: type=1326 audit(1764191960.516:4985): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1494.511942] audit: type=1326 audit(1764191960.516:4986): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1494.517083] audit: type=1326 audit(1764191960.519:4987): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1494.521987] audit: type=1326 audit(1764191960.520:4988): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9722 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1494.541446] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted 21:19:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xa1ffffff00000000, 0x0) 21:19:20 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) wait4(r1, 0x0, 0x1, &(0x7f0000000040)) 21:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:19:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x300) 21:19:20 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0xe7886ffbe06b9995, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0xf4, 0x1f, 0xb1, 0x5}, {0xfffb, 0x80, 0x1, 0x3}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="c8c2cacbca072858a334ff98f28b50b4cbe4e463f5c294dca241e3a8194a371df869ac8343143d3fad54a07b231ab8ae0fbeb6284a2c25dc5f3b4c18eade28fc6d0f9f60a7f5eb9f26435c12c37907a5edaab94f1a", 0x55}, {&(0x7f0000000140)="f8329f61273fc0a85e5c4cedb220979ceaefd7f7c525d419d4719713e62b485fcd04d5bdc2f2501265b82ccd41cb9f5a22280a9e87f239cab0804db86bf66bb0fef851f099ae80cb366b38a3", 0x4c}, {&(0x7f0000000200)="6b639d880713649c69dd976049f8e6e38ecc4714eb3b354b9f6344bbe62edebc4f80d5a1b9e2542aa3a449bb7ba4e13a28fea07eedcb5eed34857f0894ccb8e51fb83110cbfa5ac0d31e5315014d6b1787223343b532a9034d6c05854765158a34e7b92f820f0953b6c61e6baa", 0x6d}], 0x3, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r3]}}], 0x20, 0x880}, 0x800) wait4(0x0, 0x0, 0x0, 0x0) 21:19:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:19:20 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 49) 21:19:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xfeffffff00000000, 0x0) 21:19:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r1], 0x8, 0x0, 0x1, {0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) io_uring_enter(r2, 0x58a7, 0xf6f4, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0xba56) lseek(0xffffffffffffffff, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r8, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x110, r8, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1494.810415] FAULT_INJECTION: forcing a failure. [ 1494.810415] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.813144] CPU: 1 PID: 9756 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1494.814897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.816994] Call Trace: [ 1494.817552] dump_stack+0x107/0x167 [ 1494.818494] should_fail.cold+0x5/0xa [ 1494.819467] ? create_object.isra.0+0x3a/0xa30 [ 1494.820481] should_failslab+0x5/0x20 [ 1494.821389] kmem_cache_alloc+0x5b/0x310 [ 1494.822360] ? mark_held_locks+0x9e/0xe0 [ 1494.823419] create_object.isra.0+0x3a/0xa30 [ 1494.824535] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1494.825837] kmem_cache_alloc+0x159/0x310 [ 1494.826909] xas_alloc+0x336/0x440 [ 1494.827782] xas_create+0x34a/0x10d0 [ 1494.828739] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.829864] xas_store+0x8c/0x1c40 [ 1494.830666] __xa_store+0x164/0x2d0 [ 1494.831425] ? xa_delete_node+0x280/0x280 [ 1494.832307] ? trace_hardirqs_on+0x5b/0x180 [ 1494.833242] xa_store+0x31/0x50 [ 1494.833953] __io_uring_add_tctx_node+0x1cf/0x520 [ 1494.835124] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1494.836202] ? alloc_fd+0x2e7/0x670 [ 1494.836972] io_uring_setup+0x1fbb/0x2980 [ 1494.837847] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1494.838909] ? wait_for_completion_io+0x270/0x270 [ 1494.839935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.841025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.842342] do_syscall_64+0x33/0x40 [ 1494.843296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.844386] RIP: 0033:0x7f42229ceb19 [ 1494.845182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.849495] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1494.851421] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1494.853011] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1494.854817] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1494.856337] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1494.857788] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:19:35 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 50) 21:19:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x500) 21:19:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0xffffffff00000000, 0x0) 21:19:35 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) [ 1509.629613] FAULT_INJECTION: forcing a failure. [ 1509.629613] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.631028] CPU: 0 PID: 9771 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1509.631849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.632840] Call Trace: [ 1509.633164] dump_stack+0x107/0x167 [ 1509.633606] should_fail.cold+0x5/0xa [ 1509.634074] ? create_object.isra.0+0x3a/0xa30 [ 1509.634634] should_failslab+0x5/0x20 [ 1509.635087] kmem_cache_alloc+0x5b/0x310 [ 1509.635576] ? mark_held_locks+0x9e/0xe0 [ 1509.636063] create_object.isra.0+0x3a/0xa30 [ 1509.636586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1509.637191] kmem_cache_alloc+0x159/0x310 [ 1509.637690] xas_alloc+0x336/0x440 [ 1509.638115] xas_create+0x34a/0x10d0 [ 1509.638600] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1509.639239] xas_store+0x8c/0x1c40 [ 1509.639675] __xa_store+0x164/0x2d0 [ 1509.640109] ? xa_delete_node+0x280/0x280 [ 1509.640611] ? trace_hardirqs_on+0x5b/0x180 [ 1509.641129] xa_store+0x31/0x50 [ 1509.641525] __io_uring_add_tctx_node+0x1cf/0x520 [ 1509.642100] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1509.642739] ? alloc_fd+0x2e7/0x670 [ 1509.643178] io_uring_setup+0x1fbb/0x2980 [ 1509.643677] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1509.644280] ? wait_for_completion_io+0x270/0x270 [ 1509.644869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1509.645491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1509.646106] do_syscall_64+0x33/0x40 [ 1509.646557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1509.647168] RIP: 0033:0x7f42229ceb19 [ 1509.647624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.649836] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1509.650744] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1509.651587] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1509.652428] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1509.653269] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1509.654110] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1509.657821] kauditd_printk_skb: 131 callbacks suppressed [ 1509.657831] audit: type=1326 audit(1764191975.787:5120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9767 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1509.665632] audit: type=1326 audit(1764191975.791:5121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9767 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:19:35 executing program 1: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x50, r0, 0x3114000) 21:19:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:19:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1509.677629] audit: type=1326 audit(1764191975.799:5122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9768 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:35 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x1a1001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8000, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48880}, 0x4008000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffd7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffffc}, 0x4008, 0x0, 0x1004, 0x0, 0x101, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x121000, 0x20a) [ 1509.684982] audit: type=1326 audit(1764191975.799:5123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9768 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1509.688354] loop5: detected capacity change from 0 to 33559552 [ 1509.696123] audit: type=1326 audit(1764191975.799:5124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9768 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1509.720104] audit: type=1326 audit(1764191975.800:5125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9768 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 1509.742370] audit: type=1326 audit(1764191975.800:5126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9768 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:35 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x70) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x1, 0xed, 0x4c1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) [ 1509.770604] audit: type=1326 audit(1764191975.800:5128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9767 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:19:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:19:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x600) [ 1509.799616] audit: type=1326 audit(1764191975.800:5129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9767 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:19:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1509.820622] audit: type=1326 audit(1764191975.801:5130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9767 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:19:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000000c0)={0x5, {{0x2, 0x4e23, @loopback}}, {{0x2, 0xce21, @multicast1}}}, 0x108) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000080)={0x0, 0x0}, 0x10) 21:19:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000005e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x3, 0x8}}, './file2\x00'}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="000000180000000000008575e8f0a2f4166ad254df", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000002000000002e2f66696c653100"]) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x37, 0x3, 0x1, 0x0, 0x675a, 0x12000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x4000a, 0x2, 0x101, 0x0, 0x0, 0x900, 0x4, 0x0, 0x3f, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, r6, 0xa) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) [ 1509.860752] loop5: detected capacity change from 0 to 33559552 21:19:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x7, &(0x7f0000000500)=[{&(0x7f0000000040)="84d338c04ca399e1289974970ae0fe048b76d7782932ceeec4e4564c64ec5f6f425275c1fe402fcf04a2df6458dbd317e2411df4097e2300cf6e9d44334355eec40927da09dcb66396ac240de7194bc6e10c5e084225bfee738835937d4152ee331ac2435662382d55bec9a9c18690fc9b7a943faa7fee4831e6aeedca74c2ddffb05e2aee1f85441cf8641ec2cdd7ae101132e2a66363c97892620dc7dc943ead0c9a6c008e9c0568aa90fd0e3f55d81a165f9c5bb4b967ef1665d26bfebb72", 0xc0, 0xfffffffffffffe00}, {&(0x7f00000001c0)="9ced81caf55de6d4dcb07b438600b640fae3f9c05f11c4d51d43ff38a170c1cd3a58f3c79b98ce623a74228a5147acd6d25b741776579006bc8c6d67701234fe43831c1ae460b77b164be130503466f6a38b4f1b8013bcd24964ffd4517424ffc2a2f44a6a3a2ca00e6ba774ba2e3eeaeabf46b4538f8509da", 0x79, 0x3f}, {&(0x7f0000000240)="19bb64c81457e884fbae86df72814a2822f3557516", 0x15, 0x100000000}, {&(0x7f0000000280)="c99d20b9ce73188608f7b496cd13c35885b6e42ff248c417138e50cd9ca5bcf4dd5e64fe8601bdb099167148babebba00354d5a78bcf397cb96a6fc9978cafdefde889e121e486147ae4f32edb98ad7b08277686ce2f539624b7383c83147c7c2086f3aae3287a2c01e3b8c141f539e16b9dbf8b030aac1569a1541c5b9748463869733eace486acc7c03716a34603689f8e37d418c4f9695e3d31ea0a2fce324380ae8c09a5a62d45435c51fe7239724f757a4028a71b1efcf1c44d6afed0bb536dc8167111cdb7262a42", 0xcb, 0xea22}, {&(0x7f0000000380)="76d7eba3b083afa5b15d343daf02a09ebae99de1f2617f58b48655c24a6f7ce99c4c1735279490af79e619540921f8e1eceecf6b8a61cf1cbcac172d897f2811c58e470638e366d2b6a3bcde91b847d589e20b1c0c74cd6c145a3911a2baec4b0be48aa2f228ab516be0aeeb6d206d6ddc9884fc902f", 0x76, 0x1}, {&(0x7f0000000400)="dbd055ff4857d1472b5b30567625caad078269aae8d5ce362685b5fb2a6aeafbb588e3d8d957f0033d06", 0x2a, 0x2}, {&(0x7f0000000440)="3a141cdff80f05b8e5d429aa530045077d59f12019c84ed31b0cf19366aecd8dac33da5806baf1eb51f9453304af7e6affc4bc2a9e7d4d40c170ecd55fd13f709d0f7cf8ce78354a4d213ecb9e4c2e272735e7eafb2663e4c918c05986728b3e4557d8b14c0e2e02cb5c7c83b8a955255930a577750b486373b457f80972dc2ed03364b397f86578c9f6a51d7268708934b4b33553ce40", 0x97}], 0x2, &(0x7f0000000140)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'auK\x95E\xdc;\xea\x82\x1eIR\xef\xbb\xecdit'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}]}) 21:19:50 executing program 3: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x22c, 0x42, 0x100, 0x70bd25, 0x25dfdbfc, {0x3}, [@nested={0x16b, 0x7e, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid=r2}, @generic="97acfef14b32fb258a9db5128a4ae89b4df1370f3d693b13b9639e63d20013d08d91adf251cdff2973449e6d16938a5b0c6cc5376477cdac223ed9b691b3ef8bbba280de6f88e7d2fe5aada2fb4e08a5c2b9f2f8", @typed={0x8, 