x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:12:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) dup2(r1, r2) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x519500, 0xc3) dup2(r1, r0) [ 862.660568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 877.013486] FAULT_INJECTION: forcing a failure. [ 877.013486] name failslab, interval 1, probability 0, space 0, times 0 [ 877.015944] CPU: 0 PID: 6817 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 877.017385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.019168] Call Trace: [ 877.019729] dump_stack+0x107/0x167 [ 877.020493] should_fail.cold+0x5/0xa [ 877.021306] ? shmem_alloc_inode+0x18/0x40 [ 877.022224] should_failslab+0x5/0x20 [ 877.023035] kmem_cache_alloc+0x5b/0x310 [ 877.023911] ? shmem_destroy_inode+0x70/0x70 [ 877.024858] shmem_alloc_inode+0x18/0x40 [ 877.025737] ? shmem_destroy_inode+0x70/0x70 [ 877.026681] alloc_inode+0x63/0x240 [ 877.027461] new_inode+0x23/0x250 [ 877.028219] shmem_get_inode+0x15e/0xbc0 [ 877.029106] __shmem_file_setup+0xb8/0x320 [ 877.030020] ? _copy_from_user+0xfb/0x1b0 [ 877.030925] __do_sys_memfd_create+0x275/0x450 [ 877.032136] ? memfd_file_seals_ptr+0x170/0x170 [ 877.033141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.034271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.035381] do_syscall_64+0x33/0x40 [ 877.036198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.037292] RIP: 0033:0x7f7ab951fb19 [ 877.038117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.042063] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 877.043722] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 877.045267] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 877.046821] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 877.048373] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 877.049925] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 05:12:26 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 1) 05:12:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:12:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 4) 05:12:26 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:12:26 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x9, 0x2) 05:12:26 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x19, 0x2) 05:12:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x40, 0xe8e, 0x100, 0x0, 0x2, 0xc4d, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:12:26 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f00000001c0)=""/206, 0xce}], 0x3, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001580)=""/220, 0xdc}, {&(0x7f0000001680)=""/71, 0x47}], 0x8}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001800)=""/1, 0x1}], 0x1, &(0x7f0000001880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000001a00)=""/169, 0xa9}, {&(0x7f0000001ac0)=""/154, 0x9a}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000002e00)=""/199, 0xc7}, {&(0x7f0000002f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000003000)=""/14, 0xe}], 0x1, &(0x7f0000003080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000004500)=[{&(0x7f0000003200)}, {&(0x7f0000003240)=""/141, 0x8d}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/58, 0x3a}, {&(0x7f0000004340)=""/241, 0xf1}, {&(0x7f0000004440)=""/145, 0x91}], 0x6}}, {{&(0x7f0000004580), 0x6e, &(0x7f0000005680)=[{&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/66, 0x42}], 0x2, &(0x7f00000056c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x8, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000003200)=ANY=[@ANYBLOB="f9ffffffffffffff18010000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='./file0\x00']) sendfile(r5, r4, &(0x7f0000005900)=0x400, 0x401) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r7, r6) 05:12:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x7}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcf, 0x39, 0x6, 0x0, 0x0, 0x7, 0x80010, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10406, 0x6, 0xb40, 0x8, 0x1, 0x8, 0xb0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xc, r1, 0xa) 05:12:26 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1b, 0x2) [ 877.080344] FAULT_INJECTION: forcing a failure. [ 877.080344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.083729] CPU: 0 PID: 6831 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 877.085188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.086950] Call Trace: [ 877.087513] dump_stack+0x107/0x167 [ 877.088282] should_fail.cold+0x5/0xa [ 877.089093] _copy_from_user+0x2e/0x1b0 [ 877.089950] io_uring_setup+0x9b/0x2980 [ 877.090795] ? __mutex_unlock_slowpath+0xe1/0x600 [ 877.091826] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 877.092907] ? wait_for_completion_io+0x270/0x270 [ 877.093933] ? rcu_read_lock_any_held+0x75/0xa0 05:12:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 5) [ 877.094925] ? vfs_write+0x354/0xb10 [ 877.095852] ? fput_many+0x2f/0x1a0 [ 877.096630] ? ksys_write+0x1a9/0x260 [ 877.097450] ? __ia32_sys_read+0xb0/0xb0 [ 877.098339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.099470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.100585] do_syscall_64+0x33/0x40 [ 877.101389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.102509] RIP: 0033:0x7f6e4b79cb19 [ 877.103318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.107314] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 877.108958] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 877.110599] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 877.112181] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 877.113762] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 877.115302] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 877.132206] FAULT_INJECTION: forcing a failure. [ 877.132206] name failslab, interval 1, probability 0, space 0, times 0 [ 877.133651] CPU: 1 PID: 6842 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 877.134447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.135410] Call Trace: [ 877.135725] dump_stack+0x107/0x167 [ 877.136150] should_fail.cold+0x5/0xa [ 877.136597] ? create_object.isra.0+0x3a/0xa30 [ 877.137127] should_failslab+0x5/0x20 [ 877.137569] kmem_cache_alloc+0x5b/0x310 [ 877.138061] create_object.isra.0+0x3a/0xa30 [ 877.138575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 877.139145] kmem_cache_alloc+0x159/0x310 [ 877.139631] ? shmem_destroy_inode+0x70/0x70 [ 877.140143] shmem_alloc_inode+0x18/0x40 [ 877.140613] ? shmem_destroy_inode+0x70/0x70 [ 877.141124] alloc_inode+0x63/0x240 [ 877.141547] new_inode+0x23/0x250 [ 877.141965] shmem_get_inode+0x15e/0xbc0 [ 877.142444] __shmem_file_setup+0xb8/0x320 [ 877.142936] ? _copy_from_user+0xfb/0x1b0 [ 877.143417] __do_sys_memfd_create+0x275/0x450 [ 877.143949] ? memfd_file_seals_ptr+0x170/0x170 [ 877.144496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.145104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.145720] do_syscall_64+0x33/0x40 [ 877.146152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.146748] RIP: 0033:0x7f7ab951fb19 [ 877.147180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.149310] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 877.150204] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 877.151023] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 877.151846] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 877.152666] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 877.153482] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 05:12:26 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) 05:12:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:12:26 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xa, 0x2) 05:12:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x77, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 05:12:26 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1c, 0x2) 05:12:26 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 2) 05:12:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r4, 0x2275, &(0x7f00000005c0)={@lba}) r5 = fcntl$dupfd(r1, 0x406, r2) pidfd_getfd(r4, r5, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:12:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0xf, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 877.282705] FAULT_INJECTION: forcing a failure. [ 877.282705] name failslab, interval 1, probability 0, space 0, times 0 [ 877.285266] CPU: 0 PID: 6858 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 877.286758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.288546] Call Trace: [ 877.289119] dump_stack+0x107/0x167 [ 877.289919] should_fail.cold+0x5/0xa [ 877.290742] ? io_uring_setup+0x258/0x2980 [ 877.291652] should_failslab+0x5/0x20 [ 877.292471] kmem_cache_alloc_trace+0x55/0x320 [ 877.293461] io_uring_setup+0x258/0x2980 [ 877.294357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 877.295397] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 877.296488] ? wait_for_completion_io+0x270/0x270 [ 877.297548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.298688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.299807] do_syscall_64+0x33/0x40 [ 877.300609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.301725] RIP: 0033:0x7f6e4b79cb19 [ 877.302524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.306500] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 877.308138] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 877.309682] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 877.311222] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 877.312760] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 877.314322] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 877.317487] loop7: detected capacity change from 0 to 2048 [ 877.323960] EXT4-fs (loop7): invalid first ino: 2875922842 05:12:40 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x1) 05:12:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x2, 0x0, 0x5}) r4 = dup2(r2, r1) pwritev2(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="f31550c6f93906a794f9114d19b1905abfe2816717e0f6809759e46c2377160f2fe4e54071832fa9", 0x28}, {&(0x7f00000001c0)="ccc519e4bee5ab806dff52487f129e0d01a5fc62e3c1f095f46439457af1570a79bde35474573eb930e8a3fd5c3ffe0894d4b9d7b771fe04a105115a1cf5584a52a3f97fd6a755ab97915ff4042a8b2c31374999575960d97107172b277d7ad642497cea89999b8fdf68481aae395c29e1dda1bab42cd4b6b39ab5d7b827b567bb65215e943ab7eeea3fb3c4aaf8eca72f5f", 0x92}, {&(0x7f0000000100)="10c28936704e515e53f630afb15df3ffb8c99a562f", 0x15}, {&(0x7f0000000280)="364314a91ce3afbdab6602fbd45de7a0014c2f798fcfa30cdfd73468f3a0986a6884a9ac98e22409cd1e51757b2d68bf24e694427a2f48eaf96f776fde5f27c7292627758ecaf0ca48a0139bcfdfd0de517377b9f75212dd6c976f95cb67322b54c263dc87c479a58bff1d3a6b67d4c85edeb43ca1370c8dc14f6b19aae1e5317c27925f297354243807461d11adc4e39660d8f6b473a81d26a25829431561133d", 0xa1}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="c82fc37c1b1dd84d298814839c9a94d56c00d5f9bc489264c0cc271850a5f168cca09b7bdd4ad8f3d6e8ef5a28bd4e63e12eea4544c1c2e64b9c4b64e94844b14be415b0a304a3377666f48288f26ff6d1ef9396192fe7f422a2aade25f331fed58dc8ee9ae6e3e32f38229ef35f071238aa676b89612d642beefea0b6499965e3ad716f006bbf20a5293c52d6226e791a77724637a29f091f", 0x99}, {&(0x7f0000000480)="fe7491c1b9a9d47efc3519f0113de93f62ca0d9bd97628e18c6e04cdc25adc2ac78d1a3bed71cd2415fd906ff73b5b218070dfd1683c1049f77364c75084f18ca756f360ffa211166553b088792a8d74ab11b9ce1307ba6f5efd072d5b3d7accfc6dcb83d8020ce2caad73bf87f1cfdd4ca69f277e74af307c6d66585fc796162998fd78965d95c95df58e0c5617d6a0d634f966c00a5acb6480483532d4f0832fe29506d4df328c4b561cdedba4e69e08e2c81a58a090ac4202f9a862029326bad18cc64f31c8059e315b0e729c79ed27a1ddbb98701ca857e301921d8b62037c9419bb", 0xe4}, {&(0x7f0000002100)="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", 0x1000}], 0x8, 0x0, 0x698, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x50, r5, 0xf452f000) perf_event_open(&(0x7f0000000140)={0x1, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:12:40 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 6) 05:12:40 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1d, 0x2) 05:12:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x14, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:12:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x40, 0x8, 0x20, 0x65, 0x0, 0x7, 0x100, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x40100, 0x1, 0x6, 0x0, 0x7, 0x2, 0x8, 0x0, 0x1, 0x0, 0x734}, 0x0, 0x2, r2, 0x8) write$vga_arbiter(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9211c49f6574205043493a373a003a33372e3700"], 0x13) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x80) dup2(r3, r0) 05:12:40 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 3) 05:12:40 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xb, 0x2) 05:12:40 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1e, 0x2) [ 891.401829] FAULT_INJECTION: forcing a failure. [ 891.401829] name failslab, interval 1, probability 0, space 0, times 0 [ 891.405046] CPU: 1 PID: 6876 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 891.406813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.408936] Call Trace: [ 891.409613] dump_stack+0x107/0x167 [ 891.410567] should_fail.cold+0x5/0xa [ 891.411539] ? create_object.isra.0+0x3a/0xa30 [ 891.412703] should_failslab+0x5/0x20 [ 891.413671] kmem_cache_alloc+0x5b/0x310 [ 891.414734] create_object.isra.0+0x3a/0xa30 [ 891.415859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 891.417164] kmem_cache_alloc_trace+0x151/0x320 [ 891.418375] io_uring_setup+0x258/0x2980 [ 891.419411] ? __mutex_unlock_slowpath+0xe1/0x600 [ 891.420646] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 891.421948] ? wait_for_completion_io+0x270/0x270 [ 891.423205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.424541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.425861] do_syscall_64+0x33/0x40 [ 891.426801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.428092] RIP: 0033:0x7f6e4b79cb19 [ 891.429030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.433691] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 891.435620] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 891.437432] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 891.438902] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 891.440131] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 891.441344] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 891.446769] FAULT_INJECTION: forcing a failure. [ 891.446769] name failslab, interval 1, probability 0, space 0, times 0 [ 891.448721] CPU: 1 PID: 6884 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 891.449866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.451249] Call Trace: [ 891.451697] dump_stack+0x107/0x167 [ 891.452319] should_fail.cold+0x5/0xa [ 891.452966] ? security_inode_alloc+0x34/0x160 [ 891.453756] should_failslab+0x5/0x20 [ 891.454396] kmem_cache_alloc+0x5b/0x310 [ 891.455101] security_inode_alloc+0x34/0x160 [ 891.455845] inode_init_always+0xa4e/0xd10 [ 891.456559] ? shmem_destroy_inode+0x70/0x70 [ 891.457304] alloc_inode+0x84/0x240 [ 891.457922] new_inode+0x23/0x250 [ 891.458497] shmem_get_inode+0x15e/0xbc0 [ 891.459189] __shmem_file_setup+0xb8/0x320 [ 891.459915] ? _copy_from_user+0xfb/0x1b0 [ 891.460614] __do_sys_memfd_create+0x275/0x450 [ 891.461394] ? memfd_file_seals_ptr+0x170/0x170 [ 891.462185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.463081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.463958] do_syscall_64+0x33/0x40 [ 891.464582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.465471] RIP: 0033:0x7f7ab951fb19 [ 891.466107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.469214] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 891.470523] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 891.471718] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 891.472906] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 891.474128] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 891.475330] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 [ 903.481193] FAULT_INJECTION: forcing a failure. [ 903.481193] name failslab, interval 1, probability 0, space 0, times 0 [ 903.482726] CPU: 0 PID: 6899 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 903.483614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.484719] Call Trace: [ 903.485073] dump_stack+0x107/0x167 [ 903.485541] should_fail.cold+0x5/0xa [ 903.486046] ? create_object.isra.0+0x3a/0xa30 [ 903.486628] should_failslab+0x5/0x20 [ 903.487114] kmem_cache_alloc+0x5b/0x310 [ 903.487637] create_object.isra.0+0x3a/0xa30 [ 903.488207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 903.488858] kmem_cache_alloc+0x159/0x310 [ 903.489400] security_inode_alloc+0x34/0x160 [ 903.489971] inode_init_always+0xa4e/0xd10 [ 903.490510] ? shmem_destroy_inode+0x70/0x70 [ 903.491074] alloc_inode+0x84/0x240 [ 903.491537] new_inode+0x23/0x250 [ 903.491991] shmem_get_inode+0x15e/0xbc0 [ 903.492524] __shmem_file_setup+0xb8/0x320 [ 903.493066] ? _copy_from_user+0xfb/0x1b0 [ 903.493613] __do_sys_memfd_create+0x275/0x450 [ 903.494214] ? memfd_file_seals_ptr+0x170/0x170 [ 903.494825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.495504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.496175] do_syscall_64+0x33/0x40 [ 903.496654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.497320] RIP: 0033:0x7f7ab951fb19 [ 903.497794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.500183] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 903.501162] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 903.502096] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 903.503020] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 903.503953] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 903.504884] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 05:12:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) 05:12:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 7) 05:12:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0001, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r0) 05:12:52 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xc, 0x2) 05:12:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:12:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0xfff, 0xf0ff1f) 05:12:52 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) 05:12:52 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 4) [ 903.529820] FAULT_INJECTION: forcing a failure. [ 903.529820] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 903.532429] CPU: 1 PID: 6912 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 903.533859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.535619] Call Trace: [ 903.536185] dump_stack+0x107/0x167 [ 903.536950] should_fail.cold+0x5/0xa [ 903.537753] __alloc_pages_nodemask+0x182/0x600 [ 903.538747] ? lock_release+0x680/0x680 [ 903.539581] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 903.540845] ? lock_downgrade+0x6d0/0x6d0 [ 903.541729] alloc_pages_current+0x187/0x280 [ 903.542666] kmalloc_order+0x35/0x160 [ 903.543464] kmalloc_order_trace+0x14/0xa0 [ 903.544360] io_uring_setup+0x33c/0x2980 [ 903.545212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 903.546226] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 903.547281] ? wait_for_completion_io+0x270/0x270 [ 903.548310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.549409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.550494] do_syscall_64+0x33/0x40 [ 903.551274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.552348] RIP: 0033:0x7f6e4b79cb19 [ 903.553132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.556976] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 903.558573] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 903.560059] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 903.561548] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 903.563057] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 903.564539] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:12:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x20b8, 0x5, 0x100, 0x8, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:12:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0xc0, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:12:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:12:52 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xd, 0x2) 05:12:52 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) 05:12:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r2, 0x2275, &(0x7f00000005c0)={@lba}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd7}}, './file0\x00'}) dup2(r1, r0) 05:12:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x11, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='team_slave_1\x00', 0x9, 0x9, 0x2e}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x40000000) 05:12:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) [ 903.650133] loop7: detected capacity change from 0 to 2048 05:12:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0xec0, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 903.685038] EXT4-fs (loop7): invalid first ino: 2875922842 [ 903.774522] FAULT_INJECTION: forcing a failure. [ 903.774522] name failslab, interval 1, probability 0, space 0, times 0 05:12:53 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 8) 05:12:53 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xf, 0x2) 05:12:53 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 5) 05:12:53 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) 05:12:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x33fe0, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:12:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) pread64(r2, &(0x7f0000000000)=""/80, 0x50, 0xffffffffffffffff) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 903.777021] CPU: 1 PID: 6944 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 903.778563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.780301] Call Trace: [ 903.780857] dump_stack+0x107/0x167 [ 903.781618] should_fail.cold+0x5/0xa [ 903.782431] ? create_object.isra.0+0x3a/0xa30 [ 903.783384] should_failslab+0x5/0x20 [ 903.784182] kmem_cache_alloc+0x5b/0x310 [ 903.785036] create_object.isra.0+0x3a/0xa30 [ 903.785960] ? kasan_unpoison_shadow+0x33/0x50 [ 903.786926] kmalloc_order+0xfe/0x160 [ 903.787728] kmalloc_order_trace+0x14/0xa0 [ 903.788628] io_uring_setup+0x33c/0x2980 [ 903.789475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 903.790497] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 903.791556] ? wait_for_completion_io+0x270/0x270 [ 903.792587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.793683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.794841] do_syscall_64+0x33/0x40 [ 903.795624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.796701] RIP: 0033:0x7f6e4b79cb19 [ 903.797479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.801342] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 903.802949] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 903.804449] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d 05:12:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r2, 0x2275, &(0x7f00000005c0)={@lba}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 903.805943] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 903.807580] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 903.809087] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 903.812805] FAULT_INJECTION: forcing a failure. [ 903.812805] name failslab, interval 1, probability 0, space 0, times 0 [ 903.815285] CPU: 1 PID: 6948 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 903.816726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.818485] Call Trace: [ 903.819037] dump_stack+0x107/0x167 [ 903.819805] should_fail.cold+0x5/0xa [ 903.820611] ? __d_alloc+0x2a/0x990 [ 903.821372] should_failslab+0x5/0x20 [ 903.822176] kmem_cache_alloc+0x5b/0x310 [ 903.823024] ? init_special_inode+0x1f0/0x1f0 05:12:53 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x10, 0x2) [ 903.824094] __d_alloc+0x2a/0x990 [ 903.824831] d_alloc_pseudo+0x19/0x70 [ 903.825607] alloc_file_pseudo+0xce/0x250 [ 903.826492] ? alloc_file+0x5a0/0x5a0 [ 903.827298] ? shmem_get_inode+0x55c/0xbc0 [ 903.828194] __shmem_file_setup+0x144/0x320 [ 903.829105] ? _copy_from_user+0xfb/0x1b0 [ 903.829995] __do_sys_memfd_create+0x275/0x450 [ 903.830971] ? memfd_file_seals_ptr+0x170/0x170 [ 903.831952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.833057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.834151] do_syscall_64+0x33/0x40 [ 903.834916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.835999] RIP: 0033:0x7f7ab951fb19 [ 903.836778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:12:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x200000dc, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 903.840659] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 903.842372] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 903.843870] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 903.845388] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 903.846898] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 903.848396] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 05:13:05 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x7ffff000, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x160, 0x0, 0x1, 0x100, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4117}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x85, 0xff, 0x40, 0xffff, 0x80000000]}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}]}, 0x160}}, 0x8050) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 916.463203] FAULT_INJECTION: forcing a failure. [ 916.463203] name failslab, interval 1, probability 0, space 0, times 0 [ 916.464801] CPU: 1 PID: 6982 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 916.465677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.466709] Call Trace: [ 916.467050] dump_stack+0x107/0x167 [ 916.467523] should_fail.cold+0x5/0xa [ 916.468012] ? create_object.isra.0+0x3a/0xa30 [ 916.468201] FAULT_INJECTION: forcing a failure. [ 916.468201] name failslab, interval 1, probability 0, space 0, times 0 [ 916.468593] should_failslab+0x5/0x20 [ 916.468612] kmem_cache_alloc+0x5b/0x310 [ 916.470889] create_object.isra.0+0x3a/0xa30 [ 916.471457] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 916.472110] kmem_cache_alloc+0x159/0x310 [ 916.472661] __d_alloc+0x2a/0x990 [ 916.473094] d_alloc_pseudo+0x19/0x70 [ 916.473596] alloc_file_pseudo+0xce/0x250 [ 916.474113] ? alloc_file+0x5a0/0x5a0 [ 916.474586] ? shmem_get_inode+0x55c/0xbc0 [ 916.475109] __shmem_file_setup+0x144/0x320 [ 916.475643] ? _copy_from_user+0xfb/0x1b0 [ 916.476148] __do_sys_memfd_create+0x275/0x450 [ 916.476728] ? memfd_file_seals_ptr+0x170/0x170 [ 916.477300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.477992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.478633] do_syscall_64+0x33/0x40 [ 916.479089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.479716] RIP: 0033:0x7f7ab951fb19 [ 916.480193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.482551] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 916.483533] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 916.484443] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 916.485355] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 916.486285] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 916.487204] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 [ 916.488138] CPU: 0 PID: 6985 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 916.488940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.489907] Call Trace: [ 916.490233] dump_stack+0x107/0x167 [ 916.490661] should_fail.cold+0x5/0xa [ 916.491109] ? io_uring_setup+0x40b/0x2980 [ 916.491603] should_failslab+0x5/0x20 [ 916.492051] kmem_cache_alloc_trace+0x55/0x320 [ 916.492586] io_uring_setup+0x40b/0x2980 [ 916.493067] ? __mutex_unlock_slowpath+0xe1/0x600 [ 916.493629] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 916.494244] ? wait_for_completion_io+0x270/0x270 [ 916.494820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.495432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.496038] do_syscall_64+0x33/0x40 [ 916.496471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.497065] RIP: 0033:0x7f6e4b79cb19 05:13:05 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 6) 05:13:05 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) 05:13:05 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x11, 0x2) 05:13:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 9) 05:13:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x218, 0x0, 0x0, 0xfffffffffffffefa, 0x8a, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x701201, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r3) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) dup2(r2, r1) [ 916.497501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.499820] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 916.500706] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 916.501533] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 916.502373] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 916.503198] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 916.504025] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:13:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0xfffffdef, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:05 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x4) [ 916.568724] loop7: detected capacity change from 0 to 2048 [ 916.576965] EXT4-fs (loop7): invalid first ino: 2875922842 [ 929.340827] FAULT_INJECTION: forcing a failure. [ 929.340827] name failslab, interval 1, probability 0, space 0, times 0 [ 929.344341] CPU: 1 PID: 7007 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 929.346207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.347979] Call Trace: [ 929.348538] dump_stack+0x107/0x167 [ 929.349304] should_fail.cold+0x5/0xa [ 929.350116] ? __alloc_file+0x21/0x320 [ 929.350955] should_failslab+0x5/0x20 [ 929.351758] kmem_cache_alloc+0x5b/0x310 [ 929.352635] __alloc_file+0x21/0x320 [ 929.353418] alloc_empty_file+0x6d/0x170 [ 929.354288] alloc_file+0x5e/0x5a0 [ 929.355047] alloc_file_pseudo+0x16a/0x250 [ 929.355944] ? alloc_file+0x5a0/0x5a0 [ 929.356744] ? shmem_get_inode+0x55c/0xbc0 [ 929.357641] __shmem_file_setup+0x144/0x320 [ 929.358556] ? _copy_from_user+0xfb/0x1b0 [ 929.359443] __do_sys_memfd_create+0x275/0x450 [ 929.360404] ? memfd_file_seals_ptr+0x170/0x170 [ 929.361387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.362510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.363587] do_syscall_64+0x33/0x40 [ 929.364369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.365445] RIP: 0033:0x7f7ab951fb19 [ 929.366233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.368411] FAULT_INJECTION: forcing a failure. [ 929.368411] name failslab, interval 1, probability 0, space 0, times 0 [ 929.370105] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 929.370126] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 929.370136] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 929.370146] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 929.370165] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 929.370185] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 [ 929.381654] CPU: 0 PID: 7014 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 929.383157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.384951] Call Trace: [ 929.385530] dump_stack+0x107/0x167 [ 929.386331] should_fail.cold+0x5/0xa [ 929.387159] ? create_object.isra.0+0x3a/0xa30 [ 929.388146] should_failslab+0x5/0x20 [ 929.388969] kmem_cache_alloc+0x5b/0x310 [ 929.389853] create_object.isra.0+0x3a/0xa30 [ 929.390807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 929.392206] kmem_cache_alloc_trace+0x151/0x320 [ 929.393224] io_uring_setup+0x40b/0x2980 [ 929.394094] ? __mutex_unlock_slowpath+0xe1/0x600 [ 929.395165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 929.396267] ? wait_for_completion_io+0x270/0x270 [ 929.397341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.398498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.399621] do_syscall_64+0x33/0x40 [ 929.400440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.401549] RIP: 0033:0x7f6e4b79cb19 [ 929.402368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.406370] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 929.408030] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 929.409564] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 929.411125] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 929.412676] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 929.414227] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:13:18 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x12, 0x2) 05:13:18 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 10) 05:13:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0xf, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:18 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x400, 0x1b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a1c9bb72304d7987cbac7bffc58e772b13a0b98b0b164a00"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b607925c595a490b0a3e741dfe7743e1f687d2a241b1ab5a"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90ef8242cafbb723}, 0x8004) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:18 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) 05:13:18 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 7) 05:13:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2c, r2, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x5, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x18c14c4c08d3305f}, 0x20008804) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r6, r0) 05:13:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/111, 0x6f, 0x100000001) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 929.420603] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7017 comm=syz-executor.3 05:13:18 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4e9332f996d05fe0) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:18 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x13, 0x2) 05:13:18 executing program 4: r0 = syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x1dc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x69cd, &(0x7f0000000140)={0x0, 0x95c1, 0x10, 0x2, 0x29d, 0x0, r0}, &(0x7f0000000000/0xc00000)=nil, &(0x7f00001ea000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x295d3bad39f4327f, @fd_index=0x6, 0x7f, 0xffffffff, 0x4, 0x10, 0x1, {0x2}}, 0x7ff) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) 05:13:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) dup2(r0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) write$vga_arbiter(r1, 0x0, 0x3f00) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x559c4000) 05:13:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x10, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0xfb, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:18 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x14, 0x2) 05:13:18 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 11) 05:13:18 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 8) [ 929.644718] FAULT_INJECTION: forcing a failure. [ 929.644718] name failslab, interval 1, probability 0, space 0, times 0 [ 929.647229] CPU: 0 PID: 7042 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 929.648705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.650509] Call Trace: [ 929.651090] dump_stack+0x107/0x167 [ 929.651884] should_fail.cold+0x5/0xa [ 929.652721] ? create_object.isra.0+0x3a/0xa30 [ 929.653712] should_failslab+0x5/0x20 [ 929.654550] kmem_cache_alloc+0x5b/0x310 [ 929.655435] create_object.isra.0+0x3a/0xa30 [ 929.656394] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 929.657495] kmem_cache_alloc+0x159/0x310 [ 929.658409] __alloc_file+0x21/0x320 [ 929.659218] alloc_empty_file+0x6d/0x170 [ 929.660103] alloc_file+0x5e/0x5a0 [ 929.660876] alloc_file_pseudo+0x16a/0x250 [ 929.661796] ? alloc_file+0x5a0/0x5a0 [ 929.662631] ? shmem_get_inode+0x55c/0xbc0 [ 929.663558] __shmem_file_setup+0x144/0x320 [ 929.664480] ? _copy_from_user+0xfb/0x1b0 [ 929.665384] __do_sys_memfd_create+0x275/0x450 [ 929.666395] ? memfd_file_seals_ptr+0x170/0x170 [ 929.667424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.668576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.669705] do_syscall_64+0x33/0x40 [ 929.670533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.671644] RIP: 0033:0x7f7ab951fb19 [ 929.672441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.676434] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 929.678078] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 929.679630] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 929.681177] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 929.682722] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 929.684280] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 [ 929.687424] FAULT_INJECTION: forcing a failure. [ 929.687424] name failslab, interval 1, probability 0, space 0, times 0 [ 929.689718] CPU: 1 PID: 7048 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 929.691074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.692718] Call Trace: [ 929.693237] dump_stack+0x107/0x167 [ 929.693961] should_fail.cold+0x5/0xa [ 929.694725] ? create_object.isra.0+0x3a/0xa30 [ 929.695632] should_failslab+0x5/0x20 [ 929.696379] kmem_cache_alloc+0x5b/0x310 [ 929.697193] create_object.isra.0+0x3a/0xa30 [ 929.698061] kmemleak_alloc_percpu+0xa0/0x100 [ 929.698963] pcpu_alloc+0x4e2/0x1240 [ 929.699712] ? io_tctx_exit_cb+0xf0/0xf0 [ 929.700521] percpu_ref_init+0x31/0x3d0 [ 929.701309] io_uring_setup+0x47a/0x2980 [ 929.702112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 929.703074] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 929.704073] ? wait_for_completion_io+0x270/0x270 [ 929.705065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.706092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.707132] do_syscall_64+0x33/0x40 [ 929.707866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.708891] RIP: 0033:0x7f6e4b79cb19 [ 929.709606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.713177] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 929.714664] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 929.716078] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 929.717468] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 929.718874] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 929.720254] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:13:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x11, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 929.788524] loop7: detected capacity change from 0 to 2048 [ 929.794231] EXT4-fs (loop7): invalid first ino: 2875922842 05:13:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 12) 05:13:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/85, 0x55}], 0x1, 0x3, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pnp', 0x81, 0x4) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x583}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb670}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1800000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x80) 05:13:32 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 9) 05:13:32 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:32 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x15, 0x2) [ 943.481166] FAULT_INJECTION: forcing a failure. [ 943.481166] name failslab, interval 1, probability 0, space 0, times 0 05:13:32 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x1) 05:13:32 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x6, @local}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x5, 0x6, @local}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000140)={r9, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r6, 0x5, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x198, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x198}}, 0x4000080) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r10, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 943.484162] CPU: 0 PID: 7064 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 943.486058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.488241] Call Trace: [ 943.488944] dump_stack+0x107/0x167 [ 943.489909] should_fail.cold+0x5/0xa [ 943.490934] ? create_object.isra.0+0x3a/0xa30 [ 943.492143] should_failslab+0x5/0x20 [ 943.493156] kmem_cache_alloc+0x5b/0x310 [ 943.494235] create_object.isra.0+0x3a/0xa30 [ 943.495413] kmemleak_alloc_percpu+0xa0/0x100 [ 943.496598] pcpu_alloc+0x4e2/0x1240 [ 943.497598] ? io_tctx_exit_cb+0xf0/0xf0 [ 943.498689] percpu_ref_init+0x31/0x3d0 [ 943.499736] io_uring_setup+0x47a/0x2980 [ 943.500814] ? __mutex_unlock_slowpath+0xe1/0x600 [ 943.502078] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 943.503419] ? wait_for_completion_io+0x270/0x270 [ 943.504162] FAULT_INJECTION: forcing a failure. [ 943.504162] name failslab, interval 1, probability 0, space 0, times 0 [ 943.504727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 943.507455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 943.508828] do_syscall_64+0x33/0x40 [ 943.509814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 943.511183] RIP: 0033:0x7f6e4b79cb19 [ 943.512169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.517018] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 943.519041] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 943.520917] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 943.522802] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 943.524674] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 943.526560] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 943.528478] CPU: 1 PID: 7070 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 943.529339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.530342] Call Trace: [ 943.530662] dump_stack+0x107/0x167 [ 943.531099] should_fail.cold+0x5/0xa [ 943.531548] ? security_file_alloc+0x34/0x170 05:13:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x12, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 943.532138] should_failslab+0x5/0x20 [ 943.532753] kmem_cache_alloc+0x5b/0x310 [ 943.533273] security_file_alloc+0x34/0x170 [ 943.533794] __alloc_file+0xb7/0x320 [ 943.534233] alloc_empty_file+0x6d/0x170 [ 943.534723] alloc_file+0x5e/0x5a0 [ 943.535145] alloc_file_pseudo+0x16a/0x250 [ 943.535642] ? alloc_file+0x5a0/0x5a0 [ 943.536096] ? shmem_get_inode+0x55c/0xbc0 [ 943.536609] __shmem_file_setup+0x144/0x320 [ 943.537135] ? _copy_from_user+0xfb/0x1b0 [ 943.537621] __do_sys_memfd_create+0x275/0x450 [ 943.538158] ? memfd_file_seals_ptr+0x170/0x170 [ 943.538723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 943.539344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 943.539963] do_syscall_64+0x33/0x40 [ 943.540398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 943.541000] RIP: 0033:0x7f7ab951fb19 [ 943.541451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.543617] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 943.544517] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 943.545348] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 943.546219] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 943.547078] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 943.547921] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 05:13:32 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x18, 0x2) 05:13:32 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) 05:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0x506, 0x5, 0x5, 0x2}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000680)=@v3={0x3000000, [{0x0, 0x7fffffff}, {0x0, 0x4}], r1}, 0x18, 0x2) 05:13:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 13) 05:13:32 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x13, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 943.656288] FAULT_INJECTION: forcing a failure. [ 943.656288] name failslab, interval 1, probability 0, space 0, times 0 [ 943.657676] CPU: 1 PID: 7090 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 943.658492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.659477] Call Trace: [ 943.659798] dump_stack+0x107/0x167 [ 943.660232] should_fail.cold+0x5/0xa [ 943.660696] ? create_object.isra.0+0x3a/0xa30 [ 943.661244] should_failslab+0x5/0x20 [ 943.661697] kmem_cache_alloc+0x5b/0x310 [ 943.662177] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 943.662860] create_object.isra.0+0x3a/0xa30 [ 943.663377] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 943.663983] kmem_cache_alloc+0x159/0x310 [ 943.664474] security_file_alloc+0x34/0x170 [ 943.664988] __alloc_file+0xb7/0x320 [ 943.665433] alloc_empty_file+0x6d/0x170 [ 943.665911] alloc_file+0x5e/0x5a0 [ 943.666351] alloc_file_pseudo+0x16a/0x250 [ 943.666857] ? alloc_file+0x5a0/0x5a0 [ 943.667318] ? shmem_get_inode+0x55c/0xbc0 [ 943.667819] __shmem_file_setup+0x144/0x320 [ 943.668330] ? _copy_from_user+0xfb/0x1b0 [ 943.668823] __do_sys_memfd_create+0x275/0x450 [ 943.669369] ? memfd_file_seals_ptr+0x170/0x170 [ 943.669925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 943.670556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 943.671163] do_syscall_64+0x33/0x40 [ 943.671601] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 943.672213] RIP: 0033:0x7f7ab951fb19 [ 943.672646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.674837] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 943.675739] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951fb19 [ 943.676594] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7ab95790fb [ 943.677459] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 943.678319] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 943.679176] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000240 05:13:32 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x19, 0x2) [ 943.692664] loop7: detected capacity change from 0 to 2048 05:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1a0004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfff}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 943.704961] EXT4-fs (loop7): invalid first ino: 2875922842 05:13:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 14) [ 943.778121] FAULT_INJECTION: forcing a failure. [ 943.778121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 943.779788] CPU: 1 PID: 7108 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 943.780600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.781581] Call Trace: [ 943.781898] dump_stack+0x107/0x167 [ 943.782336] should_fail.cold+0x5/0xa [ 943.782798] __alloc_pages_nodemask+0x182/0x600 [ 943.783346] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 943.784060] ? lock_downgrade+0x6d0/0x6d0 [ 943.784541] ? lock_acquire+0x197/0x470 [ 943.785031] alloc_pages_vma+0xbb/0x410 [ 943.785509] shmem_alloc_page+0x10f/0x1e0 [ 943.786002] ? shmem_init_inode+0x20/0x20 [ 943.786515] ? percpu_counter_add_batch+0x8b/0x140 [ 943.787098] ? __vm_enough_memory+0x184/0x360 [ 943.787627] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 943.788265] ? shmem_unuse_inode+0xf60/0xf60 [ 943.788778] ? timestamp_truncate+0x1e6/0x2f0 [ 943.789316] ? iov_iter_fault_in_readable+0x9a/0x410 [ 943.789931] shmem_write_begin+0xf7/0x1d0 [ 943.790433] generic_perform_write+0x20a/0x4f0 [ 943.790982] ? page_cache_prev_miss+0x310/0x310 [ 943.791548] ? evict_inodes+0x470/0x470 [ 943.792021] ? generic_write_checks+0x2ad/0x390 [ 943.792575] __generic_file_write_iter+0x39d/0x5d0 [ 943.793162] generic_file_write_iter+0xdb/0x230 [ 943.793708] ? iov_iter_init+0x3c/0x130 [ 943.794195] new_sync_write+0x42c/0x660 [ 943.794675] ? new_sync_read+0x6f0/0x6f0 [ 943.795166] ? __x64_sys_pwrite64+0x201/0x260 [ 943.795698] ? lock_release+0x680/0x680 [ 943.796174] ? selinux_file_permission+0x92/0x520 [ 943.796741] ? security_file_permission+0xb1/0xe0 [ 943.797336] vfs_write+0x7c0/0xb10 [ 943.797761] __x64_sys_pwrite64+0x201/0x260 [ 943.798266] ? ksys_pwrite64+0x1b0/0x1b0 [ 943.798756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 943.799378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 943.799986] do_syscall_64+0x33/0x40 [ 943.800443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 943.801042] RIP: 0033:0x7f7ab94d2ab7 [ 943.801486] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 943.803692] RSP: 002b:00007f7ab6a94f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 943.804588] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2ab7 [ 943.805443] RDX: 0000000000000062 RSI: 0000000020000280 RDI: 0000000000000004 [ 943.806288] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 943.807144] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 943.807987] R13: 0000000000000004 R14: 0000000020000180 R15: 0000000000000000 05:13:33 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1b, 0x2) [ 943.820273] loop7: detected capacity change from 0 to 2048 [ 943.824535] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 05:13:45 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 10) 05:13:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x14, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:45 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) 05:13:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0xd7, 0x4e20, 0x4898, 0xa, 0x20, 0x20, 0x33, r2, 0xee00}, {0x5, 0xffff, 0x10000, 0x4, 0x4, 0x9, 0x40, 0x3}, {0x8, 0x7fff, 0x5, 0xfff}, 0x6, 0x6e6bb4, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3505, 0x0, 0x1, 0x1, 0x80000000, 0x0, 0x8}}, 0xe8) 05:13:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) write$vga_arbiter(r1, 0x0, 0x3f00) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:usbtty_device_t:s0\x00', 0x25, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe91, 0x100100, 0x0, 0x0, 0xc4d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:13:45 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1c, 0x2) [ 956.560065] FAULT_INJECTION: forcing a failure. [ 956.560065] name failslab, interval 1, probability 0, space 0, times 0 [ 956.562468] CPU: 1 PID: 7121 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 956.563891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 956.565606] Call Trace: [ 956.566167] dump_stack+0x107/0x167 [ 956.566942] should_fail.cold+0x5/0xa [ 956.567740] ? percpu_ref_init+0xd8/0x3d0 [ 956.568605] should_failslab+0x5/0x20 [ 956.569401] kmem_cache_alloc_trace+0x55/0x320 [ 956.570358] ? io_tctx_exit_cb+0xf0/0xf0 [ 956.571224] percpu_ref_init+0xd8/0x3d0 [ 956.572070] io_uring_setup+0x47a/0x2980 [ 956.572927] ? __mutex_unlock_slowpath+0xe1/0x600 [ 956.573949] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 956.575013] ? wait_for_completion_io+0x270/0x270 [ 956.576051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 956.577148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 956.578224] do_syscall_64+0x33/0x40 [ 956.579005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.580074] RIP: 0033:0x7f6e4b79cb19 [ 956.580841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 956.584993] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 956.586599] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 956.588100] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 956.589580] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 956.591083] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 956.592563] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 956.595365] FAULT_INJECTION: forcing a failure. [ 956.595365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.597873] CPU: 1 PID: 7133 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 956.599341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 956.601080] Call Trace: [ 956.601633] dump_stack+0x107/0x167 [ 956.602397] should_fail.cold+0x5/0xa [ 956.603209] ? timestamp_truncate+0x1e6/0x2f0 [ 956.604163] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 956.605294] ? shmem_write_begin+0xf7/0x1d0 [ 956.606208] ? shmem_write_begin+0x100/0x1d0 [ 956.607150] generic_perform_write+0x279/0x4f0 [ 956.608124] ? page_cache_prev_miss+0x310/0x310 [ 956.609106] ? evict_inodes+0x470/0x470 [ 956.609944] ? generic_write_checks+0x2ad/0x390 [ 956.610942] __generic_file_write_iter+0x39d/0x5d0 [ 956.611980] generic_file_write_iter+0xdb/0x230 [ 956.612963] ? iov_iter_init+0x3c/0x130 [ 956.613811] new_sync_write+0x42c/0x660 [ 956.614660] ? new_sync_read+0x6f0/0x6f0 [ 956.615510] ? __x64_sys_pwrite64+0x201/0x260 [ 956.616457] ? lock_release+0x680/0x680 [ 956.617309] ? selinux_file_permission+0x92/0x520 [ 956.618326] ? security_file_permission+0xb1/0xe0 [ 956.619346] vfs_write+0x7c0/0xb10 [ 956.620099] __x64_sys_pwrite64+0x201/0x260 [ 956.621035] ? ksys_pwrite64+0x1b0/0x1b0 [ 956.621894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 956.622998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 956.624080] do_syscall_64+0x33/0x40 [ 956.624890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.625965] RIP: 0033:0x7f7ab94d2ab7 [ 956.626766] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 956.629156] audit: type=1400 audit(1773292425.909:32): avc: denied { relabelto } for pid=7127 comm="syz-executor.1" name="SCO" dev="sockfs" ino=25634 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:usbtty_device_t:s0 tclass=bluetooth_socket permissive=1 [ 956.630670] RSP: 002b:00007f7ab6a94f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 956.635139] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2ab7 [ 956.636631] RDX: 0000000000000062 RSI: 0000000020000280 RDI: 0000000000000004 [ 956.638124] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 956.639635] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 956.641131] R13: 0000000000000004 R14: 0000000020000180 R15: 0000000000000000 05:13:45 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) 05:13:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 15) 05:13:45 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1d, 0x2) 05:13:45 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0x1e, 0x2) 05:13:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x15, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:45 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) 05:13:45 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) 05:13:45 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 11) 05:13:46 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x40, 0x9}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r5 = creat(&(0x7f0000000500)='./file0\x00', 0x8) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r6, 0x2275, &(0x7f00000005c0)={@lba}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000010000001800b40032ed862fe6ceafdff37edc7e757a6da48200e3365e0d2e79", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) dup2(r8, r7) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/class/msr', 0x210002, 0x64) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000040)="f7b5968a4429c125981048f299c0eda6fa65e167ce457e22e761e9d777e83e5882b591528975be20518790378d1cc7f21190ec5277ae13844b83a6bc01a25bc69b8fa9102aaa3f23119d086906c1846e5a4d16aa7398a7f3d9a8462bc6", 0x5d, 0x1, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x80, r1, &(0x7f0000000200)="ea33cbd64654573f9c8983336a1aec4660e10c4962d4b146643e91716f55cf2fe8ef8e104d797740134484ee13aed370f86dda2c3a222ec6a71115ac970dda4971e76ed232dec7449c", 0x49, 0x40, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000380)="c2fba56935373a0c2f2d4a301268fd01d51c4bbe801a2afa9abea5e3a23b5e3a73e1a1b70d78fd40e2c80a4dc04c077e91095f8ef102f53342a9294827fa3793182dcf192527048146444d4639918bec17892c68ddb4aedcf8b9c2ca1f4071d8c008c45b59e9d822e8b3fccf7dd6e03f20bf1337e7d03f88a15f0d0fbea2b668ff9d3d285a83d787935eaf0dfe0b246b010c74147cf021fda5ad544380441c0aba8e0aa087741c18b0326a8171f4d657ea01b63e40d9c4ea81b2e8", 0xbb, 0x7, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000440)="eb91fb45925965f686e0fba54dd471e0af5060f3ad3adbe85a", 0x19, 0x8706, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f0000000540)="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", 