0x59, 0x0, 0x0, @u32}, @generic="5c24dabada685537d22308470a6c5ec9d654d416c1d1558673464fa8d63fdfaffb018bc7fd589f0a9206dd8b0bc38616e97e13355abd8a825b0d18f6424778702b391ccfd873300f914fe96a658cfabae465b760193522f810581324900f67a9df2e1cb716f7934f469fd778c4a07bbf0c36f123736543c6a7b9fb19a7d61e0f75a5503f6031dd7faf6abad00038ecea94fbc00bbca299fcc8a84ed463cb383e3fe2e84caff0a7d5c588599d4bae352befcd834d9d39d8bd0f0d3fe55189ce62f5faaae8d0b00b38ad523c5bb804d229ce345ae07b739c036c59e6a6890960b20e148e41ad6d0ae31416ffdc83e47d", @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @generic="46a623ca93409a04403131d56fd8fbd61fdeeecbb96a2444347221279130c0252dfdb496354e647b9da94e0171c470aec89ea5500c430e26a859354ab8a654c49f1602abcc11c163fb41bfdc29cb5a18bcf71fc0b4cf423279e3e6eb848e4bc08f1d95d31a6598cb120db2544a8d2f5656d9afdb204b7c3352a10e8edb47bca2ceeec924f20241a6ef2af229f3dfaf4c35b817b47bba6b74ecbb2168a891d3e81756b9", @typed={0x6, 0x7b, 0x0, 0x0, @str='\\\x00'}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) wait4(0x0, 0x0, 0x0, 0x0) 21:19:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(0xffffffffffffffff, &(0x7f0000000200)="6c917d5068143eb537a9", 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x2) r4 = inotify_init1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x6d00) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYRES16=r1]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003dc0), 0x43c, 0xbd11a8c9f3e5039) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r2, r3, 0x0, 0x100000001) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = timerfd_create(0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000340)=@nfc, 0x0, 0x800, 0x1}, 0x40000081) dup2(r5, r6) 21:19:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x700) 21:19:50 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 51) 21:19:50 executing program 4: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x239e, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0x7ffc0000}, {0x8, 0x7, 0x40, 0xfffffffe}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x45f, 0x6, 0xaa, 0x4}, {0xfff, 0x9, 0x6, 0xfffffc01}, {0x0, 0x7f, 0x68, 0x1}, {0xa063, 0x1f, 0x0, 0x2}, {0x3, 0xa1, 0x0, 0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 1523.989595] kauditd_printk_skb: 54 callbacks suppressed [ 1523.989606] audit: type=1326 audit(1764191990.118:5184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1523.993169] audit: type=1326 audit(1764191990.118:5185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1523.995990] audit: type=1326 audit(1764191990.119:5186): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1524.010813] FAULT_INJECTION: forcing a failure. [ 1524.010813] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.012323] CPU: 0 PID: 9829 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1524.013185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.014233] Call Trace: [ 1524.014576] dump_stack+0x107/0x167 21:19:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:19:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1524.015046] should_fail.cold+0x5/0xa [ 1524.015797] ? xas_alloc+0x336/0x440 [ 1524.016268] should_failslab+0x5/0x20 [ 1524.016751] kmem_cache_alloc+0x5b/0x310 [ 1524.017262] xas_alloc+0x336/0x440 [ 1524.017714] xas_create+0x34a/0x10d0 [ 1524.018194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1524.018868] xas_store+0x8c/0x1c40 [ 1524.019323] __xa_store+0x164/0x2d0 [ 1524.019764] ? xa_delete_node+0x280/0x280 [ 1524.020264] ? trace_hardirqs_on+0x5b/0x180 [ 1524.020785] xa_store+0x31/0x50 [ 1524.021181] __io_uring_add_tctx_node+0x1cf/0x520 [ 1524.021789] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1524.022418] ? alloc_fd+0x2e7/0x670 [ 1524.022871] io_uring_setup+0x1fbb/0x2980 [ 1524.023366] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1524.024010] ? wait_for_completion_io+0x270/0x270 [ 1524.024603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1524.025221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1524.025837] do_syscall_64+0x33/0x40 [ 1524.026279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1524.026904] RIP: 0033:0x7f42229ceb19 [ 1524.027368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.029539] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1524.030433] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1524.031283] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1524.032127] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1524.032973] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1524.033815] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1524.035750] loop5: detected capacity change from 0 to 33559552 [ 1524.052875] audit: type=1326 audit(1764191990.119:5187): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1524.076849] audit: type=1326 audit(1764191990.119:5188): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='ramfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e21, 0xd2c, @remote, 0xfffffff7}}, 0x0, 0x0, 0x3d, 0x0, "0f876db0fee4749fcfe55ce0e80596eb9f8db1739b76370361363e7368744294b2fdbdbf1b13477529fdfc3d5367eadd4ca164e093fafbbe8996e3ebe6839b83d011f417ca75c7a93bd9bc341d1284a0"}, 0xd8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r2, &(0x7f0000000140)="b2", 0x20000141, 0x8001) 21:19:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000600000000600000007421c004800640000ff2f9078e00000010000000044342733e000000100000000000000000000000000077f00000100000007e00000676ac68a1f0000000000000005"]}) wait4(0x0, 0x0, 0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x8d2415297af9174b, 0x80, 0x20, 0x8, 0x0, 0x20, 0x0, 0x5, 0x81229, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffb4fd, 0x0, @perf_config_ext={0x200}, 0x204, 0x7, 0x1, 0x0, 0x0, 0x5, 0x6, 0x0, 0x2, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) 21:19:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:19:50 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/141, 0x8d) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x2, 0x3, 0xae, &(0x7f0000000200)=""/174}) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x42c100, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000180)=""/46, &(0x7f00000002c0)=0x2e) wait4(0x0, 0x0, 0x0, 0x0) [ 1524.116475] audit: type=1326 audit(1764191990.129:5189): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa00) [ 1524.140606] audit: type=1326 audit(1764191990.130:5190): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313332313635343500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f2a953140c764271ad9be301789147cf010040000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000e85575eae85575ea00000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d1f4655fd1f4655fd1f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000d908479700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000090dc20e700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731333231363534352f66696c65302f66696c65300000000000000000000000000000000000000000000009d0860300000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000224d02d700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800010000000af3010004000000000000000000000009000000600000000000000000000000000000000000000000000000000000000000000000000000000000004076a5e500000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7bf311a4bda1620392e500af767c04c965ba7a7052cc068200a2f3"]) [ 1524.164696] audit: type=1326 audit(1764191990.130:5191): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 [ 1524.167355] audit: type=1326 audit(1764191990.131:5192): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1524.198776] audit: type=1326 audit(1764191990.132:5193): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9817 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:19:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:19:50 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 52) [ 1524.283441] FAULT_INJECTION: forcing a failure. [ 1524.283441] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.284797] CPU: 0 PID: 9860 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1524.285556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.286455] Call Trace: [ 1524.286772] dump_stack+0x107/0x167 [ 1524.287169] should_fail.cold+0x5/0xa [ 1524.287628] ? create_object.isra.0+0x3a/0xa30 [ 1524.288155] should_failslab+0x5/0x20 [ 1524.288592] kmem_cache_alloc+0x5b/0x310 [ 1524.289060] ? mark_held_locks+0x9e/0xe0 [ 1524.289529] create_object.isra.0+0x3a/0xa30 [ 1524.290039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1524.290625] kmem_cache_alloc+0x159/0x310 [ 1524.291120] xas_alloc+0x336/0x440 [ 1524.291540] xas_create+0x34a/0x10d0 [ 1524.291978] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1524.292586] xas_store+0x8c/0x1c40 [ 1524.293005] __xa_store+0x164/0x2d0 [ 1524.293427] ? xa_delete_node+0x280/0x280 [ 1524.293912] ? trace_hardirqs_on+0x5b/0x180 [ 1524.294417] xa_store+0x31/0x50 [ 1524.294813] __io_uring_add_tctx_node+0x1cf/0x520 [ 1524.295370] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1524.295970] ? alloc_fd+0x2e7/0x670 [ 1524.296395] io_uring_setup+0x1fbb/0x2980 [ 1524.296880] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1524.297459] ? wait_for_completion_io+0x270/0x270 [ 1524.298029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1524.298635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1524.299238] do_syscall_64+0x33/0x40 [ 1524.299671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1524.300255] RIP: 0033:0x7f42229ceb19 [ 1524.300686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.302797] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1524.303664] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1524.304483] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1524.305320] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1524.306134] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1524.306963] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:19:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4000) 21:19:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1f9) openat(0xffffffffffffff9c, &(0x7f0000001e00)='./file1\x00', 0x806000, 0x4) close(r0) accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x2, 0x7}}, './file1\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000001d40)=@v2={0x2, @aes128, 0x1, '\x00', @auto="38b090ddbec948964acc4aa5c0d6e938"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b80)=0x14) sendmmsg$inet6(r2, &(0x7f0000001cc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x7404c358}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="4f4780bd76269bd3cc42aad889cee881b7459371efc838bdfbc1fef1f1d4d5f7667490d54968d99c4495b22693dde167ec036e6c050df6296cc888f9badc349cbd00c9fe103ef67500ce7566baf859629279f1be0d563f8e35fa5158731f5d437b4924e699239491e196677734128bda0caee2aeaa323c072bcc8160e8be46a4023ec137ee7ef93831998ec00467365ecb005eebbbd25c47d6ad26a76d84b205", 0xa0}, {&(0x7f0000000100)="61a55c45d07799b2f98a3a7fe19b016cda60962897cef5229b43f1b8006a312d9d78aa722b99c301f2de1105328401b57c45a1d8fb5c7deb0f3cbac248f01f4db929911ae1288105ed0a11f2d7a4827294", 0x51}, {&(0x7f00000002c0)="ac05c5baed0c0c125c091577220e79efcde7f5c245babec14075d92a8cd9829a6940e19ce3ea2b88d5ccc22a1d14e2f1e40f66a2acdc5ff54364430c15d1da9791a7597a24a1bdb8b1bceb4cc53d4c395259c23fadc368e4b70567e89fcd46657c2afbf8df51b5aee2456a5348ae109445ec23985186deb697", 0x79}, {&(0x7f0000000240)="1cf59edb7a650b41bb777a1a0934fdcffc77f80658131c60e70eb54bf3d8dd97c7f1df694a3177cc", 0x28}, {&(0x7f0000000340)="d13523872afc6908131eb7c2838678acf44f1453e420dadaa793f1b6655146b961a61782ec6800c47af1af8f4fa90dcf2ffd5842e279aca6ad3d871547ba9b34375f6229782b888e054cb0b375f58119e9927c54d2e5b28e09e3d8ce9e77557a9b268b58b8c563c9554fa0224408f88400cdb1bbe97111896c0172a59625484ca3090c", 0x83}], 0x5}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x9, @mcast2, 0xfff}, 0x1c, &(0x7f0000001a80)=[{&(0x7f00000004c0)="aa7dbb238bc62860fc2dafc39f9e7d38fdb6d5b6089a97f28cd1a462", 0x1c}, {&(0x7f0000000500)="9e6cb6bc0833fe86245ec6691a32bed5d482ae3a376527d8dc4311e7ce8f07eb148a255cd61c0be86d7284cf3b200f1731d49858e1060da269d4096d2272209c161ac4435208f3a2dca706e8556a19a6dd878bc9e564af14453853a8964819091af6a5d6ef709838397e446f6b892a592d9963d1936d55fa31979a3dcba6be31ef37675473323c1979d1f7a5dedfd715d54b22d192025fc01533fee4d5dbf9d75be379341ec07fceb67742f85f817d8bc729b2d45b3628f832195b8b602445c2bd87fab1856afede58611b83b405c4749774374e7e270ac1d1837bdb51e3e2ba0998", 0xe2}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000700)="83ed59118028029758af8bb1b08a7c77fd09db6e2ea12053197f25a057961e1fc6fe20b3ccf6fceaa86164c80996e37b0782cb8972c2e5ee035a70a5cf8109d14a02165468c4a1546f67ee74df43e473df", 0x51}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="c1125416ac0da66663c0142aee0fbbff60b287f2a84859a436e3e6394b83ba315ed4cd00978adcf9de943b0713099f235539943569739fd303ab466edb1677f66e803c80feab78792f7533dafe5840f9e8c63fadfdf683e86ad5f90016b214b67bd939dd423fbb3bedec7be75306cb09b6342b330eb458b6cbd0c21027d3591c97b97303a97fde1c6b4de23300bd72b5aa647c40df7581d16debacfb70a97c3c41a3ccd21fca5cebf627b24faae6a89851f05752043b710da167b7eb3ee65c22d9f23b29c0cf710a4a2e744bd4cd", 0xce}, {&(0x7f00000008c0)="1b4231fafc8ebf1652df59ac14f13bbea8305c154e7494c2d4699e4f3e78875a867891be23f78ccba3cd7df2a64ba65c5e072fe674026e089cbf0b589f0777d6913910863ed4b39f20aa8bd14ad82058cbf691bbd90777b5f0e4ecfbbecd2766852df8789408e922f2931c68e663b27e0ef7416d7877c825fa9d6d71a7f46d9f0770269b9ee6d7912cb480f65f3ab9842399d1fe07947542d27c1b42d62e4917c5b4bb863c972c172f966954", 0xac}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="be0ad04ca36dd4d8d506cfdba1d1b9c9f4be907a943c5dbed6be076bdf1d57d34f0aa1827043c9dcafc5b6b8832ca90c4d7862fef6c18d7b517e089eaa611e1e3c7546c0d8da51c8cb9c6a70d667102ee369fc2e5ff1cd5245c5895daa1d71048f6da33e49158b20627d9e623d2d1c0aa0", 0x39}, {&(0x7f0000001a00)="894f2b4709e955be83d8209039dcbaa9367d1e6ade31ae74dfe00d55a452426856d35ae1f88d03e5b3f70c93921ad165cd5e8a3ce15a24207c57da8b206e8b86d15c42c3d453b2edf7adb4a42e3d7213b4de91b10294faf45822", 0x5a}], 0xa, &(0x7f0000001e40)=ANY=[@ANYBLOB="14000000000000002900000034000000b1cd27240000000024000000000000002900000032000000fc00"/56, @ANYRES32=r2, @ANYBLOB="0000000014000000000000002900000001800000c056000000000000280000000000000029000000390000002c02007f00000000fc01000000000000000000000000000014000000000000002900000034000000ed00000000000000480000000000000029000000370000008805000000000000c2040000004fc910ff0100000000000000000000000000010102000001090000000000000000000001000000000000008d72c6"], 0xe0}}], 0x2, 0x20000000) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 21:19:50 executing program 4: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000140)={0xff, 0x40, 0x4}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) splice(0xffffffffffffffff, &(0x7f0000000240)=0x6, r0, &(0x7f0000000280)=0xfb9, 0x1, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x6, &(0x7f0000000180)=[{0x0, 0x9, 0x5, 0x5e03}, {0xf0d5, 0x7, 0x0, 0xffffffff}, {0x101, 0x0, 0x5, 0x5}, {0x4, 0x5, 0x9, 0x3}, {0x7, 0x6, 0xff, 0x9}, {0x1, 0x63, 0x1, 0x1}]}) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) [ 1539.273623] kauditd_printk_skb: 173 callbacks suppressed [ 1539.273635] audit: type=1326 audit(1764192005.402:5367): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.279946] loop5: detected capacity change from 0 to 33559552 [ 1539.288940] audit: type=1326 audit(1764192005.418:5368): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.294494] FAULT_INJECTION: forcing a failure. [ 1539.294494] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.296120] CPU: 0 PID: 9891 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1539.297064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.298203] Call Trace: [ 1539.298584] dump_stack+0x107/0x167 [ 1539.299101] should_fail.cold+0x5/0xa [ 1539.299629] ? xas_alloc+0x336/0x440 [ 1539.300151] should_failslab+0x5/0x20 [ 1539.300675] kmem_cache_alloc+0x5b/0x310 [ 1539.301237] xas_alloc+0x336/0x440 [ 1539.301730] xas_create+0x34a/0x10d0 [ 1539.302266] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.303002] xas_store+0x8c/0x1c40 [ 1539.303514] __xa_store+0x164/0x2d0 [ 1539.304014] ? xa_delete_node+0x280/0x280 [ 1539.304588] ? trace_hardirqs_on+0x5b/0x180 [ 1539.305189] xa_store+0x31/0x50 [ 1539.305651] __io_uring_add_tctx_node+0x1cf/0x520 [ 1539.306320] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1539.307056] ? alloc_fd+0x2e7/0x670 [ 1539.307561] io_uring_setup+0x1fbb/0x2980 [ 1539.308139] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1539.308827] ? wait_for_completion_io+0x270/0x270 [ 1539.309509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1539.310236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1539.310950] do_syscall_64+0x33/0x40 [ 1539.311467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.312178] RIP: 0033:0x7f42229ceb19 [ 1539.312688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1539.315223] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1539.316272] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1539.317241] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1539.318204] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1539.319187] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1539.320161] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1539.332003] audit: type=1326 audit(1764192005.459:5369): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.338366] audit: type=1326 audit(1764192005.459:5370): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.352670] audit: type=1326 audit(1764192005.459:5371): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:20:05 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) 21:20:05 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5f000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000be000000000000be000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c0000000000001c00080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e0000000000001e00080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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"/288, 0x120, 0xe000}, {&(0x7f0000011300)="22001d0000000000001d00080000000008007809140b2a3a0802000001000001010022001c0000000000001c00080000000008007809140b2a3a080200000100000101012a0027000000000000271a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xe800}, {&(0x7f0000011400)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0021000000000000210a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011600)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0027000000000000271a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0xf800}, {&(0x7f0000011700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10000}, {&(0x7f0000011800)='syzkallers\x00'/32, 0x20, 0x10800}, {&(0x7f0000011900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13800}], 0x0, &(0x7f0000011e00)=ANY=[@ANYBLOB="b6"]) 21:20:05 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0000}, {0x20, 0x1, 0x3f, 0x6}, {0x0, 0x2, 0x5, 0x4}, {0xc2f9, 0x0, 0xd6, 0x408001}]}) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x8, &(0x7f0000000380)=[0x0, 0x0, r5, r4, r5, r4, r5, r5]) getgroups(0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, r5]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) r7 = eventfd2(0xe, 0x801) r8 = getpgrp(0x0) tgkill(r8, r8, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000280)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r5}}}, @cred={{0x1c, 0x1, 0x2, {r1, r6}}}, @rights={{0x18, 0x1, 0x1, [r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r9}}}], 0x78, 0x40010}, 0x4010) wait4(r1, 0x0, 0x4, 0x0) 21:20:05 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 53) 21:20:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4800) 21:20:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000600000000600000007421c004800640000ff2f9078e00000010000000044342733e000000100000000000000000000000000077f00000100000007e00000676ac68a1f0000000000000005"]}) wait4(0x0, 0x0, 0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x8d2415297af9174b, 0x80, 0x20, 0x8, 0x0, 0x20, 0x0, 0x5, 0x81229, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffb4fd, 0x0, @perf_config_ext={0x200}, 0x204, 0x7, 0x1, 0x0, 0x0, 0x5, 0x6, 0x0, 0x2, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) 21:20:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:20:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x77fc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) 21:20:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1539.396978] audit: type=1326 audit(1764192005.459:5372): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.413320] loop5: detected capacity change from 0 to 33559552 [ 1539.413687] audit: type=1326 audit(1764192005.459:5373): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.424907] audit: type=1326 audit(1764192005.460:5374): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.429702] audit: type=1326 audit(1764192005.460:5375): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1539.434816] audit: type=1326 audit(1764192005.460:5376): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9883 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:18 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 54) 21:20:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:20:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:20:18 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) wait4(0x0, 0x0, 0x0, 0x0) 21:20:18 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x8000000, 0x0, 0x0, 0x3, 'w\x00\x00\x00\x00\x00\x00\a\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00'}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) ioctl$TUNSETVNETLE(r0, 0x800454dd, &(0x7f0000000280)) 21:20:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4c00) 21:20:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) wait4(r0, 0x0, 0x40000005, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/131, 0xfffffee9}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/205, 0xcd}, {&(0x7f00000006c0)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x7, &(0x7f0000000840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x120}, 0x40000022) r3 = getpgrp(0x0) tgkill(r3, r3, 0x0) pidfd_open(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r4, 0xba56) lseek(r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000980)='net/ptype\x00') copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0xc0, 0x20, 0x6, 0x0, 0x9, 0xf0a1e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x8, 0x2, 0x2, 0x9, 0x101, 0x0, 0xfff9, 0x0, 0xdb, 0x0, 0xaccf}, r1, 0x2, r4, 0x9) 21:20:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000600000000600000007421c004800640000ff2f9078e00000010000000044342733e000000100000000000000000000000000077f00000100000007e00000676ac68a1f0000000000000005"]}) wait4(0x0, 0x0, 0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x8d2415297af9174b, 0x80, 0x20, 0x8, 0x0, 0x20, 0x0, 0x5, 0x81229, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffb4fd, 0x0, @perf_config_ext={0x200}, 0x204, 0x7, 0x1, 0x0, 0x0, 0x5, 0x6, 0x0, 0x2, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) [ 1552.010651] kauditd_printk_skb: 53 callbacks suppressed [ 1552.010668] audit: type=1326 audit(1764192018.136:5430): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.026636] audit: type=1326 audit(1764192018.137:5431): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.033808] FAULT_INJECTION: forcing a failure. [ 1552.033808] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.035175] CPU: 1 PID: 9912 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1552.035949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.036893] Call Trace: [ 1552.037198] dump_stack+0x107/0x167 [ 1552.037610] should_fail.cold+0x5/0xa [ 1552.038045] ? ___slab_alloc+0x155/0x700 [ 1552.038512] ? create_object.isra.0+0x3a/0xa30 [ 1552.039035] should_failslab+0x5/0x20 [ 1552.039464] kmem_cache_alloc+0x5b/0x310 [ 1552.039928] create_object.isra.0+0x3a/0xa30 [ 1552.040424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1552.041005] kmem_cache_alloc+0x159/0x310 [ 1552.041482] xas_alloc+0x336/0x440 [ 1552.041886] xas_create+0x34a/0x10d0 [ 1552.042318] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1552.042908] xas_store+0x8c/0x1c40 [ 1552.043328] __xa_store+0x164/0x2d0 [ 1552.043740] ? xa_delete_node+0x280/0x280 [ 1552.044213] ? trace_hardirqs_on+0x5b/0x180 [ 1552.044706] xa_store+0x31/0x50 [ 1552.045082] __io_uring_add_tctx_node+0x1cf/0x520 [ 1552.045629] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1552.046221] ? alloc_fd+0x2e7/0x670 [ 1552.046639] io_uring_setup+0x1fbb/0x2980 [ 1552.047179] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1552.047750] ? wait_for_completion_io+0x270/0x270 [ 1552.048305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.048898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.049486] do_syscall_64+0x33/0x40 [ 1552.049907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.050483] RIP: 0033:0x7f42229ceb19 [ 1552.050902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.052987] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1552.053847] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1552.054651] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1552.055466] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1552.056267] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1552.057075] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1552.058081] audit: type=1326 audit(1764192018.137:5432): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.076682] loop5: detected capacity change from 0 to 33559552 [ 1552.087860] audit: type=1326 audit(1764192018.137:5433): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6f2000, 0x251) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x6, 0x40, [0x3, 0xfff, 