0xfa, 0xba3, 0x0, 0x1, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x6, r8, &(0x7f0000000680)="78d98caf7de79351ad1dd006be7e71171c137697cab4d6dbb04f0a9655d895892c514e29635d8182073a2790d1414343f60c72c4cc44e0c1af3c2e1e388b50", 0x3f, 0x6, 0x0, 0x2, r9}]) syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x633) [ 956.743682] FAULT_INJECTION: forcing a failure. [ 956.743682] name failslab, interval 1, probability 0, space 0, times 0 [ 956.745042] CPU: 0 PID: 7151 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 956.745848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 956.746821] Call Trace: [ 956.747136] dump_stack+0x107/0x167 [ 956.747568] should_fail.cold+0x5/0xa 05:13:46 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) 05:13:46 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) [ 956.748023] ? create_object.isra.0+0x3a/0xa30 [ 956.748644] should_failslab+0x5/0x20 [ 956.749090] kmem_cache_alloc+0x5b/0x310 [ 956.749565] create_object.isra.0+0x3a/0xa30 [ 956.750068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 956.750665] kmem_cache_alloc_trace+0x151/0x320 [ 956.751198] ? io_tctx_exit_cb+0xf0/0xf0 [ 956.751662] percpu_ref_init+0xd8/0x3d0 [ 956.752118] io_uring_setup+0x47a/0x2980 [ 956.752582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 956.753135] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 956.753714] ? wait_for_completion_io+0x270/0x270 [ 956.754278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 956.754886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 956.755475] do_syscall_64+0x33/0x40 [ 956.755901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.756483] RIP: 0033:0x7f6e4b79cb19 [ 956.756908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 956.759017] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 956.759886] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 956.760700] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 956.761514] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 956.762330] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 956.763152] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:13:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x16, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:13:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) write$vga_arbiter(r2, &(0x7f0000000000), 0xf) 05:13:46 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) 05:13:46 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:13:46 executing program 1: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:13:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x17, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 956.943156] loop7: detected capacity change from 0 to 2048 [ 956.949430] EXT4-fs (loop7): invalid first ino: 2875922842 05:13:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 16) 05:13:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) dup2(r1, r0) 05:13:58 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2151122d34a8f626) keyctl$set_reqkey_keyring(0xe, 0x1) 05:13:58 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 12) 05:13:58 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:13:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:13:58 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:13:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x18, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 969.509298] FAULT_INJECTION: forcing a failure. [ 969.509298] name failslab, interval 1, probability 0, space 0, times 0 [ 969.510983] CPU: 1 PID: 7197 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 969.511953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 969.513120] Call Trace: [ 969.513504] dump_stack+0x107/0x167 [ 969.514029] should_fail.cold+0x5/0xa [ 969.514564] ? getname_flags.part.0+0x50/0x4f0 [ 969.515213] should_failslab+0x5/0x20 [ 969.515750] kmem_cache_alloc+0x5b/0x310 [ 969.516328] ? new_sync_write+0x499/0x660 [ 969.516927] getname_flags.part.0+0x50/0x4f0 [ 969.517558] getname+0x8e/0xd0 [ 969.518005] do_sys_openat2+0xf9/0x4d0 [ 969.518553] ? build_open_flags+0x6f0/0x6f0 [ 969.519180] ? rcu_read_lock_any_held+0x75/0xa0 [ 969.519837] __x64_sys_openat+0x13f/0x1f0 [ 969.520425] ? __ia32_sys_open+0x1c0/0x1c0 [ 969.521033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 969.521763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 969.522509] do_syscall_64+0x33/0x40 [ 969.523057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 969.523768] RIP: 0033:0x7f7ab94d2a04 [ 969.524291] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 969.526881] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 969.527951] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 969.528954] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 969.529948] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff [ 969.530945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 969.531937] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:13:58 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x0) [ 969.563309] FAULT_INJECTION: forcing a failure. [ 969.563309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 969.565887] CPU: 0 PID: 7202 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 969.567343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 969.569092] Call Trace: [ 969.569657] dump_stack+0x107/0x167 [ 969.570434] should_fail.cold+0x5/0xa [ 969.571266] __alloc_pages_nodemask+0x182/0x600 [ 969.572258] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 969.573562] ? cap_capable+0x1cd/0x230 [ 969.574399] alloc_pages_current+0x187/0x280 [ 969.575343] __get_free_pages+0xc/0xa0 [ 969.576179] io_uring_setup+0xe27/0x2980 [ 969.577039] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 969.578113] ? wait_for_completion_io+0x270/0x270 [ 969.579184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 969.580294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 969.581407] do_syscall_64+0x33/0x40 [ 969.582193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 969.583280] RIP: 0033:0x7f6e4b79cb19 [ 969.584083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 969.587976] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 969.589588] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 969.591104] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 969.592612] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 969.594123] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 969.595630] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:14:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 17) [ 982.552816] FAULT_INJECTION: forcing a failure. [ 982.552816] name failslab, interval 1, probability 0, space 0, times 0 [ 982.554402] CPU: 1 PID: 7219 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 982.555197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.556151] Call Trace: [ 982.556458] dump_stack+0x107/0x167 [ 982.556875] should_fail.cold+0x5/0xa [ 982.557312] ? create_object.isra.0+0x3a/0xa30 [ 982.557827] should_failslab+0x5/0x20 [ 982.558262] kmem_cache_alloc+0x5b/0x310 [ 982.558723] ? __generic_file_write_iter+0x1a4/0x5d0 [ 982.559320] create_object.isra.0+0x3a/0xa30 [ 982.559818] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.560396] kmem_cache_alloc+0x159/0x310 [ 982.560869] getname_flags.part.0+0x50/0x4f0 [ 982.561377] getname+0x8e/0xd0 [ 982.561744] do_sys_openat2+0xf9/0x4d0 [ 982.562191] ? build_open_flags+0x6f0/0x6f0 [ 982.562683] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.563217] __x64_sys_openat+0x13f/0x1f0 [ 982.563686] ? __ia32_sys_open+0x1c0/0x1c0 [ 982.564173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.564768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.565355] do_syscall_64+0x33/0x40 [ 982.565776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.566359] RIP: 0033:0x7f7ab94d2a04 [ 982.566786] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 982.568884] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 982.569752] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 982.570563] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 982.571378] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff 05:14:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) dup3(r0, r0, 0x0) 05:14:11 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x4, 0x8, 0xd9, 0x0, 0x0, 0x3ff, 0x18811, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0xe834, 0x7, 0x2b, 0x8, 0x9, 0x7ff, 0x8, 0x0, 0x1, 0x0, 0x400}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$vga_arbiter(r3, &(0x7f0000000240), 0xf) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bind$bt_sco(r3, &(0x7f0000000340), 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) 05:14:11 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:14:11 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 13) 05:14:11 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x34}}, 0x40000) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 982.572329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 982.573195] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 982.575762] loop7: detected capacity change from 0 to 2048 [ 982.581560] EXT4-fs (loop7): invalid first ino: 2875922842 [ 982.595571] FAULT_INJECTION: forcing a failure. [ 982.595571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 982.597016] CPU: 1 PID: 7231 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 982.597794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.598748] Call Trace: [ 982.599055] dump_stack+0x107/0x167 [ 982.599482] should_fail.cold+0x5/0xa [ 982.599921] __alloc_pages_nodemask+0x182/0x600 [ 982.600456] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 982.601145] ? cap_capable+0x1cd/0x230 [ 982.601594] alloc_pages_current+0x187/0x280 [ 982.602094] __get_free_pages+0xc/0xa0 [ 982.602539] io_uring_setup+0xf9a/0x2980 [ 982.603020] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 982.603598] ? wait_for_completion_io+0x270/0x270 [ 982.604160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.604756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.605348] do_syscall_64+0x33/0x40 [ 982.605778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.606360] RIP: 0033:0x7f6e4b79cb19 [ 982.606792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.608886] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 05:14:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x19, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 982.609754] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 982.610768] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 982.611581] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 982.612392] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 982.613206] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:14:11 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:14:26 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 14) 05:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x1a, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:26 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x6, 0xffffffff, 0x34, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0x7, 0x4}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x811, 0x3f, 0x0, 0x5, 0x8486e367057d778, r0}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x8, 0x7, 0x4, 0x0, 0x3, 0x82000, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xff, 0x9}, 0x200, 0xff, 0x7, 0x7, 0x0, 0x3, 0x81, 0x0, 0x2303, 0x0, 0x100}, r0, 0xf, 0xffffffffffffffff, 0xa) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) 05:14:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xca9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x3, 0x80000}) 05:14:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r2, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000d40)={0x0, 0xfffffffffffffffc, 0xba, 0x80, @scatter={0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/50, 0x32}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000a40)=""/211, 0xd3}]}, &(0x7f0000000b40)="5cf3ff1a0f9a0f4d493a5356265a6335a69762fcb0cacb6552e55ea2bc4cd520d88b22811ec3edb2ff1eef4ce10ab2c18593e0f7838ccb0359e9d0b14292b410dfc014709954db4d66f194f84149e5ede10128fa6ec313735a6a101abed70e31886412bb37c7dd3f06dfefd429692fa2d08a0184cf03231f7a94fbce7c89e78a1d87ef87e60a18dc6abf83c99d15649a7df168689262f8846a37fc9a42e53f25169264c057ef16fe4174588a9004e8d192e29c0c19edd7fba74f", &(0x7f0000000c00)=""/203, 0x2, 0x3, 0x2, &(0x7f0000000d00)}) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/144, 0x90}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000640)=""/9, 0x9}], 0xa, &(0x7f0000000180)=""/125, 0x7d}, 0x40000040) keyctl$set_reqkey_keyring(0xe, 0x1) connect$bt_sco(r1, &(0x7f0000000840), 0x8) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:14:26 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:14:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 18) [ 996.802884] FAULT_INJECTION: forcing a failure. [ 996.802884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.804613] CPU: 1 PID: 7254 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 996.805594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.806777] Call Trace: [ 996.807170] dump_stack+0x107/0x167 [ 996.807695] should_fail.cold+0x5/0xa [ 996.808243] strncpy_from_user+0x34/0x470 [ 996.808843] getname_flags.part.0+0x95/0x4f0 [ 996.809475] getname+0x8e/0xd0 [ 996.809944] do_sys_openat2+0xf9/0x4d0 [ 996.810504] ? build_open_flags+0x6f0/0x6f0 [ 996.811141] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.811821] __x64_sys_openat+0x13f/0x1f0 [ 996.812420] ? __ia32_sys_open+0x1c0/0x1c0 [ 996.813037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.813082] FAULT_INJECTION: forcing a failure. [ 996.813082] name failslab, interval 1, probability 0, space 0, times 0 [ 996.813793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.813811] do_syscall_64+0x33/0x40 [ 996.813826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.813835] RIP: 0033:0x7f7ab94d2a04 [ 996.813847] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 996.813867] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 996.823246] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 996.824274] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 996.825282] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff [ 996.826293] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 996.827309] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 996.828359] CPU: 0 PID: 7249 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 996.830290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.832633] Call Trace: [ 996.833393] dump_stack+0x107/0x167 [ 996.834418] should_fail.cold+0x5/0xa [ 996.835504] ? io_uring_setup+0x17ed/0x2980 [ 996.836704] should_failslab+0x5/0x20 [ 996.837775] kmem_cache_alloc_trace+0x55/0x320 [ 996.839067] ? alloc_pages_current+0x18f/0x280 [ 996.840361] io_uring_setup+0x17ed/0x2980 [ 996.841544] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 996.843026] ? wait_for_completion_io+0x270/0x270 [ 996.844328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.845676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.847003] do_syscall_64+0x33/0x40 [ 996.847945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.849091] RIP: 0033:0x7f6e4b79cb19 [ 996.849923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.854044] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 996.855748] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 996.857344] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 996.858942] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 996.860539] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 996.862133] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:14:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 19) 05:14:26 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:26 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) [ 996.928091] FAULT_INJECTION: forcing a failure. [ 996.928091] name failslab, interval 1, probability 0, space 0, times 0 [ 996.929762] CPU: 1 PID: 7270 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 996.930744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.931946] Call Trace: [ 996.932339] dump_stack+0x107/0x167 [ 996.932871] should_fail.cold+0x5/0xa [ 996.933428] ? __alloc_file+0x21/0x320 [ 996.933992] should_failslab+0x5/0x20 [ 996.934549] kmem_cache_alloc+0x5b/0x310 [ 996.935150] __alloc_file+0x21/0x320 [ 996.935691] alloc_empty_file+0x6d/0x170 [ 996.936284] path_openat+0xe6/0x2770 [ 996.936823] ? __lock_acquire+0x1657/0x5b00 [ 996.937460] ? path_lookupat+0x860/0x860 [ 996.938050] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 996.938806] ? SOFTIRQ_verbose+0x10/0x10 [ 996.939398] ? find_held_lock+0x2c/0x110 [ 996.939999] do_filp_open+0x190/0x3e0 [ 996.940545] ? may_open_dev+0xf0/0xf0 [ 996.941105] ? alloc_fd+0x2e7/0x670 [ 996.941632] ? lock_downgrade+0x6d0/0x6d0 [ 996.942232] ? do_raw_spin_lock+0x121/0x260 [ 996.942850] ? rwlock_bug.part.0+0x90/0x90 [ 996.943476] ? _raw_spin_unlock+0x1a/0x30 [ 996.944067] ? alloc_fd+0x2e7/0x670 [ 996.944604] do_sys_openat2+0x171/0x4d0 [ 996.945179] ? build_open_flags+0x6f0/0x6f0 [ 996.945804] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.946472] __x64_sys_openat+0x13f/0x1f0 [ 996.947084] ? __ia32_sys_open+0x1c0/0x1c0 [ 996.947703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.948459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.949199] do_syscall_64+0x33/0x40 [ 996.949735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.950470] RIP: 0033:0x7f7ab94d2a04 [ 996.951012] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 996.953643] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 996.954733] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 996.955762] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 996.956777] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff [ 996.957797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 996.958817] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x1b, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:26 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:14:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) dup2(r2, r1) write$vga_arbiter(r1, 0x0, 0x3f00) dup2(r0, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 05:14:26 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 15) [ 997.055143] FAULT_INJECTION: forcing a failure. [ 997.055143] name failslab, interval 1, probability 0, space 0, times 0 [ 997.056893] CPU: 1 PID: 7282 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 997.057900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 997.059019] Call Trace: [ 997.059388] dump_stack+0x107/0x167 [ 997.059882] should_fail.cold+0x5/0xa [ 997.060400] ? create_object.isra.0+0x3a/0xa30 [ 997.061014] should_failslab+0x5/0x20 [ 997.061532] kmem_cache_alloc+0x5b/0x310 [ 997.062086] create_object.isra.0+0x3a/0xa30 [ 997.062680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 997.063383] kmem_cache_alloc_trace+0x151/0x320 [ 997.064013] ? alloc_pages_current+0x18f/0x280 [ 997.064641] io_uring_setup+0x17ed/0x2980 [ 997.065210] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 997.065891] ? wait_for_completion_io+0x270/0x270 [ 997.066566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 997.067284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 997.067985] do_syscall_64+0x33/0x40 [ 997.068483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 997.069166] RIP: 0033:0x7f6e4b79cb19 [ 997.069671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 997.072109] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 997.073127] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 997.074078] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 997.075041] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 997.075989] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 997.076944] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:14:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x3, 0x65, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, @private1, 0x8, 0x8, 0x81, 0x93c}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r0, 0x2f, 0x2, 0x4, 0x7, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x5, 0x8}}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x1c800, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x40, 0x4c}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51d3215e647b32c8d75542134078421e0ff697d32319f82b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b6469898b084ead82f5a94346800d03431ef519234b3d5db"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff9) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x19c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80000001}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x134, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xae, 0x2, "6dae2364740afd88d702eae7976d914dbaa271acd773c4c69531eca4f7388642fbeff6df47ebe2d7cd32de8cb44b7b9d51ff943cb0b5a511f8bc0ffe2a1113cac50c0814319cc9acf4754bcf12595bbab192207354d35d8ff93adbbae656464f2d04db33df3b3e1b36e2846ff07f60ac3075b0473338b44cf7eda74c88f87644ecbb970894cdbbc54b1bad71ff8399bc2d6516a364527ac741f2fac66ce58b3cd02511c4bd5d4155ab19"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x77, 0x2, "395d2f9a2613ee9871620ae92a4e94b3715f9cd79444c62516443c46d11a37b4a1ebca87771a549b1c23ae040dd11fb342234a47db36e1a40d70755ef46fd22e60af02267e46df66edff6d38d2d53f42398fa1cc72de15d54d401817bb73f2ec2296dfe76d0838c1d04f41873468647e78cdf9"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c4) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x9c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004021}, 0x811) 05:14:26 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x73, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x1000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 05:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x1c, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@msf={0x1f, 0x11, 0x7f}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 998.906994] Bluetooth: hci7: command 0x0405 tx timeout 05:14:43 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 16) 05:14:43 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffa) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:14:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) r3 = dup3(r2, r2, 0x80000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r4, 0x2275, &(0x7f00000005c0)={@lba}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r6, r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {r3}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) connect$bt_sco(r3, &(0x7f00000016c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 05:14:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 20) [ 1014.638160] FAULT_INJECTION: forcing a failure. [ 1014.638160] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.640665] CPU: 0 PID: 7312 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1014.642138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1014.643936] Call Trace: [ 1014.644507] dump_stack+0x107/0x167 [ 1014.645298] should_fail.cold+0x5/0xa [ 1014.646121] ? create_object.isra.0+0x3a/0xa30 [ 1014.647113] should_failslab+0x5/0x20 [ 1014.647936] kmem_cache_alloc+0x5b/0x310 [ 1014.648814] create_object.isra.0+0x3a/0xa30 [ 1014.649758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1014.650857] kmem_cache_alloc+0x159/0x310 [ 1014.651763] __alloc_file+0x21/0x320 [ 1014.652565] alloc_empty_file+0x6d/0x170 [ 1014.653442] path_openat+0xe6/0x2770 [ 1014.654249] ? __lock_acquire+0x1657/0x5b00 [ 1014.655200] ? path_lookupat+0x860/0x860 [ 1014.656075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1014.657404] ? SOFTIRQ_verbose+0x10/0x10 [ 1014.658276] ? find_held_lock+0x2c/0x110 [ 1014.659173] do_filp_open+0x190/0x3e0 [ 1014.659991] ? may_open_dev+0xf0/0xf0 [ 1014.660816] ? alloc_fd+0x2e7/0x670 [ 1014.661708] ? lock_downgrade+0x6d0/0x6d0 [ 1014.662597] ? do_raw_spin_lock+0x121/0x260 [ 1014.663532] ? rwlock_bug.part.0+0x90/0x90 [ 1014.664459] ? _raw_spin_unlock+0x1a/0x30 [ 1014.665351] ? alloc_fd+0x2e7/0x670 [ 1014.666146] do_sys_openat2+0x171/0x4d0 [ 1014.667006] ? build_open_flags+0x6f0/0x6f0 [ 1014.667926] FAULT_INJECTION: forcing a failure. [ 1014.667926] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.670302] ? rcu_read_lock_any_held+0x75/0xa0 [ 1014.671319] __x64_sys_openat+0x13f/0x1f0 [ 1014.672211] ? __ia32_sys_open+0x1c0/0x1c0 [ 1014.673130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1014.674259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1014.675392] do_syscall_64+0x33/0x40 [ 1014.676196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1014.677299] RIP: 0033:0x7f7ab94d2a04 [ 1014.678101] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1014.682086] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1014.683731] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 1014.685261] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 1014.686796] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff [ 1014.688336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1014.689866] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1014.691442] CPU: 1 PID: 7318 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1014.693008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1014.694775] Call Trace: [ 1014.695357] dump_stack+0x107/0x167 [ 1014.696134] should_fail.cold+0x5/0xa [ 1014.696945] ? copy_process+0x3305/0x78b0 [ 1014.697818] should_failslab+0x5/0x20 [ 1014.698623] kmem_cache_alloc_node+0x55/0x330 [ 1014.699587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1014.700703] copy_process+0x3305/0x78b0 [ 1014.701542] ? SOFTIRQ_verbose+0x10/0x10 [ 1014.702412] ? stack_trace_save+0x8c/0xc0 [ 1014.703316] ? lock_acquire+0x197/0x470 [ 1014.704160] ? io_sq_thread_park+0x79/0xd0 [ 1014.705054] ? lock_release+0x680/0x680 [ 1014.705898] ? __cleanup_sighand+0xb0/0xb0 [ 1014.706794] ? kernel_text_address+0xf2/0x120 [ 1014.707808] ? find_held_lock+0x2c/0x110 [ 1014.708682] ? io_uring_setup+0x1c23/0x2980 [ 1014.709598] ? lock_downgrade+0x6d0/0x6d0 [ 1014.710481] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1014.711530] create_io_thread+0xb6/0xf0 [ 1014.712367] ? pidfd_prepare+0x80/0x80 05:14:43 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:14:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="0110d5a06abb3902263b7b09fbec892841361537398a7f29cdfee3cce90a5721ba8efd8ba458aed7fb6000a6bd9a8de0be8eb8ec3580b026717cdf5356ac5f95081d2cee4d3f9999019d", 0x4a}, {&(0x7f0000000100)="2b63bf590bda8e2b711228b48a83c717ee62", 0x12}, {&(0x7f0000000140)="7e20b1e12b5c145ab12754df70f11796d1a75f56553fc84835ed8ce1ab551ce822106e417940a60732ecaf0983aa7b9b2a5ff004ef08376f3faddafd124e0802293101ac698a6459396263cd3785d914be16d73a040c379ab7bd905a1fc8f7b64a306ea4d60bf1de57253a3f4ab88b5b288caae85421921108bcb3e66f96409174bed52505f54eb47956bf1008d2474a6ba411aa46fd18626904e20e0e6d79c6", 0xa0}, {&(0x7f0000000200)="cf3ee564555a1ed0351faf0e7b92693d3f43aff6a99a09f5a5a498f6474b12a3d89dffc4ccd99426514d0e4982b50667d1470faf2b7aec995c77ea8a4c047f21e067f5c8a3b4f9965f58c352de2e8fc9d47ed1fd965fc151a04786e7f8d202026b14c277cd022e826114ab8a582e9292410b7125057660eaac26e45568af2daa82bb0100685cbe01da0e92a06627f035a94da79f6eb9af4d48e448a4a2d99d04dfe6a54cbb4c9e6d607cd4b85366ca44460651499f8a82f26d77c51ebfa2c62a8fcee4dda6aecb6ebd2bebb6710b17bd1719685df859965f54e73575d2309726a25ac277ee83", 0xe6}, {&(0x7f0000000300)="cc2effdd2ce0ea0ffc514a951a9b8784067771e1d8a41708163e4dfc39b81f52be5c8f14c34ec39baa98de9763d4559aac83f5b57a83ee5a74785561dd3fc91a05a89fb2f4ad9709edf56b1a63bdd94d7456118cf74f0fc797f29ded73363dde741b8927d53fb23b178a0a8fe6b2d137aa59d4277e994b02d6a40d789f5aaddac989bdfc2f0c8d8195e2c15b9aeb38d983cf3987e3d3ea401906d225ac34fa778ce5720e54e5ad5aa92d7ee0bbb36b607017b0cd547430cf434f44d265ccdab1083d537e31050e16089b30cf82638ccfb36e74367417ac6fa31aabfbc6de62625e8e5bef66021c80", 0xe8}], 0x5, 0x0, 0x63}, 0x4) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x3f, 0x4, 0x1, 0x4002, 0xe, "f8ffffffffffffff"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x1d, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:43 executing program 1: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0)) clone3(&(0x7f00000002c0)={0x82000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x30}, &(0x7f0000002100)=""/4096, 0x1000, &(0x7f0000000200)=""/77, &(0x7f0000000280)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x4}, 0x58) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/igmp6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1014.713196] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1014.714441] io_uring_setup+0x1d79/0x2980 [ 1014.715329] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1014.716382] ? wait_for_completion_io+0x270/0x270 [ 1014.717412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1014.718502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1014.719599] do_syscall_64+0x33/0x40 [ 1014.720373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1014.721438] RIP: 0033:0x7f6e4b79cb19 [ 1014.722209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1014.726045] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1014.727642] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1014.729226] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1014.730968] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1014.732484] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1014.733977] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1014.743619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:14:44 executing program 4: r0 = fork() waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0)) process_vm_writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/128, 0x80}], 0x3, &(0x7f0000001480)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/55, 0x37}, {&(0x7f0000001240)=""/214, 0xd6}, {&(0x7f0000001340)=""/86, 0x56}, {&(0x7f00000013c0)=""/36, 0x24}, {&(0x7f0000001400)=""/83, 0x53}], 0x6, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) waitid(0x0, r0, &(0x7f0000001500), 0x80000000, &(0x7f0000001580)) 05:14:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x1e, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:44 executing program 6: r0 = semget(0x1, 0x2, 0x40) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/207) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:44 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x1, 0xd3, 0x10, 0x0, 0x1f, 0x200, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0xf431, 0x10001, 0x1, 0x6, 0x0, 0x6, 0x0, 0xfff, 0x0, 0x4}, r0, 0x6, 0xffffffffffffffff, 0xb) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_setup(0x5, &(0x7f0000000000)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)={'geneve0\x00'}) ioctl$CDROMMULTISESSION(r3, 0x2275, &(0x7f00000005c0)={@lba}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x80, 0xff, 0x5, 0x0, 0x0, 0x8d, 0x4060, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0xe12, 0x8000}, 0x120, 0x6, 0x9, 0x1, 0x2, 0x7, 0xd5, 0x0, 0x3, 0x0, 0x3358}, 0xffffffffffffffff, 0x5, r3, 0xa) [ 1014.872287] loop7: detected capacity change from 0 to 2048 [ 1014.906972] EXT4-fs (loop7): invalid first ino: 2875922842 05:14:44 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:44 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 17) [ 1015.020402] FAULT_INJECTION: forcing a failure. [ 1015.020402] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.022921] CPU: 1 PID: 7357 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1015.024357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.026090] Call Trace: [ 1015.026646] dump_stack+0x107/0x167 [ 1015.027434] should_fail.cold+0x5/0xa [ 1015.028229] ? create_object.isra.0+0x3a/0xa30 [ 1015.029177] should_failslab+0x5/0x20 [ 1015.029967] kmem_cache_alloc+0x5b/0x310 [ 1015.030818] create_object.isra.0+0x3a/0xa30 [ 1015.031756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.032815] kmem_cache_alloc_node+0x169/0x330 [ 1015.033763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.034856] copy_process+0x3305/0x78b0 [ 1015.035683] ? SOFTIRQ_verbose+0x10/0x10 [ 1015.036539] ? stack_trace_save+0x8c/0xc0 [ 1015.037408] ? lock_acquire+0x197/0x470 [ 1015.038242] ? io_sq_thread_park+0x79/0xd0 [ 1015.039129] ? lock_release+0x680/0x680 [ 1015.039975] ? __cleanup_sighand+0xb0/0xb0 [ 1015.040861] ? kernel_text_address+0xf2/0x120 [ 1015.041792] ? find_held_lock+0x2c/0x110 [ 1015.042649] ? io_uring_setup+0x1c23/0x2980 [ 1015.043560] ? lock_downgrade+0x6d0/0x6d0 [ 1015.044431] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1015.045443] create_io_thread+0xb6/0xf0 [ 1015.046288] ? pidfd_prepare+0x80/0x80 [ 1015.047151] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1015.048249] io_uring_setup+0x1d79/0x2980 [ 1015.049120] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1015.050185] ? wait_for_completion_io+0x270/0x270 [ 1015.051232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.052317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.053394] do_syscall_64+0x33/0x40 [ 1015.054173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.055242] RIP: 0033:0x7f6e4b79cb19 [ 1015.056014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.059969] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1015.061607] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1015.063138] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1015.064628] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1015.066108] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1015.067606] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:14:57 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 05:14:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x21, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:57 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x4) 05:14:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7, 0x5, 0x9a, 0x8, 0x0, 0x5, 0x8240, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x7fff}, 0x8140, 0x8, 0x2, 0x5, 0x6, 0x4, 0x1, 0x0, 0x352c, 0x0, 0x20}, r1, 0xe, r0, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r4) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r7, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018570000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) dup2(r3, r5) syz_io_uring_complete(0x0) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) dup2(0xffffffffffffffff, r2) 05:14:57 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 21) 05:14:57 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x1000, 0xe8d, 0x100, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, r1, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x4, 0xffffffff, 0x8, 0x2, 0x1}) write$vga_arbiter(r3, 0x0, 0x3f00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)="69146d6ffbcdf62b7e0b6da9da6fae8ee61776cadf4a8be90e62030fa52076b8b2876eec06d98a742e1c557b3258e393f1490752e085373295614f799ca74a26e2e1d61c2c9c4956b85f534e695a8830ae04f1e408a40fbd87411d4a1190fda71fcca6964c330d89fca37e22ee6988bcd79368223cfa464612cdf4fe3e758ea277b8f6509a1af6c37f3e8096ec2528f57769089a2eddb2058105fb72be2a26a3126b2fdaf75e16d11fc9636bc77b09cf06faed58eb5e94e8f48c61f85384bc4c053b822ff483fe55bf44c56b2ade2febae61ffd67b5d81ea54a6cd4ca259b38aaca9", 0xe2, r3}, 0x68) 05:14:57 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 18) 05:14:57 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:14:57 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1028.673292] FAULT_INJECTION: forcing a failure. [ 1028.673292] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.674903] CPU: 1 PID: 7383 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1028.675833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.676897] Call Trace: [ 1028.677253] dump_stack+0x107/0x167 [ 1028.677739] should_fail.cold+0x5/0xa [ 1028.678232] ? security_file_alloc+0x34/0x170 [ 1028.678827] should_failslab+0x5/0x20 [ 1028.679347] kmem_cache_alloc+0x5b/0x310 [ 1028.679871] security_file_alloc+0x34/0x170 [ 1028.680448] __alloc_file+0xb7/0x320 [ 1028.680945] alloc_empty_file+0x6d/0x170 [ 1028.681487] path_openat+0xe6/0x2770 [ 1028.681983] ? __lock_acquire+0x1657/0x5b00 [ 1028.682546] ? path_lookupat+0x860/0x860 [ 1028.683087] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1028.683771] ? SOFTIRQ_verbose+0x10/0x10 [ 1028.684310] ? find_held_lock+0x2c/0x110 [ 1028.684840] do_filp_open+0x190/0x3e0 [ 1028.685346] ? may_open_dev+0xf0/0xf0 [ 1028.685857] ? alloc_fd+0x2e7/0x670 [ 1028.686345] ? lock_downgrade+0x6d0/0x6d0 [ 1028.686894] ? do_raw_spin_lock+0x121/0x260 [ 1028.687281] FAULT_INJECTION: forcing a failure. [ 1028.687281] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.687457] ? rwlock_bug.part.0+0x90/0x90 [ 1028.687477] ? _raw_spin_unlock+0x1a/0x30 [ 1028.690995] ? alloc_fd+0x2e7/0x670 [ 1028.691498] do_sys_openat2+0x171/0x4d0 [ 1028.692029] ? build_open_flags+0x6f0/0x6f0 [ 1028.692608] ? rcu_read_lock_any_held+0x75/0xa0 [ 1028.693228] __x64_sys_openat+0x13f/0x1f0 [ 1028.693781] ? __ia32_sys_open+0x1c0/0x1c0 [ 1028.694328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.695022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.695718] do_syscall_64+0x33/0x40 [ 1028.696212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1028.696888] RIP: 0033:0x7f7ab94d2a04 [ 1028.697381] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1028.699825] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1028.700834] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 1028.701763] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 1028.702711] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff [ 1028.703635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1028.704570] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1028.705521] CPU: 0 PID: 7387 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1028.707021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.708835] Call Trace: [ 1028.709415] dump_stack+0x107/0x167 [ 1028.710205] should_fail.cold+0x5/0xa [ 1028.711033] ? create_object.isra.0+0x3a/0xa30 [ 1028.712037] should_failslab+0x5/0x20 [ 1028.712865] kmem_cache_alloc+0x5b/0x310 [ 1028.713761] create_object.isra.0+0x3a/0xa30 [ 1028.714722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1028.715847] kmem_cache_alloc_node+0x169/0x330 [ 1028.716848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.718005] copy_process+0x3305/0x78b0 [ 1028.718873] ? SOFTIRQ_verbose+0x10/0x10 [ 1028.719787] ? stack_trace_save+0x8c/0xc0 [ 1028.720700] ? lock_acquire+0x197/0x470 [ 1028.721569] ? io_sq_thread_park+0x79/0xd0 [ 1028.722500] ? lock_release+0x680/0x680 [ 1028.723386] ? __cleanup_sighand+0xb0/0xb0 [ 1028.724314] ? kernel_text_address+0xf2/0x120 [ 1028.725301] ? find_held_lock+0x2c/0x110 [ 1028.726197] ? io_uring_setup+0x1c23/0x2980 [ 1028.727140] ? lock_downgrade+0x6d0/0x6d0 [ 1028.728060] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1028.729138] create_io_thread+0xb6/0xf0 [ 1028.730006] ? pidfd_prepare+0x80/0x80 [ 1028.730864] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1028.731969] io_uring_setup+0x1d79/0x2980 [ 1028.732890] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1028.733996] ? wait_for_completion_io+0x270/0x270 [ 1028.735077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.736241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.737380] do_syscall_64+0x33/0x40 [ 1028.738196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1028.739329] RIP: 0033:0x7f6e4b79cb19 [ 1028.740144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1028.744196] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1028.745865] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1028.747438] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1028.749008] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1028.750568] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1028.752141] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1028.784927] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:14:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 22) 05:14:58 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) 05:14:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x22, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:14:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="001991d59294f798cdc1bdfd97f1cf91"]) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0x0, 0x2}, @mss={0x2, 0x80}, @timestamp], 0x6) 05:14:58 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1028.819724] FAULT_INJECTION: forcing a failure. [ 1028.819724] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.822194] CPU: 0 PID: 7401 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1028.823694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.825511] Call Trace: [ 1028.826090] dump_stack+0x107/0x167 [ 1028.826886] should_fail.cold+0x5/0xa [ 1028.827731] ? create_object.isra.0+0x3a/0xa30 [ 1028.828720] should_failslab+0x5/0x20 [ 1028.829548] kmem_cache_alloc+0x5b/0x310 [ 1028.830431] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1028.831636] create_object.isra.0+0x3a/0xa30 [ 1028.832589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1028.833699] kmem_cache_alloc+0x159/0x310 [ 1028.834610] security_file_alloc+0x34/0x170 [ 1028.835556] __alloc_file+0xb7/0x320 [ 1028.836369] alloc_empty_file+0x6d/0x170 [ 1028.837255] path_openat+0xe6/0x2770 [ 1028.838073] ? __lock_acquire+0x1657/0x5b00 [ 1028.839034] ? path_lookupat+0x860/0x860 [ 1028.839940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1028.841084] ? SOFTIRQ_verbose+0x10/0x10 [ 1028.841965] ? find_held_lock+0x2c/0x110 [ 1028.842859] do_filp_open+0x190/0x3e0 [ 1028.843700] ? may_open_dev+0xf0/0xf0 [ 1028.844532] ? alloc_fd+0x2e7/0x670 [ 1028.845326] ? lock_downgrade+0x6d0/0x6d0 [ 1028.846225] ? do_raw_spin_lock+0x121/0x260 [ 1028.847171] ? rwlock_bug.part.0+0x90/0x90 [ 1028.848114] ? _raw_spin_unlock+0x1a/0x30 [ 1028.849012] ? alloc_fd+0x2e7/0x670 [ 1028.849820] do_sys_openat2+0x171/0x4d0 [ 1028.850688] ? build_open_flags+0x6f0/0x6f0 [ 1028.851647] ? rcu_read_lock_any_held+0x75/0xa0 [ 1028.852663] __x64_sys_openat+0x13f/0x1f0 [ 1028.853566] ? __ia32_sys_open+0x1c0/0x1c0 [ 1028.854494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.855670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.856799] do_syscall_64+0x33/0x40 [ 1028.857611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1028.858731] RIP: 0033:0x7f7ab94d2a04 [ 1028.859554] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1028.863589] RSP: 002b:00007f7ab6a94ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1028.865243] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab94d2a04 [ 1028.866797] RDX: 0000000000000002 RSI: 00007f7ab6a95000 RDI: 00000000ffffff9c [ 1028.868359] RBP: 00007f7ab6a95000 R08: 0000000000000000 R09: ffffffffffffffff [ 1028.869909] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1028.871471] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1028.883162] loop7: detected capacity change from 0 to 2048 [ 1028.888949] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1030.842915] Bluetooth: hci7: command 0x0405 tx timeout 05:15:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xfffffff8, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008004}, 0x804) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:15:11 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001280)=""/62, &(0x7f00000012c0)=0x3e) dup2(r1, r0) write$vga_arbiter(r0, 0x0, 0x3f00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000280)={{r0}, r2, 0x0, @inherit={0x58, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000002000000000000000000000000000000000000000000000045000000000000000300000000000000089b000000000000ffffffff00000000090000000000000007000000000000000100000000001400"]}, @subvolid=0xfffffffffffffffd}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:15:11 executing program 2: r0 = fork() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000009000000000000003000"]) r2 = fork() ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x81, 0x5, 0x6, 0x9, 0x0, 0x2, 0x40100, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0x9}, 0x84, 0x5, 0x11, 0x1, 0x1, 0x3, 0x8, 0x0, 0x3f, 0x0, 0x2}, r2, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, r1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000040)={0x4, 0x0, 0x2, 0x8, 0x2, [{0x1, 0x2, 0x4036, '\x00', 0xc02}, {0x0, 0xd7a2, 0x6, '\x00', 0x700}]}) dup2(r4, r3) 05:15:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 23) 05:15:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) recvmsg$unix(r0, &(0x7f0000000980)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/140, 0x8c}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}, 0x10000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x87, 0x0, 0x4, 0x1f, 0x0, 0x6, 0x1000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x900, 0x9, 0xb70, 0x2, 0x6, 0x9, 0xffff, 0x0, 0x80, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4004, @fd=r3, 0x5, 0x0, 0x0, 0x8, 0x1, {0x3, r4}}, 0x20) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r5 = socket(0x2c, 0x4, 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="d76fa9d79d", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf250200000054000580340002800800030002000000080002000104000008000300000100000800010018000000080004009710000008000400b904000007000100696200000800010065746800040002800700010069620000"], 0x68}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000) 05:15:11 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 19) 05:15:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x23, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1042.320075] FAULT_INJECTION: forcing a failure. [ 1042.320075] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.321607] CPU: 1 PID: 7427 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1042.322487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.323555] Call Trace: [ 1042.323904] dump_stack+0x107/0x167 [ 1042.324368] should_fail.cold+0x5/0xa [ 1042.324858] ? prepare_creds+0x25/0x5e0 [ 1042.325367] should_failslab+0x5/0x20 [ 1042.325849] kmem_cache_alloc+0x5b/0x310 [ 1042.326370] ? lock_downgrade+0x6d0/0x6d0 [ 1042.326895] prepare_creds+0x25/0x5e0 [ 1042.327391] copy_creds+0x72/0x580 [ 1042.327869] copy_process+0xfef/0x78b0 [ 1042.328368] ? SOFTIRQ_verbose+0x10/0x10 [ 1042.328899] ? stack_trace_save+0x8c/0xc0 [ 1042.329427] ? lock_acquire+0x197/0x470 [ 1042.329937] ? io_sq_thread_park+0x79/0xd0 [ 1042.330479] ? __cleanup_sighand+0xb0/0xb0 [ 1042.331020] ? kernel_text_address+0xf2/0x120 [ 1042.331599] ? find_held_lock+0x2c/0x110 [ 1042.332116] ? io_uring_setup+0x1c23/0x2980 [ 1042.332656] ? lock_downgrade+0x6d0/0x6d0 [ 1042.333181] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1042.333800] create_io_thread+0xb6/0xf0 [ 1042.334302] ? pidfd_prepare+0x80/0x80 [ 1042.334808] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1042.335443] io_uring_setup+0x1d79/0x2980 [ 1042.335986] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1042.336629] ? wait_for_completion_io+0x270/0x270 [ 1042.337277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.337948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.338604] do_syscall_64+0x33/0x40 [ 1042.339076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.339734] RIP: 0033:0x7f6e4b79cb19 [ 1042.340203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.342539] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1042.343508] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1042.344411] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1042.345313] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1042.346233] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1042.347122] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1042.348820] FAULT_INJECTION: forcing a failure. [ 1042.348820] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.350444] CPU: 1 PID: 7433 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1042.351294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.352345] Call Trace: [ 1042.352676] dump_stack+0x107/0x167 [ 1042.353132] should_fail.cold+0x5/0xa [ 1042.353609] ? __kthread_create_on_node+0xd1/0x400 [ 1042.354220] should_failslab+0x5/0x20 [ 1042.354694] kmem_cache_alloc_trace+0x55/0x320 [ 1042.355270] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1042.355874] __kthread_create_on_node+0xd1/0x400 [ 1042.356465] ? __kthread_parkme+0x1d0/0x1d0 [ 1042.357012] ? __mutex_lock+0x4fe/0x10b0 [ 1042.357519] ? loop_configure+0xc8a/0x1410 [ 1042.358047] ? do_raw_spin_unlock+0x4f/0x220 [ 1042.358595] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1042.359190] kthread_create_on_node+0xbb/0x100 [ 1042.359768] ? __kthread_create_on_node+0x400/0x400 [ 1042.360391] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.360987] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.361585] loop_configure+0x3e7/0x1410 [ 1042.362129] lo_ioctl+0xa57/0x16b0 [ 1042.362573] ? avc_has_extended_perms+0x7f1/0xf40 [ 1042.363191] ? loop_set_status_old+0x250/0x250 [ 1042.363770] ? avc_ss_reset+0x180/0x180 [ 1042.364271] ? find_held_lock+0x2c/0x110 [ 1042.364788] ? __lock_acquire+0xbb1/0x5b00 [ 1042.365348] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1042.366006] ? generic_block_fiemap+0x60/0x60 [ 1042.366562] ? lock_downgrade+0x6d0/0x6d0 [ 1042.367076] ? build_open_flags+0x6f0/0x6f0 [ 1042.367624] ? loop_set_status_old+0x250/0x250 [ 1042.368188] blkdev_ioctl+0x291/0x710 [ 1042.368660] ? blkdev_common_ioctl+0x1930/0x1930 [ 1042.369251] ? selinux_file_ioctl+0xb6/0x270 [ 1042.369802] block_ioctl+0xf9/0x140 [ 1042.370254] ? blkdev_read_iter+0x1c0/0x1c0 [ 1042.370788] __x64_sys_ioctl+0x19a/0x210 [ 1042.371300] do_syscall_64+0x33/0x40 [ 1042.371779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.372414] RIP: 0033:0x7f7ab951f8d7 [ 1042.372873] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.375157] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.376113] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1042.377000] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1042.377881] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1042.378766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1042.379664] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:15:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6003, @fd_index=0x2, 0x1, 0x72, 0x1, 0x16, 0x1}, 0xc6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000051}, 0x4008000) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:15:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x28, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:15:11 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x4) 05:15:11 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) 05:15:11 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 20) 05:15:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x8, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:15:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 24) [ 1042.498387] FAULT_INJECTION: forcing a failure. [ 1042.498387] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.499834] CPU: 1 PID: 7453 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1042.500659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.501653] Call Trace: [ 1042.501977] dump_stack+0x107/0x167 [ 1042.502411] should_fail.cold+0x5/0xa [ 1042.502860] ? create_object.isra.0+0x3a/0xa30 [ 1042.503413] should_failslab+0x5/0x20 [ 1042.503873] kmem_cache_alloc+0x5b/0x310 [ 1042.504365] create_object.isra.0+0x3a/0xa30 [ 1042.504889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.505501] kmem_cache_alloc+0x159/0x310 [ 1042.506000] prepare_creds+0x25/0x5e0 [ 1042.506457] copy_creds+0x72/0x580 [ 1042.506882] copy_process+0xfef/0x78b0 [ 1042.507345] ? SOFTIRQ_verbose+0x10/0x10 [ 1042.507841] ? stack_trace_save+0x8c/0xc0 [ 1042.508346] ? lock_acquire+0x197/0x470 [ 1042.508819] ? io_sq_thread_park+0x79/0xd0 [ 1042.509331] ? __cleanup_sighand+0xb0/0xb0 [ 1042.509833] ? kernel_text_address+0xf2/0x120 [ 1042.510366] ? find_held_lock+0x2c/0x110 [ 1042.510841] ? io_uring_setup+0x1c23/0x2980 [ 1042.511352] ? lock_downgrade+0x6d0/0x6d0 [ 1042.511857] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1042.512443] create_io_thread+0xb6/0xf0 [ 1042.512915] ? pidfd_prepare+0x80/0x80 [ 1042.513383] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1042.513975] io_uring_setup+0x1d79/0x2980 [ 1042.514471] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1042.515074] ? wait_for_completion_io+0x270/0x270 [ 1042.515666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.516284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.516898] do_syscall_64+0x33/0x40 [ 1042.517339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.517946] RIP: 0033:0x7f6e4b79cb19 [ 1042.518385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.520579] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1042.521478] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1042.522321] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1042.523159] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1042.524004] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1042.524841] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1042.530695] FAULT_INJECTION: forcing a failure. [ 1042.530695] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.533320] CPU: 0 PID: 7455 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1042.534808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.536617] Call Trace: [ 1042.537194] dump_stack+0x107/0x167 [ 1042.537987] should_fail.cold+0x5/0xa 05:15:11 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:15:11 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x0) [ 1042.538819] ? create_object.isra.0+0x3a/0xa30 [ 1042.540000] should_failslab+0x5/0x20 05:15:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') fcntl$notify(r0, 0x402, 0x80000000) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:15:11 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) [ 1042.540833] kmem_cache_alloc+0x5b/0x310 [ 1042.541762] create_object.isra.0+0x3a/0xa30 [ 1042.542709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.543813] kmem_cache_alloc_trace+0x151/0x320 [ 1042.544838] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1042.545865] __kthread_create_on_node+0xd1/0x400 [ 1042.546893] ? __kthread_parkme+0x1d0/0x1d0 [ 1042.547848] ? __mutex_lock+0x4fe/0x10b0 [ 1042.548735] ? loop_configure+0xc8a/0x1410 [ 1042.549647] ? do_raw_spin_unlock+0x4f/0x220 [ 1042.550608] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1042.551642] kthread_create_on_node+0xbb/0x100 [ 1042.552618] ? __kthread_create_on_node+0x400/0x400 [ 1042.553717] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.554751] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.555800] loop_configure+0x3e7/0x1410 [ 1042.556705] lo_ioctl+0xa57/0x16b0 [ 1042.557476] ? avc_has_extended_perms+0x7f1/0xf40 [ 1042.558529] ? loop_set_status_old+0x250/0x250 [ 1042.559532] ? avc_ss_reset+0x180/0x180 [ 1042.560398] ? find_held_lock+0x2c/0x110 [ 1042.561298] ? __lock_acquire+0xbb1/0x5b00 [ 1042.562270] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1042.563418] ? generic_block_fiemap+0x60/0x60 [ 1042.564398] ? lock_downgrade+0x6d0/0x6d0 [ 1042.565300] ? build_open_flags+0x6f0/0x6f0 [ 1042.566240] ? loop_set_status_old+0x250/0x250 [ 1042.567226] blkdev_ioctl+0x291/0x710 [ 1042.568055] ? blkdev_common_ioctl+0x1930/0x1930 [ 1042.569088] ? selinux_file_ioctl+0xb6/0x270 [ 1042.570063] block_ioctl+0xf9/0x140 [ 1042.570848] ? blkdev_read_iter+0x1c0/0x1c0 [ 1042.571783] __x64_sys_ioctl+0x19a/0x210 [ 1042.572648] do_syscall_64+0x33/0x40 [ 1042.573450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.574545] RIP: 0033:0x7f7ab951f8d7 [ 1042.575349] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.579336] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.580979] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1042.582518] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1042.584067] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1042.585595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1042.587120] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1042.616252] loop7: detected capacity change from 0 to 2048 [ 1042.701022] EXT4-fs (loop7): invalid first ino: 2875922842 05:15:24 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 21) 05:15:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x19, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1055.469204] FAULT_INJECTION: forcing a failure. [ 1055.469204] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.471820] CPU: 0 PID: 7482 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1055.473325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.475169] Call Trace: [ 1055.475771] dump_stack+0x107/0x167 [ 1055.476576] should_fail.cold+0x5/0xa [ 1055.477419] ? security_prepare_creds+0x112/0x190 [ 1055.478485] should_failslab+0x5/0x20 [ 1055.479323] __kmalloc+0x72/0x390 [ 1055.480109] security_prepare_creds+0x112/0x190 [ 1055.481134] prepare_creds+0x452/0x5e0 [ 1055.481989] copy_creds+0x72/0x580 [ 1055.482775] copy_process+0xfef/0x78b0 [ 1055.483641] ? SOFTIRQ_verbose+0x10/0x10 [ 1055.484546] ? stack_trace_save+0x8c/0xc0 [ 1055.485463] ? lock_acquire+0x197/0x470 [ 1055.486334] ? io_sq_thread_park+0x79/0xd0 [ 1055.487276] ? __cleanup_sighand+0xb0/0xb0 [ 1055.488213] ? kernel_text_address+0xf2/0x120 [ 1055.489202] ? find_held_lock+0x2c/0x110 [ 1055.490102] ? io_uring_setup+0x1c23/0x2980 [ 1055.491050] ? lock_downgrade+0x6d0/0x6d0 [ 1055.491973] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1055.493050] create_io_thread+0xb6/0xf0 [ 1055.493921] ? pidfd_prepare+0x80/0x80 [ 1055.494783] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1055.495891] io_uring_setup+0x1d79/0x2980 [ 1055.496812] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1055.497922] ? wait_for_completion_io+0x270/0x270 [ 1055.499004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1055.500160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1055.501289] do_syscall_64+0x33/0x40 [ 1055.502100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1055.503215] RIP: 0033:0x7f6e4b79cb19 [ 1055.504030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.508030] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1055.509680] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1055.511225] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1055.512787] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1055.514337] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1055.515904] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:15:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xa2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) syz_io_uring_setup(0x5717, &(0x7f0000000040)={0x0, 0x5882, 0x10, 0x1, 0x281, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 05:15:24 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 25) 05:15:24 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) syz_emit_ethernet(0x36, &(0x7f0000001080)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @rand_addr=0x1ff, {[@timestamp={0x44, 0x4, 0x6c, 0x0, 0xf}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 05:15:24 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) 05:15:24 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x1) 05:15:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x2000100, 0x0, 0x0, 0xc4d}, 0x0, 0x6, r0, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:15:24 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:15:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') 05:15:24 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:15:24 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1055.551144] FAULT_INJECTION: forcing a failure. [ 1055.551144] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.553663] CPU: 0 PID: 7496 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1055.555178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.557029] Call Trace: [ 1055.557616] dump_stack+0x107/0x167 [ 1055.558429] should_fail.cold+0x5/0xa [ 1055.559279] ? __kernfs_new_node+0xd4/0x860 [ 1055.560246] should_failslab+0x5/0x20 [ 1055.561090] kmem_cache_alloc+0x5b/0x310 [ 1055.562000] __kernfs_new_node+0xd4/0x860 [ 1055.562921] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1055.563980] ? lock_acquire+0x197/0x470 [ 1055.564863] ? lock_chain_count+0x20/0x20 [ 1055.565792] ? lock_acquire+0x197/0x470 [ 1055.566674] ? task_rq_lock+0xab/0x270 [ 1055.567544] ? lock_release+0x680/0x680 [ 1055.568437] ? find_held_lock+0x2c/0x110 [ 1055.569345] kernfs_new_node+0x18d/0x250 [ 1055.570256] kernfs_create_dir_ns+0x49/0x160 [ 1055.571239] internal_create_group+0x793/0xb30 [ 1055.572267] ? set_user_nice.part.0+0x2fd/0x760 [ 1055.573298] ? sysfs_remove_group+0x170/0x170 [ 1055.574297] ? lockdep_init_map_type+0x2c7/0x780 [ 1055.575350] ? blk_queue_flag_set+0x22/0x30 [ 1055.576318] ? __loop_update_dio+0x2d2/0x690 [ 1055.577302] loop_configure+0x953/0x1410 [ 1055.578220] lo_ioctl+0xa57/0x16b0 05:15:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 1055.579013] ? avc_has_extended_perms+0x7f1/0xf40 [ 1055.580270] ? loop_set_status_old+0x250/0x250 [ 1055.581294] ? avc_ss_reset+0x180/0x180 [ 1055.582180] ? find_held_lock+0x2c/0x110 [ 1055.583096] ? __lock_acquire+0xbb1/0x5b00 [ 1055.584098] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1055.585263] ? generic_block_fiemap+0x60/0x60 [ 1055.586259] ? lock_downgrade+0x6d0/0x6d0 [ 1055.587193] ? build_open_flags+0x6f0/0x6f0 [ 1055.588166] ? loop_set_status_old+0x250/0x250 [ 1055.589177] blkdev_ioctl+0x291/0x710 [ 1055.590024] ? blkdev_common_ioctl+0x1930/0x1930 [ 1055.591082] ? selinux_file_ioctl+0xb6/0x270 [ 1055.592073] block_ioctl+0xf9/0x140 [ 1055.592881] ? blkdev_read_iter+0x1c0/0x1c0 [ 1055.593841] __x64_sys_ioctl+0x19a/0x210 [ 1055.594751] do_syscall_64+0x33/0x40 [ 1055.595585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1055.596719] RIP: 0033:0x7f7ab951f8d7 [ 1055.597549] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.601650] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.603334] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1055.604931] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1055.606510] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1055.608098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1055.609680] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:15:24 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 22) 05:15:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x300, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1055.629535] loop7: detected capacity change from 0 to 2048 [ 1055.638732] EXT4-fs (loop7): invalid first ino: 2875922842 05:15:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='totmaps\x00') pread64(r0, &(0x7f0000000380)=""/252, 0xfc, 0x7) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x101, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x0, 0xd9, &(0x7f00000001c0)="f112d6b6b45088f2388bf3f4e605d923cceb7d46804e3051ba4789ba430dc521fb8b83d082e071b856c9dcd6b9e5d5ea973bf30b8155c34166968decb133f1e64dbbca8f837863bc66172b318a2d2324cd96aaa5a006cf7d0a272c96515d43bf7d04108a47fb0bd63ff227e1744d30bf9ce187c0e96ddfd2aa87dbec45e44a9d84ecdbf92803b19c58681af5b99d4de05bec51f1ed934a6c0b23b3fac3c509f243b33688e5844aaa45639778060478f4b740711af08d95dd2cd36afe4a47f218f2cfc839e53f1dfe6cf4346c0623918f397dceef651ac40f8e", 0x1}, {0xf03, 0x7a, &(0x7f00000002c0)="476203094321c76fc75f0e3434d31fd4d820359e04a92fdc31184889d765e8d219980f3d037742c61e900ecd67b0c41765e335e8bb89aa8e01312c06495c73cf221aecd2f672bd847c839376c6315563ae19113965a8c9232e920d09c4356a1482fa27948bd5362daf639ee8776aedd5dad00abdcc55738d3c61"}]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x20000000}) [ 1055.750269] FAULT_INJECTION: forcing a failure. [ 1055.750269] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.751735] CPU: 1 PID: 7522 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1055.752525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.753492] Call Trace: [ 1055.753804] dump_stack+0x107/0x167 [ 1055.754229] should_fail.cold+0x5/0xa [ 1055.754675] ? create_object.isra.0+0x3a/0xa30 [ 1055.755203] should_failslab+0x5/0x20 [ 1055.755656] kmem_cache_alloc+0x5b/0x310 [ 1055.756131] create_object.isra.0+0x3a/0xa30 [ 1055.756644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1055.757233] __kmalloc+0x16e/0x390 [ 1055.757652] security_prepare_creds+0x112/0x190 [ 1055.758193] prepare_creds+0x452/0x5e0 [ 1055.758646] copy_creds+0x72/0x580 [ 1055.759066] copy_process+0xfef/0x78b0 [ 1055.759512] ? SOFTIRQ_verbose+0x10/0x10 [ 1055.759992] ? stack_trace_save+0x8c/0xc0 [ 1055.760470] ? lock_acquire+0x197/0x470 [ 1055.760929] ? io_sq_thread_park+0x79/0xd0 [ 1055.761426] ? __cleanup_sighand+0xb0/0xb0 [ 1055.761916] ? kernel_text_address+0xf2/0x120 [ 1055.762438] ? find_held_lock+0x2c/0x110 [ 1055.762910] ? io_uring_setup+0x1c23/0x2980 [ 1055.763407] ? lock_downgrade+0x6d0/0x6d0 [ 1055.763896] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1055.764460] create_io_thread+0xb6/0xf0 [ 1055.764919] ? pidfd_prepare+0x80/0x80 [ 1055.765374] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1055.765950] io_uring_setup+0x1d79/0x2980 [ 1055.766433] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1055.767024] ? wait_for_completion_io+0x270/0x270 [ 1055.767602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1055.768211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1055.768808] do_syscall_64+0x33/0x40 [ 1055.769242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1055.769831] RIP: 0033:0x7f6e4b79cb19 [ 1055.770261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.772403] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1055.773284] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1055.774105] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1055.774918] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1055.775746] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1055.776564] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:15:37 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:15:37 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) 05:15:37 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r1, 0x1000003) r3 = dup2(r1, r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x468b}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480000}]}, 0x58}}, 0x20000080) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x65}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x99da}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24064840) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:15:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 26) 05:15:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x25, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:15:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x67, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x5, 0x7, 0x59ef, 0x8, 0x302b, 0x5, 0x101, 0x0, 0xb9, 0x0, 0x13400000000}, 0x0, 0xc, r0, 0x2) 05:15:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:15:37 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 23) [ 1068.628086] FAULT_INJECTION: forcing a failure. [ 1068.628086] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.629733] CPU: 0 PID: 7536 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1068.630663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.631798] Call Trace: [ 1068.632158] dump_stack+0x107/0x167 [ 1068.632641] should_fail.cold+0x5/0xa [ 1068.633164] ? create_object.isra.0+0x3a/0xa30 [ 1068.633773] should_failslab+0x5/0x20 [ 1068.634290] kmem_cache_alloc+0x5b/0x310 [ 1068.634502] FAULT_INJECTION: forcing a failure. [ 1068.634502] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.634835] create_object.isra.0+0x3a/0xa30 [ 1068.634878] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1068.638417] kmem_cache_alloc+0x159/0x310 [ 1068.638981] __kernfs_new_node+0xd4/0x860 [ 1068.639538] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1068.640177] ? lock_acquire+0x197/0x470 [ 1068.640701] ? lock_chain_count+0x20/0x20 [ 1068.641254] ? lock_acquire+0x197/0x470 [ 1068.641795] ? task_rq_lock+0xab/0x270 [ 1068.642316] ? lock_release+0x680/0x680 [ 1068.642862] ? find_held_lock+0x2c/0x110 [ 1068.643414] kernfs_new_node+0x18d/0x250 [ 1068.643985] kernfs_create_dir_ns+0x49/0x160 [ 1068.644584] internal_create_group+0x793/0xb30 [ 1068.645194] ? set_user_nice.part.0+0x2fd/0x760 [ 1068.645813] ? sysfs_remove_group+0x170/0x170 [ 1068.646424] ? lockdep_init_map_type+0x2c7/0x780 [ 1068.647053] ? blk_queue_flag_set+0x22/0x30 [ 1068.647632] ? __loop_update_dio+0x2d2/0x690 [ 1068.648227] loop_configure+0x953/0x1410 [ 1068.648767] lo_ioctl+0xa57/0x16b0 [ 1068.649239] ? avc_has_extended_perms+0x7f1/0xf40 [ 1068.649882] ? loop_set_status_old+0x250/0x250 [ 1068.650488] ? avc_ss_reset+0x180/0x180 [ 1068.651019] ? find_held_lock+0x2c/0x110 [ 1068.651570] ? __lock_acquire+0xbb1/0x5b00 [ 1068.652174] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1068.652888] ? generic_block_fiemap+0x60/0x60 [ 1068.653492] ? lock_downgrade+0x6d0/0x6d0 [ 1068.654043] ? build_open_flags+0x6f0/0x6f0 [ 1068.654623] ? loop_set_status_old+0x250/0x250 [ 1068.655233] blkdev_ioctl+0x291/0x710 [ 1068.655746] ? blkdev_common_ioctl+0x1930/0x1930 [ 1068.656389] ? selinux_file_ioctl+0xb6/0x270 [ 1068.656976] block_ioctl+0xf9/0x140 [ 1068.657481] ? blkdev_read_iter+0x1c0/0x1c0 [ 1068.658062] __x64_sys_ioctl+0x19a/0x210 [ 1068.658608] do_syscall_64+0x33/0x40 [ 1068.659099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.659799] RIP: 0033:0x7f7ab951f8d7 [ 1068.660291] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.662769] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.663797] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1068.664743] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1068.665680] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1068.666616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1068.667565] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1068.668542] CPU: 1 PID: 7547 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1068.670089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.671815] Call Trace: [ 1068.672363] dump_stack+0x107/0x167 [ 1068.673107] should_fail.cold+0x5/0xa [ 1068.673882] ? create_object.isra.0+0x3a/0xa30 [ 1068.674803] should_failslab+0x5/0x20 [ 1068.675588] kmem_cache_alloc+0x5b/0x310 [ 1068.676430] create_object.isra.0+0x3a/0xa30 [ 1068.677317] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1068.678347] __kmalloc+0x16e/0x390 [ 1068.679106] security_prepare_creds+0x112/0x190 [ 1068.680107] prepare_creds+0x452/0x5e0 [ 1068.680946] copy_creds+0x72/0x580 [ 1068.681714] copy_process+0xfef/0x78b0 [ 1068.682560] ? SOFTIRQ_verbose+0x10/0x10 [ 1068.683435] ? stack_trace_save+0x8c/0xc0 [ 1068.684327] ? lock_acquire+0x197/0x470 [ 1068.685135] ? io_sq_thread_park+0x79/0xd0 [ 1068.686070] ? __cleanup_sighand+0xb0/0xb0 [ 1068.686980] ? kernel_text_address+0xf2/0x120 [ 1068.687948] ? find_held_lock+0x2c/0x110 [ 1068.688812] ? io_uring_setup+0x1c23/0x2980 [ 1068.689726] ? lock_downgrade+0x6d0/0x6d0 [ 1068.690603] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1068.691610] create_io_thread+0xb6/0xf0 [ 1068.692469] ? pidfd_prepare+0x80/0x80 [ 1068.693298] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1068.694324] io_uring_setup+0x1d79/0x2980 [ 1068.695214] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1068.696293] ? wait_for_completion_io+0x270/0x270 [ 1068.697342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1068.698425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.699519] do_syscall_64+0x33/0x40 [ 1068.700316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.701402] RIP: 0033:0x7f6e4b79cb19 [ 1068.702186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.706119] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1068.707684] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1068.709148] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1068.710595] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1068.712064] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1068.713509] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1068.725076] loop7: detected capacity change from 0 to 2048 [ 1068.737949] EXT4-fs (loop7): invalid first ino: 2875922842 05:15:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:15:38 executing program 0: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) 05:15:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x2, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:15:38 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) 05:15:38 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 24) 05:15:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x42d82, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 05:15:38 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1068.820635] FAULT_INJECTION: forcing a failure. [ 1068.820635] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.822119] CPU: 0 PID: 7567 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1068.822955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.823991] Call Trace: [ 1068.824321] dump_stack+0x107/0x167 [ 1068.824774] should_fail.cold+0x5/0xa [ 1068.825249] ? create_object.isra.0+0x3a/0xa30 [ 1068.825810] should_failslab+0x5/0x20 [ 1068.826285] kmem_cache_alloc+0x5b/0x310 [ 1068.826790] create_object.isra.0+0x3a/0xa30 [ 1068.827333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1068.827971] kmem_cache_alloc+0x159/0x310 [ 1068.828489] key_alloc+0x3d1/0x12c0 [ 1068.828950] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1068.829583] ? key_user_lookup+0x560/0x560 [ 1068.830109] ? kasan_unpoison_shadow+0x33/0x50 [ 1068.830671] keyring_alloc+0x42/0xb0 [ 1068.831128] install_thread_keyring_to_cred+0xc3/0x150 [ 1068.831782] copy_creds+0x468/0x580 [ 1068.832226] copy_process+0xfef/0x78b0 [ 1068.832698] ? SOFTIRQ_verbose+0x10/0x10 [ 1068.833201] ? stack_trace_save+0x8c/0xc0 [ 1068.833707] ? lock_acquire+0x197/0x470 [ 1068.834191] ? io_sq_thread_park+0x79/0xd0 [ 1068.834709] ? __cleanup_sighand+0xb0/0xb0 [ 1068.835221] ? kernel_text_address+0xf2/0x120 [ 1068.835791] ? find_held_lock+0x2c/0x110 [ 1068.836291] ? io_uring_setup+0x1c23/0x2980 [ 1068.836818] ? lock_downgrade+0x6d0/0x6d0 [ 1068.837328] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1068.837932] create_io_thread+0xb6/0xf0 [ 1068.838414] ? pidfd_prepare+0x80/0x80 [ 1068.838890] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1068.839494] io_uring_setup+0x1d79/0x2980 [ 1068.840007] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1068.840633] ? wait_for_completion_io+0x270/0x270 [ 1068.841234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1068.841884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.842519] do_syscall_64+0x33/0x40 [ 1068.842981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.843608] RIP: 0033:0x7f6e4b79cb19 [ 1068.844072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.846323] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1068.847263] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1068.848142] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1068.849011] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1068.849881] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1068.850747] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:15:52 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) 05:15:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) pwrite64(r3, &(0x7f0000000580)="2fb49eda081e8122df8fed12c2f560685b558a325c5b4727a78c82b4b44029b93cfd14c3dc877ae7b592d362979763553dee3583a527c836f3e288da054d9536c91314227f38fdfcef1c3c97d89086ee980d6a4d3b2280a7ae9752a131fc7383d2e20735ef79496a2219045a630fcc85a36d794d2ca3f8d67326d02f04dfb8710edc0da926ba42d019f65b69b0beff8e68218ed1557e91a885f32d6004d08a7f1cccc012405edfa52d82f04bbc9b9858717c574d1b958038a3e03da0778779c53efb36fc08c4576311ccec6938d9c96395a2af724c31d2ad656cadb5f9af389239c7ececb0fd9a2936a280a8bac0b7cddfce894992f6cee5b7b2c5f207d9cb4b4260f876b2d373ff544c6d0eeefb6035ea742f4cd2216f0d681c19edc81ad06bc879b2a3e29cf9d01a605854185fe8f54d2b50c862ac912f154504f06b9e5fba10cba81d3ca5d262bcb283d7ada37a726a239bcfcd6b59b2c6e8ae015fa5016eb5ec2b650dafbff8678ddef862aadadfa48090969038a269c8dc580645eaea1e3b124a0eb1db6fbea80569ed7edd8ebde93a76108d1c47c81ccf5e478efccfa570129f02a3cd5998f96ee622e1e2dd0ac7505be5b157d15112249766b6b4472b4c46e93842895e10e3cde6e32953ce37dee7d49ca8e81ffc76ab8de777c118db3a5a1a5a0c0315c7dc0ac53a41cf4d915afa70d840ba77138001fef811660dcd94801533c61a4cf15225758c39b316ad4bd23a13f96037f1b3f1684f7d9cbf321b6aabc4f84e5f96cb884b1ad93420643173078fb0ad9852dd4dc9fda44f514baffd989222cd2aabe687c54fac8652647d4807bff5b6b105971cc6481cdb4da92609fda3ed4e8e3941b4fb71f7c00e5cc43f1e87c055d76684e94193398c6316dcb9436c1d0a2058fc9b3ef09ea940280d7095ef35791262a131e06f3a131457d1fe5df5498b1937e4596636d815eb68b2db60da242374082f4b10171f5466afedce854a5ffac1f36a167efb76833aeb98c59315db3b5fd237b4fdeac3e2c4dd14eb90fb57ebb839f3d1153da6765080fdc92c6fd99eac9bba0a6bca0bcc4e695e1a0db137205fa495714cbb94a9bf7f49ecce31c84653efd18fc6ed14b27854a882cf43d751c348bd9f5aa029470055d4caddf8f5cbfcc502793e44c912c6592c1e60b88d4ad7cff45ef683bd5b1d311938472b88f0b2e25dab79cc2977d194c576beb99368b60551042ab4437c10371e5555d0c55d5bf6555ba1c48cc72bd6d677e20023ba25f1c6dc3e59f32181b1412d82a519af3a359d008caa8ffd6351f3b58ed29507dcce1525088d12b5867f7a6dcd2a61a33de020935ac6dcd984a054dd406d8ae31cdb950e4473c1f9340a2f7d641682016489d0c31dc4e661a276fee2d344f14afa08d7a0a27bc751a0ae178afc1d189eb3d5085119a439751bc0939ccbcf3c3336a509a12d4cace9d616bab900be08087172c92dd8036fdbd50bc5332411ba275737bdb772f041e3e9573b7d1f782bf64e39f44b87d16241223bafee25eafb0b92d9cfc8b37f1316a421549cf6a072045e58d0f35608eacb29b2b12f6c0d45d4e20408d337b2803f251d670089b819cb5969f7b954a85103ae2ba2ca1a4e1e25f3277fa0757af8ad2c5c4ade0693aebc0c033f90dae2a9456c31afdac0a472445b20bd634f3930e162e199fb758389460d73ebdb6d2569605eac887810bb79f0dc7e941c055286ea3548df736501c26149a1c4d7a27dff250f11c473ea8221a35a60250fb4bb6e2689afe794d209bd03ad9b3ab70fdc8fdca971ac748046a831d6982e6f88f1b924dece9bf377eff3b13b66f01ab84ca11299c3e440035fb9cafcdb8948284f86aac76dd15949004c1af98eebbaa235d305c0fe42cc787663e42f420b0a882d48b2c11f04dc5efe89a7a64de33b92bf4b6280023b614e2dc0d2a9f4c91daeeab2a94b739e8060355499c4b394cfc14b65f894cea037436109dd131709525a7def515982f680c2101a1beaf5a0bde53f8dbf07587baa9694de858b01623514983dc7768669f60548952527b8cb373078b00275275858b508ec3f4c5e781690b1a179977d02de48d618d5e631da35e09119b2c00cc0c27488bce853107d0331969e81d6513e471804325bd9f761b2b943b9d2777d657566671099d2c3c042452291155b24de7a9fe2e9e611f62c893564cb3dc533abdc6101d30f8cd075358d7a45d61dc940495686611e54cc9fa60c0eb02821c550a59d3b4a4623d12e8d35698773b4d7883fea911417ba389324aec2a3647355bccfab9a32bf4cb0ee10883fa821783abb3c20573632447222a1201ec687b511a6c2911b5dabd0826b07c0022e4f50d04bbfaf6f58581608629024bcbe128c08711c6bbe1cadf4babe533df85531e05bf5714b08983ddd5bf4b93dfe64677928b6d6044b1d772a308b02eab0b8d620dd27e210ced346a84318ccbee1b550a53a471d2d67fb0bfc65d24fb0d93e450e0beac7562245c8ec92a058e6dbdb0bb2862bfeec8b498d7b965bb1ebea241bb41179dbf9efad1d0dbd9f2e68ae82f0c2e39def3519d2c565a61231dbbc4e0186a4a610de24631db051a818b28d9f55e7e23c2bcb7729bb7e7adb53627b353ad8085a23ae5b3ef8e25d893e6ac44631e4614c098693c2ebafe8a71c1668e781320e4833bf9f4b6d263dcaa75c2a5241e45d7abf9cd921320dcdba4af0a6c88ef5876af0c2de365639bc3c0e3d9308ef4d939cc4351354889a2212ebbe6c6f803190e5cf1af466c3fbd7f55112885bd6331cbc439f0cda4131a678a2a3efa8b0da17a8170b58e4e12bbe004d4e4fa84ca4c0146b431aace75db295734aae320ed39bbb0a2d4783e5019c23b88e3d99459d8ab6805b34a7d0c94ec8b4f123a251921c7c314781b0704547cd8b299cec9a430c692ee3e52ff97c85d32fe00928196ec4c2e6c54eeeb9f73fdcf3c2f46e0f0d46671a999a0cb72d2e54d9ae510e76a72629552ffed302b3e02c95971c4dadb73d7dc08abff411bba3a0ce60fcdaa156c3dbecec6f79d4e1db72dc80e2a5acb5deebaa3593aed83e9b725821a200700b25a6d145fdf875ffad74c759a1cfe954452d082b0d24592868497277c506bcc6d6d286554a2a0ec02e47c1ad61d1e2d5ee60906a4db3b373e9e87d90bbaad410ef58dc9bd53e1fb4534899c06a775ec181da3a326803b46397c5c04f7d9ef81cef7fc4db9b73c3f0c043b93008c0bf1744b726c84af5779fbff060b0e46e79a192fb0189f471852cbd0706b3558b1b7a48f2817c64f9daa1d149b73be2720c786bee7afdb72bd83d95529211955acd54b6e2ef4ec059eb1eca8f8ccc013a7d1bf70dbd3ddf62f949ce863ab4895dc0fcd32415e0788b4e990f91187fbb3801be301977b038dc01ce5ad2087de2ed9c85f4b31105be35de7af40d4d99cfe32c515befc9ce98b05f29e6b425e5c1f8e852475072496fb976efdb01d7438fdba7f2ae68db636a0507b6b1a6b437bef6eb1d13df58191835daf7674a5e2995e303f11e21202fb5badaf03e9145a8e3fd8f318baef5b6bd084cec6e9e393f89f96ce62c719d1869bf3d70a0a50254576ceb8bb9b4b4d72f230de503ab01269f89f250fc13d21a2e0df04f941003e90cbaa2965dd69b0e6435a32ca560abf55c056533225ffed960462599a11e9807e42e16cd8cd63295a99f898ad2099c4044a42d690fc01037d1a65b8842821dca6547d807d17768f2e4af2c471283775e57dbefdd79046b9791e9d195669abbb46c567b0e285ffd5cdf325987a28ab212a5fc5c6147da785ff4772d1d56e7cf4207def072b8768863db4fdd8d7ec06276f4389f0e7c9c80711c726d571c7098f3903c93e5706ff39a577bc1ab578007b1115f4daff9ffccc893ec17b56944ca40cf4298e1dcc856b4de8ef8766396b3e8a85308b4d85cf4f3ae3307fa6136f8da0e724eb213359daa3dc2e8a5ba131dc75b1433c15e400aff013ee43c2dc45963f7815fe0b18d7d20cde180da3712a1bf93e0cb91ef3a72704d83e9f7743e20166dbbc7e60d5d9267dd15a9bc5f626e16a5dd4b064c50b2cd096c8f49cd8c39a50003bc712135895a2d48461b79a2330239dfe86b03d3015d646adcea4f1836cde9725538d0fa81d0906c8ba3df1ed59d2679cee6fda35cb487b86fefda349b486c73511243372839b9e096f8ade3b4d17c84fae88076b367c6d499ac14b974ebd3b5347232927df9fc6a0b7ce834f0542b92fbc4fee7202b77594a1b7d5ffeea9eaee541620a058afd72670bc3b7dd9923fb93f4d1a697ef643db8df2a897c75e090a64f054ba563ac2523e3fb387987b5b664fc1aee9807b044799a4c6f4bdbbe473246a1b75a2334dc364b868beeef46fb737d01d2bd33daa8d2bf6c7dba84bc23125640e4f02f7999705895ad7ea910d9a1f458ab75fb271b864a6261b6c582916905bb0128e1f1165293f5ceb3d82ff253b885f44fb7671d98db2b7d8c3fbddb7545419ee165920796814afa0e93d34fa67897ced4e216b6052dc17825b9cc3c465bbd2f390554114242f87674dfed99dd60d3536ff9e01468d97acaae1918548ccb60e9689817f31cab2f8c18ccc6c392ae779e290ee3cd007216a3e85caaa7a12323fb43005dd1e1eca53071a4e7fb0f2c1cdb6afa022b8fbef292f9e578146d4c6a5909723f42cb379f8c0070ad809e22eb86bcc2d61a7c3f53932c0ac4489bd56c0e89f08371efd11b54205c3b0cf62b466d7fed104b929f9051cbbd31dfdd4f4658869bc2d31e36551f6563d8c4d7eab334d79f628093d18f8d888d1c5e8bb429f556b2be0fc1415e7f2912dab653c745c5002a20d5527f574f32ab5a8ed2054603141d99e7f8d0edcd3c1f20886d6480b40f2ee87cfe0bc06b117b4e9a35b4d52a36b2f7c072658f308ecb96174392ac6ffc4272e45b10ce311c75e3a90afe965cad9c42262fe27baecde7f800bf8f9f6146cc02f4dd6bc46559023f1cfb62a9f86fba7b6e71e091ec400fd6798d9ec77fb0cbb8ccc0bb214178de17380d5264441423da99233da2a664756a73fdedc21ec1d047d8eedff01477d425e2f3d1b5697fb92de197647344e8579dbf0c99bc8c3a014acd8d6d30193ebf0a204d59364cf87d5f775755566eebefb8c5d3aef5dd48ead97ab348bfd29446f47e14dd36599884c585638f0a08153d43815ba6a3c1fc06f738a90db0a95be8590cfdf57e9fe935065621d90a453f78a6ce0cd4d70337efc56ca6644da852f84232deae4870e388c858d594b93f152154ef8f8d5f4a265dcd7e0bd5c646f6115dff1cfe94d451ee58c47751df820a4b67376290f3e61414bada015b5f07ee8ac36e46012e81c6d8d499752866d2f92d52e59493317ddb8570819b3258b7a60c4c1cd44bcd008504ddfb0fb93295206677f499e1a6d43ef53843729e0750c07ccaf63e5dd62bb7d9c363841d6b09e03e97b8906b70de7763872d54ae085ca192fe3ee33094008d97d22bb9329da2bd25ba1a4d6934a046fba8ef364ae84f54640426113e08ff50872ca4b152d4c04241c793a10063f31b6f9f41c5b7223613d986df56c7b42cb28077e709c562d00696f44f374462fe8cf98198f6b22ad6037057841d522d5d9ff9c2e3a2fc83b30b2abc1a1d92e3201046095c2a642241cc317fdfa3b883b5fce46d8ebf6955f058d0c7b0c762c494fe71c3ab44cea0112d65d93a3ca8930703adfcb2abef299b270e1231d2c6b53eb0ae55d3a53693784d47c7879969bd", 0x1000, 0xffffffffffffffff) 05:15:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x3, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:15:52 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 25) 05:15:52 executing program 0: timerfd_create(0x7, 0x80000) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:15:52 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) 05:15:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') getsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:15:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 27) 05:15:52 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x4) [ 1083.182420] FAULT_INJECTION: forcing a failure. [ 1083.182420] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.184348] CPU: 1 PID: 7594 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1083.185214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.186318] Call Trace: [ 1083.186669] dump_stack+0x107/0x167 [ 1083.187169] should_fail.cold+0x5/0xa [ 1083.187679] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1083.188454] should_failslab+0x5/0x20 [ 1083.188961] kmem_cache_alloc+0x5b/0x310 [ 1083.189479] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1083.190190] idr_get_free+0x4b5/0x8f0 [ 1083.190681] idr_alloc_u32+0x184/0x300 [ 1083.191177] ? __fprop_inc_percpu_max+0x130/0x130 [ 1083.191787] ? lock_acquire+0x197/0x470 [ 1083.192329] ? __kernfs_new_node+0xff/0x860 [ 1083.192891] idr_alloc_cyclic+0x102/0x230 [ 1083.193417] ? idr_alloc+0x130/0x130 [ 1083.193882] ? rwlock_bug.part.0+0x90/0x90 [ 1083.194450] __kernfs_new_node+0x117/0x860 [ 1083.194986] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1083.195577] ? lock_chain_count+0x20/0x20 [ 1083.196109] ? update_load_avg+0x162/0x1870 [ 1083.196645] ? find_held_lock+0x2c/0x110 [ 1083.197155] kernfs_new_node+0x18d/0x250 [ 1083.197666] kernfs_create_dir_ns+0x49/0x160 [ 1083.198218] internal_create_group+0x793/0xb30 [ 1083.198791] ? set_user_nice.part.0+0x2fd/0x760 [ 1083.199391] ? sysfs_remove_group+0x170/0x170 [ 1083.200002] ? lockdep_init_map_type+0x2c7/0x780 [ 1083.200624] ? blk_queue_flag_set+0x22/0x30 [ 1083.201189] ? __loop_update_dio+0x2d2/0x690 [ 1083.201747] loop_configure+0x953/0x1410 [ 1083.202263] lo_ioctl+0xa57/0x16b0 [ 1083.202708] ? avc_has_extended_perms+0x7f1/0xf40 [ 1083.203311] ? loop_set_status_old+0x250/0x250 [ 1083.203902] ? avc_ss_reset+0x180/0x180 [ 1083.204425] ? find_held_lock+0x2c/0x110 [ 1083.204976] ? __lock_acquire+0xbb1/0x5b00 [ 1083.205573] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1083.205862] FAULT_INJECTION: forcing a failure. [ 1083.205862] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.206228] ? generic_block_fiemap+0x60/0x60 [ 1083.209225] ? lock_downgrade+0x6d0/0x6d0 [ 1083.209781] ? build_open_flags+0x6f0/0x6f0 [ 1083.210351] ? loop_set_status_old+0x250/0x250 [ 1083.210962] blkdev_ioctl+0x291/0x710 [ 1083.211461] ? blkdev_common_ioctl+0x1930/0x1930 [ 1083.212070] ? selinux_file_ioctl+0xb6/0x270 [ 1083.212650] block_ioctl+0xf9/0x140 [ 1083.213129] ? blkdev_read_iter+0x1c0/0x1c0 [ 1083.213689] __x64_sys_ioctl+0x19a/0x210 [ 1083.214219] do_syscall_64+0x33/0x40 [ 1083.214704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.215374] RIP: 0033:0x7f7ab951f8d7 [ 1083.215872] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.218149] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.219094] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1083.219983] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1083.220862] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1083.221740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1083.222618] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1083.223528] CPU: 0 PID: 7598 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1083.225051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.226639] loop7: detected capacity change from 0 to 2048 [ 1083.226851] Call Trace: [ 1083.226878] dump_stack+0x107/0x167 [ 1083.226901] should_fail.cold+0x5/0xa [ 1083.226925] should_failslab+0x5/0x20 [ 1083.230543] __kmalloc_track_caller+0x79/0x370 [ 1083.231510] ? key_alloc+0x42f/0x12c0 [ 1083.232331] kmemdup+0x23/0x50 [ 1083.233014] key_alloc+0x42f/0x12c0 [ 1083.233805] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1083.234909] ? key_user_lookup+0x560/0x560 [ 1083.235821] ? kasan_unpoison_shadow+0x33/0x50 [ 1083.236057] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1083.236811] keyring_alloc+0x42/0xb0 [ 1083.236838] install_thread_keyring_to_cred+0xc3/0x150 [ 1083.236861] copy_creds+0x468/0x580 [ 1083.240237] copy_process+0xfef/0x78b0 [ 1083.241081] ? SOFTIRQ_verbose+0x10/0x10 [ 1083.241954] ? stack_trace_save+0x8c/0xc0 [ 1083.242853] ? lock_acquire+0x197/0x470 [ 1083.243704] ? io_sq_thread_park+0x79/0xd0 [ 1083.244636] ? __cleanup_sighand+0xb0/0xb0 [ 1083.245545] ? kernel_text_address+0xf2/0x120 [ 1083.246517] ? find_held_lock+0x2c/0x110 [ 1083.247402] ? io_uring_setup+0x1c23/0x2980 [ 1083.248330] ? lock_downgrade+0x6d0/0x6d0 [ 1083.249226] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1083.250286] create_io_thread+0xb6/0xf0 [ 1083.251144] ? pidfd_prepare+0x80/0x80 [ 1083.251999] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1083.253075] io_uring_setup+0x1d79/0x2980 [ 1083.253974] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1083.255066] ? wait_for_completion_io+0x270/0x270 [ 1083.256143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.257277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.258385] do_syscall_64+0x33/0x40 [ 1083.259176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.260282] RIP: 0033:0x7f6e4b79cb19 [ 1083.261079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.265021] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1083.266656] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1083.268197] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1083.269720] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1083.271257] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1083.272810] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:15:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) 05:15:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x4, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:15:52 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x4) 05:15:52 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) write$vga_arbiter(r0, 0x0, 0x3f00) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) write$vga_arbiter(r2, &(0x7f0000000000)=@target={'target ', {'PCI:', '1', ':', '1e', ':', '1e', '.', '4'}}, 0x15) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r4) write$vga_arbiter(r4, 0x0, 0x3f00) dup2(r0, r4) ftruncate(r0, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x3) 05:15:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x400, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 05:15:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:15:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) 05:15:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x5, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1096.606305] FAULT_INJECTION: forcing a failure. [ 1096.606305] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.608647] FAULT_INJECTION: forcing a failure. [ 1096.608647] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.609018] CPU: 1 PID: 7639 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1096.612190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.614033] Call Trace: [ 1096.614637] dump_stack+0x107/0x167 [ 1096.615470] should_fail.cold+0x5/0xa [ 1096.616344] ? create_object.isra.0+0x3a/0xa30 [ 1096.617376] should_failslab+0x5/0x20 [ 1096.618235] kmem_cache_alloc+0x5b/0x310 [ 1096.619164] create_object.isra.0+0x3a/0xa30 [ 1096.620160] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.621314] kmem_cache_alloc+0x159/0x310 [ 1096.622264] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1096.623539] idr_get_free+0x4b5/0x8f0 [ 1096.624441] idr_alloc_u32+0x184/0x300 [ 1096.625318] ? __fprop_inc_percpu_max+0x130/0x130 [ 1096.626407] ? lock_acquire+0x197/0x470 [ 1096.627300] ? __kernfs_new_node+0xff/0x860 [ 1096.628297] idr_alloc_cyclic+0x102/0x230 [ 1096.629236] ? idr_alloc+0x130/0x130 [ 1096.630074] ? rwlock_bug.part.0+0x90/0x90 [ 1096.631062] __kernfs_new_node+0x117/0x860 [ 1096.632050] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1096.633144] ? lock_chain_count+0x20/0x20 [ 1096.634113] ? update_load_avg+0x162/0x1870 [ 1096.635106] ? find_held_lock+0x2c/0x110 [ 1096.636057] kernfs_new_node+0x18d/0x250 [ 1096.637001] kernfs_create_dir_ns+0x49/0x160 [ 1096.638020] internal_create_group+0x793/0xb30 [ 1096.639081] ? set_user_nice.part.0+0x2fd/0x760 [ 1096.640161] ? sysfs_remove_group+0x170/0x170 [ 1096.641200] ? lockdep_init_map_type+0x2c7/0x780 [ 1096.642291] ? blk_queue_flag_set+0x22/0x30 [ 1096.643284] ? __loop_update_dio+0x2d2/0x690 [ 1096.644303] loop_configure+0x953/0x1410 [ 1096.645242] lo_ioctl+0xa57/0x16b0 [ 1096.646055] ? avc_has_extended_perms+0x7f1/0xf40 [ 1096.647157] ? loop_set_status_old+0x250/0x250 [ 1096.648217] ? avc_ss_reset+0x180/0x180 [ 1096.649125] ? find_held_lock+0x2c/0x110 [ 1096.650066] ? __lock_acquire+0xbb1/0x5b00 [ 1096.651088] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1096.652289] ? generic_block_fiemap+0x60/0x60 [ 1096.653310] ? lock_downgrade+0x6d0/0x6d0 [ 1096.654254] ? build_open_flags+0x6f0/0x6f0 [ 1096.655251] ? loop_set_status_old+0x250/0x250 [ 1096.656298] blkdev_ioctl+0x291/0x710 [ 1096.657168] ? blkdev_common_ioctl+0x1930/0x1930 [ 1096.658256] ? selinux_file_ioctl+0xb6/0x270 [ 1096.659263] block_ioctl+0xf9/0x140 [ 1096.660099] ? blkdev_read_iter+0x1c0/0x1c0 [ 1096.661083] __x64_sys_ioctl+0x19a/0x210 [ 1096.662013] do_syscall_64+0x33/0x40 [ 1096.662855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.664016] RIP: 0033:0x7f7ab951f8d7 [ 1096.664861] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.669000] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.670713] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1096.672327] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1096.673930] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1096.675531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1096.677146] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1096.678784] CPU: 0 PID: 7647 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1096.679870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.681179] Call Trace: [ 1096.681594] dump_stack+0x107/0x167 [ 1096.682166] should_fail.cold+0x5/0xa [ 1096.682762] ? create_object.isra.0+0x3a/0xa30 [ 1096.683480] should_failslab+0x5/0x20 [ 1096.684086] kmem_cache_alloc+0x5b/0x310 [ 1096.684723] create_object.isra.0+0x3a/0xa30 [ 1096.685406] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.686205] kmem_cache_alloc+0x159/0x310 [ 1096.686864] key_alloc+0x3d1/0x12c0 [ 1096.687443] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1096.688255] ? key_user_lookup+0x560/0x560 [ 1096.688918] ? kasan_unpoison_shadow+0x33/0x50 [ 1096.689635] keyring_alloc+0x42/0xb0 [ 1096.690220] install_thread_keyring_to_cred+0xc3/0x150 [ 1096.691042] copy_creds+0x468/0x580 [ 1096.691614] copy_process+0xfef/0x78b0 [ 1096.692231] ? SOFTIRQ_verbose+0x10/0x10 [ 1096.692875] ? stack_trace_save+0x8c/0xc0 [ 1096.693526] ? lock_acquire+0x197/0x470 [ 1096.694147] ? io_sq_thread_park+0x79/0xd0 [ 1096.694815] ? __cleanup_sighand+0xb0/0xb0 [ 1096.695476] ? kernel_text_address+0xf2/0x120 [ 1096.696188] ? find_held_lock+0x2c/0x110 [ 1096.696828] ? io_uring_setup+0x1c23/0x2980 [ 1096.697502] ? lock_downgrade+0x6d0/0x6d0 [ 1096.698147] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1096.698902] create_io_thread+0xb6/0xf0 [ 1096.699516] ? pidfd_prepare+0x80/0x80 [ 1096.700131] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1096.700899] io_uring_setup+0x1d79/0x2980 [ 1096.701553] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1096.702336] ? wait_for_completion_io+0x270/0x270 [ 1096.703097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.703906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.704712] do_syscall_64+0x33/0x40 [ 1096.705286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.706080] RIP: 0033:0x7f6e4b79cb19 [ 1096.706654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.709507] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1096.710683] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1096.711785] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1096.712893] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1096.714009] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1096.715112] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1096.722071] loop7: detected capacity change from 0 to 2048 05:16:05 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 26) 05:16:05 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x0) 05:16:05 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:16:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 28) 05:16:05 executing program 1: syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x8) 05:16:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x6, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) write$vga_arbiter(r2, &(0x7f0000000000), 0xf) dup2(r1, r0) [ 1096.744935] EXT4-fs (loop7): invalid first ino: 2875922842 05:16:06 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) write$vga_arbiter(r0, 0x0, 0x3f00) close_range(0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x881154162d3d721b, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x80000001, 0x200, 0x2, 0x8000, 0x9}) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) 05:16:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') fcntl$notify(r0, 0x402, 0x85d1ccdff48256aa) fcntl$notify(r0, 0x402, 0x30) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x7, 0x4) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000001c0)=""/216, &(0x7f0000000040)=0xd8) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000002100)=""/4095, 0xfffffd70, 0xf0ff1f) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 05:16:06 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x6) 05:16:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x7, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:06 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 29) 05:16:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) 05:16:06 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 05:16:06 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 27) 05:16:06 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x4) [ 1096.903990] FAULT_INJECTION: forcing a failure. [ 1096.903990] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.905646] CPU: 0 PID: 7673 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1096.906584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.907733] Call Trace: [ 1096.908113] dump_stack+0x107/0x167 [ 1096.908617] should_fail.cold+0x5/0xa [ 1096.909146] ? __kernfs_new_node+0xd4/0x860 [ 1096.909745] should_failslab+0x5/0x20 [ 1096.910272] kmem_cache_alloc+0x5b/0x310 [ 1096.910837] __kernfs_new_node+0xd4/0x860 [ 1096.911412] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1096.912088] ? kernfs_add_one+0x36e/0x4d0 [ 1096.912664] ? mutex_lock_io_nested+0xf30/0xf30 [ 1096.913306] ? lock_acquire+0x197/0x470 [ 1096.913859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1096.914525] kernfs_new_node+0x18d/0x250 [ 1096.915098] __kernfs_create_file+0x51/0x350 [ 1096.915728] sysfs_add_file_mode_ns+0x221/0x560 [ 1096.916395] internal_create_group+0x324/0xb30 [ 1096.917031] ? sysfs_remove_group+0x170/0x170 [ 1096.917656] ? lockdep_init_map_type+0x2c7/0x780 [ 1096.918309] ? blk_queue_flag_set+0x22/0x30 [ 1096.918901] ? __loop_update_dio+0x2d2/0x690 [ 1096.919513] loop_configure+0x953/0x1410 [ 1096.920089] lo_ioctl+0xa57/0x16b0 [ 1096.920585] ? avc_has_extended_perms+0x7f1/0xf40 [ 1096.921263] ? loop_set_status_old+0x250/0x250 [ 1096.921905] ? avc_ss_reset+0x180/0x180 [ 1096.922458] ? find_held_lock+0x2c/0x110 [ 1096.923033] ? __lock_acquire+0xbb1/0x5b00 [ 1096.923649] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1096.924388] ? generic_block_fiemap+0x60/0x60 [ 1096.925005] ? lock_downgrade+0x6d0/0x6d0 [ 1096.925583] ? build_open_flags+0x6f0/0x6f0 [ 1096.926185] ? loop_set_status_old+0x250/0x250 [ 1096.926812] blkdev_ioctl+0x291/0x710 [ 1096.927335] ? blkdev_common_ioctl+0x1930/0x1930 [ 1096.927986] ? selinux_file_ioctl+0xb6/0x270 [ 1096.928593] block_ioctl+0xf9/0x140 [ 1096.929097] ? blkdev_read_iter+0x1c0/0x1c0 [ 1096.929690] __x64_sys_ioctl+0x19a/0x210 [ 1096.930258] do_syscall_64+0x33/0x40 [ 1096.930772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.931480] RIP: 0033:0x7f7ab951f8d7 [ 1096.931996] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.934488] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.935535] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1096.936529] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1096.937508] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1096.938495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1096.939471] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1096.976392] loop7: detected capacity change from 0 to 2048 [ 1096.988251] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1096.999611] FAULT_INJECTION: forcing a failure. [ 1096.999611] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.001200] CPU: 0 PID: 7682 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1097.002114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.003230] Call Trace: [ 1097.003585] dump_stack+0x107/0x167 [ 1097.004077] should_fail.cold+0x5/0xa [ 1097.004593] ? selinux_key_alloc+0x46/0x1b0 [ 1097.005170] should_failslab+0x5/0x20 [ 1097.005683] kmem_cache_alloc_trace+0x55/0x320 [ 1097.006291] selinux_key_alloc+0x46/0x1b0 [ 1097.006855] security_key_alloc+0x56/0xb0 [ 1097.007409] key_alloc+0x8d6/0x12c0 [ 1097.007900] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1097.008594] ? key_user_lookup+0x560/0x560 [ 1097.009163] ? kasan_unpoison_shadow+0x33/0x50 [ 1097.009778] keyring_alloc+0x42/0xb0 [ 1097.010278] install_thread_keyring_to_cred+0xc3/0x150 [ 1097.010983] copy_creds+0x468/0x580 [ 1097.011487] copy_process+0xfef/0x78b0 [ 1097.012018] ? SOFTIRQ_verbose+0x10/0x10 [ 1097.012569] ? stack_trace_save+0x8c/0xc0 [ 1097.013142] ? lock_acquire+0x197/0x470 [ 1097.013669] ? io_sq_thread_park+0x79/0xd0 [ 1097.014246] ? __cleanup_sighand+0xb0/0xb0 [ 1097.014815] ? kernel_text_address+0xf2/0x120 [ 1097.015420] ? find_held_lock+0x2c/0x110 [ 1097.015992] ? io_uring_setup+0x1c23/0x2980 [ 1097.016583] ? lock_downgrade+0x6d0/0x6d0 [ 1097.017135] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1097.017800] create_io_thread+0xb6/0xf0 [ 1097.018325] ? pidfd_prepare+0x80/0x80 [ 1097.018847] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1097.019518] io_uring_setup+0x1d79/0x2980 [ 1097.020078] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1097.020764] ? wait_for_completion_io+0x270/0x270 [ 1097.021428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.022118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.022799] do_syscall_64+0x33/0x40 [ 1097.023293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.023969] RIP: 0033:0x7f6e4b79cb19 [ 1097.024478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.026955] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1097.027974] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1097.028937] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1097.029896] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1097.030844] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1097.031798] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:16:20 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 28) 05:16:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x8, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 30) 05:16:20 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) 05:16:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pread64(r0, &(0x7f0000000240)=""/73, 0x49, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x80, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x66}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x408c8}, 0x4000041) 05:16:20 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) 05:16:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x400001, 0xffffffffffffffff, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 05:16:20 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1111.278604] FAULT_INJECTION: forcing a failure. [ 1111.278604] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.280545] CPU: 1 PID: 7697 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1111.281648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.282982] Call Trace: [ 1111.283416] dump_stack+0x107/0x167 [ 1111.284005] should_fail.cold+0x5/0xa [ 1111.284622] ? create_object.isra.0+0x3a/0xa30 [ 1111.285353] should_failslab+0x5/0x20 [ 1111.285967] kmem_cache_alloc+0x5b/0x310 [ 1111.286633] create_object.isra.0+0x3a/0xa30 [ 1111.287336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1111.288154] kmem_cache_alloc_trace+0x151/0x320 [ 1111.288910] selinux_key_alloc+0x46/0x1b0 [ 1111.289560] security_key_alloc+0x56/0xb0 [ 1111.290227] key_alloc+0x8d6/0x12c0 [ 1111.290823] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1111.291652] ? key_user_lookup+0x560/0x560 [ 1111.292349] ? kasan_unpoison_shadow+0x33/0x50 [ 1111.293084] keyring_alloc+0x42/0xb0 [ 1111.293683] install_thread_keyring_to_cred+0xc3/0x150 [ 1111.294540] copy_creds+0x468/0x580 [ 1111.295135] copy_process+0xfef/0x78b0 [ 1111.295753] ? SOFTIRQ_verbose+0x10/0x10 [ 1111.296424] ? stack_trace_save+0x8c/0xc0 [ 1111.297097] ? lock_acquire+0x197/0x470 [ 1111.297742] ? io_sq_thread_park+0x79/0xd0 [ 1111.298435] ? __cleanup_sighand+0xb0/0xb0 [ 1111.299116] ? kernel_text_address+0xf2/0x120 [ 1111.299843] ? find_held_lock+0x2c/0x110 [ 1111.300505] ? io_uring_setup+0x1c23/0x2980 [ 1111.301204] ? lock_downgrade+0x6d0/0x6d0 [ 1111.301890] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1111.302667] create_io_thread+0xb6/0xf0 [ 1111.303299] ? pidfd_prepare+0x80/0x80 [ 1111.303935] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1111.304743] io_uring_setup+0x1d79/0x2980 [ 1111.305430] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1111.306254] ? wait_for_completion_io+0x270/0x270 [ 1111.307096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.307951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.308798] do_syscall_64+0x33/0x40 [ 1111.309396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.310262] RIP: 0033:0x7f6e4b79cb19 [ 1111.310858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.313822] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1111.315044] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1111.316291] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1111.317671] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1111.319061] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1111.320450] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1111.334980] FAULT_INJECTION: forcing a failure. [ 1111.334980] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.337469] CPU: 0 PID: 7702 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1111.338932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.340722] Call Trace: [ 1111.341293] dump_stack+0x107/0x167 [ 1111.342080] should_fail.cold+0x5/0xa [ 1111.342906] ? create_object.isra.0+0x3a/0xa30 [ 1111.343889] should_failslab+0x5/0x20 [ 1111.344716] kmem_cache_alloc+0x5b/0x310 [ 1111.345597] create_object.isra.0+0x3a/0xa30 [ 1111.346538] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1111.347633] kmem_cache_alloc+0x159/0x310 [ 1111.348538] __kernfs_new_node+0xd4/0x860 [ 1111.349435] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1111.350446] ? kernfs_add_one+0x36e/0x4d0 [ 1111.351352] ? mutex_lock_io_nested+0xf30/0xf30 [ 1111.352363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1111.353403] kernfs_new_node+0x18d/0x250 [ 1111.354285] __kernfs_create_file+0x51/0x350 [ 1111.355236] sysfs_add_file_mode_ns+0x221/0x560 [ 1111.356263] internal_create_group+0x324/0xb30 [ 1111.357256] ? sysfs_remove_group+0x170/0x170 [ 1111.358227] ? lockdep_init_map_type+0x2c7/0x780 [ 1111.359246] ? blk_queue_flag_set+0x22/0x30 [ 1111.360193] ? __loop_update_dio+0x2d2/0x690 [ 1111.361145] loop_configure+0x953/0x1410 [ 1111.362042] lo_ioctl+0xa57/0x16b0 [ 1111.362809] ? avc_has_extended_perms+0x7f1/0xf40 [ 1111.363849] ? loop_set_status_old+0x250/0x250 [ 1111.364846] ? avc_ss_reset+0x180/0x180 [ 1111.365704] ? find_held_lock+0x2c/0x110 [ 1111.366590] ? __lock_acquire+0xbb1/0x5b00 [ 1111.367551] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1111.368683] ? generic_block_fiemap+0x60/0x60 [ 1111.369643] ? lock_downgrade+0x6d0/0x6d0 [ 1111.370534] ? build_open_flags+0x6f0/0x6f0 [ 1111.371466] ? loop_set_status_old+0x250/0x250 [ 1111.372458] blkdev_ioctl+0x291/0x710 [ 1111.373281] ? blkdev_common_ioctl+0x1930/0x1930 [ 1111.374304] ? selinux_file_ioctl+0xb6/0x270 [ 1111.375256] block_ioctl+0xf9/0x140 [ 1111.376037] ? blkdev_read_iter+0x1c0/0x1c0 [ 1111.376972] __x64_sys_ioctl+0x19a/0x210 [ 1111.377852] do_syscall_64+0x33/0x40 [ 1111.378665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.379769] RIP: 0033:0x7f7ab951f8d7 [ 1111.380580] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.384541] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.386209] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1111.387750] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1111.389298] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1111.390841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1111.392389] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1111.400541] loop7: detected capacity change from 0 to 2048 [ 1111.407629] EXT4-fs (loop7): invalid first ino: 2875922842 05:16:20 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) 05:16:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}, 0x2, 0x0, '\x00', @auto=[0x31, 0x40]}) 05:16:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x9, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) r3 = fork() ptrace(0x10, r3) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x1, 0x9, 0xba, 0x0, 0xfffffffffffffffd, 0x1, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x1, 0xcd6, 0x8, 0x0, 0x7ff, 0xc24b, 0x0, 0xfff, 0x0, 0xffe}, r3, 0x8, r0, 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100040, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x2}}, {@access_client}, {@msize={'msize', 0x3d, 0x40}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '(]]-j%'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) 05:16:20 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x6) 05:16:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 31) 05:16:20 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) 05:16:20 executing program 0: getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) write$vga_arbiter(r0, 0x0, 0x3f00) ioctl$FITHAW(r0, 0xc0045878) r2 = fork() r3 = gettid() pidfd_open(r3, 0x0) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) ptrace$setopts(0x4206, r2, 0x40, 0x48) r4 = gettid() ptrace(0xf, r4) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) [ 1111.571074] FAULT_INJECTION: forcing a failure. [ 1111.571074] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.573046] CPU: 1 PID: 7735 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1111.574188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.575570] Call Trace: [ 1111.576042] dump_stack+0x107/0x167 [ 1111.576659] should_fail.cold+0x5/0xa [ 1111.577324] ? __kernfs_new_node+0xd4/0x860 [ 1111.578050] should_failslab+0x5/0x20 [ 1111.578686] kmem_cache_alloc+0x5b/0x310 [ 1111.579369] __kernfs_new_node+0xd4/0x860 [ 1111.580069] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1111.580865] ? kernfs_add_one+0x36e/0x4d0 [ 1111.581583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1111.582392] ? wait_for_completion_io+0x270/0x270 [ 1111.583170] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1111.584057] kernfs_new_node+0x18d/0x250 [ 1111.584753] __kernfs_create_file+0x51/0x350 [ 1111.585499] sysfs_add_file_mode_ns+0x221/0x560 [ 1111.586293] internal_create_group+0x324/0xb30 [ 1111.587065] ? sysfs_remove_group+0x170/0x170 [ 1111.587812] ? lockdep_init_map_type+0x2c7/0x780 [ 1111.588615] ? blk_queue_flag_set+0x22/0x30 [ 1111.589335] ? __loop_update_dio+0x2d2/0x690 [ 1111.590077] loop_configure+0x953/0x1410 [ 1111.590738] lo_ioctl+0xa57/0x16b0 [ 1111.591320] ? avc_has_extended_perms+0x7f1/0xf40 [ 1111.592140] ? loop_set_status_old+0x250/0x250 [ 1111.592931] ? avc_ss_reset+0x180/0x180 [ 1111.593609] ? find_held_lock+0x2c/0x110 [ 1111.594301] ? __lock_acquire+0xbb1/0x5b00 [ 1111.595057] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1111.595946] ? generic_block_fiemap+0x60/0x60 [ 1111.596712] ? lock_downgrade+0x6d0/0x6d0 [ 1111.597403] ? build_open_flags+0x6f0/0x6f0 [ 1111.598130] ? loop_set_status_old+0x250/0x250 [ 1111.598876] blkdev_ioctl+0x291/0x710 [ 1111.599515] ? blkdev_common_ioctl+0x1930/0x1930 [ 1111.600328] ? selinux_file_ioctl+0xb6/0x270 [ 1111.601081] block_ioctl+0xf9/0x140 [ 1111.601693] ? blkdev_read_iter+0x1c0/0x1c0 [ 1111.602428] __x64_sys_ioctl+0x19a/0x210 [ 1111.603115] do_syscall_64+0x33/0x40 [ 1111.603740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.604625] RIP: 0033:0x7f7ab951f8d7 [ 1111.605254] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.608330] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.609635] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1111.610843] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1111.612049] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1111.613283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1111.614530] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1111.617779] loop7: detected capacity change from 0 to 2048 [ 1111.630038] EXT4-fs (loop7): invalid first ino: 2875922842 05:16:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', 'd', ':', '1f', ':', '17', '.', '15'}}, 0x16) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) socket$nl_generic(0x10, 0x3, 0x10) 05:16:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xa, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:33 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) 05:16:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 32) 05:16:33 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 29) 05:16:33 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 05:16:33 executing program 6: ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000000)={0x2, 0x5, 0x8, 0x2, @lba=0x1, 0x80}) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000040)={0x8, 0x1, 0xc6, 0x40, 0x7, 0x1}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3d2e79a959f5695) 05:16:33 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r1, r2}}, 0xb7) syz_io_uring_setup(0xde0, &(0x7f00000001c0)={0x0, 0x3b62, 0x8, 0x2, 0xda, 0x0, r2}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x6ea4, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r8 = openat(r7, &(0x7f0000000280)='./file0\x00', 0x4a0000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x401, 0x0, 0x1}, 0xb7) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r8, 0x0, &(0x7f00000003c0)="4bc822e864eaf5f5108cdefeb897b90d386defa68cbaeb6ac729f9677f0ca89f396b0a510f35b40b61a53e87fc9442683197faedd27ac799372bd5eb2b8ffbe68a0927cb64e8ffeca140706a02574a153b539703b92080ef0c9eba80b8194cea55c32eac5be9050d2da22ab5e0bcb93ef62a511caed67349bb6076ae2cb39733a158f110b7c54ffd1a9ed0cc573d0c70c183b67b617500b606d20387e2bfa1613acf21f1a2d8f29e09fc5b82362e4b47fea56ac6cf89b1c3e4dc5a3238a4d9c4393e34c4c4c1b454d3", 0xc9, 0x4000, 0x1}, 0x2) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r7, 0x0, r3}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index=0x5, 0x100000000, 0x2, 0x7, 0x8, 0x0, {0x3, r1}}, 0xff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) [ 1124.257621] FAULT_INJECTION: forcing a failure. [ 1124.257621] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.258975] CPU: 0 PID: 7755 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1124.259786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.260765] Call Trace: [ 1124.261091] dump_stack+0x107/0x167 [ 1124.261513] should_fail.cold+0x5/0xa [ 1124.261963] ? create_object.isra.0+0x3a/0xa30 [ 1124.262498] should_failslab+0x5/0x20 [ 1124.262944] kmem_cache_alloc+0x5b/0x310 [ 1124.263419] create_object.isra.0+0x3a/0xa30 [ 1124.263929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1124.264536] kmem_cache_alloc+0x159/0x310 [ 1124.264605] FAULT_INJECTION: forcing a failure. [ 1124.264605] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.265024] __kernfs_new_node+0xd4/0x860 [ 1124.265038] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1124.265054] ? kernfs_add_one+0x36e/0x4d0 [ 1124.268322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1124.268886] ? wait_for_completion_io+0x270/0x270 [ 1124.269453] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1124.270067] kernfs_new_node+0x18d/0x250 [ 1124.270544] __kernfs_create_file+0x51/0x350 [ 1124.271063] sysfs_add_file_mode_ns+0x221/0x560 [ 1124.271611] internal_create_group+0x324/0xb30 [ 1124.272148] ? sysfs_remove_group+0x170/0x170 [ 1124.272681] ? lockdep_init_map_type+0x2c7/0x780 [ 1124.273239] ? blk_queue_flag_set+0x22/0x30 [ 1124.273746] ? __loop_update_dio+0x2d2/0x690 [ 1124.274262] loop_configure+0x953/0x1410 [ 1124.274742] lo_ioctl+0xa57/0x16b0 [ 1124.275165] ? avc_has_extended_perms+0x7f1/0xf40 [ 1124.275730] ? loop_set_status_old+0x250/0x250 [ 1124.276264] ? avc_ss_reset+0x180/0x180 [ 1124.276737] ? find_held_lock+0x2c/0x110 [ 1124.277218] ? __lock_acquire+0xbb1/0x5b00 [ 1124.277742] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1124.278353] ? generic_block_fiemap+0x60/0x60 [ 1124.278872] ? lock_downgrade+0x6d0/0x6d0 [ 1124.279358] ? build_open_flags+0x6f0/0x6f0 [ 1124.279865] ? loop_set_status_old+0x250/0x250 [ 1124.280409] blkdev_ioctl+0x291/0x710 [ 1124.280853] ? blkdev_common_ioctl+0x1930/0x1930 [ 1124.281408] ? selinux_file_ioctl+0xb6/0x270 [ 1124.281924] block_ioctl+0xf9/0x140 [ 1124.282347] ? blkdev_read_iter+0x1c0/0x1c0 [ 1124.282850] __x64_sys_ioctl+0x19a/0x210 [ 1124.283327] do_syscall_64+0x33/0x40 [ 1124.283761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.284368] RIP: 0033:0x7f7ab951f8d7 [ 1124.284800] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.286946] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.287831] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1124.288669] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1124.289502] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1124.290332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1124.291163] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1124.292026] CPU: 1 PID: 7764 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1124.292891] loop7: detected capacity change from 0 to 2048 [ 1124.293136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.295080] Call Trace: [ 1124.295522] dump_stack+0x107/0x167 [ 1124.296100] should_fail.cold+0x5/0xa [ 1124.296709] ? __delayacct_tsk_init+0x1b/0x80 [ 1124.297408] should_failslab+0x5/0x20 [ 1124.297996] kmem_cache_alloc+0x5b/0x310 [ 1124.298631] ? install_thread_keyring_to_cred+0x108/0x150 [ 1124.299505] __delayacct_tsk_init+0x1b/0x80 [ 1124.300061] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1124.300200] copy_process+0x3399/0x78b0 [ 1124.301495] ? SOFTIRQ_verbose+0x10/0x10 [ 1124.302145] ? stack_trace_save+0x8c/0xc0 [ 1124.302808] ? lock_acquire+0x197/0x470 [ 1124.303439] ? io_sq_thread_park+0x79/0xd0 [ 1124.304121] ? __cleanup_sighand+0xb0/0xb0 [ 1124.304799] ? kernel_text_address+0xf2/0x120 [ 1124.305509] ? find_held_lock+0x2c/0x110 [ 1124.306148] ? io_uring_setup+0x1c23/0x2980 [ 1124.306840] ? lock_downgrade+0x6d0/0x6d0 [ 1124.307512] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1124.308275] create_io_thread+0xb6/0xf0 [ 1124.308915] ? pidfd_prepare+0x80/0x80 [ 1124.309544] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1124.310362] io_uring_setup+0x1d79/0x2980 [ 1124.311058] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1124.311883] ? wait_for_completion_io+0x270/0x270 [ 1124.312673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1124.313515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1124.314351] do_syscall_64+0x33/0x40 [ 1124.314944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.315771] RIP: 0033:0x7f6e4b79cb19 [ 1124.316390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.319330] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1124.320549] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1124.321707] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1124.322851] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1124.323999] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1124.325170] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:16:33 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x5) 05:16:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 33) 05:16:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xb, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:33 executing program 6: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) 05:16:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) write$vga_arbiter(r1, 0x0, 0x3f00) write$binfmt_elf32(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x8, 0xe7, 0x3, 0x2, 0x6, 0x4, 0x1b4, 0x38, 0xa5, 0x69, 0x3, 0x20, 0x1, 0x3f, 0x3, 0x8001}, [{0x2, 0x0, 0x940a, 0x0, 0x3937, 0x6, 0x800, 0x4e}], "f497bce7187025d7a4032c8882c0d2f3099b2d392edffac18f2898000c43628210557fcc9c1fcbfa6a6a45ed26f52751142fd7286f9d9e0da3e06a3675bf6c3776090876746e912846fd1a9f340515e92effa837c97802ff5749855a52667e8c8e43d16232296c006ef34bf17d34a452b5f1d73dddd24585ee2aa3904b022b2133d59d88c6e9d648f4164caf55e52cbb91e3012586d34a437aaf40ec3e1858de5bf2aa16d514396351a05a10fa1195fe5cb1ebfec81edc4b17b574120475fd1328ce1476231fb6dbe3a23262dc450c", ['\x00']}, 0x227) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:16:33 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/212, 0xd4}, {&(0x7f0000000180)=""/75, 0x4b}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xc8}, 0x10000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) [ 1124.451412] FAULT_INJECTION: forcing a failure. [ 1124.451412] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.452806] CPU: 0 PID: 7776 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1124.453607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.454570] Call Trace: [ 1124.454883] dump_stack+0x107/0x167 [ 1124.455310] should_fail.cold+0x5/0xa [ 1124.455766] ? create_object.isra.0+0x3a/0xa30 [ 1124.456300] should_failslab+0x5/0x20 [ 1124.456753] kmem_cache_alloc+0x5b/0x310 [ 1124.457232] create_object.isra.0+0x3a/0xa30 [ 1124.457747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1124.458401] kmem_cache_alloc+0x159/0x310 [ 1124.458987] __kernfs_new_node+0xd4/0x860 [ 1124.459500] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1124.460060] ? kernfs_add_one+0x36e/0x4d0 [ 1124.460563] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1124.461131] ? wait_for_completion_io+0x270/0x270 [ 1124.461694] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1124.462312] kernfs_new_node+0x18d/0x250 05:16:33 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 30) [ 1124.462803] __kernfs_create_file+0x51/0x350 [ 1124.463478] sysfs_add_file_mode_ns+0x221/0x560 [ 1124.464030] internal_create_group+0x324/0xb30 [ 1124.464574] ? sysfs_remove_group+0x170/0x170 [ 1124.465104] ? lockdep_init_map_type+0x2c7/0x780 [ 1124.465659] ? blk_queue_flag_set+0x22/0x30 [ 1124.466162] ? __loop_update_dio+0x2d2/0x690 [ 1124.466682] loop_configure+0x953/0x1410 [ 1124.467163] lo_ioctl+0xa57/0x16b0 [ 1124.467578] ? avc_has_extended_perms+0x7f1/0xf40 [ 1124.468142] ? loop_set_status_old+0x250/0x250 [ 1124.468688] ? avc_ss_reset+0x180/0x180 [ 1124.469157] ? find_held_lock+0x2c/0x110 [ 1124.469640] ? __lock_acquire+0xbb1/0x5b00 [ 1124.470165] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1124.470783] ? generic_block_fiemap+0x60/0x60 [ 1124.471328] ? lock_downgrade+0x6d0/0x6d0 [ 1124.471813] ? build_open_flags+0x6f0/0x6f0 [ 1124.472333] ? loop_set_status_old+0x250/0x250 [ 1124.472866] blkdev_ioctl+0x291/0x710 [ 1124.473312] ? blkdev_common_ioctl+0x1930/0x1930 [ 1124.473869] ? selinux_file_ioctl+0xb6/0x270 [ 1124.474393] block_ioctl+0xf9/0x140 [ 1124.474827] ? blkdev_read_iter+0x1c0/0x1c0 [ 1124.475333] __x64_sys_ioctl+0x19a/0x210 [ 1124.475810] do_syscall_64+0x33/0x40 [ 1124.476247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.476854] RIP: 0033:0x7f7ab951f8d7 [ 1124.477293] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.479454] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.480356] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1124.481190] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1124.482023] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1124.482859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1124.483692] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:16:33 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) 05:16:33 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) [ 1124.537704] loop7: detected capacity change from 0 to 2048 [ 1124.547345] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1124.565577] FAULT_INJECTION: forcing a failure. [ 1124.565577] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.566975] CPU: 0 PID: 7790 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1124.567789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.568770] Call Trace: [ 1124.569085] dump_stack+0x107/0x167 [ 1124.569511] should_fail.cold+0x5/0xa [ 1124.569967] ? create_object.isra.0+0x3a/0xa30 [ 1124.570503] should_failslab+0x5/0x20 [ 1124.570956] kmem_cache_alloc+0x5b/0x310 [ 1124.571432] create_object.isra.0+0x3a/0xa30 [ 1124.571946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1124.572554] kmem_cache_alloc+0x159/0x310 [ 1124.573046] __delayacct_tsk_init+0x1b/0x80 [ 1124.573559] copy_process+0x3399/0x78b0 [ 1124.574028] ? SOFTIRQ_verbose+0x10/0x10 [ 1124.574512] ? stack_trace_save+0x8c/0xc0 [ 1124.575001] ? lock_acquire+0x197/0x470 [ 1124.575469] ? io_sq_thread_park+0x79/0xd0 [ 1124.575973] ? __cleanup_sighand+0xb0/0xb0 [ 1124.576476] ? kernel_text_address+0xf2/0x120 [ 1124.577003] ? find_held_lock+0x2c/0x110 [ 1124.577483] ? io_uring_setup+0x1c23/0x2980 [ 1124.577988] ? lock_downgrade+0x6d0/0x6d0 [ 1124.578476] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1124.579057] create_io_thread+0xb6/0xf0 [ 1124.579525] ? pidfd_prepare+0x80/0x80 [ 1124.579990] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1124.580582] io_uring_setup+0x1d79/0x2980 [ 1124.581073] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1124.581669] ? wait_for_completion_io+0x270/0x270 [ 1124.582251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1124.582875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1124.583481] do_syscall_64+0x33/0x40 [ 1124.583919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.584526] RIP: 0033:0x7f6e4b79cb19 [ 1124.584968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.587133] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1124.588028] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1124.588876] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1124.589718] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1124.590559] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1124.591397] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:16:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:47 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 31) 05:16:47 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x6) 05:16:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r5, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000580)={"981ae462d571aef713803ea5c9bd857a", 0x0, r5, {0x4, 0x9}, {0x4b465432, 0x9}, 0x859, [0x1, 0x55e, 0x1, 0x80, 0x1, 0x5, 0x2b8, 0x0, 0x4f32c10e, 0x6, 0x6, 0x40, 0x61a, 0x6, 0x80000000, 0x7]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"99b15dc3a5e63f7d94033acb233dd9c3", r5, r6, {0x4, 0x7}, {0xfffffffffffffffd, 0x3}, 0x10000, [0x40, 0x6, 0x7, 0x40, 0xd787, 0x401, 0x1, 0x4, 0x3, 0x7c3470b4, 0x100000000, 0x3, 0x1, 0x3f, 0xfffffffffffff800, 0x1]}) 05:16:47 executing program 6: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:16:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:16:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 34) 05:16:47 executing program 4: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x50) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1138.522184] FAULT_INJECTION: forcing a failure. [ 1138.522184] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.524584] CPU: 1 PID: 7817 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1138.526034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1138.527793] Call Trace: [ 1138.528353] dump_stack+0x107/0x167 [ 1138.529137] should_fail.cold+0x5/0xa [ 1138.529958] ? create_object.isra.0+0x3a/0xa30 [ 1138.530917] should_failslab+0x5/0x20 [ 1138.531725] kmem_cache_alloc+0x5b/0x310 [ 1138.532596] create_object.isra.0+0x3a/0xa30 [ 1138.533514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1138.534598] kmem_cache_alloc+0x159/0x310 [ 1138.535469] __kernfs_new_node+0xd4/0x860 [ 1138.536334] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1138.537347] ? kernfs_add_one+0x36e/0x4d0 [ 1138.538227] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1138.539242] ? wait_for_completion_io+0x270/0x270 [ 1138.540253] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1138.541375] kernfs_new_node+0x18d/0x250 [ 1138.542237] __kernfs_create_file+0x51/0x350 [ 1138.543160] sysfs_add_file_mode_ns+0x221/0x560 [ 1138.544153] internal_create_group+0x324/0xb30 [ 1138.545150] ? sysfs_remove_group+0x170/0x170 [ 1138.546108] ? lockdep_init_map_type+0x2c7/0x780 [ 1138.547115] ? blk_queue_flag_set+0x22/0x30 [ 1138.548021] ? __loop_update_dio+0x2d2/0x690 [ 1138.548962] loop_configure+0x953/0x1410 [ 1138.549841] lo_ioctl+0xa57/0x16b0 [ 1138.550593] ? avc_has_extended_perms+0x7f1/0xf40 [ 1138.551619] ? loop_set_status_old+0x250/0x250 [ 1138.552596] ? avc_ss_reset+0x180/0x180 [ 1138.553439] ? find_held_lock+0x2c/0x110 [ 1138.554315] ? __lock_acquire+0xbb1/0x5b00 [ 1138.555256] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1138.556346] ? generic_block_fiemap+0x60/0x60 [ 1138.557295] ? lock_downgrade+0x6d0/0x6d0 [ 1138.558163] ? build_open_flags+0x6f0/0x6f0 [ 1138.559089] ? loop_set_status_old+0x250/0x250 [ 1138.560049] blkdev_ioctl+0x291/0x710 [ 1138.560868] ? blkdev_common_ioctl+0x1930/0x1930 [ 1138.561894] ? selinux_file_ioctl+0xb6/0x270 [ 1138.562826] block_ioctl+0xf9/0x140 [ 1138.563593] ? blkdev_read_iter+0x1c0/0x1c0 [ 1138.564523] __x64_sys_ioctl+0x19a/0x210 [ 1138.565377] do_syscall_64+0x33/0x40 [ 1138.566174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1138.567243] RIP: 0033:0x7f7ab951f8d7 [ 1138.568025] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1138.571940] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.573564] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1138.575056] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1138.576564] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1138.578077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1138.579561] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:16:47 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5eb3eada56d498be) [ 1138.607674] FAULT_INJECTION: forcing a failure. [ 1138.607674] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.610121] CPU: 1 PID: 7826 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1138.611553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1138.613285] Call Trace: [ 1138.613846] dump_stack+0x107/0x167 [ 1138.614626] should_fail.cold+0x5/0xa [ 1138.615430] ? alloc_pid+0xd7/0xd30 [ 1138.616202] should_failslab+0x5/0x20 [ 1138.617014] kmem_cache_alloc+0x5b/0x310 [ 1138.617885] alloc_pid+0xd7/0xd30 [ 1138.618615] ? copy_namespaces+0x1ca/0x4f0 [ 1138.619521] copy_process+0x3b8b/0x78b0 [ 1138.620354] ? SOFTIRQ_verbose+0x10/0x10 [ 1138.621231] ? stack_trace_save+0x8c/0xc0 [ 1138.622126] ? __cleanup_sighand+0xb0/0xb0 [ 1138.623016] ? kernel_text_address+0xf2/0x120 [ 1138.623973] ? find_held_lock+0x2c/0x110 [ 1138.624855] ? io_uring_setup+0x1c23/0x2980 [ 1138.625774] ? lock_downgrade+0x6d0/0x6d0 [ 1138.626646] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1138.627679] create_io_thread+0xb6/0xf0 [ 1138.628526] ? pidfd_prepare+0x80/0x80 [ 1138.629367] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1138.630428] io_uring_setup+0x1d79/0x2980 [ 1138.631306] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1138.632376] ? wait_for_completion_io+0x270/0x270 [ 1138.633425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1138.634526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1138.635622] do_syscall_64+0x33/0x40 [ 1138.636413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1138.637498] RIP: 0033:0x7f6e4b79cb19 [ 1138.638284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1138.642215] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1138.643818] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1138.645350] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1138.646851] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1138.648359] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1138.649863] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:16:47 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:16:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x10, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:16:47 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x7, 0x1538b4ec400) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1138.701335] loop7: detected capacity change from 0 to 2048 [ 1138.735326] EXT4-fs (loop7): invalid first ino: 2875922842 05:16:48 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 32) 05:16:48 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffa) [ 1138.819376] FAULT_INJECTION: forcing a failure. [ 1138.819376] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.821815] CPU: 1 PID: 7843 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1138.823254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1138.824997] Call Trace: [ 1138.825554] dump_stack+0x107/0x167 [ 1138.826316] should_fail.cold+0x5/0xa [ 1138.827121] ? create_object.isra.0+0x3a/0xa30 [ 1138.828076] should_failslab+0x5/0x20 [ 1138.828889] kmem_cache_alloc+0x5b/0x310 [ 1138.829760] create_object.isra.0+0x3a/0xa30 [ 1138.830681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1138.831763] kmem_cache_alloc+0x159/0x310 [ 1138.832631] alloc_pid+0xd7/0xd30 [ 1138.833356] ? copy_namespaces+0x1ca/0x4f0 [ 1138.834246] copy_process+0x3b8b/0x78b0 [ 1138.835078] ? SOFTIRQ_verbose+0x10/0x10 [ 1138.835926] ? stack_trace_save+0x8c/0xc0 [ 1138.836821] ? __cleanup_sighand+0xb0/0xb0 [ 1138.837703] ? kernel_text_address+0xf2/0x120 05:16:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r2, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000080)={0x6f, 0x9, 0x4, 0x2, @msf={0x0, 0x40, 0x90}, 0x3f}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x6, 0x8, 0x7, 0x0, 0x3, 0xc8001, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xfd, 0x1f}, 0x40000, 0x7, 0x1, 0x0, 0xfbb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x10, r1, 0x0) 05:16:48 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) [ 1138.838648] ? find_held_lock+0x2c/0x110 [ 1138.839733] ? io_uring_setup+0x1c23/0x2980 [ 1138.840648] ? lock_downgrade+0x6d0/0x6d0 [ 1138.841512] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1138.842559] create_io_thread+0xb6/0xf0 [ 1138.843397] ? pidfd_prepare+0x80/0x80 [ 1138.844230] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1138.845286] io_uring_setup+0x1d79/0x2980 [ 1138.846168] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1138.847245] ? wait_for_completion_io+0x270/0x270 [ 1138.848275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1138.849375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1138.850467] do_syscall_64+0x33/0x40 [ 1138.851257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1138.852317] RIP: 0033:0x7f6e4b79cb19 [ 1138.853108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1138.856972] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1138.858580] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1138.860072] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1138.861585] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1138.863059] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1138.864572] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1138.939052] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 05:17:02 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) 05:17:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000013c0)=""/4101, 0x1005, 0x7aa) 05:17:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 33) 05:17:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 35) 05:17:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x11, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:17:02 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffb) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) 05:17:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) 05:17:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ftruncate(r3, 0xffff) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x83, 0x80, 0xea, 0x0, 0x7fffffff, 0x4840, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_config_ext={0x3, 0x87}, 0x304, 0x5, 0x3, 0x7, 0x3f, 0x61, 0x8, 0x0, 0x90ec}, r2, 0xc, r0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(r2, 0x8, 0x0, &(0x7f0000000180)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0x80800) dup2(r4, r1) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x8) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x403, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000580)={0x0, 0xfffffffffffffe00, 0x6}) [ 1153.321121] FAULT_INJECTION: forcing a failure. [ 1153.321121] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.323593] CPU: 0 PID: 7866 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1153.325078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.326863] Call Trace: [ 1153.327437] dump_stack+0x107/0x167 [ 1153.328228] should_fail.cold+0x5/0xa [ 1153.329064] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1153.330173] should_failslab+0x5/0x20 [ 1153.331000] kmem_cache_alloc_trace+0x55/0x320 [ 1153.331995] io_uring_alloc_task_context+0x99/0x6a0 [ 1153.333087] ? io_import_iovec+0x1120/0x1120 [ 1153.334057] io_uring_setup+0x1dd1/0x2980 [ 1153.334961] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1153.336053] ? wait_for_completion_io+0x270/0x270 [ 1153.337149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1153.338279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1153.339411] do_syscall_64+0x33/0x40 [ 1153.340233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.341362] RIP: 0033:0x7f6e4b79cb19 [ 1153.342180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.346289] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1153.347987] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1153.349584] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1153.351182] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1153.352782] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1153.354378] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1153.369707] FAULT_INJECTION: forcing a failure. [ 1153.369707] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.372250] CPU: 0 PID: 7874 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1153.373784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.375633] Call Trace: [ 1153.376222] dump_stack+0x107/0x167 [ 1153.377045] should_fail.cold+0x5/0xa [ 1153.377895] ? create_object.isra.0+0x3a/0xa30 [ 1153.378914] should_failslab+0x5/0x20 [ 1153.379761] kmem_cache_alloc+0x5b/0x310 [ 1153.380678] create_object.isra.0+0x3a/0xa30 [ 1153.381658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1153.382796] kmem_cache_alloc+0x159/0x310 [ 1153.383726] __kernfs_new_node+0xd4/0x860 [ 1153.384666] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1153.385719] ? kernfs_add_one+0x36e/0x4d0 [ 1153.386646] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1153.387727] ? wait_for_completion_io+0x270/0x270 [ 1153.388809] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1153.389982] kernfs_new_node+0x18d/0x250 [ 1153.390892] __kernfs_create_file+0x51/0x350 [ 1153.391875] sysfs_add_file_mode_ns+0x221/0x560 [ 1153.392929] internal_create_group+0x324/0xb30 [ 1153.393954] ? sysfs_remove_group+0x170/0x170 [ 1153.394952] ? lockdep_init_map_type+0x2c7/0x780 [ 1153.396012] ? blk_queue_flag_set+0x22/0x30 [ 1153.396981] ? __loop_update_dio+0x2d2/0x690 [ 1153.397971] loop_configure+0x953/0x1410 [ 1153.398890] lo_ioctl+0xa57/0x16b0 [ 1153.399685] ? avc_has_extended_perms+0x7f1/0xf40 [ 1153.400773] ? loop_set_status_old+0x250/0x250 [ 1153.401794] ? avc_ss_reset+0x180/0x180 [ 1153.402680] ? find_held_lock+0x2c/0x110 [ 1153.403604] ? __lock_acquire+0xbb1/0x5b00 [ 1153.404598] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1153.405776] ? generic_block_fiemap+0x60/0x60 [ 1153.406780] ? lock_downgrade+0x6d0/0x6d0 [ 1153.407702] ? build_open_flags+0x6f0/0x6f0 [ 1153.408682] ? loop_set_status_old+0x250/0x250 [ 1153.409700] blkdev_ioctl+0x291/0x710 [ 1153.410547] ? blkdev_common_ioctl+0x1930/0x1930 [ 1153.411607] ? selinux_file_ioctl+0xb6/0x270 [ 1153.412594] block_ioctl+0xf9/0x140 [ 1153.413413] ? blkdev_read_iter+0x1c0/0x1c0 [ 1153.414375] __x64_sys_ioctl+0x19a/0x210 [ 1153.415288] do_syscall_64+0x33/0x40 [ 1153.416116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.417272] RIP: 0033:0x7f7ab951f8d7 [ 1153.418102] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.422219] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.423926] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1153.425524] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1153.427117] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1153.428727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1153.430318] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:17:02 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) 05:17:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) [ 1153.450006] loop7: detected capacity change from 0 to 2048 05:17:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 34) [ 1153.524028] FAULT_INJECTION: forcing a failure. [ 1153.524028] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.526578] CPU: 1 PID: 7894 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1153.528062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.529863] Call Trace: [ 1153.530443] dump_stack+0x107/0x167 [ 1153.531234] should_fail.cold+0x5/0xa [ 1153.532060] ? create_object.isra.0+0x3a/0xa30 [ 1153.533061] should_failslab+0x5/0x20 [ 1153.533885] kmem_cache_alloc+0x5b/0x310 [ 1153.534775] create_object.isra.0+0x3a/0xa30 [ 1153.535730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1153.536846] kmem_cache_alloc_trace+0x151/0x320 [ 1153.537862] io_uring_alloc_task_context+0x99/0x6a0 [ 1153.538945] ? io_import_iovec+0x1120/0x1120 [ 1153.539914] io_uring_setup+0x1dd1/0x2980 [ 1153.540831] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1153.541926] ? wait_for_completion_io+0x270/0x270 [ 1153.542998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1153.544132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1153.545261] do_syscall_64+0x33/0x40 [ 1153.546065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.547170] RIP: 0033:0x7f6e4b79cb19 [ 1153.547972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.551980] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1153.553638] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1153.555183] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1153.556734] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1153.558275] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1153.559816] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:17:02 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) [ 1153.671951] EXT4-fs (loop7): invalid first ino: 2875922842 05:17:17 executing program 6: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:17:17 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) 05:17:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 36) 05:17:17 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) 05:17:17 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='setgroups\x00') pread64(r1, &(0x7f0000002100)=""/4099, 0x1003, 0xf0ff1f) 05:17:17 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 35) 05:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r1) close_range(r1, r0, 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2e0, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ca562ccd2a183e5089538c43dbfd4d71c4645e4cdd822a956f2a4926"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2eb6b07ae3b6adad1ada979134609d5851bf0abf1135735924d39f2743a9fa45"}}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a3e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x534c, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @private0, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff9b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12e3ad28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5b0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e0}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2e0}}, 0x40000) ioctl$CDROMMULTISESSION(r5, 0x2275, &(0x7f00000005c0)={@lba}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xc1, 0x3f, 0x3f, 0x0, 0xfffffffffffffff7, 0x31450, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x2, 0xffffff6c, 0x1, 0x10001, 0x200, 0x0, 0x0, 0x9000000, 0x0, 0x2}, r4, 0x2, r5, 0xa) 05:17:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x9c, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1168.195918] FAULT_INJECTION: forcing a failure. [ 1168.195918] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.198877] CPU: 0 PID: 7910 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1168.200608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.202724] Call Trace: [ 1168.203397] dump_stack+0x107/0x167 [ 1168.204329] should_fail.cold+0x5/0xa [ 1168.205308] ? __kernfs_new_node+0xd4/0x860 [ 1168.206400] should_failslab+0x5/0x20 [ 1168.207364] kmem_cache_alloc+0x5b/0x310 [ 1168.208391] __kernfs_new_node+0xd4/0x860 [ 1168.209451] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1168.210645] ? kernfs_add_one+0x36e/0x4d0 [ 1168.211702] ? __mutex_unlock_slowpath+0xe1/0x600 05:17:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x44281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe90, 0xb4, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x2, 0xf2, 0x7, 0x0, 0xffffffff, 0x6900, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb0d, 0x4, @perf_config_ext={0x4, 0xee1}, 0x4000a, 0x5, 0x80000000, 0x0, 0x3ff, 0x3, 0x2, 0x0, 0x3cbf, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r1, 0x2) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1168.213033] ? wait_for_completion_io+0x270/0x270 [ 1168.214269] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1168.215600] kernfs_new_node+0x18d/0x250 [ 1168.216635] __kernfs_create_file+0x51/0x350 [ 1168.217766] sysfs_add_file_mode_ns+0x221/0x560 [ 1168.218952] internal_create_group+0x324/0xb30 [ 1168.220120] ? sysfs_remove_group+0x170/0x170 [ 1168.221271] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.222472] ? blk_queue_flag_set+0x22/0x30 [ 1168.223567] ? __loop_update_dio+0x2d2/0x690 [ 1168.224685] loop_configure+0x953/0x1410 [ 1168.225765] lo_ioctl+0xa57/0x16b0 [ 1168.226688] ? avc_has_extended_perms+0x7f1/0xf40 [ 1168.227940] ? loop_set_status_old+0x250/0x250 [ 1168.229102] ? avc_ss_reset+0x180/0x180 [ 1168.229967] ? find_held_lock+0x2c/0x110 [ 1168.230849] ? __lock_acquire+0xbb1/0x5b00 [ 1168.231810] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1168.232951] ? generic_block_fiemap+0x60/0x60 [ 1168.233893] ? lock_downgrade+0x6d0/0x6d0 [ 1168.234776] ? build_open_flags+0x6f0/0x6f0 [ 1168.235693] ? loop_set_status_old+0x250/0x250 [ 1168.236664] blkdev_ioctl+0x291/0x710 [ 1168.237481] ? blkdev_common_ioctl+0x1930/0x1930 [ 1168.238485] ? selinux_file_ioctl+0xb6/0x270 [ 1168.239430] block_ioctl+0xf9/0x140 [ 1168.240215] ? blkdev_read_iter+0x1c0/0x1c0 [ 1168.241152] __x64_sys_ioctl+0x19a/0x210 [ 1168.242012] do_syscall_64+0x33/0x40 [ 1168.242801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.243886] RIP: 0033:0x7f7ab951f8d7 [ 1168.244684] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.248591] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:17:17 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) 05:17:17 executing program 4: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x7, 0x88, "108c5a2dcb7fd59e2ead3a2afb0bec467a467ce10327a3e362b7fca147dfbf72ae599781603f553e9f2cc69584900023e6249dc7822cfbc29cacdaf398f6a8765450613859a31ea98554916d08e1f9857e36b639c85ec50399ba85922edfff3db2adc0e055a4bcddb847bbe561479b7304ec23d723b7c774429cabac70d4fd04e3fcfe7fd4f9aa50"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="010001000000002e2f66695b2591eb002080672963b9630b12300640960e8ea1a3b49dd4b797620825785abdcd11bc1dc0c011638d0d8305f03da1c34bb7de1f18e2460a8573b8bada0814de24c39f2b9b52eb90dd486cae7f874b3b263779598ea992fa3cc118f525d6db2ee4e36c9b872782bca188ded4f4081fe270bddedf2c3b17a55f2a5b32a7dde1458339b85762caf6fdd006532cb40fe143e013bb7bc24eca2e95a7aae895c90dd9cea5b0d71d77e755299d01d47abfbdcc52cb24530579cd99aca5b13854309d7a71d25e141f401ab4ba8165ade8d2d230f3c54f1a2799ad79c6d28caaf4"]) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000001c0)={0x8000200a}) keyctl$set_reqkey_keyring(0xe, 0x5) [ 1168.250218] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1168.251829] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1168.253415] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1168.254967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1168.256504] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:17:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1168.272359] FAULT_INJECTION: forcing a failure. [ 1168.272359] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.274841] CPU: 0 PID: 7928 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1168.276283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.278023] Call Trace: [ 1168.278588] dump_stack+0x107/0x167 [ 1168.279450] should_fail.cold+0x5/0xa [ 1168.280346] ? create_object.isra.0+0x3a/0xa30 [ 1168.281353] should_failslab+0x5/0x20 [ 1168.282196] kmem_cache_alloc+0x5b/0x310 [ 1168.283101] create_object.isra.0+0x3a/0xa30 [ 1168.284075] kmemleak_alloc_percpu+0xa0/0x100 [ 1168.285084] pcpu_alloc+0x4e2/0x1240 [ 1168.285924] __percpu_counter_init+0x10d/0x2d0 [ 1168.286990] io_uring_alloc_task_context+0xcc/0x6a0 [ 1168.288095] ? io_import_iovec+0x1120/0x1120 [ 1168.289097] io_uring_setup+0x1dd1/0x2980 [ 1168.290022] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1168.291142] ? wait_for_completion_io+0x270/0x270 [ 1168.292232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.293398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.294539] do_syscall_64+0x33/0x40 [ 1168.295361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.296490] RIP: 0033:0x7f6e4b79cb19 [ 1168.297322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.301385] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1168.303062] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1168.304634] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1168.306213] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1168.307785] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1168.309368] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:17:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0301, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x16, 0xe, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0xff, 0x9, [0x4, 0x9, 0x6, 0x1d5, 0x3]}}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x2}, @jumbo, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x80) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1168.337492] loop7: detected capacity change from 0 to 2048 05:17:17 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) 05:17:17 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) [ 1168.386033] EXT4-fs (loop7): invalid first ino: 2875922842 05:17:17 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='/dev/vga_arbiter\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 05:17:17 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) 05:17:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 37) 05:17:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x300, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:17:17 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 36) 05:17:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}, 0x2418, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x4, 0x1, 0x7f, 0x0, 0x3df6, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2b8, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x1, 0x4, 0x4, 0x0, 0x80, 0x100, 0x8042, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r1, 0x8) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r3, r4}}, 0xb7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x10e, 0x44740, 0x12345, {0x0, r3}}, 0x4) prlimit64(r2, 0xf, &(0x7f0000000040)={0x7, 0x100000001}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e1d, 0x6, @mcast2}, 0x1c) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1168.518019] FAULT_INJECTION: forcing a failure. [ 1168.518019] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.519791] CPU: 1 PID: 7965 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1168.520830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.522085] Call Trace: [ 1168.522432] dump_stack+0x107/0x167 [ 1168.522983] should_fail.cold+0x5/0xa [ 1168.523559] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1168.524333] should_failslab+0x5/0x20 [ 1168.524910] kmem_cache_alloc_trace+0x55/0x320 [ 1168.525589] io_uring_alloc_task_context+0x99/0x6a0 [ 1168.526329] ? io_import_iovec+0x1120/0x1120 [ 1168.527000] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1168.527726] io_uring_setup+0x1dd1/0x2980 [ 1168.528352] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1168.529118] ? wait_for_completion_io+0x270/0x270 [ 1168.529848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.530633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.531414] do_syscall_64+0x33/0x40 [ 1168.531978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.532730] RIP: 0033:0x7f6e4b79cb19 [ 1168.533290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.536013] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1168.537144] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1168.538193] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1168.539246] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1168.540117] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1168.541187] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1168.558452] FAULT_INJECTION: forcing a failure. [ 1168.558452] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.560944] CPU: 0 PID: 7969 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1168.562432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.564246] Call Trace: [ 1168.564838] dump_stack+0x107/0x167 [ 1168.565637] should_fail.cold+0x5/0xa [ 1168.566470] ? __kernfs_new_node+0xd4/0x860 [ 1168.567410] should_failslab+0x5/0x20 [ 1168.568244] kmem_cache_alloc+0x5b/0x310 [ 1168.569151] __kernfs_new_node+0xd4/0x860 [ 1168.570059] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1168.571088] ? kernfs_add_one+0x36e/0x4d0 [ 1168.572006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1168.573074] ? wait_for_completion_io+0x270/0x270 [ 1168.574126] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1168.575278] kernfs_new_node+0x18d/0x250 [ 1168.576171] __kernfs_create_file+0x51/0x350 [ 1168.577146] sysfs_add_file_mode_ns+0x221/0x560 [ 1168.578178] internal_create_group+0x324/0xb30 [ 1168.579183] ? sysfs_remove_group+0x170/0x170 [ 1168.580164] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.581206] ? blk_queue_flag_set+0x22/0x30 [ 1168.582144] ? __loop_update_dio+0x2d2/0x690 [ 1168.583104] loop_configure+0x953/0x1410 [ 1168.584006] lo_ioctl+0xa57/0x16b0 [ 1168.584784] ? avc_has_extended_perms+0x7f1/0xf40 [ 1168.585847] ? loop_set_status_old+0x250/0x250 [ 1168.586849] ? avc_ss_reset+0x180/0x180 [ 1168.587720] ? find_held_lock+0x2c/0x110 [ 1168.588618] ? __lock_acquire+0xbb1/0x5b00 [ 1168.589599] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1168.590741] ? generic_block_fiemap+0x60/0x60 [ 1168.591725] ? lock_downgrade+0x6d0/0x6d0 [ 1168.592627] ? build_open_flags+0x6f0/0x6f0 [ 1168.593587] ? loop_set_status_old+0x250/0x250 [ 1168.594580] blkdev_ioctl+0x291/0x710 [ 1168.595411] ? blkdev_common_ioctl+0x1930/0x1930 [ 1168.596455] ? selinux_file_ioctl+0xb6/0x270 [ 1168.597434] block_ioctl+0xf9/0x140 [ 1168.598230] ? blkdev_read_iter+0x1c0/0x1c0 [ 1168.599172] __x64_sys_ioctl+0x19a/0x210 [ 1168.600063] do_syscall_64+0x33/0x40 [ 1168.600885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.602002] RIP: 0033:0x7f7ab951f8d7 [ 1168.602813] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.606833] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.608495] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1168.610073] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1168.611621] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1168.613192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1168.614744] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1168.635122] loop7: detected capacity change from 0 to 2048 [ 1168.668073] EXT4-fs (loop7): invalid first ino: 2875922842 05:17:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0xffff, 0x4) dup2(r1, r0) 05:17:35 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 37) [ 1185.927199] FAULT_INJECTION: forcing a failure. [ 1185.927199] name failslab, interval 1, probability 0, space 0, times 0 05:17:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 38) 05:17:35 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x38, 0x63, 0x1, 0x64, 0x32, 0x64, 0x31, 0x34, 0x37, 0x62, 0x37, 0x39, 0x38, 0x39, 0x32, 0x33]}, &(0x7f0000000080)={0x0, "e3d1a66c8da5b73ca8dedb8825e4c8a48bb10adf5265115306e682b0e3774d5637a1ba54fb569e27381165951cc5ce99e986ba6cbbf3ab33d1ee07eb2c9cb6c7", 0x22}, 0x48, 0xfffffffffffffff8) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="2211115a5a1b23970ba4e804903d15847108cf1c89d0e376c913b49d448ddb04cad05e45a1dcba2c8e41dc9648dec36e487308e48585cc4f6883ef5fa0e479adfdb45b6cfa105748413fba95a1f2c1536aaf035fc34ae0a66dc46a6040b79769249368e29966fb287703c3fe1319eb46e4c6f43ef91bfdb82a7a5b05beeeebe05fe068dedcb2e8797cf3777848dad8f79f35c25c5ff8547e5ad099997fb1495f8ce07f1fec79", 0xa6, 0x0) 05:17:35 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) 05:17:35 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) 05:17:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x500, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:17:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10003, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) inotify_rm_watch(r1, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1185.930250] CPU: 1 PID: 7985 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1185.932300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1185.934450] Call Trace: [ 1185.935147] dump_stack+0x107/0x167 [ 1185.936083] should_fail.cold+0x5/0xa [ 1185.937085] ? create_object.isra.0+0x3a/0xa30 [ 1185.938248] should_failslab+0x5/0x20 [ 1185.939225] kmem_cache_alloc+0x5b/0x310 [ 1185.940272] create_object.isra.0+0x3a/0xa30 [ 1185.941255] FAULT_INJECTION: forcing a failure. [ 1185.941255] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.941407] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1185.941449] kmem_cache_alloc+0x159/0x310 [ 1185.946397] __kernfs_new_node+0xd4/0x860 [ 1185.947458] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1185.948649] ? kernfs_add_one+0x36e/0x4d0 [ 1185.949717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1185.950946] ? wait_for_completion_io+0x270/0x270 [ 1185.952170] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1185.953519] kernfs_new_node+0x18d/0x250 [ 1185.954563] __kernfs_create_file+0x51/0x350 [ 1185.955687] sysfs_add_file_mode_ns+0x221/0x560 [ 1185.956872] internal_create_group+0x324/0xb30 [ 1185.958074] ? sysfs_remove_group+0x170/0x170 [ 1185.959221] ? lockdep_init_map_type+0x2c7/0x780 [ 1185.960421] ? blk_queue_flag_set+0x22/0x30 [ 1185.961520] ? __loop_update_dio+0x2d2/0x690 [ 1185.962658] loop_configure+0x953/0x1410 [ 1185.963704] lo_ioctl+0xa57/0x16b0 [ 1185.964610] ? avc_has_extended_perms+0x7f1/0xf40 [ 1185.965850] ? loop_set_status_old+0x250/0x250 [ 1185.967030] ? avc_ss_reset+0x180/0x180 [ 1185.968044] ? find_held_lock+0x2c/0x110 [ 1185.969105] ? __lock_acquire+0xbb1/0x5b00 [ 1185.970252] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1185.971570] ? generic_block_fiemap+0x60/0x60 [ 1185.972697] ? lock_downgrade+0x6d0/0x6d0 [ 1185.973759] ? build_open_flags+0x6f0/0x6f0 [ 1185.974868] ? loop_set_status_old+0x250/0x250 [ 1185.976032] blkdev_ioctl+0x291/0x710 [ 1185.977019] ? blkdev_common_ioctl+0x1930/0x1930 [ 1185.978221] ? selinux_file_ioctl+0xb6/0x270 [ 1185.979336] block_ioctl+0xf9/0x140 [ 1185.980254] ? blkdev_read_iter+0x1c0/0x1c0 [ 1185.981349] __x64_sys_ioctl+0x19a/0x210 [ 1185.982379] do_syscall_64+0x33/0x40 [ 1185.983321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1185.984601] RIP: 0033:0x7f7ab951f8d7 [ 1185.985567] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1185.990204] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1185.992113] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1185.993911] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1185.995687] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1185.997527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1185.999321] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1186.001174] CPU: 0 PID: 7995 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1186.002429] loop7: detected capacity change from 0 to 2048 [ 1186.002689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.002703] Call Trace: [ 1186.006465] dump_stack+0x107/0x167 [ 1186.007245] should_fail.cold+0x5/0xa [ 1186.008063] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1186.009196] should_failslab+0x5/0x20 [ 1186.010010] kmem_cache_alloc_trace+0x55/0x320 [ 1186.010992] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1186.011416] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1186.012078] ? io_import_iovec+0x1120/0x1120 [ 1186.012117] io_uring_setup+0x1dd1/0x2980 [ 1186.012149] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1186.016598] ? wait_for_completion_io+0x270/0x270 [ 1186.017673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1186.018804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1186.019914] do_syscall_64+0x33/0x40 [ 1186.020712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.021829] RIP: 0033:0x7f6e4b79cb19 [ 1186.022628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.026579] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1186.028215] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1186.029751] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1186.031277] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1186.032801] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1186.034336] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:17:35 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:17:35 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 05:17:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 39) 05:17:35 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) flistxattr(r1, &(0x7f0000000000)=""/84, 0x54) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x4) 05:17:35 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8014048}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) 05:17:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x600, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:17:35 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1186.262193] FAULT_INJECTION: forcing a failure. [ 1186.262193] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.264711] CPU: 1 PID: 8021 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1186.266169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.267864] Call Trace: [ 1186.268426] dump_stack+0x107/0x167 [ 1186.269200] should_fail.cold+0x5/0xa [ 1186.269994] ? create_object.isra.0+0x3a/0xa30 [ 1186.270937] should_failslab+0x5/0x20 [ 1186.271740] kmem_cache_alloc+0x5b/0x310 [ 1186.272589] create_object.isra.0+0x3a/0xa30 [ 1186.273504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1186.274556] kmem_cache_alloc+0x159/0x310 [ 1186.275425] __kernfs_new_node+0xd4/0x860 [ 1186.276299] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1186.277298] ? kernfs_add_one+0x36e/0x4d0 [ 1186.278160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1186.279156] ? wait_for_completion_io+0x270/0x270 [ 1186.280158] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1186.281260] kernfs_new_node+0x18d/0x250 [ 1186.282105] __kernfs_create_file+0x51/0x350 [ 1186.283024] sysfs_add_file_mode_ns+0x221/0x560 [ 1186.284007] internal_create_group+0x324/0xb30 [ 1186.284966] ? sysfs_remove_group+0x170/0x170 [ 1186.285926] ? lockdep_init_map_type+0x2c7/0x780 [ 1186.286915] ? blk_queue_flag_set+0x22/0x30 [ 1186.287804] ? __loop_update_dio+0x2d2/0x690 [ 1186.288721] loop_configure+0x953/0x1410 [ 1186.289593] lo_ioctl+0xa57/0x16b0 [ 1186.290334] ? avc_has_extended_perms+0x7f1/0xf40 [ 1186.291346] ? loop_set_status_old+0x250/0x250 [ 1186.292298] ? avc_ss_reset+0x180/0x180 [ 1186.293151] ? find_held_lock+0x2c/0x110 [ 1186.294014] ? __lock_acquire+0xbb1/0x5b00 [ 1186.294960] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1186.296043] ? generic_block_fiemap+0x60/0x60 [ 1186.296974] ? lock_downgrade+0x6d0/0x6d0 [ 1186.297841] ? build_open_flags+0x6f0/0x6f0 [ 1186.298742] ? loop_set_status_old+0x250/0x250 [ 1186.299685] blkdev_ioctl+0x291/0x710 [ 1186.300485] ? blkdev_common_ioctl+0x1930/0x1930 [ 1186.301492] ? selinux_file_ioctl+0xb6/0x270 [ 1186.302402] block_ioctl+0xf9/0x140 [ 1186.303154] ? blkdev_read_iter+0x1c0/0x1c0 [ 1186.304048] __x64_sys_ioctl+0x19a/0x210 [ 1186.304871] do_syscall_64+0x33/0x40 [ 1186.305666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.306720] RIP: 0033:0x7f7ab951f8d7 [ 1186.307491] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.311300] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.312864] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1186.314354] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1186.315976] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1186.317814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1186.319486] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1186.323132] loop7: detected capacity change from 0 to 2048 [ 1186.345051] EXT4-fs (loop7): invalid first ino: 2875922842 05:17:52 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 38) 05:17:52 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000007c0)={"7705f93380abf34fce67deeb96cd4557", r1, 0x0, {0x80000000, 0x7}, {0x200, 0x1}, 0x6, [0x8, 0x74, 0x3, 0x9, 0x540e, 0x10000, 0x8, 0x5, 0x2, 0x100000000, 0x6, 0x6, 0xf181, 0x1, 0x8, 0xd3]}) r2 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x100000001, 0x6, &(0x7f0000000440)=[{&(0x7f00000000c0)="b1c40adda85f177ba300c56f361be248b1fafb", 0x13, 0x100000000}, {&(0x7f0000000100)="e0b4d5f8111e2eb7cfdefebbcb6b100481878c567fb2bef04d46fc9ab0737db085c8fdf3bf", 0x25, 0x636}, {&(0x7f0000000140)="aa4e0600a91c57ea537df80bca38955fc509f5e258e9046227b93df5cfce56a4d28dbe525ad7da7929e1a8c50b47578d29ed30cd65cb273d627e", 0x3a, 0x1ff}, {&(0x7f0000000180)="21752ef71a8fe06cca85c272d41a2bab9940ac488cd9b8391ef85a4669d086a9ea20a1b9f8cd184190ca73a64ced324f85ddcd4c79e5151a1e5cc59a42b27acfebe96a7f707b9b9e70e6c7a333e55c2dd4963ac52fb117b06c7512990eaef8fc9311063e58dd0377f062cd5cfd5f60352bee8c858bdc50af3799a2d0bf97669ac2c25bb45ef41a5168e234da6a2c24ee72fd073123958ed08e551e09f805f1ce606c6342bd133a49f3ac662ee6286c09c6f92c87ac1e30752764bd30bc6b6a6a11709e4f61d143a64b9a33fd6a1c9fc320", 0xd1}, {&(0x7f0000000280)="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", 0xfc, 0x2}, {&(0x7f0000000380)="f96ca138810bd13746ec0e2ad04674a6c839abbdd9030246801e6a6e8b819f42273e5894cf2e34c7dc8573a2ee00fce21c36ce89f8b84c944890058c0e47faae126a0ed9dad87d67bfe7e264f7e567db89e7aa655db408413ee55a998db397e3067efef533e24643822c8f6238f6d5dee93ae369caba94c731056fe3f31d6d43fb5f7baa9fc4805784115838ff430e93e1b93fcba3435ced154e", 0x9a, 0x6}], 0x800000, &(0x7f0000000500)={[{'\xdb!:'}, {'.