0xfffffffffffffff7], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="00000000000000002e2f66696c653000540e979e7dd3b9c25baf9739ee222cfebdf809002a456a239f3a0edd0b958b138bca521e7bd28bce3eccb806cb026682f369c82470784cb8c4f6df2c57dcbb35e3a9122e781310bd56554926"]) wait4(0x0, 0x0, 0x0, 0x0) 21:20:18 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 55) [ 1552.115492] audit: type=1326 audit(1764192018.138:5434): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.128898] FAULT_INJECTION: forcing a failure. [ 1552.128898] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.130246] CPU: 1 PID: 9927 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1552.131028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.131972] Call Trace: [ 1552.132282] dump_stack+0x107/0x167 [ 1552.132696] should_fail.cold+0x5/0xa [ 1552.133131] ? xas_alloc+0x336/0x440 [ 1552.133562] should_failslab+0x5/0x20 [ 1552.134003] kmem_cache_alloc+0x5b/0x310 [ 1552.134470] xas_alloc+0x336/0x440 [ 1552.134876] xas_create+0x34a/0x10d0 [ 1552.135315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1552.135909] xas_store+0x8c/0x1c40 [ 1552.136321] __xa_store+0x164/0x2d0 [ 1552.136737] ? xa_delete_node+0x280/0x280 [ 1552.137213] ? trace_hardirqs_on+0x5b/0x180 [ 1552.137709] xa_store+0x31/0x50 [ 1552.138085] __io_uring_add_tctx_node+0x1cf/0x520 [ 1552.138630] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1552.139234] ? alloc_fd+0x2e7/0x670 [ 1552.139655] io_uring_setup+0x1fbb/0x2980 [ 1552.140129] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1552.140707] ? wait_for_completion_io+0x270/0x270 [ 1552.141265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.141865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.142450] do_syscall_64+0x33/0x40 [ 1552.142876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.143465] RIP: 0033:0x7f42229ceb19 [ 1552.143887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.145989] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1552.146852] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1552.147667] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1552.148472] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1552.148864] audit: type=1326 audit(1764192018.138:5435): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.149283] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1552.149300] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:20:18 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21, 0x7}, 0x200, 0x6f80, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/partitions\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000680)=ANY=[@ANYBLOB="02000000e9000000072d7897892c96e6b6d6ce4b43b8cb4f0b09000000a7c6340e457e81c152d22bbf161ba75bbb661525f587c801250f020c991309d8a900"/73], 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)='\x00\x00\x00\x00\xe7\xad`\xdbWJ\xfe\xa6\xb2\x00\x00\x1b\x98\xaf!\x0f\xa6G-\t\x91\xd5\x12\xe3\xcc\xa2\xc7\xac\f_#0c\x00\x00\x00\x02\x99\x84\x19%\xff\xd9\x8a;\x00\x00\x00\x00') r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x1) io_uring_enter(0xffffffffffffffff, 0x19cf, 0xfb1, 0x0, 0x0, 0x0) 21:20:18 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 56) 21:20:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1552.185207] audit: type=1326 audit(1764192018.138:5436): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.216066] audit: type=1326 audit(1764192018.139:5437): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.237939] FAULT_INJECTION: forcing a failure. [ 1552.237939] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.239382] CPU: 1 PID: 9932 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1552.240180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.241143] Call Trace: [ 1552.241453] dump_stack+0x107/0x167 [ 1552.241738] audit: type=1326 audit(1764192018.139:5438): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.241889] should_fail.cold+0x5/0xa [ 1552.246857] ? ___slab_alloc+0x155/0x700 [ 1552.247359] ? create_object.isra.0+0x3a/0xa30 [ 1552.247891] should_failslab+0x5/0x20 [ 1552.248328] kmem_cache_alloc+0x5b/0x310 [ 1552.248800] create_object.isra.0+0x3a/0xa30 [ 1552.249307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1552.249893] kmem_cache_alloc+0x159/0x310 [ 1552.250377] xas_alloc+0x336/0x440 [ 1552.250788] xas_create+0x34a/0x10d0 [ 1552.251235] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1552.251843] xas_store+0x8c/0x1c40 [ 1552.252264] __xa_store+0x164/0x2d0 [ 1552.252676] ? xa_delete_node+0x280/0x280 [ 1552.253160] ? trace_hardirqs_on+0x5b/0x180 [ 1552.253664] xa_store+0x31/0x50 [ 1552.254056] __io_uring_add_tctx_node+0x1cf/0x520 [ 1552.254601] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1552.255217] ? alloc_fd+0x2e7/0x670 [ 1552.255646] io_uring_setup+0x1fbb/0x2980 [ 1552.256138] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1552.256723] ? wait_for_completion_io+0x270/0x270 [ 1552.257294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.257909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.258506] do_syscall_64+0x33/0x40 [ 1552.258935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.259534] RIP: 0033:0x7f42229ceb19 [ 1552.259956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.262058] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1552.262673] audit: type=1326 audit(1764192018.143:5439): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9904 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1552.262941] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1552.262949] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1552.262956] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1552.262962] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1552.262979] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:20:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:20:18 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) lseek(r0, 0x8, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000180)={&(0x7f0000000100)=""/125, 0x7d, 0x9, 0x3}) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1, 0x3, 0x3, 0x1585}, {0x6, 0xff, 0x3f, 0x8}, {0x7, 0x4, 0x2, 0x5}, {0x80, 0x1, 0x2, 0x9}, {0x9, 0xcc, 0x7f, 0x9}]}) pread64(r0, &(0x7f0000000200)=""/65, 0x41, 0x8) 21:20:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x60ff) 21:20:18 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 57) [ 1552.399655] FAULT_INJECTION: forcing a failure. [ 1552.399655] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.401035] CPU: 1 PID: 9947 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1552.401810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.402752] Call Trace: [ 1552.403068] dump_stack+0x107/0x167 [ 1552.403482] should_fail.cold+0x5/0xa [ 1552.403920] ? create_object.isra.0+0x3a/0xa30 [ 1552.404436] should_failslab+0x5/0x20 [ 1552.404868] kmem_cache_alloc+0x5b/0x310 [ 1552.405333] ? mark_held_locks+0x9e/0xe0 [ 1552.405798] create_object.isra.0+0x3a/0xa30 [ 1552.406295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1552.406871] kmem_cache_alloc+0x159/0x310 [ 1552.407365] xas_alloc+0x336/0x440 [ 1552.407774] xas_create+0x34a/0x10d0 [ 1552.408216] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1552.408823] xas_store+0x8c/0x1c40 [ 1552.409242] __xa_store+0x164/0x2d0 [ 1552.409665] ? xa_delete_node+0x280/0x280 [ 1552.410160] xa_store+0x31/0x50 [ 1552.410547] __io_uring_add_tctx_node+0x1cf/0x520 [ 1552.411119] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1552.411725] ? alloc_fd+0x2e7/0x670 [ 1552.412153] io_uring_setup+0x1fbb/0x2980 [ 1552.412635] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1552.413221] ? wait_for_completion_io+0x270/0x270 [ 1552.413790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.414390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.414987] do_syscall_64+0x33/0x40 [ 1552.415419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.416014] RIP: 0033:0x7f42229ceb19 [ 1552.416437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.418564] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1552.419432] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1552.420240] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1552.421050] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1552.421880] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1552.422688] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:20:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000600000000600000007421c004800640000ff2f9078e00000010000000044342733e000000100000000000000000000000000077f00000100000007e00000676ac68a1f0000000000000005"]}) wait4(0x0, 0x0, 0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x8d2415297af9174b, 0x80, 0x20, 0x8, 0x0, 0x20, 0x0, 0x5, 0x81229, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffb4fd, 0x0, @perf_config_ext={0x200}, 0x204, 0x7, 0x1, 0x0, 0x0, 0x5, 0x6, 0x0, 0x2, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) 21:20:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) ptrace(0x11, r0) wait4(r0, 0x0, 0x80000000, 0x0) 21:20:18 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0xffffffffffffff82, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x814, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a86", 0xd}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) ftruncate(r0, 0xfffffffffffffffb) io_uring_enter(0xffffffffffffffff, 0x800012d, 0x4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0xc) 21:20:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:20:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000600000000600000007421c004800640000ff2f9078e00000010000000044342733e000000100000000000000000000000000077f00000100000007e00000676ac68a1f0000000000000005"]}) wait4(0x0, 0x0, 0x4, &(0x7f0000000040)) 21:20:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) preadv2(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000400)=""/219, 0xdb}], 0x7, 0x7fffffff, 0x4, 0x8) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:20:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6800) 21:20:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r2, 0xba56) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) preadv2(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000400)=""/219, 0xdb}], 0x7, 0x7fffffff, 0x4, 0x8) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 21:20:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:20:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6c00) 21:20:32 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 58) 21:20:32 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) wait4(0x0, 0x0, 0x0, 0x0) wait4(r1, &(0x7f00000000c0), 0x40000000, &(0x7f0000000100)) 21:20:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) 21:20:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:20:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="004000600000000600000007421c004800640000ff2f9078e00000010000000044342733e000000100000000000000000000000000077f00000100000007e00000676ac68a1f0000000000000005"]}) [ 1566.281122] kauditd_printk_skb: 223 callbacks suppressed [ 1566.281143] audit: type=1326 audit(1764192032.410:5663): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.313356] audit: type=1326 audit(1764192032.410:5664): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.321741] loop5: detected capacity change from 0 to 33559552 [ 1566.349747] audit: type=1326 audit(1764192032.410:5665): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.355335] FAULT_INJECTION: forcing a failure. [ 1566.355335] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.357851] CPU: 0 PID: 9988 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1566.359345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1566.361127] Call Trace: [ 1566.361696] dump_stack+0x107/0x167 [ 1566.362476] should_fail.cold+0x5/0xa [ 1566.363311] ? create_object.isra.0+0x3a/0xa30 [ 1566.364287] should_failslab+0x5/0x20 [ 1566.365108] kmem_cache_alloc+0x5b/0x310 [ 1566.365981] ? mark_held_locks+0x9e/0xe0 [ 1566.366851] create_object.isra.0+0x3a/0xa30 [ 1566.367795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1566.368881] kmem_cache_alloc+0x159/0x310 [ 1566.369776] xas_alloc+0x336/0x440 [ 1566.370542] xas_create+0x34a/0x10d0 [ 1566.371358] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1566.372471] xas_store+0x8c/0x1c40 [ 1566.373238] __xa_store+0x164/0x2d0 [ 1566.374008] ? xa_delete_node+0x280/0x280 [ 1566.374901] ? trace_hardirqs_on+0x5b/0x180 [ 1566.375839] xa_store+0x31/0x50 [ 1566.376544] __io_uring_add_tctx_node+0x1cf/0x520 [ 1566.376634] audit: type=1326 audit(1764192032.411:5666): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.377560] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1566.377577] ? alloc_fd+0x2e7/0x670 [ 1566.377610] io_uring_setup+0x1fbb/0x2980 [ 1566.383675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1566.384422] audit: type=1326 audit(1764192032.411:5667): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.384746] ? wait_for_completion_io+0x270/0x270 [ 1566.384794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1566.390185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1566.391299] do_syscall_64+0x33/0x40 [ 1566.391576] audit: type=1326 audit(1764192032.411:5668): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.392099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1566.396406] RIP: 0033:0x7f42229ceb19 [ 1566.397200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.397698] audit: type=1326 audit(1764192032.412:5669): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.401096] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1566.401117] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1566.401128] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1566.401145] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1566.410086] audit: type=1326 audit(1764192032.412:5670): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.410524] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1566.410537] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1566.417123] audit: type=1326 audit(1764192032.413:5671): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1566.421254] audit: type=1326 audit(1764192032.413:5672): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9977 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:48 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000011566f9e00", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000200)={0x0, "867a804a31c06034f9b99bea1dded0bd"}) 21:20:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:20:48 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 59) 21:20:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:20:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7400) 21:20:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@empty, 0x0, r5}) 21:20:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1f40c51b1b780b7b, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xc000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000000000400"]) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x98, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x2, 0x3, 0x8, 0x0, 0xffffffff, 0x81004, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x2044, 0x3, 0x9, 0x9, 0x5ea53702, 0x2f0, 0xb7, 0x0, 0x1c0000, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r6, 0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) open_by_handle_at(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000200010406000000000000000601000000000000c8dd6a5a202036e2500871fea2d6ed5e51e5e0455d87c4e0efef11599c7f5f0c08200851f8925115f2f5616bd42ba17b390830d7a93479a419d4ecde0f844e9b6edfbcf7ea0a3c97d7e10b0f9ed9c2b0833d8721f94f60e5af4c13ae25a5525bdbb8e29eaf2007a196c54ea2055b304d6461bcf28986e6be3c5eefa5ebf2671feaa3af17c7bf38247ac9e2186dc3901c77cda142409440b1a1bf54c336f2341f89cda23ae42a96fa75d33c355c11347876cc364419330e24a6f21f9e0f810750852ef243"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', r7, r9, 0x1000) 21:20:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x81, 0xb4, 0x7, 0x2}, {0xc9c1, 0x9, 0x20, 0x2}, {0x7, 0xb0, 0x4, 0x200}, {0x0, 0x1, 0x40, 0x7}, {0x9, 0x0, 0xa5, 0x7}, {0x400, 0xfa, 0x20, 0x80000000}]}) [ 1581.980391] kauditd_printk_skb: 46 callbacks suppressed [ 1581.980410] audit: type=1326 audit(1764192048.109:5719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1581.993671] audit: type=1326 audit(1764192048.111:5720): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1582.017627] audit: type=1326 audit(1764192048.111:5721): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1582.024254] FAULT_INJECTION: forcing a failure. [ 1582.024254] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.026230] CPU: 0 PID: 10016 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1582.027392] loop5: detected capacity change from 0 to 33559552 [ 1582.027451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1582.027463] Call Trace: [ 1582.030662] dump_stack+0x107/0x167 [ 1582.031304] should_fail.cold+0x5/0xa [ 1582.031991] ? xas_alloc+0x336/0x440 [ 1582.032648] should_failslab+0x5/0x20 [ 1582.033315] kmem_cache_alloc+0x5b/0x310 [ 1582.034029] xas_alloc+0x336/0x440 [ 1582.034661] xas_create+0x34a/0x10d0 [ 1582.035324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1582.036237] xas_store+0x8c/0x1c40 [ 1582.036861] __xa_store+0x164/0x2d0 [ 1582.037484] ? xa_delete_node+0x280/0x280 [ 1582.038211] ? trace_hardirqs_on+0x5b/0x180 [ 1582.038961] xa_store+0x31/0x50 [ 1582.039546] __io_uring_add_tctx_node+0x1cf/0x520 [ 1582.040376] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1582.041275] ? alloc_fd+0x2e7/0x670 [ 1582.041923] io_uring_setup+0x1fbb/0x2980 [ 1582.042653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1582.043534] ? wait_for_completion_io+0x270/0x270 [ 1582.044401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1582.045326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1582.046214] do_syscall_64+0x33/0x40 [ 1582.046865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1582.047766] RIP: 0033:0x7f42229ceb19 [ 1582.048411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1582.051593] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1582.052907] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1582.054171] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1582.055400] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1582.056619] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1582.057849] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1582.087085] audit: type=1326 audit(1764192048.111:5722): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(0xffffffffffffffff, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:20:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7a00) [ 1582.111343] audit: type=1326 audit(1764192048.111:5723): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1582.131060] audit: type=1326 audit(1764192048.111:5724): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) [ 1582.147860] audit: type=1326 audit(1764192048.111:5725): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1582.167169] loop5: detected capacity change from 0 to 33559552 [ 1582.168602] audit: type=1326 audit(1764192048.111:5726): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1582.182914] audit: type=1326 audit(1764192048.111:5727): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:48 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0xf1aaad43f51cb618, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x3, 0x42, 0x4, 0x81}, {0x40, 0x81, 0x7f, 0x4}, {0x3, 0x20, 0x2}]}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x4, 0x200, 0x4}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000080)) dup2(r0, r1) [ 1582.209666] audit: type=1326 audit(1764192048.111:5728): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10004 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:20:48 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 60) [ 1582.263700] FAULT_INJECTION: forcing a failure. [ 1582.263700] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.266274] CPU: 1 PID: 10038 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1582.267808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1582.269606] Call Trace: [ 1582.270183] dump_stack+0x107/0x167 [ 1582.270983] should_fail.cold+0x5/0xa [ 1582.271822] ? xas_alloc+0x336/0x440 [ 1582.272633] should_failslab+0x5/0x20 [ 1582.273461] kmem_cache_alloc+0x5b/0x310 [ 1582.274353] xas_alloc+0x336/0x440 [ 1582.275132] xas_create+0x34a/0x10d0 [ 1582.275972] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1582.277113] xas_store+0x8c/0x1c40 [ 1582.277903] __xa_store+0x164/0x2d0 [ 1582.278697] ? xa_delete_node+0x280/0x280 [ 1582.279614] ? trace_hardirqs_on+0x5b/0x180 [ 1582.280551] xa_store+0x31/0x50 [ 1582.281264] __io_uring_add_tctx_node+0x1cf/0x520 [ 1582.282301] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1582.283432] ? alloc_fd+0x2e7/0x670 [ 1582.284228] io_uring_setup+0x1fbb/0x2980 [ 1582.285128] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1582.286214] ? wait_for_completion_io+0x270/0x270 [ 1582.287276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1582.288416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1582.289538] do_syscall_64+0x33/0x40 [ 1582.290340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1582.291458] RIP: 0033:0x7f42229ceb19 [ 1582.292259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1582.296196] RSP: 002b:00007f421ff44108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1582.297826] RAX: ffffffffffffffda RBX: 00007f4222ae1f60 RCX: 00007f42229ceb19 [ 1582.299366] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1582.300895] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1582.302422] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1582.303960] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:20:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000) 21:20:48 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000140)='.\x00', &(0x7f0000000180)={0x240400, 0xc0, 0x7}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x2, &(0x7f0000000300)) 21:20:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:20:48 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) wait4(0x0, 0x0, 0x0, 0x0) 21:20:48 executing program 0: r0 = timerfd_create(0x8, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x7fffffff}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r1, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) syz_io_uring_complete(r2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000000c) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) openat(r6, &(0x7f0000000200)='./file1\x00', 0x200, 0x92) dup(r5) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) 21:20:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0x0, 0x3, 0xb277, 0x2, 0x5}}) 21:21:03 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 61) 21:21:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(0xffffffffffffffff, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:21:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x44, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000894) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000ffff000000000000000008000300ecbf7c043a1ab7d2ee40182277b28381d5e5336e00"/52, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20b9ad23caeee700032cbd7000fbdbdf25360000000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x240400d4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x21}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="320000ebf9c736d5fceb9f3697a8eb3403eab00463fedf9b24a5a1dbabc5d815abc8ba7d94bd0f94562266a4194c385cfad177ebff4f026c0180ce6d83a26474b09efa2bd9d3679b255d47f6b1a4b38ce441ce9c2c4542df34cc1577529d72b4df0116e864d43989d1fea325095d14fb916174d951e46d100134198473759a76befe581367723a6fe71d0847ac38ca461f923970f8692b01156e5ae0806743940ed9409709cb00e96c60683cfe9d09c942f3b7b3d6d9fdd9540aae6766b1c0ed", @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2555000000080001007c00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000007b000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1597.318567] loop5: detected capacity change from 0 to 33559552 [ 1597.323370] FAULT_INJECTION: forcing a failure. [ 1597.323370] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.325874] CPU: 0 PID: 10068 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1597.327335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.329095] Call Trace: [ 1597.329653] dump_stack+0x107/0x167 [ 1597.330424] should_fail.cold+0x5/0xa [ 1597.331231] ? vm_area_dup+0x78/0x290 [ 1597.332042] should_failslab+0x5/0x20 [ 1597.332848] kmem_cache_alloc+0x5b/0x310 [ 1597.333713] vm_area_dup+0x78/0x290 [ 1597.334489] ? lock_release+0x680/0x680 [ 1597.335338] ? mark_lock+0xf5/0x2df0 [ 1597.336139] ? lock_chain_count+0x20/0x20 [ 1597.337015] ? mark_lock+0xf5/0x2df0 [ 1597.337806] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1597.338910] ? lock_chain_count+0x20/0x20 [ 1597.339806] ? mark_lock+0xf5/0x2df0 [ 1597.340597] ? vm_area_alloc+0x110/0x110 [ 1597.341466] ? __lock_acquire+0x1657/0x5b00 [ 1597.342406] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1597.343517] ? SOFTIRQ_verbose+0x10/0x10 [ 1597.344376] ? vmacache_find+0x55/0x2a0 [ 1597.345214] __split_vma+0xa8/0x4e0 [ 1597.345987] __do_munmap+0x365/0x1260 [ 1597.346798] ? arch_get_unmapped_area+0x450/0x450 [ 1597.347830] ? lock_release+0x680/0x680 [ 1597.348675] mmap_region+0x7cc/0x1500 [ 1597.349493] do_mmap+0x868/0x1370 [ 1597.350234] vm_mmap_pgoff+0x198/0x1f0 [ 1597.351065] ? randomize_page+0xb0/0xb0 [ 1597.351942] ksys_mmap_pgoff+0x41c/0x560 [ 1597.352802] ? find_mergeable_anon_vma+0x250/0x250 [ 1597.353835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.354934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.356072] do_syscall_64+0x33/0x40 [ 1597.356856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.357930] RIP: 0033:0x7f42229ceb62 [ 