$.'}, {'/dev/full\x00'}, {}, {}, {'/dev/full\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '/dev/full\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/full\x00'}}, {@euid_eq}]}) dup(r2) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x400, 0x600000) writev(r3, &(0x7f0000000bc0)=[{&(0x7f0000000900)="8e71e76ec946565a074838df1df76e2ebe954e008391f76e7358", 0x1a}, {&(0x7f0000000940)="83be4202d96d9377af2c8b3ae042c6c9477fa6edeb5061b19c50f421f6f6d157157531431543aac3b7c394b020a3c2efcc75e5c14e96e81d2da942382d62e40445054fc1e3cc64a68b935753a30fb08fd87f797e58a9a5e903e05d3b7fc1e611569e099b19d621db0034b50309afac4ba387a657c0f9cdc1fbb18e6627a468c8240ce54ab15aea8b4f8f3a4bd8a8afb65d9d00c9014a2dcec5447464ba688bdecb4f6992d7035b257bfed6b5514fc5b759cb878d463bfda20ca7f10f12a79103df10dd61dc800df7aa89b090f634", 0xce}, {&(0x7f0000000a40)="7ca754426b237c9e00089712a61382881759fb9e54f459ce21f717dfb6924ff2215dffe90b752261295dd9063d6cc1643af15b4ef787f65870e0a957c11c84624af0", 0x42}, {&(0x7f0000000ac0)="61b0e4f227ebb58be28a499f04b8452450a4bf2f31ad60c19915b4038b80ce15fd9e724ed4eb07cf32271bdd50c1d844a0847aaac997ad3345ada357d99049144f47271b9a1bca1af6c5b44d9e9521bd25e93e10b749092730d3cdc8ecb24a883c3deae150b48170253f236721c36ef34fa49cf128945f5a2413bc73db4c289cf0b8d1a78b4cd0ad8a808fd42f9d115de36a258e499af44a130af1cfaa450db6bc818af89da4e0ca6c0c1e9ed01be5fa9d358bdad141ba74025b5e9b", 0xbc}, {&(0x7f0000000b80)="c54a60b5d72838312ecf97b8df73c027ee42ccf79519", 0x16}], 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r4, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000c40)={0x15, 0x19, 0x15, 0x11, 0x1, 0xce, 0x1, 0x3a, 0xffffffffffffffff}) 05:17:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r2, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)=@un=@file={0x0, './file0/file0\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)="226d713c80c1d337c7b296cfa856b94ab0daaa15ef48", 0x16}, {&(0x7f0000000240)="ebe472d19c1b3cb40d42a698eedac61d2c981476bcce6355090f2d9f3768cc52f37f286bec8739ccb095f6ed31c852310d17ceabe9b31021632ae86375bd6f8e868f85b0a0917dab688013d3f96d8060d4792779b031007c55045d88f820108743cc51ad78ed74aacbaa79b7b3e761bbee9a734d1f76d3984084630e3beb2a524003146bc622e32f561b", 0x8a}, {&(0x7f0000000300)}, {&(0x7f0000000380)="e53df9bdef5501989c51cf7b4dab340b435f179ada16e654142a503e915eb9194e40435c8e7403399c946e2a9259cf80d0d71b0a5a72f100b3749dbdb9a3bdee2827deed3fda07ad753c98919e2700f239b320f8f94248cc91e9747043f0cd6e96e715ab9aedad04100433e638d2c696438f24c5b013aa1916a499e428aa3e58813815d02d3a490073f606971f3de257746dbdf10a48fb67d1813fe7ee24f77e9fbd849301b29f6ad5eebccde4a5fa515b693dff5afb71b47c604b0a9719a31e70f0d5ec0d0ed1d14d9b8753f23dd1a6dad40e80a2dddd14d24a26b6", 0xdc}, {&(0x7f0000000480)="76a8fcbdc04d0f14a50163413222355a989055b749d72b88", 0x18}, {&(0x7f00000004c0)="82fc7c3573ddbbe411bbbd8419fac27ba856feccd6bca46f34e3822a510ecacad9d201f7372cba98bc2d168db1c926ea206ad1bdae27c9a908d3", 0x3a}, {&(0x7f0000000500)="f1ad49f13cb539b888f770c31b158c783bb0ac046c0394cec7395ba1e19bf63ac159a21086d2540ff3", 0x29}, {&(0x7f0000000540)="0a8af852142f3106fb04e131c00ce48095fd68e47c7e0a6fea72ff94eec30f56ac18e25dcf1f189251746f787a51e041efff8b159ff707999a8750a82cdd273786179e998377af9b613ab4f85d138e49e86318d40cdb126e7da01c6cace72a1193b8a5ab4c5f914f93cdb9a38e02e3c1720849c3df13f433752db95afe3fef4aca4e0532e72400e95e1f87d50cf6d067aa4787dbc43af75073fa746768b05e01a0fde74deb82609ef8b9ebc4f96c4094b24d3b2f817bd54ea1c37e2daa36cce9e51582a6a613", 0xc6}, {&(0x7f0000000640)}], 0x9, &(0x7f0000000740)=[{0xb8, 0x105, 0xffffffff, "d35132789dc13df727499712697611572d28e08bf88b0bdc893ef9bbcf56cb5f904e8671b304321990369d8fd713291d5d32066053533e09a021704d663e806f985abdfa7f014f400f0a00a28011ed340244418064c6df19b01e0ae21144bcd54bf4315da1a130ce81ca07388bdb909937c18743e1e0fe1f31c8606a2b6cec20de5108238e452939e3d6101ce4100ff8a75066b2af3c0bf0c2a662bec2f0f875783e"}, {0x60, 0x10f, 0x7, "36d61a8b53b31011cf6bfde055134a6d046864e7d882160575c97a64695ce7f1b1b3f7c43518f5c6c3d2ed5d5c9c6f9cc94ccd6b36115d0a35ea412ca2c11e0c7d1c022941de9525077f"}, {0xf0, 0x118, 0x5, "0d550b892677b6cc93442f3039e0b5d2c509accb08f37886ce53d1ef8aa4f90dd3639bbd47dc9dc7990d57f37e4afe225e5c2443152339169bba88ac5aa1edfb1f546a321beb0f6b1f2dd23a73515fea415508e4c3290922038833f250ca032aea3bfcc977d489fb2f3d964593be4929d8e0c3f997fc43116a7704c8922deb176b8cd17a6a50a609aa291a74995d73e824bf83c82f73c5be374cbb8d9bee80f96aa6e45576be93b809a50432dedb824aeae8b78563060908b37ac2f0423e6fb412a45b3ceef6a383f8f3accde4b303c6228d7a7419031263c78230f3cd"}, {0x28, 0x119, 0xffffffff, "0148bbfb5a9c6139efb5eb0d18acb434eb85fe2071"}, {0x20, 0x117, 0x8, "9b91f5d9bb79da98fc952a177ff6df"}, {0xe0, 0x0, 0x1, "3a71147c67f51984b6a1bd71ea42f1c6bf27952987715014d43dd86f5499a0e5dc89cf79e10c1e2c1e602ebf82f3beed31d3e52b27314486aa654fae13f3333c74cea6a60121316c9a9a9c6861213052cbc7f55583b1133a28f9659c5f1dd9775e5176fdc916d4480707dcdbbb4a494972ed24cda959462a1a7680b31acd0b42e2ba03c97fb3d4c838ee3c9f8923823dac26481b55d844d6138715769bb0ce3e1b46582793d48ad2bab34dcbd2d7a7769ae73c1ded16d44b595dd839d0d3e1172ab009b9423df639d89f1504dc"}, {0x88, 0x115, 0x80000000, "c00babf4d0159f4501dab326cc9b608536bcd43afda42b670c08ff62d71f23e5fef9421f61b21a139aa0e0fa5a48bcfb0dd2a761f56641c20034e76ac451b5f3526b0a3f56780224ca5d7f6bb4131233e1bbf5717ddb7e7a01904fbe2e98e11fb5d91ff9600114f8baf95ce1f3c589b5da9e2f64e6b83de8"}, {0x108, 0x10c, 0x400, "94ee880ed2f34b4a21911c77b09b817b359ca2679936e0b18fd0b3617dc8b66a9eb4a40810dd157974fc54ead112050e614bc77d2cd2a2b75dfb2a3e06a2b30ebe3a769e1da55107816c591bd3bfc488af0215dd546ba43e02d783467ab6e943344815528cc4f6c0fe66cef735adb8f8a19bf2df7d7f017442f4653a0484d6276fa9217af27271e84c2cab9ee62e3ebafd57ca64e0bc2e8016227678fa44ef104986a4fbfea2e5d012d0b3e3ad45e5833f9588b4a3f35d21caecefdb96c8d65ab8c564ae22cbebda52fdae4ec5a6a09068b710d8752c1fe8ff9732012d46ead4d6b70e668719ceca29d7f97053f9915c963e103af0"}], 0x4c0}, 0x0, 0x40000, 0x1, {0x0, r3}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003e80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000005540)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000005500)={&(0x7f0000003ec0)=@in6={0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00', 0x40}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003f40)="1d680e341373b1b3973eef9c1457e439904d53f2bf4b4c01bc774fdefe0c58d203c49d99fe79e770cbdd6add519503a0fa79936dcc1deab0db29d4fb69a3fd1704dc3fee03cd38f1cfdaf4511aa0e4ba59cd04f6882364d7e9c0a83488530e0370774a93fba6c7b4b70b07a7241bef48fb30c532355f8786c0678d10011ef805fe31047169cc04c9b0b80b79eda9f937cc9bb303ebba82d061d1ab65ca3a26d131c63ff02593e6a11c94797497f84989893dcd2790a494e5bf86d500a52d564316a6a36d0b8c6c9336b103c41d97f3770c8329727bb7", 0xd6}, {&(0x7f0000004040)="3f54dfbcd7893e1b8b89a34aba79315346cd00ac278f6093aae66d60c917fb54bf7150be4456a42a55329045f27433e114c4bc8356e69a0b7ffebcb5b344d9704318ca9bf3c52671220b64a67c953b1aa12aa55f98f05176ff13d4f38bd41eda0e817f3bc3d793393f1ba4d4c9c9502a8d96fd726d647e510601bd58c7dd6b9c823f65adbdc5d3a0587c9d6fbadb7847dfdde1c52d208e414195528a09cd0f73d845842b4e769cf1417eec1c76838eec3ce5ab7ea01a46e79816577fce442f2ba2f37a6ecb4ae1ec2654b6a9a1857744f4e38496004652d32374be45c58be9bbdcea2d3f3de5a7f27a4e0212c7560bbea340812f", 0xf4}, {&(0x7f0000004140)="c1d92fc6f0ed10e80ba53dc7668d69e7ee674be98ba4b82ca92676a87b8ec11f965e04c0a7a204fa0e95f96e27846161c6599b2d33860f861ba2c5040eaf74d781d5bd3429299348139d357e1ba137353bb26b3c5dcaf4d8e8455d14240e48552158ecc226c424212589f1d0a78c82a75cb8a75cbaee019bbc0b3fa71945726ee29fcce477", 0x85}], 0x3, &(0x7f0000004240)=[{0x1010, 0x1, 0x2, "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"}, {0x108, 0x111, 0xfffffff9, "bf3d070797db5a80bd74bd913c12cc9e1babe18f41368a0f3edca3d98e1d20815fe25c91ed4e44bb54e37167a94e4cce96a92b5fbc2200747377f68b180095bf6df08c0cd4f6e10eaf35cf4fe9f95b288d34379b23c9c00d6cc0c368bba8d1023e2833d5bacfffa81c42f55b89a34affc45b0b62a2f29977e7d7e3a1c25f63805c5441324199fc40538097a54b31889b9e1c06baf127a0ede60534906756b4e046cdee0564e79aa7d9c8719b7526753b295efcd6aa140f98c7fa1907b3fb17993588639f559b0fe6ae9ae0f944ccdd871551a5096877250194fedc1b0c92e92bee71697faf6c31341fe1405fefb9473c4159f62b5a"}, {0xe8, 0x10c, 0x6, "f7f730c8a7e0bccecd8f9e2cc3f158e56dad8b96ef61de1c9faae14b9dcbdb22d8fc50d16ab9fa143d00ba33ae8a755253e13c97234f7abdf3555a6ce364c72c5455035eed9d73d6257b0c4ea40ef5f4b16ba5c5f33027a143b90fafed3e93ea9ece694e97bbcbeb2da759ebe58d3600d84f9ae6a0fcfb9310c2ce699a452f7922384061659229ce7aa7c2807fbc0e89deeded97c1aab811f25e7cdd8df608bcf0ce66caeecf39617b36f64d315d5c9d2dc4bee8c4f0874e0790574024dc938c2c047b7730b94fec8eb24dc9046b96c51830093e27d6f773"}, {0xb8, 0x0, 0x1, "5afd212234a3e5afe26a46675c6d4054a13306401f43642679009558282cab1356f52258338bf86520b8f16fa0972731569896b96b827337d4671dd5890c1284dffafd986df987b269a30ea752bdf61693248c3b4b40f339c88af7eac43afc0d312d870286a98bf7af555d157cb39ae2d2d6f619932b506daf5bc79066ebb4ee73ad5dce8ba75fb876a0eb000b32064ab0f990ce45db2a094a337902aeb760baab2cd3ee"}], 0x12b8}, 0x0, 0x24000091, 0x1}, 0x2d7) 05:17:52 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:17:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x700, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:17:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x5) 05:17:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 05:17:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 40) [ 1203.209362] loop4: detected capacity change from 0 to 135266304 [ 1203.211737] FAULT_INJECTION: forcing a failure. [ 1203.211737] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.214677] CPU: 0 PID: 8045 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1203.215259] nfs: Unknown parameter 'Û!:' [ 1203.216462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.216471] Call Trace: [ 1203.216502] dump_stack+0x107/0x167 [ 1203.216528] should_fail.cold+0x5/0xa [ 1203.222167] ? create_object.isra.0+0x3a/0xa30 [ 1203.223177] should_failslab+0x5/0x20 [ 1203.224185] kmem_cache_alloc+0x5b/0x310 [ 1203.225074] create_object.isra.0+0x3a/0xa30 [ 1203.226040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1203.227124] kmem_cache_alloc_trace+0x151/0x320 [ 1203.228121] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1203.229211] ? io_import_iovec+0x1120/0x1120 [ 1203.230181] io_uring_setup+0x1dd1/0x2980 [ 1203.231082] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1203.232159] ? wait_for_completion_io+0x270/0x270 [ 1203.233226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1203.234343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1203.235439] do_syscall_64+0x33/0x40 [ 1203.236233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.237326] RIP: 0033:0x7f6e4b79cb19 05:17:52 executing program 6: prctl$PR_SET_DUMPABLE(0x4, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1203.238122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.242340] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1203.244331] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1203.246223] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1203.248091] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1203.249973] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1203.251844] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1203.280349] FAULT_INJECTION: forcing a failure. [ 1203.280349] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.283489] CPU: 0 PID: 8050 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1203.285297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.287453] Call Trace: [ 1203.288149] dump_stack+0x107/0x167 [ 1203.289117] should_fail.cold+0x5/0xa [ 1203.290144] ? create_object.isra.0+0x3a/0xa30 [ 1203.291348] should_failslab+0x5/0x20 [ 1203.292340] kmem_cache_alloc+0x5b/0x310 [ 1203.293426] create_object.isra.0+0x3a/0xa30 [ 1203.294566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1203.295907] kmem_cache_alloc+0x159/0x310 [ 1203.296998] __kernfs_new_node+0xd4/0x860 [ 1203.298105] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1203.299121] ? kernfs_add_one+0x36e/0x4d0 [ 1203.300211] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1203.301490] ? wait_for_completion_io+0x270/0x270 [ 1203.302745] ? kernfs_next_descendant_post+0x1a7/0x2a0 05:17:52 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 39) [ 1203.304142] kernfs_new_node+0x18d/0x250 [ 1203.305165] __kernfs_create_file+0x51/0x350 [ 1203.306127] sysfs_add_file_mode_ns+0x221/0x560 [ 1203.307125] internal_create_group+0x324/0xb30 [ 1203.308101] ? sysfs_remove_group+0x170/0x170 [ 1203.309059] ? lockdep_init_map_type+0x2c7/0x780 [ 1203.310072] ? blk_queue_flag_set+0x22/0x30 [ 1203.310989] ? __loop_update_dio+0x2d2/0x690 [ 1203.311939] loop_configure+0x953/0x1410 [ 1203.312815] lo_ioctl+0xa57/0x16b0 [ 1203.313589] ? avc_has_extended_perms+0x7f1/0xf40 [ 1203.314618] ? loop_set_status_old+0x250/0x250 [ 1203.315591] ? avc_ss_reset+0x180/0x180 [ 1203.316443] ? find_held_lock+0x2c/0x110 [ 1203.317337] ? __lock_acquire+0xbb1/0x5b00 [ 1203.318289] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1203.319404] ? generic_block_fiemap+0x60/0x60 [ 1203.320358] ? lock_downgrade+0x6d0/0x6d0 [ 1203.321246] ? build_open_flags+0x6f0/0x6f0 [ 1203.322169] ? loop_set_status_old+0x250/0x250 [ 1203.323147] blkdev_ioctl+0x291/0x710 [ 1203.323956] ? blkdev_common_ioctl+0x1930/0x1930 [ 1203.324965] ? selinux_file_ioctl+0xb6/0x270 [ 1203.325915] block_ioctl+0xf9/0x140 [ 1203.326683] ? blkdev_read_iter+0x1c0/0x1c0 05:17:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x900, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1203.327599] __x64_sys_ioctl+0x19a/0x210 [ 1203.328543] do_syscall_64+0x33/0x40 [ 1203.329329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.330451] RIP: 0033:0x7f7ab951f8d7 [ 1203.331282] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.335475] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.337180] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1203.338761] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1203.340342] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1203.341959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1203.343532] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:17:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) 05:17:52 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0xfffffffffffff000}) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') fstat(r0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x22}, 0x40c02, 0xe8d, 0x100, 0x3, 0xfffffffffffffffc, 0xc4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:17:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0xb4, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) dup2(r2, r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r3) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) dup2(r1, r0) [ 1203.427284] loop7: detected capacity change from 0 to 2048 [ 1203.479089] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1203.486654] FAULT_INJECTION: forcing a failure. [ 1203.486654] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.489109] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1203.490638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.492504] Call Trace: [ 1203.493110] dump_stack+0x107/0x167 [ 1203.493934] should_fail.cold+0x5/0xa [ 1203.494781] ? io_wq_create+0xeb/0xc00 [ 1203.495652] should_failslab+0x5/0x20 [ 1203.496522] __kmalloc+0x72/0x390 [ 1203.497325] io_wq_create+0xeb/0xc00 [ 1203.498174] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1203.499313] ? io_import_iovec+0x1120/0x1120 [ 1203.500454] ? io_apoll_task_func+0x2d0/0x2d0 [ 1203.501458] ? __io_req_find_next+0x300/0x300 [ 1203.502635] io_uring_setup+0x1dd1/0x2980 [ 1203.503558] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1203.504874] ? wait_for_completion_io+0x270/0x270 [ 1203.505960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1203.507155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1203.508521] do_syscall_64+0x33/0x40 [ 1203.509428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.510591] RIP: 0033:0x7f6e4b79cb19 [ 1203.511461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.515524] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1203.517265] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1203.518889] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1203.520504] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1203.522102] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1203.523690] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1205.546770] Bluetooth: hci7: command 0x0405 tx timeout [ 1220.739675] loop7: detected capacity change from 0 to 2048 [ 1220.741495] FAULT_INJECTION: forcing a failure. [ 1220.741495] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.744189] CPU: 0 PID: 8093 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1220.745720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 05:18:09 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x9) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x8) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) dup2(r1, r0) 05:18:09 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 40) 05:18:09 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x6b82e97d65a8296f) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x3) 05:18:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xa00, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:18:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 41) 05:18:10 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x1) [ 1220.747756] Call Trace: [ 1220.748395] dump_stack+0x107/0x167 [ 1220.749211] should_fail.cold+0x5/0xa [ 1220.750079] ? kobject_uevent_env+0x22b/0xfd0 [ 1220.751090] ? dev_uevent_filter+0xd0/0xd0 [ 1220.752034] should_failslab+0x5/0x20 [ 1220.752886] kmem_cache_alloc_trace+0x55/0x320 [ 1220.753928] ? dev_uevent_filter+0xd0/0xd0 [ 1220.754883] kobject_uevent_env+0x22b/0xfd0 [ 1220.755848] ? get_disk_and_module+0xf0/0xf0 [ 1220.756831] ? blk_queue_flag_set+0x22/0x30 [ 1220.757808] ? __loop_update_dio+0x2d2/0x690 [ 1220.758804] loop_configure+0x1118/0x1410 [ 1220.759728] lo_ioctl+0xa57/0x16b0 [ 1220.760515] ? avc_has_extended_perms+0x7f1/0xf40 [ 1220.761615] ? loop_set_status_old+0x250/0x250 [ 1220.761958] FAULT_INJECTION: forcing a failure. [ 1220.761958] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.762647] ? avc_ss_reset+0x180/0x180 [ 1220.762675] ? find_held_lock+0x2c/0x110 [ 1220.766829] ? __lock_acquire+0xbb1/0x5b00 [ 1220.767852] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1220.769044] ? generic_block_fiemap+0x60/0x60 [ 1220.770067] ? lock_downgrade+0x6d0/0x6d0 [ 1220.771009] ? build_open_flags+0x6f0/0x6f0 [ 1220.771994] ? loop_set_status_old+0x250/0x250 [ 1220.773030] blkdev_ioctl+0x291/0x710 [ 1220.773906] ? blkdev_common_ioctl+0x1930/0x1930 [ 1220.774935] ? selinux_file_ioctl+0xb6/0x270 [ 1220.775883] block_ioctl+0xf9/0x140 [ 1220.776657] ? blkdev_read_iter+0x1c0/0x1c0 [ 1220.777590] __x64_sys_ioctl+0x19a/0x210 [ 1220.778456] do_syscall_64+0x33/0x40 [ 1220.779253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.780346] RIP: 0033:0x7f7ab951f8d7 [ 1220.781133] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.785060] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.786687] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1220.788207] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1220.789734] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1220.791243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1220.792771] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1220.794379] CPU: 1 PID: 8097 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1220.795944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.797700] Call Trace: [ 1220.798260] dump_stack+0x107/0x167 [ 1220.798894] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1220.799036] should_fail.cold+0x5/0xa [ 1220.801041] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1220.802161] should_failslab+0x5/0x20 [ 1220.802973] kmem_cache_alloc_trace+0x55/0x320 [ 1220.803965] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1220.805039] ? io_import_iovec+0x1120/0x1120 [ 1220.805995] io_uring_setup+0x1dd1/0x2980 [ 1220.806880] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.807946] ? wait_for_completion_io+0x270/0x270 [ 1220.808999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.810122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.811215] do_syscall_64+0x33/0x40 [ 1220.811999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.813079] RIP: 0033:0x7f6e4b79cb19 [ 1220.813878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.817773] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.819373] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1220.820883] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1220.822394] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1220.823897] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1220.825409] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:18:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x8001, 0x0, 0x0, 0xc4d}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x40000000) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:18:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ftruncate(r3, 0xffff) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x83, 0x80, 0xea, 0x0, 0x7fffffff, 0x4840, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_config_ext={0x3, 0x87}, 0x304, 0x5, 0x3, 0x7, 0x3f, 0x61, 0x8, 0x0, 0x90ec}, r2, 0xc, r0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(r2, 0x8, 0x0, &(0x7f0000000180)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0x80800) dup2(r4, r1) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x8) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x403, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000580)={0x0, 0xfffffffffffffe00, 0x6}) 05:18:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) lseek(r0, 0x7, 0x4) dup2(r2, r1) 05:18:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 42) 05:18:10 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x400200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653062"]) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000000)=0x9) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xb00, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:10 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) [ 1220.964261] loop7: detected capacity change from 0 to 2048 [ 1220.965654] FAULT_INJECTION: forcing a failure. [ 1220.965654] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.968082] CPU: 0 PID: 8112 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1220.969562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.971327] Call Trace: [ 1220.971895] dump_stack+0x107/0x167 [ 1220.972674] should_fail.cold+0x5/0xa [ 1220.973504] ? create_object.isra.0+0x3a/0xa30 [ 1220.974477] should_failslab+0x5/0x20 [ 1220.975296] kmem_cache_alloc+0x5b/0x310 [ 1220.976173] create_object.isra.0+0x3a/0xa30 [ 1220.977106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1220.978200] kmem_cache_alloc_trace+0x151/0x320 [ 1220.979202] ? dev_uevent_filter+0xd0/0xd0 [ 1220.980108] kobject_uevent_env+0x22b/0xfd0 [ 1220.981028] ? get_disk_and_module+0xf0/0xf0 [ 1220.981975] ? blk_queue_flag_set+0x22/0x30 [ 1220.982894] ? __loop_update_dio+0x2d2/0x690 [ 1220.983839] loop_configure+0x1118/0x1410 [ 1220.984739] lo_ioctl+0xa57/0x16b0 [ 1220.985515] ? avc_has_extended_perms+0x7f1/0xf40 [ 1220.986557] ? loop_set_status_old+0x250/0x250 [ 1220.987535] ? avc_ss_reset+0x180/0x180 [ 1220.988390] ? find_held_lock+0x2c/0x110 [ 1220.989278] ? __lock_acquire+0xbb1/0x5b00 [ 1220.990246] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1220.991365] ? generic_block_fiemap+0x60/0x60 [ 1220.992318] ? lock_downgrade+0x6d0/0x6d0 [ 1220.993207] ? build_open_flags+0x6f0/0x6f0 [ 1220.994145] ? loop_set_status_old+0x250/0x250 [ 1220.995116] blkdev_ioctl+0x291/0x710 [ 1220.995934] ? blkdev_common_ioctl+0x1930/0x1930 [ 1220.996944] ? selinux_file_ioctl+0xb6/0x270 [ 1220.997898] block_ioctl+0xf9/0x140 [ 1220.998669] ? blkdev_read_iter+0x1c0/0x1c0 [ 1220.999590] __x64_sys_ioctl+0x19a/0x210 [ 1221.000461] do_syscall_64+0x33/0x40 [ 1221.001257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1221.002365] RIP: 0033:0x7f7ab951f8d7 [ 1221.003169] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.007083] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.008710] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1221.010241] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1221.011767] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1221.013282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1221.014809] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:18:10 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 41) 05:18:10 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) [ 1221.169170] FAULT_INJECTION: forcing a failure. [ 1221.169170] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.171760] CPU: 1 PID: 8128 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1221.173199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1221.174954] Call Trace: [ 1221.175517] dump_stack+0x107/0x167 [ 1221.176292] should_fail.cold+0x5/0xa [ 1221.177108] ? io_wq_create+0x6ef/0xc00 [ 1221.177958] should_failslab+0x5/0x20 [ 1221.178767] kmem_cache_alloc_node_trace+0x59/0x340 [ 1221.179831] io_wq_create+0x6ef/0xc00 [ 1221.180649] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1221.181724] ? io_import_iovec+0x1120/0x1120 [ 1221.182651] ? io_apoll_task_func+0x2d0/0x2d0 [ 1221.183650] ? __io_req_find_next+0x300/0x300 [ 1221.184608] io_uring_setup+0x1dd1/0x2980 [ 1221.185511] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1221.186578] ? wait_for_completion_io+0x270/0x270 [ 1221.187622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1221.188745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1221.189846] do_syscall_64+0x33/0x40 [ 1221.190635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1221.191716] RIP: 0033:0x7f6e4b79cb19 [ 1221.192506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.196418] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1221.198042] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1221.199544] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1221.201056] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1221.202571] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1221.204081] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1221.218770] EXT4-fs (loop7): invalid first ino: 2875922842 05:18:24 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 43) 05:18:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x200) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) 05:18:24 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 42) 05:18:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf00, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:24 executing program 0: r0 = fork() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x6, 0x46, 0x8, 0x40, 0x7, 0x7, 0x753, 0xfffffffc, 0x1}, 0x0) fork() keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) fork() keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') sendfile(r1, r1, &(0x7f0000000180)=0x2c46, 0x100) keyctl$set_reqkey_keyring(0xe, 0x4) [ 1235.203043] FAULT_INJECTION: forcing a failure. [ 1235.203043] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.205669] CPU: 0 PID: 8145 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1235.207205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 05:18:24 executing program 1: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000e9be40feb2ef898250b997a0ce71802cc2dda3e4ad4e4c2c3b349cdfdfbeafae2f4cc2630b7d817537ec41f8e682e3916d4febf3c911197d1f7f94daa005b012dd33ebae4857acdaf6630d69588e2f3d3256eec40347a7e71dfb72efc0d7d5a941680e24f51d17fda009daad905c32f32be856fb4248ddf4977032287f441cc512e4af48d62d5b483a88d7bdcccd62c58d45a6b0b99f94ecbfbb6d4fa1af5ccb10812a59c0e3ad82596a335e7eda58934900"/191, @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf2516000000580004800900010073797a31000000001c0007800800020006000000080002000600000008000300000000001400078008000400b30f000008000400010000000900010073797a30000000000900010073797a300000000024000780080002000100000008000100bb1df44e08000100070000000800010007000000340009800800010007000000080002003f00000008000100070000000800010005000000080002007f0000000800010007000000"], 0xc4}}, 0x4) semtimedop(0x0, &(0x7f0000000100)=[{}], 0x2aaaab37, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r2 = semget(0x2, 0x0, 0x186) r3 = getuid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r3, r1, 0x0, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semtimedop(r2, &(0x7f0000000080)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f0000000100)) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000001c0)=""/20) [ 1235.209041] Call Trace: [ 1235.209739] dump_stack+0x107/0x167 [ 1235.210552] should_fail.cold+0x5/0xa [ 1235.211397] ? create_object.isra.0+0x3a/0xa30 [ 1235.212401] should_failslab+0x5/0x20 [ 1235.213242] kmem_cache_alloc+0x5b/0x310 [ 1235.214156] ? io_wq_create+0x114/0xc00 [ 1235.215037] create_object.isra.0+0x3a/0xa30 [ 1235.216007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1235.217133] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1235.218253] io_wq_create+0x6ef/0xc00 [ 1235.219105] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1235.220227] ? io_import_iovec+0x1120/0x1120 [ 1235.221205] ? io_apoll_task_func+0x2d0/0x2d0 [ 1235.222208] ? __io_req_find_next+0x300/0x300 [ 1235.223209] io_uring_setup+0x1dd1/0x2980 [ 1235.224137] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1235.225252] ? wait_for_completion_io+0x270/0x270 [ 1235.226361] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1235.227519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1235.228637] do_syscall_64+0x33/0x40 [ 1235.229458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1235.230605] RIP: 0033:0x7f6e4b79cb19 [ 1235.231427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.235514] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1235.237198] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1235.238803] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1235.240414] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1235.242021] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1235.243610] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:18:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ftruncate(r3, 0xffff) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x83, 0x80, 0xea, 0x0, 0x7fffffff, 0x4840, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_config_ext={0x3, 0x87}, 0x304, 0x5, 0x3, 0x7, 0x3f, 0x61, 0x8, 0x0, 0x90ec}, r2, 0xc, r0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(r2, 0x8, 0x0, &(0x7f0000000180)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0x80800) dup2(r4, r1) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x8) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x403, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000580)={0x0, 0xfffffffffffffe00, 0x6}) 05:18:24 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1235.311613] loop7: detected capacity change from 0 to 2048 [ 1235.313165] FAULT_INJECTION: forcing a failure. [ 1235.313165] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.315869] CPU: 1 PID: 8162 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1235.317457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1235.319392] Call Trace: [ 1235.320012] dump_stack+0x107/0x167 [ 1235.320862] should_fail.cold+0x5/0xa [ 1235.321761] ? kobject_get_path+0xc5/0x1f0 [ 1235.322742] should_failslab+0x5/0x20 [ 1235.323622] __kmalloc+0x72/0x390 [ 1235.324424] ? trace_hardirqs_on+0x5b/0x180 [ 1235.325434] kobject_get_path+0xc5/0x1f0 [ 1235.326396] kobject_uevent_env+0x251/0xfd0 [ 1235.327402] ? blk_queue_flag_set+0x22/0x30 [ 1235.328397] ? __loop_update_dio+0x2d2/0x690 [ 1235.329421] loop_configure+0x1118/0x1410 [ 1235.330405] lo_ioctl+0xa57/0x16b0 [ 1235.331230] ? avc_has_extended_perms+0x7f1/0xf40 [ 1235.332348] ? loop_set_status_old+0x250/0x250 [ 1235.333407] ? avc_ss_reset+0x180/0x180 [ 1235.334336] ? find_held_lock+0x2c/0x110 [ 1235.335288] ? __lock_acquire+0xbb1/0x5b00 [ 1235.336322] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1235.337530] ? generic_block_fiemap+0x60/0x60 [ 1235.338572] ? lock_downgrade+0x6d0/0x6d0 [ 1235.339527] ? build_open_flags+0x6f0/0x6f0 [ 1235.340530] ? loop_set_status_old+0x250/0x250 [ 1235.341591] blkdev_ioctl+0x291/0x710 [ 1235.342473] ? blkdev_common_ioctl+0x1930/0x1930 [ 1235.343573] ? selinux_file_ioctl+0xb6/0x270 [ 1235.344594] block_ioctl+0xf9/0x140 [ 1235.345432] ? blkdev_read_iter+0x1c0/0x1c0 [ 1235.346442] __x64_sys_ioctl+0x19a/0x210 [ 1235.347396] do_syscall_64+0x33/0x40 [ 1235.348265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1235.349455] RIP: 0033:0x7f7ab951f8d7 [ 1235.350327] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.354609] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.356376] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1235.358044] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1235.359704] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1235.361360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1235.363034] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:18:24 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x0) 05:18:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'decodes', ' ', 'io'}, 0xb) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r4, r5}}, 0xb7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$RTC_PIE_OFF(r7, 0x7006) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, &(0x7f0000000040)="c38e9ceb926f5158e9e20f29356832f683bf7e699db03c65ac5389c797cd98f2364d2df55f8e676d0b0d9442b87ec4564921efe6d4fbe5b188c0cd11bfc1279e856e59bfa9e102287a09c784f016a9", 0x4f, 0x20004040, 0x0, {0x0, r4}}, 0xffffffff) bind$bt_sco(r2, &(0x7f0000000000), 0x8) 05:18:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x1100, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1235.390253] EXT4-fs (loop7): invalid first ino: 2875922842 05:18:24 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 44) 05:18:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x2000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:24 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 43) 05:18:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ftruncate(r3, 0xffff) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x83, 0x80, 0xea, 0x0, 0x7fffffff, 0x4840, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_config_ext={0x3, 0x87}, 0x304, 0x5, 0x3, 0x7, 0x3f, 0x61, 0x8, 0x0, 0x90ec}, r2, 0xc, r0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(r2, 0x8, 0x0, &(0x7f0000000180)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0x80800) dup2(r4, r1) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x8) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x403, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000580)={0x0, 0xfffffffffffffe00, 0x6}) [ 1235.580251] loop7: detected capacity change from 0 to 2048 [ 1235.581979] FAULT_INJECTION: forcing a failure. [ 1235.581979] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.586547] CPU: 0 PID: 8184 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1235.588455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1235.590755] Call Trace: [ 1235.591495] dump_stack+0x107/0x167 [ 1235.592505] should_fail.cold+0x5/0xa [ 1235.593607] ? create_object.isra.0+0x3a/0xa30 [ 1235.594079] FAULT_INJECTION: forcing a failure. [ 1235.594079] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.594753] should_failslab+0x5/0x20 [ 1235.598364] kmem_cache_alloc+0x5b/0x310 [ 1235.599278] ? kmem_cache_alloc_trace+0x151/0x320 [ 1235.600358] create_object.isra.0+0x3a/0xa30 [ 1235.601342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1235.602490] __kmalloc+0x16e/0x390 [ 1235.603294] kobject_get_path+0xc5/0x1f0 [ 1235.604208] kobject_uevent_env+0x251/0xfd0 [ 1235.605178] ? blk_queue_flag_set+0x22/0x30 [ 1235.606156] ? __loop_update_dio+0x2d2/0x690 [ 1235.607142] loop_configure+0x1118/0x1410 [ 1235.608089] lo_ioctl+0xa57/0x16b0 [ 1235.608878] ? avc_has_extended_perms+0x7f1/0xf40 [ 1235.609962] ? loop_set_status_old+0x250/0x250 [ 1235.610979] ? avc_ss_reset+0x180/0x180 [ 1235.611862] ? find_held_lock+0x2c/0x110 [ 1235.612796] ? __lock_acquire+0xbb1/0x5b00 [ 1235.613799] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1235.614960] ? generic_block_fiemap+0x60/0x60 [ 1235.615950] ? lock_downgrade+0x6d0/0x6d0 [ 1235.616869] ? build_open_flags+0x6f0/0x6f0 [ 1235.617841] ? loop_set_status_old+0x250/0x250 [ 1235.618853] blkdev_ioctl+0x291/0x710 [ 1235.619699] ? blkdev_common_ioctl+0x1930/0x1930 [ 1235.620756] ? selinux_file_ioctl+0xb6/0x270 [ 1235.621747] block_ioctl+0xf9/0x140 [ 1235.622552] ? blkdev_read_iter+0x1c0/0x1c0 [ 1235.623511] __x64_sys_ioctl+0x19a/0x210 [ 1235.624416] do_syscall_64+0x33/0x40 [ 1235.625249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1235.626391] RIP: 0033:0x7f7ab951f8d7 [ 1235.627221] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.631302] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.632991] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1235.634584] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1235.636165] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1235.637758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1235.639344] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1235.640963] CPU: 1 PID: 8189 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1235.642418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1235.644153] Call Trace: [ 1235.644715] dump_stack+0x107/0x167 [ 1235.645477] should_fail.cold+0x5/0xa [ 1235.646290] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1235.647455] should_failslab+0x5/0x20 [ 1235.648248] kmem_cache_alloc_trace+0x55/0x320 [ 1235.649210] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1235.650348] io_uring_setup+0x14f6/0x2980 [ 1235.651224] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1235.652279] ? wait_for_completion_io+0x270/0x270 [ 1235.653312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1235.654624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1235.655706] do_syscall_64+0x33/0x40 [ 1235.656476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1235.657536] RIP: 0033:0x7f6e4b79cb19 [ 1235.658326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.662017] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1235.663539] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1235.664968] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1235.666401] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1235.667831] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1235.669252] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1235.800972] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1250.670789] FAULT_INJECTION: forcing a failure. [ 1250.670789] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.672343] CPU: 0 PID: 8204 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1250.673235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.674343] Call Trace: [ 1250.674705] dump_stack+0x107/0x167 [ 1250.675184] should_fail.cold+0x5/0xa [ 1250.675699] ? create_object.isra.0+0x3a/0xa30 [ 1250.676300] should_failslab+0x5/0x20 [ 1250.676800] kmem_cache_alloc+0x5b/0x310 [ 1250.677332] ? io_wq_create+0x114/0xc00 [ 1250.677868] create_object.isra.0+0x3a/0xa30 [ 1250.678447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.679118] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1250.679789] io_wq_create+0x6ef/0xc00 [ 1250.680295] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1250.680961] ? io_import_iovec+0x1120/0x1120 [ 1250.681532] ? io_apoll_task_func+0x2d0/0x2d0 [ 1250.682121] ? __io_req_find_next+0x300/0x300 [ 1250.682712] io_uring_setup+0x1dd1/0x2980 [ 1250.683256] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1250.683924] ? wait_for_completion_io+0x270/0x270 [ 1250.684573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.685253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.685933] do_syscall_64+0x33/0x40 [ 1250.686418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.687087] RIP: 0033:0x7f6e4b79cb19 [ 1250.687572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.689979] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1250.690970] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1250.691907] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1250.692837] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1250.693768] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1250.694700] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:18:39 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 45) 05:18:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x9c00, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:39 executing program 4: r0 = fork() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x6, 0x46, 0x8, 0x40, 0x7, 0x7, 0x753, 0xfffffffc, 0x1}, 0x0) fork() keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) fork() keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') sendfile(r1, r1, &(0x7f0000000180)=0x2c46, 0x100) keyctl$set_reqkey_keyring(0xe, 0x4) 05:18:39 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 44) 05:18:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) 05:18:39 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x5}) r1 = syz_open_dev$mouse(&(0x7f0000000380), 0xfffffffffffffff7, 0x402400) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'caif0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x10050800}, 0x8800) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r6, r5) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r6, 0xe87f7000) ioctl$CDROMMULTISESSION(r4, 0x2275, &(0x7f00000005c0)={@lba}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x9}, 0x0, 0xe8d, 0x100, 0x2, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, r4, 0x0) pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:18:39 executing program 6: syz_io_uring_setup(0x7a30, &(0x7f0000008180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000008200), &(0x7f0000008240)) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:39 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) [ 1250.698429] loop7: detected capacity change from 0 to 2048 [ 1250.711855] FAULT_INJECTION: forcing a failure. [ 1250.711855] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.714390] CPU: 1 PID: 8220 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1250.715904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.717811] Call Trace: [ 1250.718403] dump_stack+0x107/0x167 [ 1250.719218] should_fail.cold+0x5/0xa [ 1250.720072] ? create_object.isra.0+0x3a/0xa30 [ 1250.721094] should_failslab+0x5/0x20 [ 1250.721952] kmem_cache_alloc+0x5b/0x310 [ 1250.722869] ? kmem_cache_alloc_trace+0x151/0x320 [ 1250.723937] create_object.isra.0+0x3a/0xa30 [ 1250.724906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.726044] __kmalloc+0x16e/0x390 [ 1250.726840] kobject_get_path+0xc5/0x1f0 [ 1250.727745] kobject_uevent_env+0x251/0xfd0 [ 1250.728707] ? blk_queue_flag_set+0x22/0x30 [ 1250.729661] ? __loop_update_dio+0x2d2/0x690 [ 1250.730646] loop_configure+0x1118/0x1410 05:18:40 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1250.731578] lo_ioctl+0xa57/0x16b0 [ 1250.732513] ? avc_has_extended_perms+0x7f1/0xf40 [ 1250.733585] ? loop_set_status_old+0x250/0x250 [ 1250.734607] ? avc_ss_reset+0x180/0x180 [ 1250.735488] ? find_held_lock+0x2c/0x110 [ 1250.736398] ? __lock_acquire+0xbb1/0x5b00 [ 1250.737383] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1250.738551] ? generic_block_fiemap+0x60/0x60 [ 1250.739539] ? lock_downgrade+0x6d0/0x6d0 [ 1250.740452] ? build_open_flags+0x6f0/0x6f0 [ 1250.741413] ? loop_set_status_old+0x250/0x250 [ 1250.742435] blkdev_ioctl+0x291/0x710 [ 1250.743269] ? blkdev_common_ioctl+0x1930/0x1930 [ 1250.744311] ? selinux_file_ioctl+0xb6/0x270 [ 1250.745279] block_ioctl+0xf9/0x140 [ 1250.746087] ? blkdev_read_iter+0x1c0/0x1c0 [ 1250.747030] __x64_sys_ioctl+0x19a/0x210 [ 1250.747928] do_syscall_64+0x33/0x40 [ 1250.748745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.749882] RIP: 0033:0x7f7ab951f8d7 05:18:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1250.750698] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.754888] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.756550] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1250.758118] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1250.759677] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1250.761241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1250.762810] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1250.770521] EXT4-fs (loop7): invalid first ino: 2875922842 05:18:40 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:40 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 45) 05:18:40 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0x4, 0x3f}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r3, 0x2275, &(0x7f00000005c0)={@lba}) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x420440, 0x40) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x8a3b, 0x10, 0x70bd26, 0x25dfdbfb, {0x18}, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r2) 05:18:40 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 46) 05:18:40 executing program 0: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x3) [ 1250.870597] FAULT_INJECTION: forcing a failure. [ 1250.870597] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.873320] CPU: 1 PID: 8239 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1250.874947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.876911] Call Trace: [ 1250.877540] dump_stack+0x107/0x167 [ 1250.878418] should_fail.cold+0x5/0xa [ 1250.879325] ? create_object.isra.0+0x3a/0xa30 [ 1250.880411] should_failslab+0x5/0x20 [ 1250.881315] kmem_cache_alloc+0x5b/0x310 [ 1250.882287] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1250.883499] ? trace_hardirqs_on+0x5b/0x180 [ 1250.884520] create_object.isra.0+0x3a/0xa30 [ 1250.885551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.886762] kmem_cache_alloc_trace+0x151/0x320 [ 1250.887866] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1250.889138] io_uring_setup+0x14f6/0x2980 [ 1250.890138] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1250.891331] ? wait_for_completion_io+0x270/0x270 [ 1250.892495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.893751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.894969] do_syscall_64+0x33/0x40 [ 1250.895848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.897060] RIP: 0033:0x7f6e4b79cb19 [ 1250.897962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.902284] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1250.904068] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1250.905755] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1250.907434] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1250.909111] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1250.910797] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1250.919531] loop7: detected capacity change from 0 to 2048 [ 1250.920451] FAULT_INJECTION: forcing a failure. [ 1250.920451] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.922021] CPU: 0 PID: 8248 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1250.922830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.923837] Call Trace: [ 1250.924151] dump_stack+0x107/0x167 [ 1250.924591] should_fail.cold+0x5/0xa [ 1250.925044] ? create_object.isra.0+0x3a/0xa30 [ 1250.925592] should_failslab+0x5/0x20 [ 1250.926052] kmem_cache_alloc+0x5b/0x310 [ 1250.926547] create_object.isra.0+0x3a/0xa30 [ 1250.927067] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.927675] kmem_cache_alloc_node+0x169/0x330 [ 1250.928232] __alloc_skb+0x6d/0x5b0 [ 1250.928673] alloc_uevent_skb+0x7b/0x210 [ 1250.929153] kobject_uevent_env+0x99a/0xfd0 [ 1250.929669] ? blk_queue_flag_set+0x22/0x30 [ 1250.930186] ? __loop_update_dio+0x2d2/0x690 [ 1250.930704] loop_configure+0x1118/0x1410 [ 1250.931201] lo_ioctl+0xa57/0x16b0 [ 1250.931621] ? avc_has_extended_perms+0x7f1/0xf40 [ 1250.932195] ? loop_set_status_old+0x250/0x250 [ 1250.932732] ? avc_ss_reset+0x180/0x180 [ 1250.933204] ? find_held_lock+0x2c/0x110 [ 1250.933690] ? __lock_acquire+0xbb1/0x5b00 [ 1250.934227] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1250.934846] ? generic_block_fiemap+0x60/0x60 [ 1250.935380] ? lock_downgrade+0x6d0/0x6d0 [ 1250.935867] ? build_open_flags+0x6f0/0x6f0 [ 1250.936378] ? loop_set_status_old+0x250/0x250 [ 1250.936915] blkdev_ioctl+0x291/0x710 [ 1250.937368] ? blkdev_common_ioctl+0x1930/0x1930 [ 1250.937935] ? selinux_file_ioctl+0xb6/0x270 [ 1250.938461] block_ioctl+0xf9/0x140 [ 1250.938888] ? blkdev_read_iter+0x1c0/0x1c0 [ 1250.939398] __x64_sys_ioctl+0x19a/0x210 [ 1250.939877] do_syscall_64+0x33/0x40 [ 1250.940317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.940919] RIP: 0033:0x7f7ab951f8d7 [ 1250.941361] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.943572] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.944471] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1250.945301] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1250.946146] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1250.946988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1250.947825] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1250.996969] EXT4-fs (loop7): invalid first ino: 2875922842 05:18:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 47) 05:18:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x80000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x8, 0x6a, 0x3, 0x0, 0x6, 0x10, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46813d26, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x582, 0x0, 0xc6d, 0x5, 0x8001, 0x26c4, 0x101, 0x0, 0x101, 0x0, 0x20}, r1, 0x1, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40c102, 0xd0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x7f, 0x0, 0x81, 0x0, 0x4, 0x8008, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x25, 0x6}, 0x0, 0x9, 0x5, 0x3, 0xffff, 0x3, 0xba4, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x7, r0, 0xb) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) 05:18:52 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ftruncate(r3, 0xffff) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x83, 0x80, 0xea, 0x0, 0x7fffffff, 0x4840, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_config_ext={0x3, 0x87}, 0x304, 0x5, 0x3, 0x7, 0x3f, 0x61, 0x8, 0x0, 0x90ec}, r2, 0xc, r0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(r2, 0x8, 0x0, &(0x7f0000000180)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0x80800) dup2(r4, r1) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x8) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x403, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000580)={0x0, 0xfffffffffffffe00, 0x6}) 05:18:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0xc000, 0xe8d, 0x100, 0x0, 0x8, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x20, 0xff, 0x2, 0x3, 0x0, 0x81, 0x100, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x100, 0x4, 0xaab, 0x0, 0x1, 0x377, 0x8001, 0x0, 0xfffffff7, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r1, 0x8) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x81, 0x7, 0x7f, 0x0, 0x6, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x9}, 0x1084, 0x7, 0x0, 0x2, 0x2, 0x291, 0x8000, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x3, r1, 0x3) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:18:52 executing program 6: io_setup(0x40, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:18:52 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 46) [ 1263.247601] loop7: detected capacity change from 0 to 2048 [ 1263.248530] FAULT_INJECTION: forcing a failure. [ 1263.248530] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.250040] CPU: 1 PID: 8274 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1263.250929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.251998] Call Trace: [ 1263.252346] dump_stack+0x107/0x167 [ 1263.252819] should_fail.cold+0x5/0xa [ 1263.253320] should_failslab+0x5/0x20 [ 1263.253817] __kmalloc_node_track_caller+0x74/0x3b0 [ 1263.254463] ? alloc_uevent_skb+0x7b/0x210 [ 1263.255016] __alloc_skb+0xb1/0x5b0 [ 1263.255494] alloc_uevent_skb+0x7b/0x210 [ 1263.256016] kobject_uevent_env+0x99a/0xfd0 [ 1263.256567] ? blk_queue_flag_set+0x22/0x30 [ 1263.257119] ? __loop_update_dio+0x2d2/0x690 [ 1263.257680] loop_configure+0x1118/0x1410 [ 1263.258230] lo_ioctl+0xa57/0x16b0 [ 1263.258688] ? avc_has_extended_perms+0x7f1/0xf40 [ 1263.259303] ? loop_set_status_old+0x250/0x250 [ 1263.259507] FAULT_INJECTION: forcing a failure. [ 1263.259507] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.259885] ? avc_ss_reset+0x180/0x180 [ 1263.262826] ? find_held_lock+0x2c/0x110 [ 1263.263365] ? __lock_acquire+0xbb1/0x5b00 [ 1263.263945] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1263.264625] ? generic_block_fiemap+0x60/0x60 [ 1263.265201] ? lock_downgrade+0x6d0/0x6d0 [ 1263.265737] ? build_open_flags+0x6f0/0x6f0 [ 1263.266315] ? loop_set_status_old+0x250/0x250 [ 1263.266901] blkdev_ioctl+0x291/0x710 [ 1263.267390] ? blkdev_common_ioctl+0x1930/0x1930 [ 1263.268006] ? selinux_file_ioctl+0xb6/0x270 [ 1263.268572] block_ioctl+0xf9/0x140 [ 1263.269047] ? blkdev_read_iter+0x1c0/0x1c0 [ 1263.269609] __x64_sys_ioctl+0x19a/0x210 [ 1263.270144] do_syscall_64+0x33/0x40 [ 1263.270625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.271283] RIP: 0033:0x7f7ab951f8d7 [ 1263.271758] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.274145] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.275126] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1263.276036] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1263.276947] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1263.277865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1263.278769] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:18:52 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1263.279703] CPU: 0 PID: 8276 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1263.281378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.283170] Call Trace: [ 1263.283738] dump_stack+0x107/0x167 [ 1263.284529] should_fail.cold+0x5/0xa [ 1263.285345] ? create_object.isra.0+0x3a/0xa30 [ 1263.286331] should_failslab+0x5/0x20 [ 1263.287150] kmem_cache_alloc+0x5b/0x310 [ 1263.288028] create_object.isra.0+0x3a/0xa30 [ 1263.288992] kmemleak_alloc_percpu+0xa0/0x100 [ 1263.289966] pcpu_alloc+0x4e2/0x1240 [ 1263.290776] ? io_async_queue_proc+0x80/0x80 [ 1263.291723] percpu_ref_init+0x31/0x3d0 [ 1263.292582] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1263.293740] io_uring_setup+0x14f6/0x2980 [ 1263.294649] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1263.295732] ? wait_for_completion_io+0x270/0x270 [ 1263.296806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1263.297959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1263.299094] do_syscall_64+0x33/0x40 [ 1263.299910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.301026] RIP: 0033:0x7f6e4b79cb19 [ 1263.301835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:18:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1263.305957] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1263.307692] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1263.309225] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1263.310780] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1263.312308] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1263.313818] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1263.318149] EXT4-fs (loop7): invalid first ino: 2875922842 05:18:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) creat(&(0x7f0000000000)='./file0\x00', 0x22) 05:18:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 48) 05:18:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf0ffff, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:18:52 executing program 