1597.358708] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1597.362578] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1597.364184] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1597.365684] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1597.367180] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1597.368694] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1597.370203] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1597.410411] kauditd_printk_skb: 158 callbacks suppressed [ 1597.410429] audit: type=1326 audit(1764192063.539:5887): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10076 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1597.417826] audit: type=1326 audit(1764192063.540:5888): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10076 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1597.446376] audit: type=1326 audit(1764192063.540:5889): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10076 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:21:03 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd49617862110c182, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0xfffffffffffffffb, r1}) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x9, &(0x7f00000001c0)=[{0x8020, 0x1, 0x8, 0xfffffffa}, {0x1, 0x9, 0x8, 0x80000001}, {0x24, 0x7, 0x2, 0x617}, {0x7fff, 0x80, 0x92, 0x8}, {0xffff, 0xd9, 0x20, 0xffffff80}, {0x8, 0x68, 0x2, 0x5}, {0x20, 0x43, 0xbb, 0x10001}, {0x4, 0x81, 0x5, 0x2}, {0x800, 0x1c, 0x8, 0x5}]}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x9, 0x98, 0x3, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000100), 0x1b}, 0x300, 0x7fff, 0x2, 0x5, 0x1ff, 0x8, 0x9, 0x0, 0x7f70, 0x0, 0x9}, r1, 0x6, 0xffffffffffffffff, 0x8) 21:21:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf0ff1f) 21:21:03 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) wait4(r1, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) tgkill(r2, r2, 0x0) wait4(r2, &(0x7f0000000040), 0x8, &(0x7f0000000080)) 21:21:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) 21:21:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000) 21:21:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1597.509699] audit: type=1326 audit(1764192063.540:5890): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10076 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:21:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) 21:21:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x2, 0x1000}]}) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2514a3, 0x14) dup(r0) wait4(0x0, 0x0, 0x0, 0x0) [ 1597.539746] audit: type=1326 audit(1764192063.541:5891): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10076 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1597.572920] audit: type=1326 audit(1764192063.552:5892): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10078 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:21:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000) [ 1597.610290] audit: type=1326 audit(1764192063.562:5894): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10080 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:21:03 executing program 0: link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file0\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000880)={0x0, 0xfb, 0x9a, 0x2, 0x7f, "79d9f8d7f12b3e364d1c04f2d59abbb7", "4b13561b7ab01ae1dc6bc0545fa9c66e1f3a37a1906d51cd3e70b70b71faae4d00b2b1c51518a483d48cf1e686fa79ccc2df2f5365184dd3c43278087575cb84653249c2b8d1131dc3d310146fc724e5b637df0f832ed72e7ebb8ab3c96bb06467764d16eb7402ef37f681148fcfc12e3d28d27da21059cff31a51201389f432984810f1a7"}, 0x9a, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$netlink(0x10, 0x3, 0x14) unshare(0x48020200) [ 1597.637607] audit: type=1326 audit(1764192063.562:5895): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10080 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:21:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 1597.667988] audit: type=1326 audit(1764192063.573:5896): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10080 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1597.689359] audit: type=1326 audit(1764192063.552:5893): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10078 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fe936b19 code=0x7ffc0000 21:21:18 executing program 3: read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/86, 0x56) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x8, 0x0, 0x8a, 0x406}]}) wait4(0x0, 0x0, 0x0, 0x0) [ 1612.847146] kauditd_printk_skb: 112 callbacks suppressed [ 1612.847159] audit: type=1326 audit(1764192078.973:6009): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10113 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1612.851771] audit: type=1326 audit(1764192078.974:6010): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10113 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1612.855023] FAULT_INJECTION: forcing a failure. [ 1612.855023] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.856564] CPU: 0 PID: 10112 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1612.857482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1612.858589] Call Trace: [ 1612.858943] dump_stack+0x107/0x167 [ 1612.859431] should_fail.cold+0x5/0xa [ 1612.859962] ? create_object.isra.0+0x3a/0xa30 [ 1612.860573] should_failslab+0x5/0x20 [ 1612.861081] kmem_cache_alloc+0x5b/0x310 [ 1612.861636] create_object.isra.0+0x3a/0xa30 [ 1612.862222] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1612.862910] kmem_cache_alloc+0x159/0x310 [ 1612.863464] vm_area_dup+0x78/0x290 [ 1612.863964] ? lock_release+0x680/0x680 [ 1612.864494] ? mark_lock+0xf5/0x2df0 [ 1612.864989] ? lock_chain_count+0x20/0x20 [ 1612.865535] ? mark_lock+0xf5/0x2df0 [ 1612.866032] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1612.866734] ? lock_chain_count+0x20/0x20 [ 1612.867293] ? mark_lock+0xf5/0x2df0 [ 1612.867801] ? vm_area_alloc+0x110/0x110 [ 1612.868346] ? __lock_acquire+0x1657/0x5b00 [ 1612.868922] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1612.869618] ? SOFTIRQ_verbose+0x10/0x10 [ 1612.870153] ? vmacache_find+0x55/0x2a0 [ 1612.870679] __split_vma+0xa8/0x4e0 [ 1612.871174] __do_munmap+0x365/0x1260 [ 1612.871737] ? arch_get_unmapped_area+0x450/0x450 [ 1612.872371] ? lock_release+0x680/0x680 [ 1612.872904] mmap_region+0x7cc/0x1500 [ 1612.873424] do_mmap+0x868/0x1370 [ 1612.873897] vm_mmap_pgoff+0x198/0x1f0 [ 1612.874412] ? randomize_page+0xb0/0xb0 [ 1612.874954] ksys_mmap_pgoff+0x41c/0x560 [ 1612.875487] ? find_mergeable_anon_vma+0x250/0x250 [ 1612.876148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1612.876836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1612.877517] do_syscall_64+0x33/0x40 [ 1612.878010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1612.878683] RIP: 0033:0x7f42229ceb62 [ 1612.879173] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1612.881603] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1612.882646] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1612.883586] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1612.884544] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1612.885478] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1612.886427] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:21:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 21:21:18 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 62) 21:21:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x8, &(0x7f0000000380)=[0x0, 0x0, r3, r2, r3, r2, r3, r3]) getgroups(0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, r3]) fchown(r1, 0xee00, r3) 21:21:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 21:21:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(0xffffffffffffffff, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:21:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3000000) [ 1612.901663] audit: type=1326 audit(1764192078.980:6011): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1612.908242] audit: type=1326 audit(1764192078.981:6012): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1612.911808] loop5: detected capacity change from 0 to 33559552 [ 1612.914460] audit: type=1326 audit(1764192078.981:6013): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1612.921273] audit: type=1326 audit(1764192078.981:6014): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1612.925494] audit: type=1326 audit(1764192078.981:6015): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:21:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1612.937334] audit: type=1326 audit(1764192078.981:6016): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:21:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r1, 0xba56) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x18, 0x32, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) [ 1612.949370] audit: type=1326 audit(1764192078.981:6017): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1612.969142] audit: type=1326 audit(1764192078.981:6018): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10115 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:21:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4000000) 21:21:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1613.036462] tc_dump_action: action bad kind 21:21:19 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) wait4(0x0, 0x0, 0x0, 0x0) 21:21:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) 21:21:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='status\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x3) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000001640)=""/79, 0x4f}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f00000016c0)=""/100, 0x64}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) write$binfmt_elf64(r0, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], 0x1878) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/cpu', 0x2000, 0x8b) dup3(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x1f381d, 0x0) unshare(0x48020200) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x8400, 0x80) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000040)) 21:21:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5000000) 21:21:33 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 63) [ 1627.217997] kauditd_printk_skb: 148 callbacks suppressed 21:21:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 1627.218017] audit: type=1326 audit(1764192093.347:6167): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10157 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 21:21:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') chroot(&(0x7f0000000200)='./file0\x00') 21:21:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x1, 0x0, 0x0, 0x7}]}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f0000000080)) 21:21:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 21:21:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000844) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x408, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x44}}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@empty, 0x0, r10}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d@\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25020000000800080001000000060006000300000008000700", @ANYRES32, @ANYBLOB="08000500ac1414aa0600060000000000080009000400000008000400ac141416080002000100000008000100", @ANYRES32=r10, @ANYBLOB="0600060003000000"], 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) wait4(0x0, 0x0, 0x0, 0x0) [ 1627.249358] FAULT_INJECTION: forcing a failure. [ 1627.249358] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.250839] CPU: 0 PID: 10170 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1627.251741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.252825] Call Trace: [ 1627.253186] dump_stack+0x107/0x167 [ 1627.253677] should_fail.cold+0x5/0xa [ 1627.254187] ? anon_vma_clone+0xdc/0x590 [ 1627.254729] should_failslab+0x5/0x20 [ 1627.255230] kmem_cache_alloc+0x5b/0x310 [ 1627.255777] anon_vma_clone+0xdc/0x590 [ 1627.256310] __split_vma+0x17c/0x4e0 [ 1627.256805] __do_munmap+0x365/0x1260 [ 1627.257310] ? arch_get_unmapped_area+0x450/0x450 [ 1627.257947] ? lock_release+0x680/0x680 [ 1627.258473] mmap_region+0x7cc/0x1500 [ 1627.258988] do_mmap+0x868/0x1370 [ 1627.259453] vm_mmap_pgoff+0x198/0x1f0 [ 1627.259972] ? randomize_page+0xb0/0xb0 [ 1627.260509] ksys_mmap_pgoff+0x41c/0x560 [ 1627.261046] ? find_mergeable_anon_vma+0x250/0x250 [ 1627.261694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1627.262506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1627.263242] do_syscall_64+0x33/0x40 [ 1627.263817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1627.264502] RIP: 0033:0x7f42229ceb62 [ 1627.264989] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1627.267364] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1627.268366] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1627.269292] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1627.270223] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1627.271152] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1627.272084] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1627.273443] loop5: detected capacity change from 0 to 33559552 [ 1627.279286] audit: type=1326 audit(1764192093.366:6168): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.293184] audit: type=1326 audit(1764192093.366:6169): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.303623] audit: type=1326 audit(1764192093.366:6170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.307225] audit: type=1326 audit(1764192093.368:6171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.310034] audit: type=1326 audit(1764192093.368:6172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.312839] audit: type=1326 audit(1764192093.368:6173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.315760] audit: type=1326 audit(1764192093.369:6174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.318939] audit: type=1326 audit(1764192093.369:6175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1627.321760] audit: type=1326 audit(1764192093.370:6176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10163 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:21:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 21:21:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(0xffffffffffffffff, r1, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:21:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6000000) 21:21:33 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 64) 21:21:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 21:21:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1b, 0xff, 0xd, 0x1, 0x0, 0x400, 0x40248, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x101, 0xb52d}, 0x10c0, 0x7, 0x101, 0x8, 0xfffffffffffffffb, 0x5, 0x5, 0x0, 0x8, 0x0, 0x8000}, r0, 0xd, 0xffffffffffffffff, 0x3) tgkill(r0, r0, 0x0) r1 = getpgrp(0x0) tgkill(r1, r1, 0x0) wait4(r1, 0x0, 0x80000000, &(0x7f0000000100)) [ 1627.469689] FAULT_INJECTION: forcing a failure. [ 1627.469689] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.472194] CPU: 1 PID: 10191 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1627.473680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.475453] Call Trace: [ 1627.476038] dump_stack+0x107/0x167 [ 1627.476825] should_fail.cold+0x5/0xa [ 1627.477649] ? create_object.isra.0+0x3a/0xa30 [ 1627.478629] should_failslab+0x5/0x20 [ 1627.479449] kmem_cache_alloc+0x5b/0x310 [ 1627.480338] create_object.isra.0+0x3a/0xa30 [ 1627.481277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1627.482376] kmem_cache_alloc+0x159/0x310 [ 1627.483280] anon_vma_clone+0xdc/0x590 [ 1627.484150] __split_vma+0x17c/0x4e0 [ 1627.484952] __do_munmap+0x365/0x1260 [ 1627.485785] ? arch_get_unmapped_area+0x450/0x450 [ 1627.486845] ? lock_release+0x680/0x680 [ 1627.487712] mmap_region+0x7cc/0x1500 [ 1627.488570] do_mmap+0x868/0x1370 [ 1627.489335] vm_mmap_pgoff+0x198/0x1f0 [ 1627.490189] ? randomize_page+0xb0/0xb0 [ 1627.491071] ksys_mmap_pgoff+0x41c/0x560 [ 1627.491967] ? find_mergeable_anon_vma+0x250/0x250 [ 1627.493044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1627.494187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1627.495315] do_syscall_64+0x33/0x40 [ 1627.496138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1627.497254] RIP: 0033:0x7f42229ceb62 [ 1627.498069] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1627.502058] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1627.503695] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1627.505244] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1627.506775] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1627.508311] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1627.509846] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 21:21:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) 21:21:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7000000) 21:21:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:21:50 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 65) 21:21:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0xa0, &(0x7f0000000000)=[{0x401, 0x1, 0x1, 0x8}, {0x3, 0x8, 0xe1, 0xc94}]}) wait4(0x0, 0x0, 0x0, 0x0) 21:21:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) 21:21:50 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="cfd2e5aef0e1425c6ef48f0f3ff21b5bc1411353d64d6b45d00b84897150ff0399e033a01939eb44e6d42d3f3d851d116b0772e4451ffbc5", 0x38) 21:21:50 executing program 0: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x8, 0x0, 0x24}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x7, 0xff, r2}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000140)={0x4, 0x9, 0x3, 0x5, 0x0, [0x1ff, 0x3f, 0x8001, 0xffffffff]}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="56187bfa69ab1f1ff7760100002300000227bd707c0b0000000000000008003700278652bf69ae8ef8f78e005e78fa72ffcb0858540fcee279207fd5e2239a8d3b2155d01ab727529af83c1985a3d6dc17fc232b6140da3087e405d257c4fbfa47e8ab870b4a407a575a1df4c2683b30a4ef13fa769bc2fb6b3cdc8e6966410b99e90e2724e1d2d7357e11fb9ebb883191c9f98cee21eb", @ANYRES32=r3, @ANYBLOB="080046006401010208005e00", @ANYRES32=r3, @ANYBLOB="3d01278013636b8f020521e9c35e32124e8f2f61ac10a625022a14f822c8002c01f0c942c09b805f73750daf9a92f5620e3327f4f4cf2aa7ba238894988aa245302c84cb5e70e147ae6a0826f74247691856376aa9619146d4fd10d1d4ed5a436130c94f4d42a6bafc639fbbccb87435bfff7a3760c64fb8ffe7ebb67299e46f62ee43f21e53c2b86e471acc9c368507ac23e391e9975018e9e04c8afaf4247de64cc92a4736f66b3a9d49162041cfaac75218b9f8bd817865ceedca40ce1b537a11605c395a82ce08fa98f45191dc291d4324df82a6baef527a45e727d38be61d3fce71b0595e328ea4d62567aa4fe1db4c38569107e0907f930005fe5ae7acca2968bba7d627d4a8b5bf9bff9364f1939aafd1f5b44fd827fc8ae7ad176287f343c7ce614c14fe4e34368745fbe34e3444332b7e2ab32570bfff7fcc000000080050000a010101"], 0x174}, 0x1, 0x0, 0x0, 0xc1}, 0x4800) fallocate(r4, 0x2, 0xab36, 0x7) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x48, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x48}}, 0x0) 21:21:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) [ 1644.464804] FAULT_INJECTION: forcing a failure. [ 1644.464804] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.467485] CPU: 1 PID: 10217 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1644.469301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.471424] Call Trace: [ 1644.472126] dump_stack+0x107/0x167 [ 1644.473062] should_fail.cold+0x5/0xa [ 1644.474042] ? vm_area_alloc+0x1c/0x110 [ 1644.475060] should_failslab+0x5/0x20 [ 1644.476043] kmem_cache_alloc+0x5b/0x310 [ 1644.477101] vm_area_alloc+0x1c/0x110 [ 1644.478070] mmap_region+0x982/0x1500 [ 1644.479073] do_mmap+0x868/0x1370 [ 1644.479992] vm_mmap_pgoff+0x198/0x1f0 [ 1644.481010] ? randomize_page+0xb0/0xb0 [ 1644.482057] ksys_mmap_pgoff+0x41c/0x560 [ 1644.483101] ? find_mergeable_anon_vma+0x250/0x250 [ 1644.484381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.485731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.487059] do_syscall_64+0x33/0x40 [ 1644.488035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1644.489347] RIP: 0033:0x7f42229ceb62 [ 1644.490304] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1644.495082] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1644.497040] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1644.498854] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1644.500690] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1644.502514] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1644.504362] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1644.517847] loop5: detected capacity change from 0 to 33559552 [ 1644.534355] kauditd_printk_skb: 97 callbacks suppressed [ 1644.534373] audit: type=1326 audit(1764192110.663:6274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1644.545710] audit: type=1326 audit(1764192110.663:6275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1644.553531] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 21:21:50 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 66) [ 1644.585687] audit: type=1326 audit(1764192110.669:6276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1644.611675] audit: type=1326 audit(1764192110.669:6277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:21:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x1, 0xff, 0x0, 0x80000001}, {0x1000, 0x1, 0x3, 0x6}, {0x3, 0x6, 0x3, 0x9}, {0xb4bf, 0x96, 0x40, 0x21}, {0x1, 0x6, 0xfc, 0x10d}, {0x7, 0x0, 0xff, 0x6}]}) creat(&(0x7f0000000180)='./file0\x00', 0x0) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000040), 0x20000000, &(0x7f0000000080)) 21:21:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:50 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r1, 0xee01) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) fchown(r0, r1, r2) wait4(0x0, 0x0, 0x0, 0x0) [ 1644.654363] audit: type=1326 audit(1764192110.670:6278): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1644.699717] audit: type=1326 audit(1764192110.670:6279): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:21:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) [ 1644.742963] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1644.745081] CPU: 1 PID: 10239 Comm: syz-executor.0 Not tainted 5.10.246 #1 [ 1644.746681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.748609] Call Trace: [ 1644.749222] dump_stack+0x107/0x167 [ 1644.750067] sysfs_warn_dup.cold+0x1c/0x29 [ 1644.751053] sysfs_do_create_link_sd+0x122/0x140 [ 1644.752164] sysfs_create_link+0x5f/0xc0 [ 1644.753105] device_add+0x703/0x1c50 [ 1644.753974] ? devlink_add_symlinks+0x970/0x970 [ 1644.755048] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1644.756279] wiphy_register+0x1da6/0x2850 [ 1644.756724] FAULT_INJECTION: forcing a failure. [ 1644.756724] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.757251] ? wiphy_unregister+0xb90/0xb90 [ 1644.757294] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1644.761785] ieee80211_register_hw+0x23c5/0x38b0 [ 1644.762898] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1644.764006] ? net_generic+0xdb/0x2b0 [ 1644.764911] ? lockdep_init_map_type+0x2c7/0x780 [ 1644.766010] ? memset+0x20/0x50 [ 1644.766777] ? __hrtimer_init+0x12c/0x270 [ 1644.767742] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1644.768923] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1644.769994] ? hwsim_new_radio_nl+0x967/0x1080 [ 1644.771058] ? memcpy+0x39/0x60 [ 1644.771827] hwsim_new_radio_nl+0x991/0x1080 [ 1644.772860] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1644.774066] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1644.775581] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1644.777092] genl_family_rcv_msg_doit+0x22d/0x330 [ 1644.778213] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1644.779726] ? cap_capable+0x1cd/0x230 [ 1644.780642] ? ns_capable+0xe2/0x110 [ 1644.781504] genl_rcv_msg+0x36a/0x5a0 [ 1644.782385] ? genl_get_cmd+0x480/0x480 [ 1644.783298] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1644.784503] ? lock_release+0x680/0x680 [ 1644.785414] ? netlink_deliver_tap+0xf4/0xcc0 [ 1644.786447] netlink_rcv_skb+0x14b/0x430 [ 1644.787380] ? genl_get_cmd+0x480/0x480 [ 1644.788305] ? netlink_ack+0xab0/0xab0 [ 1644.789210] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1644.790258] ? is_vmalloc_addr+0x7b/0xb0 [ 1644.791199] genl_rcv+0x24/0x40 [ 1644.791956] netlink_unicast+0x6ce/0xa00 [ 1644.792911] ? netlink_attachskb+0xab0/0xab0 [ 1644.793934] netlink_sendmsg+0x90f/0xe00 [ 1644.794876] ? netlink_unicast+0xa00/0xa00 [ 1644.795862] ? netlink_unicast+0xa00/0xa00 [ 1644.796850] __sock_sendmsg+0x154/0x190 [ 1644.797762] ____sys_sendmsg+0x70d/0x870 [ 1644.798702] ? sock_write_iter+0x3d0/0x3d0 [ 1644.799665] ? do_recvmmsg+0x6d0/0x6d0 [ 1644.800572] ? SOFTIRQ_verbose+0x10/0x10 [ 1644.801516] ___sys_sendmsg+0xf3/0x170 [ 1644.802408] ? sendmsg_copy_msghdr+0x160/0x160 [ 1644.803465] ? __fget_files+0x2cf/0x520 [ 1644.804390] ? lock_downgrade+0x6d0/0x6d0 [ 1644.805342] ? finish_task_switch+0x126/0x5d0 [ 1644.806380] ? lock_downgrade+0x6d0/0x6d0 [ 1644.807340] ? __fget_files+0x2f8/0x520 [ 1644.808288] ? __fget_light+0xea/0x290 [ 1644.809188] __sys_sendmsg+0xe5/0x1b0 [ 1644.810058] ? __sys_sendmsg_sock+0x40/0x40 [ 1644.811047] ? io_schedule_timeout+0x140/0x140 [ 1644.812124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.813330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.814514] ? trace_hardirqs_on+0x5b/0x180 [ 1644.815513] do_syscall_64+0x33/0x40 [ 1644.816379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1644.817552] RIP: 0033:0x7f1392e49b19 [ 1644.818406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.822662] RSP: 002b:00007f139037d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.824418] RAX: ffffffffffffffda RBX: 00007f1392f5d0e0 RCX: 00007f1392e49b19 [ 1644.826060] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 1644.827697] RBP: 00007f1392ea3f6d R08: 0000000000000000 R09: 0000000000000000 [ 1644.829344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1644.830981] R13: 00007fffe4a6c27f R14: 00007f139037d300 R15: 0000000000022000 [ 1644.832668] CPU: 0 PID: 10242 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1644.834141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.835881] Call Trace: [ 1644.836467] dump_stack+0x107/0x167 [ 1644.837241] should_fail.cold+0x5/0xa [ 1644.838059] ? create_object.isra.0+0x3a/0xa30 [ 1644.839022] should_failslab+0x5/0x20 [ 1644.839831] kmem_cache_alloc+0x5b/0x310 [ 1644.840715] create_object.isra.0+0x3a/0xa30 [ 1644.841637] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1644.842717] kmem_cache_alloc+0x159/0x310 [ 1644.843611] vm_area_alloc+0x1c/0x110 [ 1644.844436] mmap_region+0x982/0x1500 [ 1644.845255] do_mmap+0x868/0x1370 [ 1644.846005] vm_mmap_pgoff+0x198/0x1f0 [ 1644.846842] ? randomize_page+0xb0/0xb0 [ 1644.847703] ksys_mmap_pgoff+0x41c/0x560 [ 1644.848573] ? find_mergeable_anon_vma+0x250/0x250 [ 1644.849840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.851192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.852541] do_syscall_64+0x33/0x40 [ 1644.853506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1644.854844] RIP: 0033:0x7f42229ceb62 [ 1644.855806] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1644.860552] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1644.862514] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1644.864370] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1644.866180] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1644.867991] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1644.869843] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1644.872466] audit: type=1326 audit(1764192110.670:6280): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:21:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa000000) [ 1644.900868] audit: type=1326 audit(1764192110.671:6281): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1644.918334] audit: type=1326 audit(1764192110.671:6282): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 [ 1644.939221] audit: type=1326 audit(1764192110.671:6283): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10219 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa61231b19 code=0x7ffc0000 21:21:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:21:51 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) [ 1660.854002] kauditd_printk_skb: 45 callbacks suppressed [ 1660.854024] audit: type=1326 audit(1764192126.983:6329): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 21:22:06 executing program 6: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 67) 21:22:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1ffff000) 21:22:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2810000, &(0x7f00000000c0)=ANY=[]) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/117) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000340)=0x1000, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 21:22:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb0440, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3e9a"], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 21:22:06 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x4, 0x20, 0x9}, {0x6, 0x2, 0x80, 0x8}, {0x9cb, 0x1, 0x1, 0x3}]}) 21:22:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:22:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(r0, 0xba56) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) 21:22:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) 21:22:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) getrusage(0x1, &(0x7f0000000200)) [ 1660.879163] audit: type=1326 audit(1764192126.983:6330): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.885418] audit: type=1326 audit(1764192126.983:6331): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.889497] audit: type=1326 audit(1764192126.983:6332): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.904012] loop5: detected capacity change from 0 to 33559552 [ 1660.910920] audit: type=1326 audit(1764192126.983:6333): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.917964] audit: type=1326 audit(1764192126.983:6334): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.920313] FAULT_INJECTION: forcing a failure. [ 1660.920313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1660.923013] CPU: 1 PID: 10280 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1660.923750] audit: type=1326 audit(1764192126.984:6335): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.924492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1660.928694] Call Trace: [ 1660.929258] dump_stack+0x107/0x167 [ 1660.930022] should_fail.cold+0x5/0xa [ 1660.930836] __alloc_pages_nodemask+0x182/0x600 [ 1660.931361] audit: type=1326 audit(1764192126.984:6336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.931802] ? do_raw_read_unlock+0x3b/0x70 [ 1660.931824] ? _raw_read_unlock+0x1a/0x30 [ 1660.935992] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1660.937268] ? walk_system_ram_range+0x171/0x1e0 [ 1660.938260] ? pat_enabled+0x20/0x20 [ 1660.939041] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1660.940134] alloc_page_interleave+0x22/0x130 [ 1660.940154] audit: type=1326 audit(1764192126.984:6337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10268 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd115bc1b19 code=0x7ffc0000 [ 1660.941088] ? __next_node_in+0x72/0x80 [ 1660.941110] alloc_pages_current+0x237/0x280 [ 1660.941134] pte_alloc_one+0x16/0x1a0 [ 1660.946635] __pte_alloc+0x1d/0x330 [ 1660.947651] remap_pfn_range_internal+0x9a3/0xf60 [ 1660.948738] audit: type=1326 audit(1764192127.005:6338): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10272 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8cb7d8b19 code=0x7ffc0000 [ 1660.948988] ? lookup_memtype+0x5b/0x200 [ 1660.952547] ? apply_to_existing_page_range+0x40/0x40 [ 1660.953824] remap_pfn_range+0xcd/0x160 [ 1660.954816] ? remap_pfn_range_notrack+0x70/0x70 [ 1660.955918] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1660.957058] io_uring_mmap+0x398/0x530 [ 1660.957924] mmap_file+0x5e/0xe0 [ 1660.958657] mmap_region+0xc4d/0x1500 [ 1660.959483] do_mmap+0x868/0x1370 [ 1660.960358] vm_mmap_pgoff+0x198/0x1f0 [ 1660.961200] ? randomize_page+0xb0/0xb0 [ 1660.962051] ksys_mmap_pgoff+0x41c/0x560 [ 1660.962906] ? find_mergeable_anon_vma+0x250/0x250 [ 1660.963942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1660.965050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1660.966140] do_syscall_64+0x33/0x40 [ 1660.966927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1660.968010] RIP: 0033:0x7f42229ceb62 [ 1660.968806] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1660.972681] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1660.974279] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1660.975779] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1660.977288] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1660.978792] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1660.980302] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1661.061502] ------------[ cut here ]------------ [ 1661.062567] WARNING: CPU: 0 PID: 10280 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1661.063602] Modules linked in: [ 1661.063981] CPU: 0 PID: 10280 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 1661.064814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1661.065806] RIP: 0010:get_pat_info+0x216/0x270 [ 1661.066337] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 31 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 1a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 a2 5a 00 e9 [ 1661.068477] RSP: 0018:ffff88801afbf890 EFLAGS: 00010212 [ 1661.069110] RAX: 0000000000031cf3 RBX: ffff88800fd29600 RCX: ffffc90006e16000 [ 1661.069950] RDX: 0000000000040000 RSI: ffffffff81124466 RDI: 0000000000000007 [ 1661.070790] RBP: ffff88801afbf948 R08: 0000000000000000 R09: ffff88801afbf818 [ 1661.071649] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1661.072477] R13: 1ffff110035f7f12 R14: 0000000000000000 R15: ffff88800fd29650 [ 1661.073321] FS: 00007f421ff44700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1661.074283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1661.074975] CR2: 000055ce991db028 CR3: 000000001a364000 CR4: 0000000000350ef0 [ 1661.075822] Call Trace: [ 1661.076131] ? pgprot_writethrough+0xc0/0xc0 [ 1661.076678] ? finish_task_switch+0x126/0x5d0 [ 1661.077206] ? finish_task_switch+0xef/0x5d0 [ 1661.077749] untrack_pfn+0xdc/0x240 [ 1661.078176] ? track_pfn_insert+0x150/0x150 [ 1661.078986] ? lock_downgrade+0x6d0/0x6d0 [ 1661.082162] ? uprobe_munmap+0x95/0x560 [ 1661.084557] unmap_single_vma+0x1bc/0x300 [ 1661.085044] zap_page_range_single+0x2ce/0x450 [ 1661.085591] ? unmap_single_vma+0x300/0x300 [ 1661.086091] ? remap_pfn_range_internal+0xc56/0xf60 [ 1661.086691] ? lookup_memtype+0x5b/0x200 [ 1661.087173] ? apply_to_existing_page_range+0x40/0x40 [ 1661.087798] remap_pfn_range+0x139/0x160 [ 1661.088282] ? remap_pfn_range_notrack+0x70/0x70 [ 1661.088852] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1661.089452] io_uring_mmap+0x398/0x530 [ 1661.089925] mmap_file+0x5e/0xe0 [ 1661.090317] mmap_region+0xc4d/0x1500 [ 1661.090784] do_mmap+0x868/0x1370 [ 1661.091198] vm_mmap_pgoff+0x198/0x1f0 [ 1661.091671] ? randomize_page+0xb0/0xb0 [ 1661.092141] ksys_mmap_pgoff+0x41c/0x560 [ 1661.092641] ? find_mergeable_anon_vma+0x250/0x250 [ 1661.093211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1661.093833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1661.094431] do_syscall_64+0x33/0x40 [ 1661.094884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1661.095482] RIP: 0033:0x7f42229ceb62 [ 1661.095936] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1661.098081] RSP: 002b:00007f421ff440f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1661.098983] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f42229ceb62 [ 1661.099838] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1661.100701] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1661.101550] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1661.102380] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1661.103253] irq event stamp: 1597 [ 1661.103684] hardirqs last enabled at (1607): [] console_unlock+0x92d/0xb40 [ 1661.104703] hardirqs last disabled at (1616): [] console_unlock+0x839/0xb40 [ 1661.105710] softirqs last enabled at (1318): [] asm_call_irq_on_stack+0x12/0x20 [ 1661.106766] softirqs last disabled at (1313): [] asm_call_irq_on_stack+0x12/0x20 [ 1661.107817] ---[ end trace caca05c5409eb6f3 ]--- 21:22:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '#{'}}, {@access_client}]}}) 21:22:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000) 21:22:07 executing program 0: futex(&(0x7f0000000180)=0x1, 0x0, 0x1, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2002) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000001480)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=@pptp, 0x80, &(0x7f0000001300)=[{&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/217, 0xd9}], 0x3, &(0x7f0000001340)=""/195, 0xc3}, 0x0, 0x0, 0x0, {0x1}}, 0xffff) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2002) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r10 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r11, r9, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x2742ad1af7a1eb26, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0xfffffffe, 0x10, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x10000) syz_io_uring_submit(r2, r9, &(0x7f00000014c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r4, 0x7f, 0x0, 0x4, 0x6, 0x0, {0x0, r14}}, 0x8) 21:22:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) wait4(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/217, 0xd9}], 0x5) VM DIAGNOSIS: 21:22:07 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e5c51 RDI=ffffffff879f8240 RBP=ffffffff879f8200 RSP=ffff88801afbf238 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000064 R13=0000000000000064 R14=ffffffff879f8200 R15=dffffc0000000000 RIP=ffffffff822e5ca8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f421ff44700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ce991db028 CR3=000000001a364000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000696e656420737365636341002f XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=000055ce991a05e0000055ce991dad80 XMM05=00ffff01000002020000000800000001 XMM06=0000000200000009000055ce991dca60 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000793bb308 RCX=ffffffff81f589f3 RDX=0000000000000036 RSI=ffffffff81f587f4 RDI=0000000000000006 RBP=000000000000007f RSP=ffff88803228f940 R8 =0000000000000000 R9 =000000005332f4ee R10=000000000000007f R11=0000000000000000 R12=dffffc0000000000 R13=ffffffff845bfe80 R14=0000000000000036 R15=ffff88800954a5ac RIP=ffffffff8140cd84 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557d154400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557d165c98 CR3=0000000032290000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000