6: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4000051) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000280)='@', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "cb7067b67b273122227e858a39bd4cec10f93aed15a00a59b7f67086a2db60ea4c4f6d40007176e5b84f4ae8ccf2a723a43e0724c1340f759d6462c33af51839", 0x1f}, 0x48, r0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:18:52 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1263.399215] loop7: detected capacity change from 0 to 2048 [ 1263.400573] FAULT_INJECTION: forcing a failure. [ 1263.400573] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.402022] CPU: 1 PID: 8289 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1263.402871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.403886] Call Trace: [ 1263.404219] dump_stack+0x107/0x167 [ 1263.404676] should_fail.cold+0x5/0xa [ 1263.405151] ? create_object.isra.0+0x3a/0xa30 [ 1263.405723] should_failslab+0x5/0x20 [ 1263.406221] kmem_cache_alloc+0x5b/0x310 [ 1263.406740] create_object.isra.0+0x3a/0xa30 [ 1263.407275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1263.407908] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1263.408528] ? alloc_uevent_skb+0x7b/0x210 [ 1263.409054] __alloc_skb+0xb1/0x5b0 [ 1263.409504] alloc_uevent_skb+0x7b/0x210 [ 1263.410017] kobject_uevent_env+0x99a/0xfd0 [ 1263.410545] ? blk_queue_flag_set+0x22/0x30 [ 1263.411080] ? __loop_update_dio+0x2d2/0x690 [ 1263.411625] loop_configure+0x1118/0x1410 [ 1263.412138] lo_ioctl+0xa57/0x16b0 [ 1263.412574] ? avc_has_extended_perms+0x7f1/0xf40 [ 1263.413161] ? loop_set_status_old+0x250/0x250 [ 1263.413724] ? avc_ss_reset+0x180/0x180 [ 1263.414217] ? find_held_lock+0x2c/0x110 [ 1263.414723] ? __lock_acquire+0xbb1/0x5b00 [ 1263.415263] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1263.415901] ? generic_block_fiemap+0x60/0x60 [ 1263.416443] ? lock_downgrade+0x6d0/0x6d0 [ 1263.416947] ? build_open_flags+0x6f0/0x6f0 [ 1263.417482] ? loop_set_status_old+0x250/0x250 [ 1263.418044] blkdev_ioctl+0x291/0x710 [ 1263.418510] ? blkdev_common_ioctl+0x1930/0x1930 [ 1263.419092] ? selinux_file_ioctl+0xb6/0x270 [ 1263.419624] block_ioctl+0xf9/0x140 [ 1263.420066] ? blkdev_read_iter+0x1c0/0x1c0 [ 1263.420586] __x64_sys_ioctl+0x19a/0x210 [ 1263.421086] do_syscall_64+0x33/0x40 [ 1263.421543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.422173] RIP: 0033:0x7f7ab951f8d7 [ 1263.422631] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.424841] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.425757] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1263.426616] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1263.427467] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1263.428322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1263.429177] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 05:18:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1263.455050] EXT4-fs (loop7): invalid first ino: 2875922842 05:19:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) 05:19:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=@target={'target ', {'PCI:', '16', ':', '0', ':', '0', '.', '18'}}, 0x15) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, 0xffffffffffffffff) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2000, @fd_index=0x5, 0x1, 0x2, 0x80000001, 0x0, 0x1, {0x3}}, 0x8000) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x80200) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x50dd068a2ac76742, 0x0) ioctl$CDROM_NEXT_WRITABLE(r4, 0x5394, &(0x7f0000000240)) write$vga_arbiter(r3, &(0x7f0000000100), 0xf) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x84000, 0xc0) ftruncate(0xffffffffffffffff, 0x226) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000440)=""/29) pread64(r1, &(0x7f0000000000)=""/111, 0x6f, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x80, 0x2, 0xfffffffa, 0x3, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000380)={0x0, 0x817d, 0xa, 0x40000, 0xce}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000400)) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:08 executing program 0: timer_gettime(0x0, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0xe, 0x7) timer_create(0x5, &(0x7f0000000040)={0x0, 0x1a, 0x1}, &(0x7f0000000080)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x6, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000200)={{r2, r3+10000000}, {0x77359400}}, &(0x7f0000000240)) timer_gettime(r0, &(0x7f0000000100)) timer_gettime(r0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000280)) 05:19:08 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 47) 05:19:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x1000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:19:08 executing program 6: pkey_mprotect(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) pselect6(0x3d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x8000, 0x13, 0xee, 0x4, 0x0, 0x8001, 0x40, 0x9}, &(0x7f0000000040)={0xb41, 0x7, 0x2, 0x7, 0x2, 0x100, 0x3}, &(0x7f0000000080)={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x4, 0x2, 0x20, 0xffffffff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xc1]}, 0x8}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffa) 05:19:08 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 49) [ 1278.741730] FAULT_INJECTION: forcing a failure. [ 1278.741730] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.743395] CPU: 0 PID: 8317 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1278.744364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.745532] Call Trace: [ 1278.745911] dump_stack+0x107/0x167 [ 1278.746430] should_fail.cold+0x5/0xa [ 1278.746974] ? create_object.isra.0+0x3a/0xa30 [ 1278.747626] should_failslab+0x5/0x20 [ 1278.748157] kmem_cache_alloc+0x5b/0x310 [ 1278.748731] create_object.isra.0+0x3a/0xa30 [ 1278.749349] kmemleak_alloc_percpu+0xa0/0x100 [ 1278.749972] pcpu_alloc+0x4e2/0x1240 [ 1278.750509] ? io_async_queue_proc+0x80/0x80 [ 1278.751123] percpu_ref_init+0x31/0x3d0 [ 1278.751679] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1278.752431] io_uring_setup+0x14f6/0x2980 [ 1278.753017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1278.753721] ? wait_for_completion_io+0x270/0x270 [ 1278.754417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.755147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.755880] do_syscall_64+0x33/0x40 [ 1278.756404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.757123] RIP: 0033:0x7f6e4b79cb19 [ 1278.757648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.760223] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1278.761270] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1278.762258] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1278.763236] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1278.764221] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1278.765219] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1278.777814] loop7: detected capacity change from 0 to 2048 [ 1278.779388] FAULT_INJECTION: forcing a failure. [ 1278.779388] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.781786] CPU: 1 PID: 8327 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1278.783323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.783331] Call Trace: [ 1278.783357] dump_stack+0x107/0x167 [ 1278.783379] should_fail.cold+0x5/0xa [ 1278.783399] ? skb_clone+0x14f/0x3d0 [ 1278.783422] should_failslab+0x5/0x20 [ 1278.783440] kmem_cache_alloc+0x5b/0x310 [ 1278.783464] skb_clone+0x14f/0x3d0 [ 1278.783489] netlink_broadcast_filtered+0x9a5/0xf50 [ 1278.783521] ? __alloc_skb+0x388/0x5b0 [ 1278.783546] netlink_broadcast+0x35/0x50 [ 1278.783575] kobject_uevent_env+0x93d/0xfd0 [ 1278.793534] ? blk_queue_flag_set+0x22/0x30 [ 1278.794462] ? __loop_update_dio+0x2d2/0x690 [ 1278.795409] loop_configure+0x1118/0x1410 [ 1278.796304] lo_ioctl+0xa57/0x16b0 [ 1278.797075] ? avc_has_extended_perms+0x7f1/0xf40 [ 1278.798115] ? loop_set_status_old+0x250/0x250 [ 1278.799090] ? avc_ss_reset+0x180/0x180 [ 1278.799948] ? find_held_lock+0x2c/0x110 [ 1278.800842] ? __lock_acquire+0xbb1/0x5b00 [ 1278.801790] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1278.802905] ? generic_block_fiemap+0x60/0x60 [ 1278.803865] ? lock_downgrade+0x6d0/0x6d0 [ 1278.804739] ? build_open_flags+0x6f0/0x6f0 [ 1278.805657] ? loop_set_status_old+0x250/0x250 [ 1278.806633] blkdev_ioctl+0x291/0x710 [ 1278.807443] ? blkdev_common_ioctl+0x1930/0x1930 [ 1278.808457] ? selinux_file_ioctl+0xb6/0x270 [ 1278.809397] block_ioctl+0xf9/0x140 [ 1278.810173] ? blkdev_read_iter+0x1c0/0x1c0 [ 1278.811095] __x64_sys_ioctl+0x19a/0x210 [ 1278.811958] do_syscall_64+0x33/0x40 [ 1278.812736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.813814] RIP: 0033:0x7f7ab951f8d7 [ 1278.814611] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.818529] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.820135] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1278.821641] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1278.823156] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1278.824680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 05:19:08 executing program 0: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x80, &(0x7f0000000080)=0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:19:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1278.826205] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1278.835086] EXT4-fs (loop7): invalid first ino: 2875922842 05:19:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x2000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:19:08 executing program 1: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'wlan1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x43}}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 05:19:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, 0xffffffffffffffff) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x80, 0x1) dup2(r1, r0) 05:19:08 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 50) [ 1278.965065] loop7: detected capacity change from 0 to 2048 [ 1278.966133] FAULT_INJECTION: forcing a failure. [ 1278.966133] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.967606] CPU: 0 PID: 8351 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1278.968471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.969537] Call Trace: [ 1278.969878] dump_stack+0x107/0x167 [ 1278.970349] should_fail.cold+0x5/0xa [ 1278.970831] ? create_object.isra.0+0x3a/0xa30 [ 1278.971409] should_failslab+0x5/0x20 [ 1278.971896] kmem_cache_alloc+0x5b/0x310 [ 1278.972411] ? find_held_lock+0x2c/0x110 [ 1278.972940] create_object.isra.0+0x3a/0xa30 [ 1278.973496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1278.974155] kmem_cache_alloc+0x159/0x310 [ 1278.974685] skb_clone+0x14f/0x3d0 [ 1278.975153] netlink_broadcast_filtered+0x9a5/0xf50 [ 1278.975791] ? __alloc_skb+0x388/0x5b0 [ 1278.976292] netlink_broadcast+0x35/0x50 [ 1278.976813] kobject_uevent_env+0x93d/0xfd0 [ 1278.977367] ? blk_queue_flag_set+0x22/0x30 [ 1278.977912] ? __loop_update_dio+0x2d2/0x690 [ 1278.978487] loop_configure+0x1118/0x1410 [ 1278.979027] lo_ioctl+0xa57/0x16b0 [ 1278.979477] ? avc_has_extended_perms+0x7f1/0xf40 [ 1278.980089] ? loop_set_status_old+0x250/0x250 [ 1278.980679] ? avc_ss_reset+0x180/0x180 [ 1278.981180] ? find_held_lock+0x2c/0x110 [ 1278.981698] ? __lock_acquire+0xbb1/0x5b00 [ 1278.982285] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1278.982955] ? generic_block_fiemap+0x60/0x60 [ 1278.983521] ? lock_downgrade+0x6d0/0x6d0 [ 1278.984051] ? build_open_flags+0x6f0/0x6f0 [ 1278.984601] ? loop_set_status_old+0x250/0x250 [ 1278.985177] blkdev_ioctl+0x291/0x710 [ 1278.985663] ? blkdev_common_ioctl+0x1930/0x1930 [ 1278.986277] ? selinux_file_ioctl+0xb6/0x270 [ 1278.986833] block_ioctl+0xf9/0x140 [ 1278.987305] ? blkdev_read_iter+0x1c0/0x1c0 [ 1278.987851] __x64_sys_ioctl+0x19a/0x210 [ 1278.988367] do_syscall_64+0x33/0x40 [ 1278.988842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.989499] RIP: 0033:0x7f7ab951f8d7 [ 1278.989971] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.992293] RSP: 002b:00007f7ab6a94f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.993249] RAX: ffffffffffffffda RBX: 00007f7ab9569970 RCX: 00007f7ab951f8d7 [ 1278.994152] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1278.995042] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1278.995931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1278.996818] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1279.013429] EXT4-fs (loop7): invalid first ino: 2875922842 05:19:22 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) 05:19:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 51) 05:19:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x3000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1293.341348] loop7: detected capacity change from 0 to 2048 [ 1293.343552] FAULT_INJECTION: forcing a failure. [ 1293.343552] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.344892] CPU: 0 PID: 8367 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1293.345686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.346666] Call Trace: [ 1293.346992] dump_stack+0x107/0x167 [ 1293.347421] should_fail.cold+0x5/0xa [ 1293.347871] ? getname_flags.part.0+0x50/0x4f0 [ 1293.348406] should_failslab+0x5/0x20 [ 1293.348855] kmem_cache_alloc+0x5b/0x310 [ 1293.349334] ? generic_block_fiemap+0x60/0x60 [ 1293.349864] getname_flags.part.0+0x50/0x4f0 [ 1293.350387] getname_flags+0x9a/0xe0 [ 1293.350820] do_mkdirat+0x8f/0x2b0 [ 1293.351240] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1293.351870] ? user_path_create+0xf0/0xf0 [ 1293.352362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.352977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.353580] do_syscall_64+0x33/0x40 [ 1293.354017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.354622] RIP: 0033:0x7f7ab951ec27 [ 1293.355055] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.357208] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1293.358098] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1293.358939] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1293.359772] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1293.360610] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1293.361441] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:19:22 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:19:22 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:22 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 48) 05:19:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000f80)={r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendfile(r1, r0, &(0x7f0000000200)=0x8, 0x7) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)=0x10) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0xfffffffffffffffc, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r3, 0x2, 0x7fffffff, 0x2c75, 0x5}) socketpair(0xa, 0x80000, 0x4, &(0x7f0000000380)={0xffffffffffffffff}) writev(r5, &(0x7f0000000780)=[{&(0x7f00000003c0)="5acc8a74e087560c68757123c304be7277b038c9b782dabf601aed46d0b67abf788b0d1b19e0062a186680f05bad9ead73e423632c", 0x35}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000400)="1652f05d7cc8aaa3d43c605af51f80d7f97cb0951a73ac2a67350eb2fc604d6fe3a6a960709514943368f833a77e144326d8a7b49065e3fa3a7a08", 0x3b}, {&(0x7f0000000440)="bd048e5cb592f587bd4388b390305069dedc475b0337baba2b186c05141ca930756d64274935c24f67597eee918d1c71993f08a6ffeaa9bf3b3fc49ca89e835f6e03521d082242a0363a208c151ec86325f8be358a595baaa30d3bb476108d9a022b7c74eb5417ff9648755561b8a69256dd0e59662fd3e47743117ef1a8583adda98058bd26b74b2f89e8a6deb7b57d971897d84fe47652eda4cb86541a04880254ada4c0bbcc3749647f33c6e053645f45d00e1a2d6347d1eaac7bfd62306a036dd0c57897aa0c11e8de5eb399f905a660db2406de15c63300233342081c67d4ecc4263a10bb788c3d0a6a859ee1a299e62e727cf797", 0xf7}, {&(0x7f0000000540)="fed8ef7e931662b409cc44a114ff2cb8cdb5cf0425c0d89f4ebe9ef5ff4b2f88cfa78bb7670d3e92494053306ad179ae6702", 0x32}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="e5370efad66da416fce1e376b4f2eb4b30503bd6c8356c4a190fb64206fa0018c8a5d9a22f19a4bff094b1d85951edc3264cc82632c618c6af77a08d1f421eefff6cb3e2a12f61d824effb2305445b2b258da42892fa1518e14a109339509d6ca248878037dc255ef36d2b696a5aa1cc351fb982448b8c22c3d05b786b961013d11b3d426471481468e41c9336d86b0edc46ea741118146cb6b94913abdc9a993bbeec8548bd88f5d1881f89a59b31802e0225ed0f8ea698608ded96e74838a4f9d7b20ea6a853e217971d461240268978c150e377fd6de39b6ca400538f89ec8d44812c48122a47", 0xe8}], 0x7) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x20, 0x0, 0x80, 0x0, 0x6380000000000000, 0xc01, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x6, 0x3}, 0x1000, 0x1, 0x0, 0x8, 0x6, 0x1, 0x100, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x10, r4, 0x2) r6 = syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x1dc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x69cd, &(0x7f0000000140)={0x0, 0x95c1, 0x10, 0x2, 0x29d, 0x0, r6}, &(0x7f0000000000/0xc00000)=nil, &(0x7f00001ea000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) syz_io_uring_submit(r7, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x7) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) dup2(r1, r4) 05:19:22 executing program 2: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44000, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r4) dup2(r2, r5) getpeername(r3, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) dup2(r1, r0) 05:19:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x4000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:19:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 52) [ 1293.414337] FAULT_INJECTION: forcing a failure. [ 1293.414337] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.415708] CPU: 0 PID: 8379 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1293.416496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.417456] Call Trace: [ 1293.417764] dump_stack+0x107/0x167 [ 1293.418183] should_fail.cold+0x5/0xa [ 1293.418635] ? create_object.isra.0+0x3a/0xa30 [ 1293.419166] should_failslab+0x5/0x20 [ 1293.419605] kmem_cache_alloc+0x5b/0x310 [ 1293.420077] create_object.isra.0+0x3a/0xa30 [ 1293.420581] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.421167] kmem_cache_alloc_trace+0x151/0x320 [ 1293.421706] ? io_async_queue_proc+0x80/0x80 [ 1293.422223] percpu_ref_init+0xd8/0x3d0 [ 1293.422684] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1293.423309] io_uring_setup+0x14f6/0x2980 [ 1293.423791] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1293.424376] ? wait_for_completion_io+0x270/0x270 [ 1293.424946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.425552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.426151] do_syscall_64+0x33/0x40 [ 1293.426586] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.427181] RIP: 0033:0x7f6e4b79cb19 [ 1293.427614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.429740] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1293.430630] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1293.431452] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1293.432283] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1293.433108] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1293.433931] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:19:22 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 05:19:22 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x5000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1293.475493] loop7: detected capacity change from 0 to 2048 [ 1293.480129] FAULT_INJECTION: forcing a failure. [ 1293.480129] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.482867] CPU: 1 PID: 8384 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1293.484430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.486322] Call Trace: [ 1293.486925] dump_stack+0x107/0x167 05:19:22 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1293.487765] should_fail.cold+0x5/0xa [ 1293.488726] ? getname_flags.part.0+0x50/0x4f0 [ 1293.489772] should_failslab+0x5/0x20 [ 1293.490638] kmem_cache_alloc+0x5b/0x310 [ 1293.491581] ? generic_block_fiemap+0x60/0x60 [ 1293.492599] getname_flags.part.0+0x50/0x4f0 [ 1293.493606] getname_flags+0x9a/0xe0 [ 1293.494481] do_mkdirat+0x8f/0x2b0 [ 1293.495287] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1293.496521] ? user_path_create+0xf0/0xf0 [ 1293.497478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.498675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.499862] do_syscall_64+0x33/0x40 [ 1293.500712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.501865] RIP: 0033:0x7f7ab951ec27 [ 1293.502729] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.506954] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1293.508695] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1293.510330] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1293.511947] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1293.513570] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1293.515214] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:19:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000, 0x800}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) dup2(r1, r0) 05:19:22 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7fff, 0x82000) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) keyctl$set_reqkey_keyring(0xe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="d7f3fb30dbe9163b7062b60914357360e5631ab26de882eba76932bca97cf44220574c2a778064db65266b8e9c4e80070e21a0026a2bbc44668d00e80bcd94edfdde9b02910b311c8c126cfa4deabc", @ANYBLOB="bf9b000000000000000001000000180001801400020077673000"/38], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) keyctl$set_reqkey_keyring(0xe, 0xa9fff7994ac11447) 05:19:22 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 49) 05:19:22 executing program 6: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x10001, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x7) 05:19:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 53) [ 1293.704553] loop7: detected capacity change from 0 to 2048 [ 1293.705270] FAULT_INJECTION: forcing a failure. [ 1293.705270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.705293] CPU: 1 PID: 8420 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1293.705306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.709480] FAULT_INJECTION: forcing a failure. [ 1293.709480] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.710058] Call Trace: [ 1293.710084] dump_stack+0x107/0x167 [ 1293.710108] should_fail.cold+0x5/0xa [ 1293.710136] _copy_to_user+0x2e/0x180 [ 1293.714697] io_uring_setup+0x11b5/0x2980 [ 1293.715653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1293.716799] ? wait_for_completion_io+0x270/0x270 [ 1293.717931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.719142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.720315] do_syscall_64+0x33/0x40 [ 1293.721162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.722334] RIP: 0033:0x7f6e4b79cb19 [ 1293.723180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.727349] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1293.729146] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1293.730923] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1293.732557] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1293.734178] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1293.735809] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1293.737454] CPU: 0 PID: 8418 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1293.738261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.739216] Call Trace: [ 1293.739527] dump_stack+0x107/0x167 [ 1293.739953] should_fail.cold+0x5/0xa [ 1293.740403] ? __d_alloc+0x2a/0x990 [ 1293.740822] should_failslab+0x5/0x20 [ 1293.741265] kmem_cache_alloc+0x5b/0x310 [ 1293.741731] ? __d_lookup+0x3bf/0x760 [ 1293.742175] __d_alloc+0x2a/0x990 [ 1293.742612] d_alloc+0x46/0x240 [ 1293.742997] __lookup_hash+0xcc/0x190 [ 1293.743435] filename_create+0x186/0x4a0 [ 1293.743912] ? filename_parentat+0x570/0x570 [ 1293.744427] ? getname_flags.part.0+0x1dd/0x4f0 [ 1293.744974] do_mkdirat+0xa2/0x2b0 [ 1293.745388] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1293.746020] ? user_path_create+0xf0/0xf0 [ 1293.746517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.747131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.747732] do_syscall_64+0x33/0x40 [ 1293.748162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.748753] RIP: 0033:0x7f7ab951ec27 [ 1293.749189] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.751321] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1293.752217] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1293.753046] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1293.753868] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1293.754700] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1293.755523] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:19:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) dup2(r1, r0) 05:19:38 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 54) 05:19:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x6000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:19:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x4}) r3 = dup2(r2, r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) write$hidraw(r3, &(0x7f00000000c0)="c6d116156945d3bff76149a0a8377905f7036e8ae266901f1bfc5921a72196109d14f205ac83455d8453f9be0ec24f1f208afbca6ad8ccf6051c22cfaac2acd31f18e5c30f282f2b0aea715fed905b08d4ca2e6b75767ab660d6e3b33d1caee5eb8b6aea9b1d2cb9049e17a26293d9f8e5f596aa597800971d46a1b43a7fc9de9732aacdc4db782815cd66ebc8d7508c5f52d85de80c0c892e38c3591ef91c54d250f83884444a91b1645168125d637d", 0xb0) 05:19:38 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'netpci0\x00'}) r3 = fork() r4 = syz_open_procfs(r3, &(0x7f0000000080)='fd/3\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r7, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000000a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff000000000000010000800000000809000000000000000800000000000000040000000000000004000008000000"]}, @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000580)={"981ae462d571aef713803ea5c9bd857a", 0x0, r7, {0x4, 0x9}, {0x4b465432, 0x9}, 0x859, [0x1, 0x55e, 0x1, 0x80, 0x1, 0x5, 0x2b8, 0x0, 0x4f32c10e, 0x6, 0x6, 0x40, 0x61a, 0x6, 0x80000000, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"de455c82a4e567d42239a27021acde3e", r7, 0x0, {0x80000000, 0x79c21a36}, {0x5c9c, 0x5}, 0x1, [0x8, 0x1, 0x7fff, 0x8, 0xfffffffffffffffd, 0x2e83, 0x2, 0x2, 0x9, 0x5, 0x101, 0x5, 0x6, 0x0, 0x100000001, 0x5]}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0xe8d, 0x101, 0x0, 0x0, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) sendto$unix(r2, &(0x7f0000000000)="67617a77b2b7229724ebea2fdc6dda71b5fb", 0x12, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 05:19:38 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:19:38 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:38 executing program 0: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:19:38 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 50) [ 1309.739360] FAULT_INJECTION: forcing a failure. [ 1309.739360] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.741912] CPU: 0 PID: 8447 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1309.743240] loop7: detected capacity change from 0 to 2048 [ 1309.743458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.743473] Call Trace: [ 1309.747193] dump_stack+0x107/0x167 [ 1309.748010] FAULT_INJECTION: forcing a failure. [ 1309.748010] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.750461] should_fail.cold+0x5/0xa [ 1309.751317] ? __d_alloc+0x2a/0x990 [ 1309.752130] should_failslab+0x5/0x20 [ 1309.752978] kmem_cache_alloc+0x5b/0x310 [ 1309.753898] __d_alloc+0x2a/0x990 [ 1309.754688] ? find_held_lock+0x2c/0x110 [ 1309.755600] d_alloc_pseudo+0x19/0x70 [ 1309.756462] alloc_file_pseudo+0xce/0x250 [ 1309.757382] ? trace_hardirqs_on+0x5b/0x180 [ 1309.758343] ? alloc_file+0x5a0/0x5a0 [ 1309.759226] anon_inode_getfile+0xc8/0x1f0 [ 1309.760180] io_uring_setup+0x138b/0x2980 [ 1309.761119] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1309.762250] ? wait_for_completion_io+0x270/0x270 [ 1309.763364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1309.764545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.765700] do_syscall_64+0x33/0x40 [ 1309.766547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.767691] RIP: 0033:0x7f6e4b79cb19 [ 1309.768521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.772649] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1309.774344] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1309.775951] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1309.777544] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1309.779114] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1309.780652] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1309.782235] CPU: 1 PID: 8445 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1309.783740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.785493] Call Trace: [ 1309.786069] dump_stack+0x107/0x167 [ 1309.786846] should_fail.cold+0x5/0xa [ 1309.787650] ? __d_alloc+0x2a/0x990 [ 1309.788413] should_failslab+0x5/0x20 [ 1309.789217] kmem_cache_alloc+0x5b/0x310 [ 1309.790061] ? __d_lookup+0x3bf/0x760 [ 1309.790883] __d_alloc+0x2a/0x990 [ 1309.791640] d_alloc+0x46/0x240 [ 1309.792335] __lookup_hash+0xcc/0x190 [ 1309.793147] filename_create+0x186/0x4a0 [ 1309.794012] ? filename_parentat+0x570/0x570 [ 1309.794949] ? getname_flags.part.0+0x1dd/0x4f0 [ 1309.795951] do_mkdirat+0xa2/0x2b0 [ 1309.796701] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1309.797842] ? user_path_create+0xf0/0xf0 [ 1309.798742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1309.799837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.800921] do_syscall_64+0x33/0x40 [ 1309.801699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.802781] RIP: 0033:0x7f7ab951ec27 [ 1309.803561] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.807397] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1309.808986] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1309.810488] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1309.811991] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1309.813480] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1309.814980] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:19:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x8, 0x6a, 0x3, 0x0, 0x6, 0x10, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46813d26, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x582, 0x0, 0xc6d, 0x5, 0x8001, 0x26c4, 0x101, 0x0, 0x101, 0x0, 0x20}, r1, 0x1, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40c102, 0xd0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x7f, 0x0, 0x81, 0x0, 0x4, 0x8008, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x25, 0x6}, 0x0, 0x9, 0x5, 0x3, 0xffff, 0x3, 0xba4, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x7, r0, 0xb) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) 05:19:39 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x7000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:19:39 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) 05:19:39 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 55) 05:19:39 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:19:39 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 51) [ 1309.981403] loop7: detected capacity change from 0 to 2048 [ 1309.983132] FAULT_INJECTION: forcing a failure. [ 1309.983132] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.985519] CPU: 1 PID: 8468 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1309.986952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.988680] Call Trace: [ 1309.989241] dump_stack+0x107/0x167 [ 1309.990016] should_fail.cold+0x5/0xa [ 1309.990828] ? create_object.isra.0+0x3a/0xa30 [ 1309.991794] should_failslab+0x5/0x20 [ 1309.992592] kmem_cache_alloc+0x5b/0x310 [ 1309.993453] create_object.isra.0+0x3a/0xa30 [ 1309.994371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.995452] kmem_cache_alloc+0x159/0x310 [ 1309.996332] __d_alloc+0x2a/0x990 [ 1309.997073] d_alloc+0x46/0x240 [ 1309.997780] __lookup_hash+0xcc/0x190 [ 1309.998590] filename_create+0x186/0x4a0 [ 1309.999447] ? filename_parentat+0x570/0x570 [ 1310.000374] ? getname_flags.part.0+0x1dd/0x4f0 [ 1310.001364] do_mkdirat+0xa2/0x2b0 [ 1310.002115] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1310.003260] ? user_path_create+0xf0/0xf0 [ 1310.004134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1310.005237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1310.006317] do_syscall_64+0x33/0x40 [ 1310.007114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1310.008203] RIP: 0033:0x7f7ab951ec27 [ 1310.008996] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.013167] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1310.014778] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1310.016270] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1310.017761] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1310.019268] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1310.020760] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:19:39 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:39 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1310.048084] FAULT_INJECTION: forcing a failure. [ 1310.048084] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.050440] CPU: 0 PID: 8471 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1310.051788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1310.053412] Call Trace: [ 1310.053945] dump_stack+0x107/0x167 [ 1310.054672] should_fail.cold+0x5/0xa [ 1310.055412] ? create_object.isra.0+0x3a/0xa30 05:19:39 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x1) 05:19:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x8000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1310.056503] should_failslab+0x5/0x20 [ 1310.057277] kmem_cache_alloc+0x5b/0x310 [ 1310.058090] create_object.isra.0+0x3a/0xa30 [ 1310.058959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1310.059969] kmem_cache_alloc+0x159/0x310 [ 1310.060805] __d_alloc+0x2a/0x990 [ 1310.061490] ? find_held_lock+0x2c/0x110 [ 1310.062295] d_alloc_pseudo+0x19/0x70 [ 1310.063061] alloc_file_pseudo+0xce/0x250 [ 1310.063870] ? trace_hardirqs_on+0x5b/0x180 [ 1310.064722] ? alloc_file+0x5a0/0x5a0 [ 1310.065484] anon_inode_getfile+0xc8/0x1f0 [ 1310.066325] io_uring_setup+0x138b/0x2980 [ 1310.067156] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1310.068145] ? wait_for_completion_io+0x270/0x270 [ 1310.069108] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1310.070132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1310.071139] do_syscall_64+0x33/0x40 [ 1310.071877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1310.072864] RIP: 0033:0x7f6e4b79cb19 [ 1310.073589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.077172] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1310.078655] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1310.080034] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1310.081432] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1310.082838] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1310.084242] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1310.085875] EXT4-fs (loop7): invalid first ino: 2875922842 05:19:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fadvise64(r1, 0x101, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) 05:19:54 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 52) 05:19:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x9000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:19:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7, 0x5, 0x9a, 0x8, 0x0, 0x5, 0x8240, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x7fff}, 0x8140, 0x8, 0x2, 0x5, 0x6, 0x4, 0x1, 0x0, 0x352c, 0x0, 0x20}, r1, 0xe, r0, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r4) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r7, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018570000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) dup2(r3, r5) syz_io_uring_complete(0x0) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) dup2(0xffffffffffffffff, r2) 05:19:54 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x4) 05:19:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 56) 05:19:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x7, 0xd8, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8, 0xff}, 0x8, 0xffffffffffffffff, 0x7f, 0x0, 0x200, 0x2, 0x8, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x9, 0x4, 0x1f, 0x0, 0x101, 0x40880, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000000), 0x1}, 0x7008, 0x1, 0x80000001, 0x4, 0x800000, 0x9, 0x1, 0x0, 0x10001, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) 05:19:54 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:54 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1325.215677] FAULT_INJECTION: forcing a failure. [ 1325.215677] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.217259] CPU: 1 PID: 8500 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1325.218204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1325.219363] Call Trace: [ 1325.219721] dump_stack+0x107/0x167 [ 1325.220224] should_fail.cold+0x5/0xa [ 1325.220750] ? __alloc_file+0x21/0x320 [ 1325.221291] should_failslab+0x5/0x20 [ 1325.221821] kmem_cache_alloc+0x5b/0x310 [ 1325.222386] __alloc_file+0x21/0x320 [ 1325.222924] alloc_empty_file+0x6d/0x170 [ 1325.223486] alloc_file+0x5e/0x5a0 [ 1325.223982] alloc_file_pseudo+0x16a/0x250 [ 1325.224565] ? alloc_file+0x5a0/0x5a0 [ 1325.225102] anon_inode_getfile+0xc8/0x1f0 [ 1325.225690] io_uring_setup+0x138b/0x2980 [ 1325.226269] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1325.226980] ? wait_for_completion_io+0x270/0x270 [ 1325.227670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1325.228386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.229078] do_syscall_64+0x33/0x40 [ 1325.229574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1325.230260] RIP: 0033:0x7f6e4b79cb19 [ 1325.230767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.233214] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1325.234240] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1325.235195] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1325.236148] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1325.237102] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1325.238052] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:19:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1325.254196] loop7: detected capacity change from 0 to 2048 [ 1325.256754] FAULT_INJECTION: forcing a failure. [ 1325.256754] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.259513] CPU: 0 PID: 8510 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1325.261096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1325.263021] Call Trace: [ 1325.263636] dump_stack+0x107/0x167 [ 1325.264482] should_fail.cold+0x5/0xa [ 1325.265369] ? ext4_alloc_inode+0x1a/0x670 [ 1325.266343] should_failslab+0x5/0x20 [ 1325.267239] kmem_cache_alloc+0x5b/0x310 [ 1325.268185] ? security_compute_validatetrans.part.0+0x960/0x960 [ 1325.269600] ? ext4_init_journal_params+0x350/0x350 [ 1325.270761] ext4_alloc_inode+0x1a/0x670 [ 1325.271704] ? ext4_init_journal_params+0x350/0x350 [ 1325.272851] alloc_inode+0x63/0x240 [ 1325.273689] new_inode+0x23/0x250 [ 1325.274497] __ext4_new_inode+0x32c/0x5370 [ 1325.275488] ? avc_has_extended_perms+0xf40/0xf40 [ 1325.276639] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1325.277767] ? dquot_initialize_needed+0x290/0x290 [ 1325.278941] ? selinux_determine_inode_label+0x1ab/0x340 [ 1325.280211] ext4_mkdir+0x32c/0xb10 [ 1325.281069] ? ext4_rmdir+0xf70/0xf70 [ 1325.281961] vfs_mkdir+0x493/0x750 [ 1325.282790] do_mkdirat+0x150/0x2b0 [ 1325.283647] ? user_path_create+0xf0/0xf0 [ 1325.284605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1325.285816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.287025] do_syscall_64+0x33/0x40 [ 1325.287887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1325.289092] RIP: 0033:0x7f7ab951ec27 [ 1325.289942] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.294165] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1325.295923] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1325.297560] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1325.299205] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1325.300833] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1325.302476] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:19:54 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 53) 05:19:54 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1325.347209] FAULT_INJECTION: forcing a failure. [ 1325.347209] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.349860] CPU: 0 PID: 8518 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1325.351453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1325.353357] Call Trace: [ 1325.353969] dump_stack+0x107/0x167 [ 1325.354819] should_fail.cold+0x5/0xa [ 1325.355698] ? create_object.isra.0+0x3a/0xa30 [ 1325.356751] should_failslab+0x5/0x20 [ 1325.357633] kmem_cache_alloc+0x5b/0x310 [ 1325.358586] create_object.isra.0+0x3a/0xa30 [ 1325.359609] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1325.360794] kmem_cache_alloc+0x159/0x310 [ 1325.361758] __alloc_file+0x21/0x320 [ 1325.362626] alloc_empty_file+0x6d/0x170 05:19:54 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) [ 1325.363564] alloc_file+0x5e/0x5a0 [ 1325.364489] alloc_file_pseudo+0x16a/0x250 [ 1325.365503] ? alloc_file+0x5a0/0x5a0 [ 1325.366396] anon_inode_getfile+0xc8/0x1f0 05:19:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xa000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1325.367392] io_uring_setup+0x138b/0x2980 [ 1325.368394] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1325.369569] ? wait_for_completion_io+0x270/0x270 [ 1325.370732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1325.371964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.373192] do_syscall_64+0x33/0x40 [ 1325.374058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1325.375264] RIP: 0033:0x7f6e4b79cb19 [ 1325.376132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.380430] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1325.382208] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1325.383878] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1325.385556] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1325.387231] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1325.388895] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:19:54 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x3) 05:19:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:19:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x9, 0x8}) ioctl$FIOCLEX(r2, 0x5451) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1341.023353] FAULT_INJECTION: forcing a failure. [ 1341.023353] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.025082] CPU: 1 PID: 8547 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1341.025983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.027080] Call Trace: [ 1341.027429] dump_stack+0x107/0x167 [ 1341.027914] should_fail.cold+0x5/0xa [ 1341.028418] ? __alloc_file+0x21/0x320 [ 1341.028940] should_failslab+0x5/0x20 [ 1341.029443] kmem_cache_alloc+0x5b/0x310 [ 1341.029980] __alloc_file+0x21/0x320 [ 1341.030477] alloc_empty_file+0x6d/0x170 [ 1341.031033] alloc_file+0x5e/0x5a0 [ 1341.031508] alloc_file_pseudo+0x16a/0x250 [ 1341.032070] ? alloc_file+0x5a0/0x5a0 05:20:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 57) 05:20:10 executing program 2: r0 = semget(0x1, 0x2, 0x40) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/207) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:20:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x4, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:20:10 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 54) 05:20:10 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) 05:20:10 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1341.032584] anon_inode_getfile+0xc8/0x1f0 [ 1341.033462] io_uring_setup+0x138b/0x2980 [ 1341.034016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1341.034707] ? wait_for_completion_io+0x270/0x270 [ 1341.035374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.036098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.036781] do_syscall_64+0x33/0x40 [ 1341.037294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.037975] RIP: 0033:0x7f6e4b79cb19 [ 1341.038490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.040977] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1341.042014] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1341.042998] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1341.043953] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 05:20:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:20:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xb000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1341.044897] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1341.045996] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1341.056085] loop7: detected capacity change from 0 to 2048 [ 1341.070639] FAULT_INJECTION: forcing a failure. [ 1341.070639] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.073202] CPU: 0 PID: 8548 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1341.074681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.076475] Call Trace: [ 1341.077060] dump_stack+0x107/0x167 [ 1341.077851] should_fail.cold+0x5/0xa [ 1341.078679] ? __d_alloc+0x2a/0x990 [ 1341.079478] should_failslab+0x5/0x20 [ 1341.080310] kmem_cache_alloc+0x5b/0x310 [ 1341.081184] ? __d_lookup+0x3bf/0x760 [ 1341.082020] __d_alloc+0x2a/0x990 [ 1341.082786] d_alloc+0x46/0x240 [ 1341.083510] __lookup_hash+0xcc/0x190 [ 1341.084336] filename_create+0x186/0x4a0 [ 1341.085215] ? filename_parentat+0x570/0x570 [ 1341.086166] ? getname_flags.part.0+0x1dd/0x4f0 [ 1341.087251] do_mkdirat+0xa2/0x2b0 [ 1341.088161] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1341.089341] ? user_path_create+0xf0/0xf0 [ 1341.090252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.091406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.092533] do_syscall_64+0x33/0x40 [ 1341.093341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.094457] RIP: 0033:0x7f7ab951ec27 [ 1341.095273] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.099283] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1341.100946] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1341.102503] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1341.104065] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1341.105643] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1341.107192] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:20:30 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 05:20:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0xf0ff1f) 05:20:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 58) 05:20:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw6\x00') r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0xffffffffffffffff, r2) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x3, 0x100, 0x6, 0xfffffffffffffffe, 0xc4d}, r1, 0xb, 0xffffffffffffffff, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r4) sendfile(r5, r3, &(0x7f0000000040)=0x8, 0xbe9) ptrace(0x4208, r1) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:20:30 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:20:30 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 55) 05:20:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:20:30 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '=relative'}}}, {@size={'size', 0x3d, [0x74, 0x31, 0x39, 0x35, 0x38]}}]}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000400)='./file0/file0\x00', 0x4000, 0x103) getdents64(r1, &(0x7f0000000580)=""/56, 0x38) r2 = syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x1dc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x69cd, &(0x7f0000000140)={0x0, 0x95c1, 0x10, 0x2, 0x29d, 0x0, r2}, &(0x7f0000000000/0xc00000)=nil, &(0x7f00001ea000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) mkdirat(r4, &(0x7f00000003c0)='./file0\x00', 0x80) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) syz_io_uring_setup(0x6ea4, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x80, 0x100, 0x12345}, 0xc7) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x103) [ 1361.062904] FAULT_INJECTION: forcing a failure. [ 1361.062904] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.064285] CPU: 1 PID: 8579 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1361.065091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.066053] Call Trace: [ 1361.066357] dump_stack+0x107/0x167 [ 1361.066776] should_fail.cold+0x5/0xa [ 1361.067225] ? create_object.isra.0+0x3a/0xa30 [ 1361.067741] should_failslab+0x5/0x20 [ 1361.068176] kmem_cache_alloc+0x5b/0x310 [ 1361.068651] create_object.isra.0+0x3a/0xa30 [ 1361.069150] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.069731] kmem_cache_alloc+0x159/0x310 [ 1361.070202] __alloc_file+0x21/0x320 [ 1361.070626] alloc_empty_file+0x6d/0x170 [ 1361.071093] alloc_file+0x5e/0x5a0 [ 1361.071497] alloc_file_pseudo+0x16a/0x250 [ 1361.071975] ? alloc_file+0x5a0/0x5a0 [ 1361.072418] anon_inode_getfile+0xc8/0x1f0 [ 1361.072900] io_uring_setup+0x138b/0x2980 [ 1361.073373] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1361.073948] ? wait_for_completion_io+0x270/0x270 [ 1361.074513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1361.075120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1361.075712] do_syscall_64+0x33/0x40 [ 1361.076134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.076293] tmpfs: Bad value for 'mpol' [ 1361.076716] RIP: 0033:0x7f6e4b79cb19 [ 1361.076728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.076734] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1361.076747] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1361.076763] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1361.082725] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1361.083553] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1361.084368] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:20:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0xf0ff1f) 05:20:30 executing program 6: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:20:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x10000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1361.101208] loop7: detected capacity change from 0 to 2048 [ 1361.103395] FAULT_INJECTION: forcing a failure. [ 1361.103395] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.106174] CPU: 0 PID: 8586 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1361.107894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.109966] Call Trace: [ 1361.110641] dump_stack+0x107/0x167 [ 1361.111583] should_fail.cold+0x5/0xa [ 1361.112552] ? create_object.isra.0+0x3a/0xa30 [ 1361.113689] should_failslab+0x5/0x20 [ 1361.114653] kmem_cache_alloc+0x5b/0x310 [ 1361.115694] create_object.isra.0+0x3a/0xa30 [ 1361.116794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.118069] kmem_cache_alloc+0x159/0x310 [ 1361.119127] ? ext4_init_journal_params+0x350/0x350 [ 1361.120382] ext4_alloc_inode+0x1a/0x670 [ 1361.121405] ? ext4_init_journal_params+0x350/0x350 [ 1361.122659] alloc_inode+0x63/0x240 [ 1361.123603] new_inode+0x23/0x250 [ 1361.124499] __ext4_new_inode+0x32c/0x5370 [ 1361.125576] ? avc_has_extended_perms+0xf40/0xf40 [ 1361.126824] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1361.128074] ? dquot_initialize_needed+0x290/0x290 [ 1361.129311] ? selinux_determine_inode_label+0x1ab/0x340 [ 1361.130698] ext4_mkdir+0x32c/0xb10 [ 1361.131639] ? ext4_rmdir+0xf70/0xf70 [ 1361.132629] vfs_mkdir+0x493/0x750 [ 1361.133544] do_mkdirat+0x150/0x2b0 [ 1361.134474] ? user_path_create+0xf0/0xf0 [ 1361.135542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1361.136870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1361.138274] do_syscall_64+0x33/0x40 [ 1361.139273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.140556] RIP: 0033:0x7f7ab951ec27 [ 1361.141496] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.146093] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1361.148009] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1361.149796] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1361.151584] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff 05:20:30 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) openat(r0, &(0x7f0000000000)='./file0\x00', 0x600002, 0x60) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x400, 0x1) 05:20:30 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) [ 1361.153368] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1361.155264] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1361.204996] EXT4-fs (loop7): invalid first ino: 2875922842 05:20:30 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 56) [ 1361.245464] tmpfs: Bad value for 'mpol' 05:20:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 59) 05:20:30 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:20:30 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) [ 1361.268666] loop7: detected capacity change from 0 to 2048 [ 1361.272024] FAULT_INJECTION: forcing a failure. [ 1361.272024] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.273338] CPU: 1 PID: 8609 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1361.274113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.275069] Call Trace: [ 1361.275376] dump_stack+0x107/0x167 [ 1361.275795] should_fail.cold+0x5/0xa [ 1361.276231] ? create_object.isra.0+0x3a/0xa30 [ 1361.276754] should_failslab+0x5/0x20 [ 1361.277194] kmem_cache_alloc+0x5b/0x310 [ 1361.277662] create_object.isra.0+0x3a/0xa30 [ 1361.278162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.278747] kmem_cache_alloc+0x159/0x310 [ 1361.279233] jbd2__journal_start+0x190/0x7e0 [ 1361.279742] __ext4_journal_start_sb+0x214/0x390 [ 1361.280287] __ext4_new_inode+0x2e0b/0x5370 [ 1361.280798] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1361.281355] ? dquot_initialize_needed+0x290/0x290 [ 1361.281919] ? selinux_determine_inode_label+0x1ab/0x340 [ 1361.282543] ext4_mkdir+0x32c/0xb10 [ 1361.282974] ? ext4_rmdir+0xf70/0xf70 [ 1361.283419] vfs_mkdir+0x493/0x750 [ 1361.283827] do_mkdirat+0x150/0x2b0 [ 1361.284243] ? user_path_create+0xf0/0xf0 [ 1361.284720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1361.285318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1361.285912] do_syscall_64+0x33/0x40 [ 1361.286335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.286919] RIP: 0033:0x7f7ab951ec27 [ 1361.287355] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.289448] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1361.290322] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1361.291145] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1361.291968] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1361.292782] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1361.293592] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:20:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0xf0ff1f) 05:20:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x11000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1361.309189] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1361.358060] FAULT_INJECTION: forcing a failure. [ 1361.358060] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.360778] CPU: 0 PID: 8614 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1361.362384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.364335] Call Trace: [ 1361.364964] dump_stack+0x107/0x167 [ 1361.365826] should_fail.cold+0x5/0xa [ 1361.366729] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1361.367955] should_failslab+0x5/0x20 [ 1361.368854] kmem_cache_alloc_trace+0x55/0x320 [ 1361.369947] io_uring_alloc_task_context+0x99/0x6a0 [ 1361.371133] ? io_import_iovec+0x1120/0x1120 [ 1361.372178] ? lock_downgrade+0x6d0/0x6d0 [ 1361.373149] ? do_raw_spin_lock+0x121/0x260 [ 1361.374165] ? rwlock_bug.part.0+0x90/0x90 [ 1361.375186] __io_uring_add_tctx_node+0x2c6/0x520 [ 1361.376324] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1361.377544] ? alloc_fd+0x2e7/0x670 [ 1361.378412] io_uring_setup+0x1fbb/0x2980 [ 1361.379412] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1361.380589] ? wait_for_completion_io+0x270/0x270 [ 1361.381745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1361.382985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1361.384197] do_syscall_64+0x33/0x40 [ 1361.385070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.386267] RIP: 0033:0x7f6e4b79cb19 [ 1361.387150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.391456] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1361.393244] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1361.394980] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1361.396643] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1361.398294] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1361.399957] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:20:45 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x9]}, 0x8, 0x80800) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) 05:20:45 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 57) 05:20:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 60) 05:20:45 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) 05:20:45 executing program 2: r0 = syz_io_uring_setup(0x4e0c, &(0x7f0000000000)={0x0, 0x549e, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4bcd, &(0x7f0000000100)={0x0, 0xba95, 0x10, 0x2, 0x7d, 0x0, r0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 05:20:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) 05:20:45 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 05:20:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x20000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1376.378028] FAULT_INJECTION: forcing a failure. [ 1376.378028] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.380951] CPU: 1 PID: 8632 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1376.382684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.384805] Call Trace: [ 1376.385483] dump_stack+0x107/0x167 [ 1376.386422] should_fail.cold+0x5/0xa [ 1376.387405] ? create_object.isra.0+0x3a/0xa30 [ 1376.388556] should_failslab+0x5/0x20 [ 1376.389522] kmem_cache_alloc+0x5b/0x310 [ 1376.390557] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1376.391967] create_object.isra.0+0x3a/0xa30 [ 1376.393102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.394398] kmem_cache_alloc+0x159/0x310 [ 1376.395480] security_file_alloc+0x34/0x170 [ 1376.396568] __alloc_file+0xb7/0x320 [ 1376.397503] alloc_empty_file+0x6d/0x170 [ 1376.398521] alloc_file+0x5e/0x5a0 [ 1376.399433] alloc_file_pseudo+0x16a/0x250 [ 1376.400492] ? alloc_file+0x5a0/0x5a0 [ 1376.401482] anon_inode_getfile+0xc8/0x1f0 [ 1376.402558] io_uring_setup+0x138b/0x2980 [ 1376.403620] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.404903] ? wait_for_completion_io+0x270/0x270 [ 1376.406148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.407471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.408776] do_syscall_64+0x33/0x40 [ 1376.409711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.411007] RIP: 0033:0x7f6e4b79cb19 [ 1376.411961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.416404] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.417996] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1376.419503] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1376.421000] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1376.422491] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1376.423998] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1376.444455] loop7: detected capacity change from 0 to 2048 [ 1376.446446] FAULT_INJECTION: forcing a failure. [ 1376.446446] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.449010] CPU: 1 PID: 8638 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1376.450466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.452229] Call Trace: [ 1376.452796] dump_stack+0x107/0x167 [ 1376.453568] should_fail.cold+0x5/0xa [ 1376.454375] ? jbd2__journal_start+0x190/0x7e0 [ 1376.455349] should_failslab+0x5/0x20 [ 1376.456154] kmem_cache_alloc+0x5b/0x310 [ 1376.457012] jbd2__journal_start+0x190/0x7e0 [ 1376.457940] __ext4_journal_start_sb+0x214/0x390 [ 1376.458939] __ext4_new_inode+0x2e0b/0x5370 [ 1376.459881] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1376.460906] ? dquot_initialize_needed+0x290/0x290 [ 1376.461943] ? selinux_determine_inode_label+0x1ab/0x340 [ 1376.463094] ext4_mkdir+0x32c/0xb10 [ 1376.463882] ? ext4_rmdir+0xf70/0xf70 [ 1376.464696] vfs_mkdir+0x493/0x750 [ 1376.465444] do_mkdirat+0x150/0x2b0 [ 1376.466210] ? user_path_create+0xf0/0xf0 [ 1376.467090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.468207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.469297] do_syscall_64+0x33/0x40 [ 1376.470076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.471155] RIP: 0033:0x7f7ab951ec27 [ 1376.471932] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.475795] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1376.477386] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1376.478890] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1376.480395] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1376.481899] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1376.483403] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1376.485063] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 05:20:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) 05:20:45 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) 05:20:45 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xff, 0x1) syz_io_uring_setup(0x5599, &(0x7f0000001980)={0x0, 0x6ecb, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001a00), &(0x7f0000001a40)) 05:20:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x9c000000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:20:45 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 58) 05:20:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 61) 05:20:45 executing program 6: clock_gettime(0xc, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xaa, 0xeb, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/103, 0x67}]}, &(0x7f00000000c0)="e9cc4418993733592ef96cecc69e75651d0ede49ec46f0ef1f3c73dc0a199b796c46e6e08fd3403e855059b5f7391c97d313b9690e3c85c9add24d357da7e1a32c7dcfd0be516cb7c0e68d5844e60c12b78bd6129d8262cd4b668901534be1713d16b231542a0937dc761881d5c1e7058c230d77176e0f913c5525401ad8c0cf414012f2670bd9af21cbb49116f37791d32ab0798d21a321b141ff4bb683b6eea71f9ee7d1f59699695a", &(0x7f0000000180)=""/9, 0x1, 0x0, 0x2, &(0x7f00000001c0)}) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r7 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r5, r6}}, 0xb7) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000500)=0x80000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd=r2, 0x3e0000000, &(0x7f0000000440)=[{&(0x7f0000000280)="96c403cc0b58b28090f371ff3c6e29e252ded51b024e8633171d92deb2b36a1454112cf1bbe4b040f50171850a9d95c91f27bb936e44e71cb1dd724ac316d0ce652a4a688d7fe42ba7d69c5f16db46b76527a989ffc8e2bcdecdc1a77335c4b2d34a5e5a2858c2809f19e0700c71056c799ab4748aaa9c4d9736aae28ad62bda29ac222b54062e57c44482981a0feaba85d64eff9fa73d6cc91c6240166500a5f259685e6e308704b8c294573ebdba431f671699d8a9f44f3645d7edf02e4150c639bbae97ffd55141671f64f84e2e92d204b0", 0xd3}, {&(0x7f0000000380)="4078ddfb3c39a86cb8211e7acb3739b7b5134df6c72bbaa480998509cf8f481a7995001283346069d5268d6066b7369080be4cc534a663d110069b50581a832a025eb942e1e6659092ff8052da4d92193c9a11105551d9253a0f27d024c944df4adb786b4f78efefbf594277b21d4e9f11daa8f534ec5fc4e47d7e5044f6ecbe8803469df24491d9b97bb386a2618defd66b453debcdfb69ef6f179c688d72bd854d64db3c24887e047d7f2a467f009fafbc", 0xb2}], 0x2, 0x1, 0x0, {0x3, r5}}, 0x7bcb) keyctl$set_reqkey_keyring(0xe, 0x2) 05:20:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) 05:20:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) [ 1376.674613] FAULT_INJECTION: forcing a failure. [ 1376.674613] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.677203] CPU: 0 PID: 8672 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1376.678709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.680562] Call Trace: [ 1376.681150] dump_stack+0x107/0x167 [ 1376.681951] should_fail.cold+0x5/0xa [ 1376.682790] ? create_object.isra.0+0x3a/0xa30 [ 1376.683807] should_failslab+0x5/0x20 [ 1376.684638] kmem_cache_alloc+0x5b/0x310 [ 1376.685541] create_object.isra.0+0x3a/0xa30 [ 1376.686524] kmemleak_alloc_percpu+0xa0/0x100 [ 1376.687540] pcpu_alloc+0x4e2/0x1240 [ 1376.688381] __percpu_counter_init+0x10d/0x2d0 [ 1376.689404] io_uring_alloc_task_context+0xcc/0x6a0 [ 1376.690499] ? io_import_iovec+0x1120/0x1120 [ 1376.691472] ? lock_downgrade+0x6d0/0x6d0 [ 1376.692374] ? do_raw_spin_lock+0x121/0x260 [ 1376.693315] ? rwlock_bug.part.0+0x90/0x90 [ 1376.694254] __io_uring_add_tctx_node+0x2c6/0x520 [ 1376.695315] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.696457] ? alloc_fd+0x2e7/0x670 [ 1376.697262] io_uring_setup+0x1fbb/0x2980 [ 1376.698190] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.699310] ? wait_for_completion_io+0x270/0x270 [ 1376.700406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.701555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.702694] do_syscall_64+0x33/0x40 [ 1376.703518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.704631] RIP: 0033:0x7f6e4b79cb19 [ 1376.705451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.709500] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.711183] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1376.712744] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1376.714306] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1376.715868] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1376.717420] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1376.728168] loop7: detected capacity change from 0 to 2048 [ 1376.730087] FAULT_INJECTION: forcing a failure. [ 1376.730087] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.732574] CPU: 0 PID: 8671 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1376.734079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.735917] Call Trace: [ 1376.736499] dump_stack+0x107/0x167 [ 1376.737303] should_fail.cold+0x5/0xa [ 1376.738144] ? create_object.isra.0+0x3a/0xa30 [ 1376.739152] should_failslab+0x5/0x20 [ 1376.739992] kmem_cache_alloc+0x5b/0x310 [ 1376.740893] create_object.isra.0+0x3a/0xa30 [ 1376.741854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.742972] kmem_cache_alloc+0x159/0x310 [ 1376.743899] jbd2__journal_start+0x190/0x7e0 [ 1376.744880] __ext4_journal_start_sb+0x214/0x390 [ 1376.745933] __ext4_new_inode+0x2e0b/0x5370 [ 1376.746910] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1376.747987] ? dquot_initialize_needed+0x290/0x290 [ 1376.749069] ? selinux_determine_inode_label+0x1ab/0x340 [ 1376.750274] ext4_mkdir+0x32c/0xb10 [ 1376.751103] ? ext4_rmdir+0xf70/0xf70 [ 1376.751971] vfs_mkdir+0x493/0x750 [ 1376.752764] do_mkdirat+0x150/0x2b0 [ 1376.753568] ? user_path_create+0xf0/0xf0 [ 1376.754488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.755651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.756790] do_syscall_64+0x33/0x40 [ 1376.757612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.758740] RIP: 0033:0x7f7ab951ec27 [ 1376.759568] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.763611] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1376.765293] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1376.766857] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1376.768439] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1376.770011] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1376.771592] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1376.860176] EXT4-fs (loop7): invalid first ino: 2875922842 05:21:02 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) 05:21:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 59) 05:21:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 62) 05:21:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x9effffff, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:02 executing program 2: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000480)) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/779], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x76, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000602000000000000254500000008000300", @ANYRES32=0x0, @ANYBLOB="c95b839e287c4e67cf94c9e3cffb1f5beed61c09043a38df4fbac5ce8fbeb6a230c7400547a577dc742af4c98bc4368401d999f61108b505fce58af96d82bbdd6c8b0893519cf2b8c2fb6736cbdbab62cc0eb87992f17198cd46faab14b60437c4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) socket$nl_generic(0x10, 0x3, 0x10) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x81, 0x6, 0x80, 0x0, 0x8000000005, 0x88840, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x16415, 0x8001, 0x5, 0x2, 0x4, 0x3, 0x4, 0x0, 0x1c8cfbb9, 0x0, 0x5}, 0x0, 0xf, r0, 0x8) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x600b01) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) bind$packet(r3, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffb, 0x0, 0x0, 0x2000000, 0x0) 05:21:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) (fail_nth: 1) 05:21:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) 05:21:02 executing program 1: semget(0x1, 0x3, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000140), 0x0, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {0x0, 0x0}, {}, {r6}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xd8}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}], 0xd8, "c3b057e37f7fda"}) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000080)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x14, 0x3f, @buffer={0x300, 0x0, 0x0}, &(0x7f00000002c0)="00dab500770200912abebf36c991c6bf5699e500", 0x0, 0x5, 0x0, 0x5, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1}, 0x3) openat(r3, &(0x7f0000000000)='./file1\x00', 0x4020c1, 0x1) [ 1392.906585] FAULT_INJECTION: forcing a failure. [ 1392.906585] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.909032] CPU: 1 PID: 8704 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1392.910464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.912238] Call Trace: [ 1392.912799] dump_stack+0x107/0x167 [ 1392.913577] should_fail.cold+0x5/0xa [ 1392.914381] ? kvmalloc_node+0x119/0x170 [ 1392.915237] should_failslab+0x5/0x20 [ 1392.916085] __kmalloc_node+0x76/0x420 [ 1392.916914] kvmalloc_node+0x119/0x170 [ 1392.917739] seq_read_iter+0x9d6/0x12b0 [ 1392.918599] seq_read+0x3dd/0x5b0 [ 1392.919353] ? seq_read_iter+0x12b0/0x12b0 [ 1392.920271] ? find_held_lock+0x2c/0x110 [ 1392.921155] ? fsnotify_perm.part.0+0x22d/0x620 [ 1392.922145] ? seq_read_iter+0x12b0/0x12b0 [ 1392.923038] proc_reg_read+0x22a/0x300 [ 1392.923887] ? proc_reg_write+0x300/0x300 [ 1392.924766] vfs_read+0x228/0x620 [ 1392.925505] __x64_sys_pread64+0x201/0x260 [ 1392.925681] FAULT_INJECTION: forcing a failure. [ 1392.925681] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.926388] ? ksys_pread64+0x1b0/0x1b0 [ 1392.929628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.930733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.931851] do_syscall_64+0x33/0x40 [ 1392.932643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.933728] RIP: 0033:0x7fbb43292b19 [ 1392.934513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.938417] RSP: 002b:00007fbb40808188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1392.940061] RAX: ffffffffffffffda RBX: 00007fbb433a5f60 RCX: 00007fbb43292b19 [ 1392.941568] RDX: 0000000020001be3 RSI: 0000000020001100 RDI: 0000000000000003 [ 1392.943078] RBP: 00007fbb408081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.944615] R10: 0000000000f0ff1f R11: 0000000000000246 R12: 0000000000000001 [ 1392.946138] R13: 00007ffebaf2af5f R14: 00007fbb40808300 R15: 0000000000022000 [ 1392.947718] CPU: 0 PID: 8701 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1392.949200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.951000] Call Trace: [ 1392.951577] dump_stack+0x107/0x167 [ 1392.952361] should_fail.cold+0x5/0xa [ 1392.953181] ? create_object.isra.0+0x3a/0xa30 [ 1392.954167] should_failslab+0x5/0x20 [ 1392.954991] kmem_cache_alloc+0x5b/0x310 [ 1392.955880] create_object.isra.0+0x3a/0xa30 [ 1392.956840] kmemleak_alloc_percpu+0xa0/0x100 [ 1392.957622] loop7: detected capacity change from 0 to 2048 [ 1392.957816] pcpu_alloc+0x4e2/0x1240 [ 1392.959702] FAULT_INJECTION: forcing a failure. [ 1392.959702] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.962137] __percpu_counter_init+0x10d/0x2d0 [ 1392.962161] io_uring_alloc_task_context+0xcc/0x6a0 [ 1392.962181] ? io_import_iovec+0x1120/0x1120 [ 1392.962199] ? lock_downgrade+0x6d0/0x6d0 [ 1392.962220] ? do_raw_spin_lock+0x121/0x260 [ 1392.962236] ? rwlock_bug.part.0+0x90/0x90 [ 1392.968123] __io_uring_add_tctx_node+0x2c6/0x520 [ 1392.969165] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1392.970301] ? alloc_fd+0x2e7/0x670 [ 1392.971104] io_uring_setup+0x1fbb/0x2980 [ 1392.972017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1392.973103] ? wait_for_completion_io+0x270/0x270 [ 1392.974178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.975319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.976442] do_syscall_64+0x33/0x40 [ 1392.977250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.978366] RIP: 0033:0x7f6e4b79cb19 [ 1392.979169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.983156] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1392.984814] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1392.986353] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1392.987918] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1392.989466] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1392.991019] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1392.992600] CPU: 1 PID: 8690 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1392.994053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.995830] Call Trace: [ 1392.996392] dump_stack+0x107/0x167 [ 1392.997168] should_fail.cold+0x5/0xa [ 1392.997977] should_failslab+0x5/0x20 [ 1392.998657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1392.998778] __kmalloc_track_caller+0x79/0x370 [ 1392.998806] ? sidtab_sid2str_get+0x17e/0x720 [ 1393.002513] kmemdup+0x23/0x50 [ 1393.003198] sidtab_sid2str_get+0x17e/0x720 [ 1393.004143] sidtab_entry_to_string+0x33/0x110 [ 1393.005115] security_sid_to_context_core+0x33c/0x5d0 [ 1393.006221] selinux_inode_init_security+0x4ab/0x690 [ 1393.007309] ? selinux_dentry_init_security+0x280/0x280 [ 1393.008453] ? get_cached_acl_rcu+0x120/0x120 [ 1393.009418] ? find_held_lock+0x2c/0x110 [ 1393.010293] security_inode_init_security+0x151/0x360 [ 1393.011415] ? ext4_init_acl+0x310/0x310 [ 1393.012283] ? inode_free_by_rcu+0x20/0x20 [ 1393.013200] ? chksum_update+0x4c/0xb0 [ 1393.014035] __ext4_new_inode+0x386e/0x5370 [ 1393.014982] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1393.016045] ? dquot_initialize_needed+0x290/0x290 [ 1393.017094] ? selinux_determine_inode_label+0x1ab/0x340 [ 1393.018255] ext4_mkdir+0x32c/0xb10 [ 1393.019038] ? ext4_rmdir+0xf70/0xf70 [ 1393.019887] vfs_mkdir+0x493/0x750 [ 1393.020650] do_mkdirat+0x150/0x2b0 [ 1393.021425] ? user_path_create+0xf0/0xf0 [ 1393.022310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.023453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.024550] do_syscall_64+0x33/0x40 [ 1393.025344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.026430] RIP: 0033:0x7f7ab951ec27 [ 1393.027215] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1393.031120] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1393.032751] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1393.034267] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1393.035821] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1393.037619] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1393.039122] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:21:02 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1393.049273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8709 comm=syz-executor.2 05:21:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xf0ffffff, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) (fail_nth: 2) 05:21:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1393.110669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8709 comm=syz-executor.2 05:21:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 63) [ 1393.142786] FAULT_INJECTION: forcing a failure. [ 1393.142786] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.145526] CPU: 0 PID: 8718 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1393.146995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1393.148785] Call Trace: [ 1393.149349] dump_stack+0x107/0x167 [ 1393.150129] should_fail.cold+0x5/0xa [ 1393.150942] ? create_object.isra.0+0x3a/0xa30 [ 1393.151939] should_failslab+0x5/0x20 [ 1393.152747] kmem_cache_alloc+0x5b/0x310 [ 1393.153626] create_object.isra.0+0x3a/0xa30 [ 1393.154567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1393.155670] __kmalloc_node+0x1ae/0x420 [ 1393.156529] kvmalloc_node+0x119/0x170 [ 1393.157368] seq_read_iter+0x9d6/0x12b0 [ 1393.158239] seq_read+0x3dd/0x5b0 [ 1393.158992] ? seq_read_iter+0x12b0/0x12b0 [ 1393.159902] ? find_held_lock+0x2c/0x110 [ 1393.160786] ? fsnotify_perm.part.0+0x22d/0x620 [ 1393.161789] ? seq_read_iter+0x12b0/0x12b0 [ 1393.162693] proc_reg_read+0x22a/0x300 [ 1393.163539] ? proc_reg_write+0x300/0x300 [ 1393.164428] vfs_read+0x228/0x620 [ 1393.165178] __x64_sys_pread64+0x201/0x260 [ 1393.166077] ? ksys_pread64+0x1b0/0x1b0 [ 1393.166936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.168069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.169171] do_syscall_64+0x33/0x40 [ 1393.169962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.171076] RIP: 0033:0x7fbb43292b19 [ 1393.171872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1393.175835] RSP: 002b:00007fbb40808188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1393.177459] RAX: ffffffffffffffda RBX: 00007fbb433a5f60 RCX: 00007fbb43292b19 [ 1393.178977] RDX: 0000000020001be3 RSI: 0000000020001100 RDI: 0000000000000003 [ 1393.180526] RBP: 00007fbb408081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.182035] R10: 0000000000f0ff1f R11: 0000000000000246 R12: 0000000000000001 [ 1393.183577] R13: 00007ffebaf2af5f R14: 00007fbb40808300 R15: 0000000000022000 05:21:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="2000000080000000060000006a0000000f008100000000000100000001000000004000000040000020000002e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6a6f5543bf96ca39b9a5f1d39eae1aea4c75726e616c5f636865636b73040482359fadc9a8d13e9a756d2c6461782c00"]) 05:21:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xfcffffff, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1393.227020] loop7: detected capacity change from 0 to 2048 [ 1393.229191] FAULT_INJECTION: forcing a failure. [ 1393.229191] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.231609] CPU: 0 PID: 8725 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1393.233078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1393.234870] Call Trace: [ 1393.235447] dump_stack+0x107/0x167 [ 1393.236231] should_fail.cold+0x5/0xa [ 1393.237066] ? create_object.isra.0+0x3a/0xa30 [ 1393.238053] should_failslab+0x5/0x20 [ 1393.238886] kmem_cache_alloc+0x5b/0x310 [ 1393.239762] ? sidtab_sid2str_get+0x65/0x720 [ 1393.240702] create_object.isra.0+0x3a/0xa30 [ 1393.241648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1393.242712] __kmalloc_track_caller+0x177/0x370 [ 1393.243715] ? sidtab_sid2str_get+0x17e/0x720 [ 1393.244667] kmemdup+0x23/0x50 [ 1393.245368] sidtab_sid2str_get+0x17e/0x720 [ 1393.246278] sidtab_entry_to_string+0x33/0x110 [ 1393.247264] security_sid_to_context_core+0x33c/0x5d0 [ 1393.248363] selinux_inode_init_security+0x4ab/0x690 [ 1393.249446] ? selinux_dentry_init_security+0x280/0x280 [ 1393.250622] ? get_cached_acl_rcu+0x120/0x120 [ 1393.251582] ? find_held_lock+0x2c/0x110 [ 1393.252444] security_inode_init_security+0x151/0x360 [ 1393.253550] ? ext4_init_acl+0x310/0x310 [ 1393.254415] ? inode_free_by_rcu+0x20/0x20 [ 1393.255336] ? chksum_update+0x4c/0xb0 [ 1393.256182] __ext4_new_inode+0x386e/0x5370 [ 1393.257127] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1393.258141] ? dquot_initialize_needed+0x290/0x290 [ 1393.259173] ? selinux_determine_inode_label+0x1ab/0x340 [ 1393.260335] ext4_mkdir+0x32c/0xb10 [ 1393.261116] ? ext4_rmdir+0xf70/0xf70 [ 1393.261937] vfs_mkdir+0x493/0x750 [ 1393.262684] do_mkdirat+0x150/0x2b0 [ 1393.263468] ? user_path_create+0xf0/0xf0 [ 1393.264349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.265465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.266637] do_syscall_64+0x33/0x40 [ 1393.267631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.268977] RIP: 0033:0x7f7ab951ec27 [ 1393.269965] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1393.274772] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1393.276792] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1393.278678] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1393.280541] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1393.282405] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1393.284254] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1393.300898] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1397.051025] wlan1: Trigger new scan to find an IBSS to join [ 1399.994901] wlan1: Trigger new scan to find an IBSS to join [ 1400.757970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.761477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1406.649528] FAULT_INJECTION: forcing a failure. [ 1406.649528] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.650977] CPU: 0 PID: 8742 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1406.651776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.652743] Call Trace: [ 1406.653052] dump_stack+0x107/0x167 [ 1406.653472] should_fail.cold+0x5/0xa [ 1406.653915] ? create_object.isra.0+0x3a/0xa30 [ 1406.654441] should_failslab+0x5/0x20 [ 1406.654888] kmem_cache_alloc+0x5b/0x310 [ 1406.655360] create_object.isra.0+0x3a/0xa30 [ 1406.655904] kmemleak_alloc_percpu+0xa0/0x100 [ 1406.656425] pcpu_alloc+0x4e2/0x1240 [ 1406.656866] __percpu_counter_init+0x10d/0x2d0 [ 1406.657396] io_uring_alloc_task_context+0xcc/0x6a0 [ 1406.657481] FAULT_INJECTION: forcing a failure. [ 1406.657481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.657969] ? io_import_iovec+0x1120/0x1120 [ 1406.657983] ? lock_downgrade+0x6d0/0x6d0 [ 1406.658002] ? do_raw_spin_lock+0x121/0x260 [ 1406.661948] ? rwlock_bug.part.0+0x90/0x90 [ 1406.662454] __io_uring_add_tctx_node+0x2c6/0x520 [ 1406.663029] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1406.663669] ? alloc_fd+0x2e7/0x670 [ 1406.664104] io_uring_setup+0x1fbb/0x2980 [ 1406.664597] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1406.665200] ? wait_for_completion_io+0x270/0x270 [ 1406.665785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.666409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.667020] do_syscall_64+0x33/0x40 [ 1406.667475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.668098] RIP: 0033:0x7f6e4b79cb19 [ 1406.668541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.670736] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1406.671664] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1406.672510] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1406.673359] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1406.674205] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1406.675054] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1406.675952] CPU: 1 PID: 8738 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1406.677423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.679169] Call Trace: [ 1406.679744] dump_stack+0x107/0x167 [ 1406.680514] should_fail.cold+0x5/0xa 05:21:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 64) 05:21:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) (fail_nth: 3) 05:21:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xfffff000, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 60) 05:21:15 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:21:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40904) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[], 0x50c}, 0x1, 0x0, 0x0, 0x975afa5b6c0d9acb}, 0x404c0c1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x200) ftruncate(r0, 0x1000003) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x7ffffc, 0x61b80e33, 0x80009}) r2 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000540)="7310b48ce8e32f9181cbcf4de4e648c9", 0x10) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x37c9, 0x0, 0xffffffffffffff2e], 0x1, &(0x7f0000000240)=[{}], 0x0, [{}]}, 0x88) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000600)="e7e5c6a8b08ff8912ce0d098c6af4130", 0x10) 05:21:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000012a00)) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U+'}, 0x16, 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r0}], {0x4, 0x4}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x3) 05:21:15 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) [ 1406.681556] _copy_to_user+0x2e/0x180 [ 1406.682474] simple_read_from_buffer+0xcc/0x160 [ 1406.683446] proc_fail_nth_read+0x198/0x230 [ 1406.684376] ? proc_sessionid_read+0x230/0x230 [ 1406.685345] ? security_file_permission+0xb1/0xe0 [ 1406.686373] ? proc_sessionid_read+0x230/0x230 [ 1406.687334] vfs_read+0x228/0x620 [ 1406.688076] ksys_read+0x12d/0x260 [ 1406.688829] ? vfs_write+0xb10/0xb10 [ 1406.689630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.690732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.691832] do_syscall_64+0x33/0x40 [ 1406.692615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.693690] RIP: 0033:0x7fbb4324569c [ 1406.694480] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1406.698412] RSP: 002b:00007fbb40808170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1406.700051] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb4324569c [ 1406.701599] RDX: 000000000000000f RSI: 00007fbb408081e0 RDI: 0000000000000004 [ 1406.703126] RBP: 00007fbb408081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.704698] R10: 0000000000f0ff1f R11: 0000000000000246 R12: 0000000000000001 [ 1406.706209] R13: 00007ffebaf2af5f R14: 00007fbb40808300 R15: 0000000000022000 [ 1406.720995] loop7: detected capacity change from 0 to 2048 05:21:16 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 61) [ 1406.723237] FAULT_INJECTION: forcing a failure. [ 1406.723237] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.724857] CPU: 0 PID: 8751 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1406.725648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.726624] Call Trace: [ 1406.726939] dump_stack+0x107/0x167 [ 1406.727361] should_fail.cold+0x5/0xa [ 1406.727824] ? ext4_find_extent+0xa77/0xd70 [ 1406.728322] should_failslab+0x5/0x20 [ 1406.728762] __kmalloc+0x72/0x390 [ 1406.729173] ? is_dynamic_key+0x1e0/0x1e0 [ 1406.729658] ext4_find_extent+0xa77/0xd70 [ 1406.730138] ? __lock_acquire+0x1657/0x5b00 [ 1406.730635] ext4_ext_map_blocks+0x1c8/0x5880 [ 1406.731168] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1406.731790] ? SOFTIRQ_verbose+0x10/0x10 [ 1406.732263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1406.732880] ? SOFTIRQ_verbose+0x10/0x10 [ 1406.733353] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1406.733967] ? ext4_ext_release+0x10/0x10 [ 1406.734452] ? lock_release+0x680/0x680 [ 1406.734917] ? ext4_es_lookup_extent+0x485/0xa80 [ 1406.735479] ? lock_downgrade+0x6d0/0x6d0 [ 1406.735516] loop2: detected capacity change from 0 to 69632 [ 1406.735974] ? down_read+0x10f/0x430 [ 1406.736018] ? down_write+0x160/0x160 [ 1406.738139] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1406.738683] ext4_map_blocks+0x8e1/0x1910 [ 1406.739173] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1406.739709] ? __brelse+0x84/0xa0 [ 1406.740119] ? __ext4_new_inode+0x148/0x5370 [ 1406.740631] ext4_append+0x1b8/0x4e0 [ 1406.741063] ? ext4_move_extents+0x3060/0x3060 [ 1406.741592] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1406.742155] ext4_init_new_dir+0x25e/0x4d0 [ 1406.742646] ? ext4_init_dot_dotdot+0x610/0x610 [ 1406.743191] ext4_mkdir+0x3c1/0xb10 [ 1406.743638] ? ext4_rmdir+0xf70/0xf70 [ 1406.744089] vfs_mkdir+0x493/0x750 [ 1406.744500] do_mkdirat+0x150/0x2b0 [ 1406.744920] ? user_path_create+0xf0/0xf0 [ 1406.745402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.746007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.746614] do_syscall_64+0x33/0x40 [ 1406.747050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.747660] RIP: 0033:0x7f7ab951ec27 [ 1406.748092] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.750213] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1406.751098] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1406.751953] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1406.752778] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1406.753602] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1406.754431] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1406.790693] FAULT_INJECTION: forcing a failure. [ 1406.790693] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.793179] CPU: 1 PID: 8759 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1406.794676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.796462] Call Trace: [ 1406.797058] dump_stack+0x107/0x167 [ 1406.797871] should_fail.cold+0x5/0xa [ 1406.798702] ? create_object.isra.0+0x3a/0xa30 [ 1406.799701] should_failslab+0x5/0x20 [ 1406.800511] kmem_cache_alloc+0x5b/0x310 [ 1406.801399] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1406.802538] create_object.isra.0+0x3a/0xa30 [ 1406.803490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1406.804609] __kmalloc+0x16e/0x390 [ 1406.805379] io_wq_create+0xeb/0xc00 [ 1406.806201] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1406.807295] ? io_import_iovec+0x1120/0x1120 [ 1406.808258] ? io_apoll_task_func+0x2d0/0x2d0 [ 1406.809240] ? __io_req_find_next+0x300/0x300 [ 1406.810215] ? do_raw_spin_lock+0x121/0x260 [ 1406.811140] ? rwlock_bug.part.0+0x90/0x90 [ 1406.812071] __io_uring_add_tctx_node+0x2c6/0x520 [ 1406.813116] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1406.814440] ? alloc_fd+0x2e7/0x670 [ 1406.815237] io_uring_setup+0x1fbb/0x2980 [ 1406.816156] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1406.817262] ? wait_for_completion_io+0x270/0x270 [ 1406.818323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.819447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.820595] do_syscall_64+0x33/0x40 [ 1406.821392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.822498] RIP: 0033:0x7f6e4b79cb19 [ 1406.823311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.827307] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1406.828981] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1406.830549] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1406.832087] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1406.833627] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1406.835142] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1406.840442] isofs_fill_super: get root inode failed 05:21:16 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:21:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 65) 05:21:16 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffa) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) 05:21:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xffffff7f, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1406.860219] loop2: detected capacity change from 0 to 69632 05:21:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1406.872638] isofs_fill_super: get root inode failed 05:21:16 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 62) [ 1406.913195] loop7: detected capacity change from 0 to 2048 [ 1406.918429] FAULT_INJECTION: forcing a failure. [ 1406.918429] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.920898] CPU: 1 PID: 8773 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1406.922348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.924122] Call Trace: [ 1406.924703] dump_stack+0x107/0x167 [ 1406.925478] should_fail.cold+0x5/0xa [ 1406.926307] ? create_object.isra.0+0x3a/0xa30 [ 1406.927280] should_failslab+0x5/0x20 [ 1406.928120] kmem_cache_alloc+0x5b/0x310 [ 1406.928994] ? lock_acquire+0x197/0x470 [ 1406.929849] create_object.isra.0+0x3a/0xa30 [ 1406.930782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1406.931894] __kmalloc+0x16e/0x390 [ 1406.932678] ext4_find_extent+0xa77/0xd70 [ 1406.933581] ? __lock_acquire+0x1657/0x5b00 [ 1406.934490] ext4_ext_map_blocks+0x1c8/0x5880 [ 1406.935468] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1406.936610] ? SOFTIRQ_verbose+0x10/0x10 [ 1406.937478] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1406.938593] ? SOFTIRQ_verbose+0x10/0x10 [ 1406.939466] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1406.940601] ? ext4_ext_release+0x10/0x10 [ 1406.941489] ? lock_release+0x680/0x680 [ 1406.942356] ? ext4_es_lookup_extent+0x485/0xa80 [ 1406.943375] ? lock_downgrade+0x6d0/0x6d0 [ 1406.943839] FAULT_INJECTION: forcing a failure. [ 1406.943839] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.944290] ? down_read+0x10f/0x430 [ 1406.944310] ? down_write+0x160/0x160 [ 1406.947228] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1406.948295] ext4_map_blocks+0x8e1/0x1910 [ 1406.949223] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1406.950207] ? __brelse+0x84/0xa0 [ 1406.950981] ? __ext4_new_inode+0x148/0x5370 [ 1406.951989] ext4_append+0x1b8/0x4e0 [ 1406.952816] ? ext4_move_extents+0x3060/0x3060 [ 1406.953819] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1406.954891] ext4_init_new_dir+0x25e/0x4d0 [ 1406.955852] ? ext4_init_dot_dotdot+0x610/0x610 [ 1406.956894] ext4_mkdir+0x3c1/0xb10 [ 1406.957707] ? ext4_rmdir+0xf70/0xf70 [ 1406.958564] vfs_mkdir+0x493/0x750 [ 1406.959345] do_mkdirat+0x150/0x2b0 [ 1406.960176] ? user_path_create+0xf0/0xf0 [ 1406.961120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.962293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.963426] do_syscall_64+0x33/0x40 [ 1406.964245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.965353] RIP: 0033:0x7f7ab951ec27 [ 1406.966156] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.970150] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1406.971797] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1406.973341] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1406.974886] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1406.976434] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1406.977973] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1406.979756] CPU: 0 PID: 8781 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1406.980596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.981606] Call Trace: [ 1406.981929] dump_stack+0x107/0x167 [ 1406.982369] should_fail.cold+0x5/0xa [ 1406.982822] ? create_object.isra.0+0x3a/0xa30 05:21:16 executing program 2: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) getdents64(r4, &(0x7f0000000300)=""/231, 0xe7) openat(r4, &(0x7f0000000000)='./file0\x00', 0x201, 0x110) [ 1406.983367] should_failslab+0x5/0x20 [ 1406.984077] kmem_cache_alloc+0x5b/0x310 [ 1406.984560] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1406.985174] create_object.isra.0+0x3a/0xa30 [ 1406.985695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1406.986304] __kmalloc+0x16e/0x390 [ 1406.986731] io_wq_create+0xeb/0xc00 [ 1406.987182] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1406.987801] ? io_import_iovec+0x1120/0x1120 [ 1406.988331] ? io_apoll_task_func+0x2d0/0x2d0 [ 1406.988865] ? __io_req_find_next+0x300/0x300 [ 1406.989403] ? do_raw_spin_lock+0x121/0x260 [ 1406.989915] ? rwlock_bug.part.0+0x90/0x90 [ 1406.990424] __io_uring_add_tctx_node+0x2c6/0x520 [ 1406.990997] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1406.991634] ? alloc_fd+0x2e7/0x670 [ 1406.992064] io_uring_setup+0x1fbb/0x2980 [ 1406.992556] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1406.993156] ? wait_for_completion_io+0x270/0x270 [ 1406.993740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.994360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.994970] do_syscall_64+0x33/0x40 [ 1406.995408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.996035] RIP: 0033:0x7f6e4b79cb19 [ 1406.996341] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1406.996473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.996489] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1407.000845] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1407.001689] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1407.002535] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1407.003380] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1407.004236] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:21:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xffffff9e, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x5, 0x6, @local}, 0x10) bind$packet(r1, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x3f, 0x6, @local}, 0x14) sendmmsg$sock(r0, &(0x7f0000005e00)=[{{&(0x7f0000001600)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x80, 0x0}}], 0x1, 0x0) 05:21:16 executing program 4: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000080)="01b6aebb35422854513481995fbd5d1cb26773e22de5f01c3ae0719eb156c0056aee7b9a31c81967cc0f", 0x2a}, {&(0x7f00000000c0)="ef54bc0690797c5c4ec6afabb9d8029c94d3e0a5abec2372a2e15784ce39e12c978b99a6346fcf7b356d4ce8f61ce11a3ad04f2510441f0bbe7514a6e48cbd29ef449c4df5f13d6095258df7204dd8614231f069facbbd5896ffe6e4c6e3dbbad2d9bca99f681f4e8a12080e79a65a068fc03d43c5b9b10b36d93a6fb7097f84557759228531302902c309fb3b20592fb7f1d7", 0x93}, {&(0x7f0000000180)="464fe3b050ab664ab88c73fe524ae221fb2744f1527c29c4526f7c40e2b38fb0c0f75940e725568b8698b3b703359313a5dca6fec10d4aa9731ac42ae4bdaa4222cb7c5252bb712b21fefea440cf1d1e0e48ab709303b4d57e5a5776f7a84e0da29eb41d4a", 0x65}, {&(0x7f0000000200)="b52a8574b330e90223ba31fed58ca4fdddfba2781170bac3b8f51c31767a51261b1ac8a3c24afc80a3a806e98265e42f894017a528d76115cc0ac3b907a2c6eb4760fc09d43cb8540172735de011f7018addd5", 0x53}, {&(0x7f0000000280)="dbcc6e83065c792a35577b1ad5dfdde05b236af275b6b2217b400c9bb5cae4b3852adfa51b8fe5d51be4a1ba225eb22de314e24f8e61a896650ff0c5f253cbe8430ae1b76161adad139bc2af5cf3dd30d96cd43a5691d9423ed863b5219fe0aa636e95ace5c5c0d4a7852f55440ff7614873386085664760e43c859e6352cb6dda61c97a3425eee247a04d22e3bc1f8eebce73ea1b2087e2b8e029665cd31b156da2e84ccfe7effd2fd8c47d", 0xac}, {&(0x7f0000002100)="8860f37bdecac0c682c236e5d0759758ccb789b0cb3653f30d3617bb9e5ad0bc07b326306abf9bd6cbb588c8de0bf3a479f8b7b5e6d15b3ab6e77e8f479e33578f4b4342b2fbdff3e813649d9e210273c2b75285c98bda29f04fec947a31928dc7265729bd4ab507330238f310eeb68588cd7e950cd3cc3b815b5c6ca4264e71192255a615126777dbf1fcffdc8a7184c271021fa1c4a3088d232339df098fa0c0d9806b77dcef58cdfaecfc04e04d5cd8fb97c46a393d769f251a92358ede48801283bc20beedd33a7b018cbf168253bc1afa7f6e3ac0d6ff6963c0da16bd75519e0b8acb3e3e202902a0cf0513ba4f6df3311d569b6bcced2d716c9c64ae1dfe3768c92c3e226319c2824740bd5928a43920ead51eb2e51c0d48ce998878ccecdf5c6657c9f8613db6a93280c83e8e664ad5f1adbc125748f6d786c6824cc2c29706ff6156655fef8c65d9e6bd95dca69dede2f7cf46e7743bc98f2313d4325dc5db0db6c86066cded2ce837f24302478adf4d45eec130595a1e53bbb3b000820970279cf5563220b0e59d84494f25d32eef5f69ce190a3dc7395dfbe55eae3c16727593fea5b4ff8fad000e66403c7b8d470472d356198e257607d2e4be2eb8fb66893a21ec5ff1e032b547007391ceaaf128d7afa3c3ee1e1dbbae1ec9af36d0fd4a0dd0e3563c0e5a28b22ee1a5b85c80c2ec2cebeb34c4c4502cf9f1ea28d9c76c74e774ae0bc590268d3c4458806ccd15aff1fff70b9ef2d88c50b4ba71187181703b6612ca5893e732eb54e5a74ea9d79a7cb7daa8de04cc153ce7cc7935bdbf0ccd43f50f281f3de2999e6230647f53cf4945628fc750e34f5bd31e3c9919cbadb796c8a9ab219904ba6ba1e9e776a7440abb6d9ce5a9ca4208af4ab56ebb490ce1c58de5e122fc5fae5829f839bf57f8f7300c199e402c3bb8a1df711670a15b49c2011ea265d87efe5921668f9c3c006d279504ec242732a0f30762d3b6054f27da891cc71886f6886947fb3691725d065c6dbb4e4cd6dc95728cb32351063a3f277fb5eb1ef94620a28c2039f09f0fb0d8707a5f48393241cea27e39c8f79fdb85b9e620c1c8317a55c9e6c09e32a5b25e13d42557c6b56b85c46a0328edd49cc53a720d2bb1ef0ea371d56b97e0bc3011657c2d196dfeef60a584b3d97516d89ce1dc49ae0ae0cf8c54c0aa53135a789931228195bca190b79c99992eac91f1ad5f25110f91a0a88477575d83eeea5f9cb2d5f279ba227c865880464ecd703c6bf92446172993809616948a5f68061f380d83bd67e97eab711bc1ff3921ad5d5720987f7726ead194487c5ff96771a130373ce83188eb5330b6e6419d520461d3f48230d45c1975a33b914220fcf3115733e33a1ad43aa688ec516c5e2d68b3387d1ea0ebd1202cbb45baa283bad5534a6447ef4819dea4cfdfa393ae839db465d800275f569f727d4a2fc63e3acaf5f514de5c2893adefa80ec54c4ad85392124ff406db9fc628fc536f5c2c009d7860b4588fc9d9d0b8bed941d3b6a4b19f874d74d656cb9cdf9519020476c5a202c4d1a6a099da03d1bab52e8717c8fbce26a5f6b2a822f8e6e9370866aedd9e91e8b8fe17ea9ce15563f58fc9def42a5172670b69daaca676622ea62a1ee849281614d728132d667a4d0f4b52496b354a144836a3fa4a831d0da1804152096af3c0e6e7e962c781bdefd1e1962ba61e086ad9e25d81354257f4199e5ce8e15dc0cf70da2cfb1764c9c058a94c8b2ddeb99e3d150637798392d0812510c3572599c0521c5ecc2689c10b2d5c2b44de0398556807acc7c61837c5356f3fd0aff0c54969c5244f92f7937ae01ee6cc8d61a57e11dbf7e31e1c1737a34556bfa7deb000cd9e40ddb73439b4b076c0636640c4f8159f77880ffa7244df133172c555891001adbc10890d6a811353cafb15a127bcaaf16769cb54599ba075ccbabc7a59e2fbca4e785d8e7dab543b3154837a63cb5ac529c8d9aa85c6396127a99b243cb7ee9424d7d89c061be7e17f9f34c1e60af35e8532f3fdf2cf0dba9e65a4e3cf7b37c9cb5f9cdb3ab9a73baeede4fa1753e5f8f77b03700535472f65841506bbba40cc5b18a4b2c9b07460ec2a591ec8b9f3b7f1568e98fbdf55e308b5924c16c721fa7defb625f4ae92805f3171b57cb958d29485b7f81e09888c5692b68033cf91503834b31948eeac770d91d510c4bacc9a9a8069079acf0c223ee2bf9fb9d9624cf6cb1ec5a503880fa383285b172d1e6d8912fde3f07f6f53fa7b38ba8a293f05e79167b3c952e773c1b5107aba6210280c13affc8bb5b1da9104c60a973c9a071afb17bbfd6761edbfa40d4f8da9d702a6ed3f868ad11bb06732f1fbda1824ea8e039992695f080d17cb5b3aab8a2bc4ebf073b731201eeb5745413786b7b094f86035c5b7a8fd95d16660730a7571ea71ee5882c471c20de98c8c75e2cf51fde2935d58d4fbc4100e59ae677823c6a9a608be1a15f8569f7ed5738235dd911ccb1fbc09e60b2aa72d74ebdc615ffdc5f5c772d332962ed3d2689c647562a142345b0774e8f0eb1eb7fdb1beeb0db1efd26e770b0d628d095feeee95df3594f895b1e432c7f37859ae6cc0793df7ee6884704eb096262999d2faa8c11b6a4a7d3ab09bbfef1ddb9a98d97ed10ff330eccdaea99f79fec1274370a5d5c3242734789f0b43766bd397a61f666b89a91791ea38172ef2a0acb7ac6783be4f5b4717df5e22783b3b48db13ce72b5f3f0b79b739dfd0bd648723a7fdd21e44aac37e8d574fdde394573e8e76ce669f330a918fec3b58f61581dc94f8ee1ba560540c063cf7cd52e18adf4626c06ef403d957ac6bc3ee21f0d5cebbaa97eea1e66b7eb807ea4c535fcd9d53eb3975a8c283c174ebe1cafd8f3c5c80dd158ba589928c92491a2ad8dd9d1dcc0b763b3b85b5a99bd37cc0da92f1f51a3cd036d792bd90d08762141bb82c27a33b90db74fd3ed864e2449df111dd6810e40b8d7405ff26b573a95435e28a789ca43af257b743cde02f1a8bac978a9322d4e5ab2a0a144682180c8f18d2676cfb919806a9090bfc1b4e1a6a512828e127a66be2044ecf60e5c09febc317baf4f3bd5c39aec6ec8d129dd4112f7aa8e42564c89fcde33f69f2cda51c65ebebb33ef9057dc475ad544fc84708993eb1f04edad777da68d37c313157fb2f6c246dd6d5dde6e642d07e6ada25507a749c814265368e1086427237e5f4ea841271a74b715e32974492ba3dbf336d6e554e8311a80ea1d113dbd34778484d458d689972f6e44622fca839ab77d14661e50e7bb694d2c468309583d2c1b90a0086e402daa51347b9040d47f16c69136391122414fa73c4295e0efb8a50b2d2feb3bc403f5f91d1a363d24e733ca0ec8d98dfb7af267a825871cb7713a096690abb496612fde0d45bf529117d7998cd6541b2fd6bda8ae609f2488557399136e998bdc3d7e3bdffb1732547a7eabb994e35b14824ae497de0536ec0381c59c3130d345261bd51d98ef0e20c34ed579cbc520e5ffa495661a006f8f4ee307c8e7f56782c62454190127be1f22fc2b447252a279f345f11c2dc9ab45e744cf1b9042ef25dce398085cd2bfff9ac17b6b25f0b3619a51d9fa2ed6ab320018d9d16f1b593cd09d01eadd4dbb55bbf82c13e52d759fd92610289b68708ae66a3353437fcc444928703c6c8319841ff96bfdb0ae655afad6283c52e2482b55fdba8cc63312e760f5e701c96bd2f73e77c1bb0623b004d1d44eb476b45f074978d6779ba1ab69bc31551b6080e2b675a9061610c0ca06392e324c8770995f998ef8da48591695638fcb5ffe348daad779bd79248b6f0cea7e37131f5a099eacb413ee18bd8ae4dfc6f90912534115eff52a8065a9da0672757688be3a3377424416c707f23bef9e1824fff6abc031432f89adda698379fd2ce2745ded1dcc7c2bfbe875ed02f2b4c8088b089c927d6fc486e1133bd1327b296c95e690c85f2c751342c9e3ace7512ba9b54189acf02e858962655b3b5e2a7e157f906b857f69d077df09a873530d37047f8cc86f563789bf3afa8c47e16b9c915245d1ab3c027e48133fd8c9da120fba52b19b0eec06493491721a1c4302e1df04130629076fc2fb9613dcad48333f19b0e44037fabec68d3d96eb8967d3095d9b9e6ad920e29039a61f7e00f8b08b62aedcc7451875601f2f13597b58e50acc0ef5de244550e3a7ed6460507302e49b52495d7ff0d276c2dbc8a5b804d6466f1e912f0bb24ff85bbb2b1a403b355182bb4710cc4a4edbd0ed1b232111ad46c7859f1a3315a4dd42f8466646c1f7380cdd8c9041974a27e58fcbd101853c985fe7903f8896ff3560b712e780f74d51470584f5b18cad01efdf08eac9ac8be691c4b6b018fad3364e7057ccdd01827e9716a64e8ba87c9415ea32ac216798fe533249380d579a06a5507ce9b124c404a5ed2404d146fe7de96d04f33a632ceb0ae8295dce0e04df1aa4accb57ece103ccbd52ce5ce4ff9cd6e1c3897c866f4468b41854ca1e65f119d0bc6230d3904346ca1fb8eef91a4e8eea5484d9faced9c8b59025f29b1630ece5622641dc4dcc0b9579c7d662bc129ead111565224850981106a964c869a8ee5e7d730f75362b62d09f73e5805b550f6b7bf620796a689d0a2ce17065d847b5184732b884a178a6c5ba2cc50b8e61566784b672303f2e4b2c38952eee4c5e15fe4c56b5e14c36a2713bd254778b2ab5c661ecedf26dc4d9053fb86cf3d0c4c8f6d143d968c4b0e6876f76e15c2a5de328dada45da2e65f3f504c31b07d4777c8ad7359fd62fa18a5bcedcb67c1b20e8b98c4d1b2d4d30998c7eed63fdbc12c0b351b0db8b8fd5a14c71d64dfc948d4180ffe82a826af7825d29d84ec5b5777bdf8a37dd8abe74c4f57d88aa02a8252c135d04439b7021958b9ccbf4f0776262cec21d5eeb0a892c79519e11f8e44bc15e007e6a43bd2dd11e9ca2cf4525b8a8b28abe5e996261017c523da4228ef7e5854a07dbe27e94c7013a7994c81195fb2fea7beed105cd167ad172fae5c5f776c972c28a9e8f6d869ca4de7215ee364ebbc8d5297514da80958ab78600650f3adda4055a8c28bb5433a14685a370e6e5e1e1a1282344f07f21160b03bbcea1b1e319f35587af8c3685a2a38c86396c552a8f209b3d133b437f85465a652fba07485cd9badc6f8f881b9b5672b5b17cd7fba10c45697f95361e812f7911ffabf1c89d1b5d6671209957fd8ad02132e2fd994cdce9ac00020e29acb481ca5aca61ae8cab9e768911a60e2d8be044084d75a9fd0e2808a0150fba906e12f36e61d066c1fc818bd6147155d71fad16d8ffef6e2a586b4c468aea23edf887cfe2fb9a6c3b0645cdddcb161ad11c5c0914a7c8a1e77bda6b26c55ee7b92972ae169f8050b3c376bcabcd82a7a0c30d1116b2ddd8f0b49fd86b9a0200647a412f278de360d02df871c6adec863fee7ff0a9536db751b37a91b78a8bf4a786c6e1f8805261d7021b938be1faac028771dc0284baf915d278f7ff5551f0b267ae1ae890d4dae00151db6c5e677b15b334a6c345b8549e11ba06121101c3eeefcefedf674238e88effb32d589b76d7ee2249d5c8a2c30c7683221758a808cedfe6fa7e160bd87392b71812f4f712ecc7bc5542d75539e32c82ce17136d75ebe307fb65f10702f7183c763939a28da7f46bce052e1421179d8810607860e32b251b41a31a7fee5654dad644c9e713fc3cbe3c465ddb24a3199103", 0x1000}, {&(0x7f0000000340)="94a27b1e042e41bb25a52b164a8cbb50fbb2ad19e910786d426d12ae8046d747d346b1bcf25cd811de575af75c053cb99fa333c066e7d03f6e1e2ec65bd3c72a3ec4e3110ee78ed8b8bf2c96f9257f8bc66d3b4ed777f4af3dddc5d32060a25ccb1efd6c37d4784d2dbba071076586f2f5cf247d9c50364b9daf0a7765b5edf4f1339bb499b6fd235c5af89de3c26745a20973923ee5c54824da10b243a3ad7ab182dbaaf1eb87abbcb661fd32ae4ddd4aac5a651f67d4409af80fcfcb535573", 0xc0}, {&(0x7f0000000400)="2cec104a1fb1129e08f25d9f2f08cb5e99b9773deca80e3d82bb0b6f5824bd20056b79f7f7b13c7404fa31fad05e6dfc464e24a1b3cccb4001dbd852f293c87d071907a80b67d0", 0x47}, {&(0x7f0000000480)="14e8b1ee1f82c02752a4eab834ce33b7609b75e069c4a1884ae1", 0x1a}, {&(0x7f00000004c0)="ee9e8595b82c1ff2f4c894f14b463c37c2a73ee7f060a7972b02a261823c7b7564fca426e9e1fb5b21ec26b6b02fc0339998bcbe846644efdfe96577f74463", 0x3f}], 0xa, &(0x7f00000005c0)=[@dstopts_2292={{0x1a8, 0x29, 0x4, {0x87, 0x31, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x9}}, @generic={0x0, 0xcb, "a87b3d13a27333e0b38c5ded23b57510d489556d4d5bec28cf558bbe37262026f5a33e259d597d38f3b7ad75a580c18e2e59fd88ff3e90b25a754daf3cae219c49ea3b29bbd088308deef031c89ebdc3cda51b045e621df89a5c7821ba76d4370ef0af13a6e52f12df6ada331bba0328c0961b52d9039e3d54f7c4642f79275e825813cfd065df5b84d34af05de2ef945310a62e825d9cd2277e25195aa6e2d170446df002291dd4d593a7b75e02f6cdc7fffefdf69b58440e366baf71399d911198eb08ce045de3566849"}, @generic={0x3f, 0x46, "e67e84777a251b6771d5d5ec4ae424780e7f19f209c9fadee53ab176afd4c85536b691ae4b1e6a5bfb91a898d8b77e195b072b8a30773b7469a2b54a91034e053de03816f2c1"}, @jumbo={0xc2, 0x4, 0x3ff}, @calipso={0x7, 0x48, {0x0, 0x10, 0x6, 0x7fff, [0x5, 0x7, 0xfff, 0x8, 0xe09575d, 0x0, 0xaf05, 0xd3]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x1, 0xf, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x80, [0x1, 0x8001, 0x2082, 0x2, 0xccd]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x67fe045f09d7733, 0x8, 0x1f, 0x5a, [0x9, 0x3, 0xfffffffff3542022, 0xffff]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x84, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @generic={0x2, 0x7, "38a278bf522909"}, @ra={0x5, 0x2, 0x1}]}}}], 0x288}, 0x4040) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:21:16 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) 05:21:31 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 63) 05:21:31 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:21:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xfffffff0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 66) 05:21:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = accept4$packet(r0, 0x0, &(0x7f0000000040), 0x80000) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x1}, {0x401}, 0x8, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="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", 0x142, 0x0, &(0x7f0000000280)={0x2, 0xbc, {0x1, 0xc, 0xa4, "186cdd9bef8c17c9a85da1e3b49505ee6870fe5b8d09f89b2e8536864e9009ce1f0367d67ca8f63ab574050035741e75a5f17a6bc29395153ef06372ba67f7d12c8233739a3b93cd150d0d9c97226c8f29c02414a460cd4f2983f696fe165200cb165ff34655432dab6634d2aae76754f8c1cad5e20ffe8e620245c190c96edbc989d511a00fad89ae8e12a57cc1c2d41a544ea538693b6dcf499efe7edaf7831e1eb203", 0xb, "00b5262e231516eff2bff4"}, 0x5b, "c7756a1bd03eb1d1642ec8dfbaddb39d3ffdac75e55373e958f7ddd3130394935a371eca8a9b33c39d85e7781879165c5995b1508f4543a424d3a82748988cdaa4eec77036cc8ee8686e02fa70b5eaa76d322e3d3a5f2f6a98f04a"}, 0x123}) ioctl$KDSETLED(r0, 0x4b32, 0x9) 05:21:31 executing program 1: semget(0x1, 0x0, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000140), 0x0, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r6, r5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r6, 0x2d86c000) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x14, 0x2a, 0xcd2781b960712dff}, 0x14}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x6, 0x6, 0x6, 0x9}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x8001, [], 0x80, "9528276004f0f4"}) openat(r3, &(0x7f0000000000)='./file1\x00', 0x4020c1, 0x1) 05:21:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8448, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @loopback, 0x4596}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x101, 0x10000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000700)={0x0, "0bce79a35266d77a2fa2aabf9633a2ba"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 05:21:31 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x4) [ 1421.752766] FAULT_INJECTION: forcing a failure. [ 1421.752766] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.754265] CPU: 1 PID: 8820 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1421.755069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.756028] Call Trace: [ 1421.756341] dump_stack+0x107/0x167 [ 1421.756773] should_fail.cold+0x5/0xa [ 1421.757234] ? create_object.isra.0+0x3a/0xa30 [ 1421.757264] loop7: detected capacity change from 0 to 2048 [ 1421.757767] should_failslab+0x5/0x20 [ 1421.757788] kmem_cache_alloc+0x5b/0x310 [ 1421.760195] ? io_wq_create+0x114/0xc00 [ 1421.760651] create_object.isra.0+0x3a/0xa30 [ 1421.761165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.761766] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1421.762364] io_wq_create+0x6ef/0xc00 [ 1421.762815] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1421.763409] ? io_import_iovec+0x1120/0x1120 [ 1421.763941] ? io_apoll_task_func+0x2d0/0x2d0 [ 1421.764380] FAULT_INJECTION: forcing a failure. [ 1421.764380] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.765739] ? __io_req_find_next+0x300/0x300 [ 1421.765749] ? do_raw_spin_lock+0x121/0x260 [ 1421.765759] ? rwlock_bug.part.0+0x90/0x90 [ 1421.765774] __io_uring_add_tctx_node+0x2c6/0x520 [ 1421.765786] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1421.765796] ? alloc_fd+0x2e7/0x670 [ 1421.765813] io_uring_setup+0x1fbb/0x2980 [ 1421.765840] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1421.765850] ? wait_for_completion_io+0x270/0x270 [ 1421.765876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.772023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.772624] do_syscall_64+0x33/0x40 [ 1421.773053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.773648] RIP: 0033:0x7f6e4b79cb19 [ 1421.774085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.776213] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1421.777109] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1421.777935] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1421.778773] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1421.779613] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1421.780446] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1421.781312] CPU: 0 PID: 8814 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1421.783114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.785298] Call Trace: [ 1421.785992] dump_stack+0x107/0x167 [ 1421.786950] should_fail.cold+0x5/0xa [ 1421.787964] ? __es_insert_extent+0xed1/0x1370 [ 1421.788970] should_failslab+0x5/0x20 [ 1421.789810] kmem_cache_alloc+0x5b/0x310 [ 1421.790714] __es_insert_extent+0xed1/0x1370 [ 1421.791689] ? do_raw_read_unlock+0x70/0x70 [ 1421.792636] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.793800] ext4_es_insert_extent+0x45d/0xf10 [ 1421.794813] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1421.795777] ? ext4_es_find_extent_range+0x1cb/0x460 [ 1421.796891] ? lock_downgrade+0x6d0/0x6d0 [ 1421.797806] ? __ext4_handle_dirty_super+0x100/0x100 [ 1421.798917] ? __es_find_extent_range+0x1d3/0x490 [ 1421.799990] ? do_raw_read_unlock+0x3b/0x70 [ 1421.800946] ext4_ext_map_blocks+0x1567/0x5880 [ 1421.801963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.803118] ? SOFTIRQ_verbose+0x10/0x10 [ 1421.804021] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.805172] ? SOFTIRQ_verbose+0x10/0x10 [ 1421.806070] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1421.807228] ? ext4_ext_release+0x10/0x10 [ 1421.808162] ? lock_release+0x680/0x680 [ 1421.809044] ? ext4_es_lookup_extent+0x485/0xa80 [ 1421.810085] ? lock_downgrade+0x6d0/0x6d0 [ 1421.811012] ? down_read+0x10f/0x430 [ 1421.811839] ? down_write+0x160/0x160 [ 1421.812675] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1421.813716] ext4_map_blocks+0x8e1/0x1910 [ 1421.814647] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1421.815645] ? __brelse+0x84/0xa0 [ 1421.816412] ? __ext4_new_inode+0x148/0x5370 [ 1421.817395] ext4_append+0x1b8/0x4e0 [ 1421.818221] ? ext4_move_extents+0x3060/0x3060 [ 1421.819230] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1421.820317] ext4_init_new_dir+0x25e/0x4d0 [ 1421.821252] ? ext4_init_dot_dotdot+0x610/0x610 [ 1421.822291] ext4_mkdir+0x3c1/0xb10 [ 1421.823103] ? ext4_rmdir+0xf70/0xf70 [ 1421.823964] vfs_mkdir+0x493/0x750 [ 1421.824754] do_mkdirat+0x150/0x2b0 [ 1421.825561] ? user_path_create+0xf0/0xf0 [ 1421.826478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.827646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.828785] do_syscall_64+0x33/0x40 [ 1421.829605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.830735] RIP: 0033:0x7f7ab951ec27 [ 1421.831555] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.835632] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1421.837311] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1421.838924] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1421.840788] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1421.842358] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1421.843940] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1421.861190] EXT4-fs (loop7): invalid first ino: 2875922842 05:21:31 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) 05:21:31 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) 05:21:31 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 64) 05:21:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xfffffffc, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xfff, 0x6) 05:21:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 67) [ 1421.955754] FAULT_INJECTION: forcing a failure. [ 1421.955754] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.958273] CPU: 0 PID: 8845 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1421.959795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.961628] Call Trace: [ 1421.962214] dump_stack+0x107/0x167 [ 1421.963018] should_fail.cold+0x5/0xa [ 1421.963869] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1421.964972] should_failslab+0x5/0x20 [ 1421.965810] kmem_cache_alloc_trace+0x55/0x320 [ 1421.966829] __io_uring_add_tctx_node+0x15c/0x520 [ 1421.967901] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1421.969052] ? alloc_fd+0x2e7/0x670 [ 1421.969868] io_uring_setup+0x1fbb/0x2980 [ 1421.970788] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1421.971909] ? wait_for_completion_io+0x270/0x270 [ 1421.972993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.974146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.975285] do_syscall_64+0x33/0x40 [ 1421.976119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.977251] RIP: 0033:0x7f6e4b79cb19 [ 1421.978072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.982132] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1421.983871] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1421.985441] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1421.987009] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1421.988597] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1421.990169] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:21:31 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) 05:21:31 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) 05:21:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0xffffffff, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1422.053363] loop7: detected capacity change from 0 to 2048 [ 1422.057393] FAULT_INJECTION: forcing a failure. [ 1422.057393] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.060182] CPU: 0 PID: 8858 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1422.061682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.063504] Call Trace: [ 1422.064094] dump_stack+0x107/0x167 [ 1422.064899] should_fail.cold+0x5/0xa [ 1422.065743] ? create_object.isra.0+0x3a/0xa30 [ 1422.066746] should_failslab+0x5/0x20 [ 1422.067582] kmem_cache_alloc+0x5b/0x310 [ 1422.068493] create_object.isra.0+0x3a/0xa30 [ 1422.069459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1422.070584] __kmalloc+0x16e/0x390 [ 1422.071373] ext4_find_extent+0xa77/0xd70 [ 1422.072309] ext4_ext_map_blocks+0x1c8/0x5880 [ 1422.073315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1422.074465] ? SOFTIRQ_verbose+0x10/0x10 [ 1422.075359] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1422.076533] ? SOFTIRQ_verbose+0x10/0x10 [ 1422.077433] ? ext4_ext_release+0x10/0x10 [ 1422.078349] ? ext4_map_blocks+0x5cd/0x1910 [ 1422.079302] ? lock_release+0x680/0x680 [ 1422.080195] ? ext4_es_lookup_extent+0x485/0xa80 [ 1422.081235] ? lock_downgrade+0x6d0/0x6d0 [ 1422.082153] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1422.083320] ? down_write+0xe0/0x160 [ 1422.084148] ? down_write_killable+0x180/0x180 [ 1422.085172] ext4_map_blocks+0x63f/0x1910 [ 1422.086093] ? _down_write_nest_lock+0x160/0x160 [ 1422.087136] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1422.088142] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1422.089183] ext4_getblk+0x144/0x680 [ 1422.090007] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1422.091107] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1422.092104] ? __brelse+0x84/0xa0 [ 1422.092869] ? __ext4_new_inode+0x148/0x5370 [ 1422.093843] ext4_bread+0x29/0x1f0 [ 1422.094627] ext4_append+0x228/0x4e0 [ 1422.095451] ? ext4_move_extents+0x3060/0x3060 [ 1422.096468] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1422.097544] ext4_init_new_dir+0x25e/0x4d0 [ 1422.098478] ? ext4_init_dot_dotdot+0x610/0x610 [ 1422.099514] ext4_mkdir+0x3c1/0xb10 [ 1422.100331] ? ext4_rmdir+0xf70/0xf70 [ 1422.101182] vfs_mkdir+0x493/0x750 [ 1422.101969] do_mkdirat+0x150/0x2b0 [ 1422.102775] ? user_path_create+0xf0/0xf0 [ 1422.103698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1422.104850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1422.105992] do_syscall_64+0x33/0x40 [ 1422.106815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1422.107949] RIP: 0033:0x7f7ab951ec27 [ 1422.108762] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1422.112811] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1422.114491] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1422.116070] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1422.117640] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1422.119206] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1422.120785] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1422.185654] EXT4-fs (loop7): invalid first ino: 2875922842 05:21:48 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x8, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'wlan1\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x6, "1c81db2c699d"}}) 05:21:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000000000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="72650004008000", @ANYRESHEX, @ANYBLOB=',\x00']) 05:21:48 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 68) 05:21:48 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 05:21:48 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:21:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:21:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = mq_open(&(0x7f0000000040)='net/ip6_flowlabel\x00', 0x40, 0x60, &(0x7f0000000080)={0x1, 0x7ff, 0x3, 0x4}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) write$vga_arbiter(r2, 0x0, 0x3f00) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x6, 0x1, {0x0, 0x0, r2}}, 0x2) 05:21:48 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 65) [ 1438.912618] FAULT_INJECTION: forcing a failure. [ 1438.912618] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.914175] CPU: 0 PID: 8874 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1438.915066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.916170] Call Trace: [ 1438.916522] dump_stack+0x107/0x167 [ 1438.917006] should_fail.cold+0x5/0xa [ 1438.917511] ? create_object.isra.0+0x3a/0xa30 [ 1438.918116] should_failslab+0x5/0x20 [ 1438.918618] kmem_cache_alloc+0x5b/0x310 [ 1438.919162] create_object.isra.0+0x3a/0xa30 [ 1438.919736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1438.920428] kmem_cache_alloc_trace+0x151/0x320 [ 1438.921044] __io_uring_add_tctx_node+0x15c/0x520 [ 1438.921673] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1438.922350] ? alloc_fd+0x2e7/0x670 [ 1438.922841] io_uring_setup+0x1fbb/0x2980 [ 1438.923389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1438.924061] ? wait_for_completion_io+0x270/0x270 [ 1438.924720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1438.925415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1438.926082] do_syscall_64+0x33/0x40 [ 1438.926578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1438.927241] RIP: 0033:0x7f6e4b79cb19 [ 1438.927719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.930131] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1438.931112] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1438.932057] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1438.932982] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1438.933894] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1438.934826] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1438.951542] loop7: detected capacity change from 0 to 2048 [ 1438.952762] FAULT_INJECTION: forcing a failure. [ 1438.952762] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.954216] CPU: 0 PID: 8870 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1438.955115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.956190] Call Trace: [ 1438.956529] dump_stack+0x107/0x167 [ 1438.956997] should_fail.cold+0x5/0xa [ 1438.957491] ? ext4_find_extent+0xa77/0xd70 [ 1438.958038] should_failslab+0x5/0x20 [ 1438.958528] __kmalloc+0x72/0x390 [ 1438.958973] ext4_find_extent+0xa77/0xd70 [ 1438.959522] ext4_ext_map_blocks+0x1c8/0x5880 [ 1438.960119] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1438.960807] ? SOFTIRQ_verbose+0x10/0x10 [ 1438.961324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1438.961997] ? SOFTIRQ_verbose+0x10/0x10 [ 1438.962524] ? ext4_ext_release+0x10/0x10 [ 1438.963059] ? ext4_map_blocks+0x5cd/0x1910 [ 1438.963613] ? lock_release+0x680/0x680 [ 1438.964147] ? ext4_es_lookup_extent+0x485/0xa80 [ 1438.964759] ? lock_downgrade+0x6d0/0x6d0 [ 1438.965289] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1438.965984] ? down_write+0xe0/0x160 [ 1438.966470] ? down_write_killable+0x180/0x180 [ 1438.967080] ext4_map_blocks+0x63f/0x1910 [ 1438.967612] ? _down_write_nest_lock+0x160/0x160 [ 1438.968240] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1438.968826] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1438.969438] ext4_getblk+0x144/0x680 [ 1438.969921] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1438.970554] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1438.971135] ? __brelse+0x84/0xa0 [ 1438.971575] ? __ext4_new_inode+0x148/0x5370 [ 1438.972155] ext4_bread+0x29/0x1f0 [ 1438.972612] ext4_append+0x228/0x4e0 [ 1438.973092] ? ext4_move_extents+0x3060/0x3060 [ 1438.973672] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1438.974291] ext4_init_new_dir+0x25e/0x4d0 [ 1438.974831] ? ext4_init_dot_dotdot+0x610/0x610 [ 1438.975439] ext4_mkdir+0x3c1/0xb10 [ 1438.975921] ? ext4_rmdir+0xf70/0xf70 [ 1438.976423] vfs_mkdir+0x493/0x750 [ 1438.976875] do_mkdirat+0x150/0x2b0 [ 1438.977345] ? user_path_create+0xf0/0xf0 [ 1438.977888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1438.978561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1438.979213] do_syscall_64+0x33/0x40 [ 1438.979685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1438.980369] RIP: 0033:0x7f7ab951ec27 [ 1438.980844] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.983213] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1438.984193] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1438.985095] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1438.986005] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1438.986911] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1438.987803] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:22:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 66) 05:22:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x2, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 69) 05:22:02 executing program 2: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000400)=[{0x1, 0x1f, 0x7b041bf3e9c51793}], 0x1) r0 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0xe4040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) semop(0x0, &(0x7f0000000100)=[{0x1, 0x40, 0x1800}, {0x1, 0x1f, 0x800}, {0x1, 0xe79}], 0x3) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0x5]) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x4a41}, {0x0, 0x0, 0x1c00}, {0x2, 0x400, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000080)=""/81) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 05:22:02 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x1) 05:22:02 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'nr0\x00', 0xb85d}) pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:22:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3f, 0x7, 0x25, 0x81, 0x0, 0x40, 0x14000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x102, 0xd7a4, 0x2, 0x0, 0x1f, 0x3, 0x93d0, 0x0, 0x9}, r1, 0x4, r0, 0x3) sched_rr_get_interval(0x0, &(0x7f0000000040)) 05:22:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x0) [ 1452.858502] FAULT_INJECTION: forcing a failure. [ 1452.858502] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.860366] CPU: 0 PID: 8910 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1452.861298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1452.862435] Call Trace: [ 1452.862799] dump_stack+0x107/0x167 [ 1452.863292] should_fail.cold+0x5/0xa [ 1452.863813] ? xas_alloc+0x336/0x440 [ 1452.864328] should_failslab+0x5/0x20 [ 1452.864849] kmem_cache_alloc+0x5b/0x310 [ 1452.865405] ? stack_trace_consume_entry+0x160/0x160 [ 1452.866102] xas_alloc+0x336/0x440 [ 1452.866582] xas_create+0x34a/0x10d0 [ 1452.867100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1452.867824] xas_store+0x8c/0x1c40 [ 1452.868325] __xa_store+0x164/0x2d0 [ 1452.868823] ? xa_delete_node+0x280/0x280 [ 1452.869395] ? trace_hardirqs_on+0x5b/0x180 [ 1452.869989] xa_store+0x31/0x50 [ 1452.870443] __io_uring_add_tctx_node+0x1cf/0x520 [ 1452.871101] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1452.871182] loop7: detected capacity change from 0 to 2048 [ 1452.871804] ? alloc_fd+0x2e7/0x670 [ 1452.871846] io_uring_setup+0x1fbb/0x2980 [ 1452.874130] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1452.874823] ? wait_for_completion_io+0x270/0x270 [ 1452.875494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1452.876171] FAULT_INJECTION: forcing a failure. [ 1452.876171] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.877703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1452.877717] do_syscall_64+0x33/0x40 [ 1452.877730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1452.877738] RIP: 0033:0x7f6e4b79cb19 [ 1452.877749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1452.877755] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1452.877768] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1452.877775] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1452.877782] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1452.877788] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1452.877795] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1452.896454] CPU: 1 PID: 8913 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1452.897934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1452.899733] Call Trace: [ 1452.900318] dump_stack+0x107/0x167 [ 1452.901117] should_fail.cold+0x5/0xa [ 1452.901945] ? create_object.isra.0+0x3a/0xa30 [ 1452.902934] should_failslab+0x5/0x20 [ 1452.903763] kmem_cache_alloc+0x5b/0x310 [ 1452.904654] ? lock_chain_count+0x20/0x20 [ 1452.905561] create_object.isra.0+0x3a/0xa30 [ 1452.906514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1452.907628] __kmalloc+0x16e/0x390 [ 1452.908423] ext4_find_extent+0xa77/0xd70 [ 1452.909335] ext4_ext_map_blocks+0x1c8/0x5880 [ 1452.910322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1452.911458] ? SOFTIRQ_verbose+0x10/0x10 [ 1452.912345] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1452.913482] ? SOFTIRQ_verbose+0x10/0x10 [ 1452.914375] ? ext4_ext_release+0x10/0x10 [ 1452.915281] ? ext4_map_blocks+0x5cd/0x1910 [ 1452.916233] ? lock_release+0x680/0x680 [ 1452.917094] ? ext4_es_lookup_extent+0x485/0xa80 [ 1452.918120] ? lock_downgrade+0x6d0/0x6d0 [ 1452.919015] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1452.920167] ? down_write+0xe0/0x160 [ 1452.920977] ? down_write_killable+0x180/0x180 [ 1452.921981] ext4_map_blocks+0x63f/0x1910 [ 1452.922886] ? _down_write_nest_lock+0x160/0x160 [ 1452.923911] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1452.924887] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1452.925907] ext4_getblk+0x144/0x680 [ 1452.926709] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1452.927779] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1452.928752] ? __brelse+0x84/0xa0 [ 1452.929504] ? __ext4_new_inode+0x148/0x5370 [ 1452.930457] ext4_bread+0x29/0x1f0 [ 1452.931227] ext4_append+0x228/0x4e0 [ 1452.932050] ? ext4_move_extents+0x3060/0x3060 [ 1452.933039] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1452.934094] ext4_init_new_dir+0x25e/0x4d0 [ 1452.935011] ? ext4_init_dot_dotdot+0x610/0x610 [ 1452.936028] ext4_mkdir+0x3c1/0xb10 [ 1452.936819] ? ext4_rmdir+0xf70/0xf70 [ 1452.937647] vfs_mkdir+0x493/0x750 [ 1452.938412] do_mkdirat+0x150/0x2b0 [ 1452.939193] ? user_path_create+0xf0/0xf0 [ 1452.940096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1452.941216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1452.942324] do_syscall_64+0x33/0x40 [ 1452.943123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1452.944223] RIP: 0033:0x7f7ab951ec27 [ 1452.945017] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1452.948943] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1452.950563] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1452.952091] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1452.953608] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1452.955120] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1452.956637] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1452.964469] EXT4-fs (loop7): invalid first ino: 2875922842 05:22:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x3, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:02 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:22:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) 05:22:02 executing program 1: mknod(&(0x7f00000001c0)='.\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=0xfff, 0x8, 0x3) setxattr$incfs_size(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=0x6d, 0x8, 0x1) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x8, 0x8, 0x2) setxattr$incfs_size(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0xffff, 0x8, 0x3) 05:22:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x8}) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:22:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 67) 05:22:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 70) 05:22:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x0) 05:22:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x4, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:02 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x7) [ 1453.112080] FAULT_INJECTION: forcing a failure. [ 1453.112080] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.113574] CPU: 0 PID: 8936 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1453.114410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1453.115432] Call Trace: [ 1453.115760] dump_stack+0x107/0x167 [ 1453.116212] should_fail.cold+0x5/0xa [ 1453.116679] ? ___slab_alloc+0x360/0x700 [ 1453.117176] ? create_object.isra.0+0x3a/0xa30 [ 1453.117738] should_failslab+0x5/0x20 [ 1453.118207] kmem_cache_alloc+0x5b/0x310 [ 1453.118717] create_object.isra.0+0x3a/0xa30 05:22:02 executing program 2: socketpair(0x9, 0x0, 0x0, &(0x7f0000001300)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1453.119258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1453.120020] kmem_cache_alloc+0x159/0x310 [ 1453.120502] xas_alloc+0x336/0x440 [ 1453.120934] xas_create+0x34a/0x10d0 [ 1453.121369] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1453.121966] xas_store+0x8c/0x1c40 [ 1453.122387] __xa_store+0x164/0x2d0 [ 1453.122808] ? xa_delete_node+0x280/0x280 [ 1453.123288] ? trace_hardirqs_on+0x5b/0x180 [ 1453.123783] xa_store+0x31/0x50 [ 1453.124171] __io_uring_add_tctx_node+0x1cf/0x520 [ 1453.124718] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1453.125312] ? alloc_fd+0x2e7/0x670 [ 1453.125737] io_uring_setup+0x1fbb/0x2980 [ 1453.126218] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1453.126792] ? wait_for_completion_io+0x270/0x270 [ 1453.127355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1453.127953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1453.128547] do_syscall_64+0x33/0x40 [ 1453.128970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1453.129550] RIP: 0033:0x7f6e4b79cb19 [ 1453.129973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1453.132066] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1453.132932] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1453.133741] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1453.134555] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1453.135376] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1453.136185] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1453.161067] loop7: detected capacity change from 0 to 2048 [ 1453.162147] FAULT_INJECTION: forcing a failure. [ 1453.162147] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.163416] CPU: 0 PID: 8942 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1453.164198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 05:22:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x191482, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) [ 1453.165277] Call Trace: [ 1453.165600] dump_stack+0x107/0x167 [ 1453.166011] should_fail.cold+0x5/0xa [ 1453.166441] ? create_object.isra.0+0x3a/0xa30 [ 1453.166952] should_failslab+0x5/0x20 [ 1453.167385] kmem_cache_alloc+0x5b/0x310 [ 1453.167837] ? lock_chain_count+0x20/0x20 [ 1453.168320] create_object.isra.0+0x3a/0xa30 [ 1453.168809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1453.169377] __kmalloc+0x16e/0x390 [ 1453.169780] ext4_find_extent+0xa77/0xd70 [ 1453.170245] ext4_ext_map_blocks+0x1c8/0x5880 [ 1453.170748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1453.171332] ? SOFTIRQ_verbose+0x10/0x10 [ 1453.171783] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1453.172374] ? SOFTIRQ_verbose+0x10/0x10 [ 1453.172836] ? ext4_ext_release+0x10/0x10 [ 1453.173304] ? ext4_map_blocks+0x5cd/0x1910 [ 1453.173793] ? lock_release+0x680/0x680 [ 1453.174241] ? ext4_es_lookup_extent+0x485/0xa80 [ 1453.174767] ? lock_downgrade+0x6d0/0x6d0 [ 1453.175246] ? down_write+0xe0/0x160 [ 1453.175660] ? down_write_killable+0x180/0x180 [ 1453.176184] ext4_map_blocks+0x63f/0x1910 [ 1453.176652] ? _down_write_nest_lock+0x160/0x160 [ 1453.177180] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1453.177678] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1453.178206] ext4_getblk+0x144/0x680 [ 1453.178626] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1453.179175] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1453.179670] ? __brelse+0x84/0xa0 [ 1453.180060] ? __ext4_new_inode+0x148/0x5370 [ 1453.180548] ext4_bread+0x29/0x1f0 [ 1453.180945] ext4_append+0x228/0x4e0 [ 1453.181361] ? ext4_move_extents+0x3060/0x3060 [ 1453.181866] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1453.182411] ext4_init_new_dir+0x25e/0x4d0 [ 1453.182880] ? ext4_init_dot_dotdot+0x610/0x610 [ 1453.183401] ext4_mkdir+0x3c1/0xb10 [ 1453.183807] ? ext4_rmdir+0xf70/0xf70 [ 1453.184244] vfs_mkdir+0x493/0x750 [ 1453.184640] do_mkdirat+0x150/0x2b0 [ 1453.185045] ? user_path_create+0xf0/0xf0 [ 1453.185514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1453.186093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1453.186671] do_syscall_64+0x33/0x40 [ 1453.187083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1453.187651] RIP: 0033:0x7f7ab951ec27 [ 1453.188069] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1453.190097] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1453.190939] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1453.191734] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1453.192530] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1453.193315] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1453.194106] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:22:02 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 1453.302663] EXT4-fs (loop7): invalid first ino: 2875922842 05:22:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 71) 05:22:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800210c00000000000000000a00000008f7ffffff0000000c000980080000007f000001"], 0x28}}, 0x0) 05:22:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00004a5000/0x3000)=nil, 0x3000, 0x1000009, 0x1f012, r0, 0x0) syz_io_uring_setup(0x23ac, &(0x7f0000000000)={0x0, 0xaf6, 0x4, 0x3, 0x1dc}, &(0x7f00004a5000/0x3000)=nil, &(0x7f00004a5000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_open_dev$mouse(&(0x7f0000000240), 0x230, 0x200002) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000002c0)=0xfffffffe, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r0, 0x0, &(0x7f0000000100)="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", 0xfa, 0x121, 0x1}, 0x7fffffff) 05:22:17 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) 05:22:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x5, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:17 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) 05:22:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) finit_module(r0, &(0x7f0000000040)='net/ip6_flowlabel\x00', 0x1) 05:22:17 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 68) [ 1468.106689] loop7: detected capacity change from 0 to 2048 [ 1468.108254] FAULT_INJECTION: forcing a failure. [ 1468.108254] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.109878] CPU: 1 PID: 8971 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1468.110836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.111988] Call Trace: [ 1468.112371] dump_stack+0x107/0x167 [ 1468.112882] should_fail.cold+0x5/0xa [ 1468.113415] ? create_object.isra.0+0x3a/0xa30 [ 1468.114050] should_failslab+0x5/0x20 [ 1468.114586] kmem_cache_alloc+0x5b/0x310 [ 1468.115160] create_object.isra.0+0x3a/0xa30 [ 1468.115779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.116500] kmem_cache_alloc+0x159/0x310 [ 1468.117087] ext4_mb_new_blocks+0x698/0x45c0 [ 1468.117714] ? trace_hardirqs_on+0x5b/0x180 [ 1468.118322] ? kasan_unpoison_shadow+0x33/0x50 [ 1468.118957] ? ext4_cache_extents+0x68/0x2d0 [ 1468.119566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.120282] ? ext4_discard_preallocations+0xd80/0xd80 [ 1468.121020] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1468.121678] ? ext4_inode_to_goal_block+0x320/0x430 [ 1468.122386] ext4_ext_map_blocks+0x1a55/0x5880 [ 1468.123038] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1468.123773] ? SOFTIRQ_verbose+0x10/0x10 [ 1468.124355] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1468.125101] ? SOFTIRQ_verbose+0x10/0x10 [ 1468.125680] ? ext4_ext_release+0x10/0x10 [ 1468.126266] ? ext4_map_blocks+0x5cd/0x1910 [ 1468.126874] ? lock_release+0x680/0x680 [ 1468.127431] ? ext4_es_lookup_extent+0x485/0xa80 [ 1468.128091] ? lock_downgrade+0x6d0/0x6d0 [ 1468.128677] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1468.129422] ? down_write_killable+0x180/0x180 [ 1468.130070] ext4_map_blocks+0x63f/0x1910 [ 1468.130655] ? _down_write_nest_lock+0x160/0x160 [ 1468.131324] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1468.131950] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1468.132621] ext4_getblk+0x144/0x680 [ 1468.133149] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1468.133837] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1468.134461] ? __brelse+0x84/0xa0 [ 1468.134943] ? __ext4_new_inode+0x148/0x5370 [ 1468.135559] ext4_bread+0x29/0x1f0 [ 1468.136065] ext4_append+0x228/0x4e0 [ 1468.136591] ? ext4_move_extents+0x3060/0x3060 [ 1468.137235] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1468.137917] ext4_init_new_dir+0x25e/0x4d0 [ 1468.138509] ? ext4_init_dot_dotdot+0x610/0x610 [ 1468.139168] ext4_mkdir+0x3c1/0xb10 [ 1468.139679] ? ext4_rmdir+0xf70/0xf70 [ 1468.140244] vfs_mkdir+0x493/0x750 [ 1468.140744] do_mkdirat+0x150/0x2b0 [ 1468.141250] ? user_path_create+0xf0/0xf0 [ 1468.141830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.142558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.143287] do_syscall_64+0x33/0x40 [ 1468.143813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.144541] RIP: 0033:0x7f7ab951ec27 [ 1468.145058] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.147615] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1468.148679] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1468.149681] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1468.150138] FAULT_INJECTION: forcing a failure. [ 1468.150138] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.150682] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1468.150705] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1468.155695] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1468.156730] CPU: 0 PID: 8974 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1468.158573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.160273] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1468.160738] Call Trace: [ 1468.162100] dump_stack+0x107/0x167 [ 1468.162923] should_fail.cold+0x5/0xa [ 1468.163778] ? xas_alloc+0x336/0x440 [ 1468.164634] should_failslab+0x5/0x20 [ 1468.165487] kmem_cache_alloc+0x5b/0x310 [ 1468.166400] xas_alloc+0x336/0x440 [ 1468.167200] xas_create+0x34a/0x10d0 [ 1468.168048] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1468.169230] xas_store+0x8c/0x1c40 [ 1468.170047] __xa_store+0x164/0x2d0 [ 1468.170865] ? xa_delete_node+0x280/0x280 [ 1468.171800] ? trace_hardirqs_on+0x5b/0x180 [ 1468.172785] xa_store+0x31/0x50 [ 1468.173525] __io_uring_add_tctx_node+0x1cf/0x520 [ 1468.174585] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1468.175733] ? alloc_fd+0x2e7/0x670 [ 1468.176568] io_uring_setup+0x1fbb/0x2980 [ 1468.177495] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1468.178607] ? wait_for_completion_io+0x270/0x270 [ 1468.179706] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.180876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.182016] do_syscall_64+0x33/0x40 [ 1468.182848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.183974] RIP: 0033:0x7f6e4b79cb19 [ 1468.184808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.188828] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1468.190482] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1468.192035] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1468.193594] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1468.195140] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1468.196695] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:22:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 72) [ 1468.247459] loop7: detected capacity change from 0 to 2048 [ 1468.249227] FAULT_INJECTION: forcing a failure. [ 1468.249227] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.250766] CPU: 1 PID: 8986 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1468.251688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.252799] Call Trace: [ 1468.253170] dump_stack+0x107/0x167 [ 1468.253667] should_fail.cold+0x5/0xa [ 1468.254175] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 1468.254801] should_failslab+0x5/0x20 [ 1468.255311] kmem_cache_alloc+0x5b/0x310 [ 1468.255865] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 1468.256492] ? trace_hardirqs_on+0x5b/0x180 [ 1468.257075] ? kasan_unpoison_shadow+0x33/0x50 [ 1468.257692] ? ext4_cache_extents+0x68/0x2d0 [ 1468.258285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.258976] ? ext4_discard_preallocations+0xd80/0xd80 [ 1468.259679] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1468.260331] ? ext4_inode_to_goal_block+0x320/0x430 [ 1468.261007] ext4_ext_map_blocks+0x1a55/0x5880 [ 1468.261666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1468.262366] ? SOFTIRQ_verbose+0x10/0x10 [ 1468.262910] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1468.263626] ? SOFTIRQ_verbose+0x10/0x10 [ 1468.264203] ? ext4_ext_release+0x10/0x10 [ 1468.264765] ? ext4_map_blocks+0x5cd/0x1910 [ 1468.265345] ? lock_release+0x680/0x680 [ 1468.265884] ? ext4_es_lookup_extent+0x485/0xa80 [ 1468.266519] ? lock_downgrade+0x6d0/0x6d0 [ 1468.267083] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1468.267798] ? down_write_killable+0x180/0x180 [ 1468.268424] ext4_map_blocks+0x63f/0x1910 [ 1468.268986] ? _down_write_nest_lock+0x160/0x160 [ 1468.269617] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1468.270231] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1468.270865] ext4_getblk+0x144/0x680 [ 1468.271361] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1468.272032] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1468.272648] ? __brelse+0x84/0xa0 [ 1468.273118] ? __ext4_new_inode+0x148/0x5370 [ 1468.273718] ext4_bread+0x29/0x1f0 [ 1468.274194] ext4_append+0x228/0x4e0 [ 1468.274694] ? ext4_move_extents+0x3060/0x3060 [ 1468.275302] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1468.275979] ext4_init_new_dir+0x25e/0x4d0 [ 1468.276556] ? ext4_init_dot_dotdot+0x610/0x610 [ 1468.277182] ext4_mkdir+0x3c1/0xb10 [ 1468.277678] ? ext4_rmdir+0xf70/0xf70 [ 1468.278196] vfs_mkdir+0x493/0x750 [ 1468.278673] do_mkdirat+0x150/0x2b0 [ 1468.279168] ? user_path_create+0xf0/0xf0 [ 1468.279725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.280445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.281139] do_syscall_64+0x33/0x40 [ 1468.281642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.282317] RIP: 0033:0x7f7ab951ec27 [ 1468.282806] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.285232] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1468.286230] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1468.287161] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1468.288090] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1468.289033] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1468.289964] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:22:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x6, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:17 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 69) 05:22:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x4aab02, 0x0) mmap(&(0x7f00007c3000/0x4000)=nil, 0x4000, 0x8, 0x11, r3, 0xe21c5000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TCGETA(r1, 0x5405, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x3be}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000200faff0b0000000000"], 0x1c}}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0419e761244a"]) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10010, r6, 0xa4339000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 05:22:17 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) [ 1468.360899] FAULT_INJECTION: forcing a failure. [ 1468.360899] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.362390] CPU: 1 PID: 8997 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1468.363264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.364327] Call Trace: [ 1468.364667] dump_stack+0x107/0x167 [ 1468.365134] should_fail.cold+0x5/0xa [ 1468.365618] ? create_object.isra.0+0x3a/0xa30 [ 1468.366198] should_failslab+0x5/0x20 [ 1468.366681] kmem_cache_alloc+0x5b/0x310 [ 1468.367199] ? mark_held_locks+0x9e/0xe0 [ 1468.367712] create_object.isra.0+0x3a/0xa30 [ 1468.368277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.368925] kmem_cache_alloc+0x159/0x310 [ 1468.369458] xas_alloc+0x336/0x440 [ 1468.369914] xas_create+0x34a/0x10d0 [ 1468.370394] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1468.371063] xas_store+0x8c/0x1c40 [ 1468.371522] __xa_store+0x164/0x2d0 [ 1468.371982] ? xa_delete_node+0x280/0x280 [ 1468.372520] ? trace_hardirqs_on+0x5b/0x180 [ 1468.373068] xa_store+0x31/0x50 [ 1468.373486] __io_uring_add_tctx_node+0x1cf/0x520 [ 1468.374091] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1468.374746] ? alloc_fd+0x2e7/0x670 [ 1468.375212] io_uring_setup+0x1fbb/0x2980 [ 1468.375739] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1468.376383] ? wait_for_completion_io+0x270/0x270 [ 1468.377004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.377659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.378310] do_syscall_64+0x33/0x40 [ 1468.378778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.379421] RIP: 0033:0x7f6e4b79cb19 [ 1468.379887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.382201] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1468.383159] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1468.384051] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1468.384957] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1468.385852] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1468.386748] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1468.409582] audit: type=1400 audit(1773292937.694:33): avc: denied { tracepoint } for pid=8999 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 05:22:31 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 70) 05:22:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x4aab02, 0x0) mmap(&(0x7f00007c3000/0x4000)=nil, 0x4000, 0x8, 0x11, r3, 0xe21c5000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TCGETA(r1, 0x5405, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x3be}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000200faff0b0000000000"], 0x1c}}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0419e761244a"]) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10010, r6, 0xa4339000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 05:22:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4071, 0xfe7, 0x8) 05:22:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x7, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:31 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:22:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 73) 05:22:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000000) dup2(r0, r1) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private2}, &(0x7f0000000100)=0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_script(r1, 0x0, 0x0) 05:22:31 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1482.575950] FAULT_INJECTION: forcing a failure. [ 1482.575950] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.577571] CPU: 1 PID: 9012 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1482.578541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.579686] Call Trace: [ 1482.580057] dump_stack+0x107/0x167 [ 1482.580559] should_fail.cold+0x5/0xa [ 1482.581073] ? create_object.isra.0+0x3a/0xa30 [ 1482.581687] should_failslab+0x5/0x20 [ 1482.582207] kmem_cache_alloc+0x5b/0x310 [ 1482.582771] create_object.isra.0+0x3a/0xa30 [ 1482.583176] loop7: detected capacity change from 0 to 2048 [ 1482.583366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1482.583389] kmem_cache_alloc+0x159/0x310 [ 1482.586216] xas_alloc+0x336/0x440 [ 1482.586701] xas_create+0x34a/0x10d0 [ 1482.587220] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1482.587937] xas_store+0x8c/0x1c40 [ 1482.588441] __xa_store+0x164/0x2d0 [ 1482.588932] ? xa_delete_node+0x280/0x280 [ 1482.589504] ? trace_hardirqs_on+0x5b/0x180 [ 1482.590091] xa_store+0x31/0x50 [ 1482.590543] __io_uring_add_tctx_node+0x1cf/0x520 [ 1482.591188] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1482.591902] ? alloc_fd+0x2e7/0x670 [ 1482.592406] io_uring_setup+0x1fbb/0x2980 [ 1482.592977] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1482.593656] ? wait_for_completion_io+0x270/0x270 [ 1482.594326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.595035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.595742] do_syscall_64+0x33/0x40 [ 1482.596258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.596974] RIP: 0033:0x7f6e4b79cb19 [ 1482.597474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1482.599991] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1482.601031] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1482.601974] FAULT_INJECTION: forcing a failure. [ 1482.601974] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.602005] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1482.602024] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1482.607047] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1482.608029] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1482.609025] CPU: 0 PID: 9015 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1482.610927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.613227] Call Trace: [ 1482.613964] dump_stack+0x107/0x167 [ 1482.614971] should_fail.cold+0x5/0xa [ 1482.616021] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 1482.617362] should_failslab+0x5/0x20 [ 1482.618416] kmem_cache_alloc+0x5b/0x310 [ 1482.619553] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 1482.620798] ? trace_hardirqs_on+0x5b/0x180 [ 1482.621848] ? kasan_unpoison_shadow+0x33/0x50 [ 1482.622959] ? ext4_cache_extents+0x68/0x2d0 [ 1482.624022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1482.625257] ? ext4_discard_preallocations+0xd80/0xd80 [ 1482.626510] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1482.627655] ? ext4_inode_to_goal_block+0x320/0x430 [ 1482.628889] ext4_ext_map_blocks+0x1a55/0x5880 [ 1482.630012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1482.631278] ? SOFTIRQ_verbose+0x10/0x10 [ 1482.632263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1482.633549] ? SOFTIRQ_verbose+0x10/0x10 [ 1482.634536] ? ext4_ext_release+0x10/0x10 [ 1482.635553] ? ext4_map_blocks+0x5cd/0x1910 [ 1482.636622] ? lock_release+0x680/0x680 [ 1482.637603] ? ext4_es_lookup_extent+0x485/0xa80 [ 1482.638762] ? lock_downgrade+0x6d0/0x6d0 [ 1482.639761] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1482.641062] ? down_write_killable+0x180/0x180 [ 1482.642177] ext4_map_blocks+0x63f/0x1910 [ 1482.643182] ? _down_write_nest_lock+0x160/0x160 [ 1482.644317] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1482.645388] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1482.646535] ext4_getblk+0x144/0x680 [ 1482.647421] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1482.648614] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1482.649692] ? __brelse+0x84/0xa0 [ 1482.650524] ? __ext4_new_inode+0x148/0x5370 [ 1482.651582] ext4_bread+0x29/0x1f0 [ 1482.652443] ext4_append+0x228/0x4e0 [ 1482.653345] ? ext4_move_extents+0x3060/0x3060 [ 1482.654436] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1482.655599] ext4_init_new_dir+0x25e/0x4d0 [ 1482.656637] ? ext4_init_dot_dotdot+0x610/0x610 [ 1482.657766] ext4_mkdir+0x3c1/0xb10 [ 1482.658637] ? ext4_rmdir+0xf70/0xf70 [ 1482.659556] vfs_mkdir+0x493/0x750 [ 1482.660416] do_mkdirat+0x150/0x2b0 [ 1482.661282] ? user_path_create+0xf0/0xf0 [ 1482.662269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.663509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.664775] do_syscall_64+0x33/0x40 [ 1482.665667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.666898] RIP: 0033:0x7f7ab951ec27 [ 1482.667795] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1482.672246] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1482.674067] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1482.675757] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1482.677434] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1482.679137] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1482.680829] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:22:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x8, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:32 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x4) 05:22:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 74) 05:22:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x9, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001040)=""/4082, 0xff2, 0xf0ff1f) r1 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) lseek(r1, 0x1ff, 0x1) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '!(&A(%'}, {}, {0x20, 'net/ip6_flowlabel\x00'}], 0xa, "19a0f9bb062bb047e935fd34ece75d15fe92c818e728a527ade4f5300be8bea778c396d4c970003cff6e10e518f8be378380076332dc55fe9624b2dd92b519668ab5652dbefc401c0658d730ac2e6d09a39aaf8e52d1b6e89764114d5f20591aa2f83bd817baa149b5d01f68f5"}, 0x93) 05:22:32 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:22:32 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 71) 05:22:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) finit_module(r0, &(0x7f0000000040)='net/ip6_flowlabel\x00', 0x1) 05:22:32 executing program 1: r0 = gettid() openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18d800, 0x3c) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x0) sendfile(r2, r3, 0x0, 0x100000001) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xfffffffd}) clone3(&(0x7f0000000ec0)={0x9206100, 0x0, &(0x7f0000000c80), 0x0, {}, 0x0, 0x0, &(0x7f0000000dc0)=""/175, 0x0}, 0x58) [ 1482.837742] FAULT_INJECTION: forcing a failure. [ 1482.837742] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.840263] CPU: 0 PID: 9044 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1482.841745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.843540] Call Trace: [ 1482.844120] dump_stack+0x107/0x167 [ 1482.844925] should_fail.cold+0x5/0xa [ 1482.845753] ? create_object.isra.0+0x3a/0xa30 [ 1482.846744] should_failslab+0x5/0x20 [ 1482.847565] kmem_cache_alloc+0x5b/0x310 [ 1482.848452] ? mark_held_locks+0x9e/0xe0 [ 1482.849335] create_object.isra.0+0x3a/0xa30 [ 1482.850289] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1482.851393] kmem_cache_alloc+0x159/0x310 [ 1482.852306] xas_alloc+0x336/0x440 [ 1482.853078] xas_create+0x34a/0x10d0 [ 1482.853899] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1482.855039] xas_store+0x8c/0x1c40 [ 1482.855825] __xa_store+0x164/0x2d0 [ 1482.856625] ? xa_delete_node+0x280/0x280 [ 1482.857528] ? trace_hardirqs_on+0x5b/0x180 [ 1482.858471] xa_store+0x31/0x50 [ 1482.859193] __io_uring_add_tctx_node+0x1cf/0x520 [ 1482.860235] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1482.861373] ? alloc_fd+0x2e7/0x670 [ 1482.862171] io_uring_setup+0x1fbb/0x2980 [ 1482.863081] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1482.864175] ? wait_for_completion_io+0x270/0x270 [ 1482.865257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.866394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.867512] do_syscall_64+0x33/0x40 [ 1482.868326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.869439] RIP: 0033:0x7f6e4b79cb19 [ 1482.870252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1482.874225] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1482.875870] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1482.877417] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1482.878969] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1482.880525] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1482.882073] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:22:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) finit_module(r0, &(0x7f0000000040)='net/ip6_flowlabel\x00', 0x1) 05:22:32 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) [ 1482.979327] loop7: detected capacity change from 0 to 2048 [ 1482.980643] FAULT_INJECTION: forcing a failure. [ 1482.980643] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.982184] CPU: 1 PID: 9063 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1482.982966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.983939] Call Trace: [ 1482.984254] dump_stack+0x107/0x167 [ 1482.984690] should_fail.cold+0x5/0xa [ 1482.985136] ? __es_insert_extent+0xed1/0x1370 [ 1482.985681] should_failslab+0x5/0x20 [ 1482.986124] kmem_cache_alloc+0x5b/0x310 [ 1482.986614] __es_insert_extent+0xed1/0x1370 [ 1482.987143] ext4_es_insert_extent+0x45d/0xf10 [ 1482.987687] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1482.988194] ? lock_downgrade+0x6d0/0x6d0 [ 1482.988689] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1482.989330] ? down_write_killable+0x180/0x180 [ 1482.989877] ext4_map_blocks+0x80b/0x1910 [ 1482.990373] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1482.990901] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1482.991460] ext4_getblk+0x144/0x680 [ 1482.991901] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1482.992499] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1482.993032] ? __brelse+0x84/0xa0 [ 1482.993443] ? __ext4_new_inode+0x148/0x5370 [ 1482.993968] ext4_bread+0x29/0x1f0 [ 1482.994384] ext4_append+0x228/0x4e0 [ 1482.994813] ? ext4_move_extents+0x3060/0x3060 [ 1482.995334] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1482.995896] ext4_init_new_dir+0x25e/0x4d0 [ 1482.996389] ? ext4_init_dot_dotdot+0x610/0x610 [ 1482.996932] ext4_mkdir+0x3c1/0xb10 [ 1482.997355] ? ext4_rmdir+0xf70/0xf70 [ 1482.997801] vfs_mkdir+0x493/0x750 [ 1482.998214] do_mkdirat+0x150/0x2b0 [ 1482.998636] ? user_path_create+0xf0/0xf0 [ 1482.999116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.999719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1483.000321] do_syscall_64+0x33/0x40 [ 1483.000750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1483.001338] RIP: 0033:0x7f7ab951ec27 [ 1483.001764] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.003867] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1483.004744] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1483.005560] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1483.006373] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1483.007191] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1483.008010] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1483.020257] EXT4-fs (loop7): invalid first ino: 2875922842 05:22:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) 05:22:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 05:22:48 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:22:48 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 75) 05:22:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) finit_module(r0, &(0x7f0000000040)='net/ip6_flowlabel\x00', 0x1) 05:22:48 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x5, 0x6, @local}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="deb6b886e388583d177485976237baf4737e4648614708fd78cd31eed7dff87820abf02b2ce1bf99df603c25d12aa8bb", 0x30}, {&(0x7f0000000080)="720fe8c803707bd0b052655d0624c0468776b9098e", 0x15}, {&(0x7f00000000c0)="3ddead3983ab1abb3850924c517e14f72847ad1eb811c6df4cf849786905681a9181fcd0f6a86b55025900d775ba3133fe0a59adb021ab4a93266d73b5cce2bc169bc00a2d6d5446f393484be6", 0x4d}, {&(0x7f0000000140)="ac47e60c144b71c32b6c6bab4e65e7fb16f90f8ac758b088ffb40adffea3e326f60492064253fcfa24813b02593bca060b0c634c65094668ed4ad305b903", 0x3e}], 0x4, &(0x7f00000001c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3d}}, @hopopts_2292={{0x1078, 0x29, 0x36, {0x11, 0x20b, '\x00', [@generic={0x0, 0x3, "5a90bb"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x1000, "d7c204dfd51ae222b441282f885bdd59c5080221a84e597de52432a6bb271107d7e3218657f76ddaf94ed95267a679f27d7f1d26dd51a4a6508d37de2a1c458e2f1132a3ebf82df96b43a4e54a08b8fa60bd81b337b9371932f0dd556ad3009064ea23b6f2c1def7988c4b87915f95edcfa293d1f455924485d0abee05567d439f82fc18c3be3215018319fedeb9e204832df31b0c250ed9d9910a0cfdeb36f6882f790e9f3e3599c3485e3b255bf79c569477a39d19dadd222b6d300596a2c61840d1894f8f8ff774da5f0ec0ef752ffa0450cf18ada389b5490ca17f7c32960993c4fdfa4559c61df16514e3e88e35b1bfc8c9a52661c20406f6b3b1e9ff24a8e4ac7b7bb9d9077bc9f41340143d6806f3106ed710868ef0d4ec59b281f955b1fe1de4bd48636a4d90e8d2f60c7d8f88a69742e157fa773608939ad151a7f4d2b5b22a32e471c9f1bdb4f9b8585fc87462a9abbdc910862a49fa5d6b2e9010387831064a9af1f20ea66f239ecc1a088edcb855a5caa1d76fb9373bb3be405486af02d0f7c67f3b00b107c060153f454610fecdc815248f1b25435f865572eb9297ca4158ead2475c85acc6444d7d834707447136e7eb5452d40f3d881da570065bfc92351f16aad4cb97c2335e977a3cd27204875ae83da79586aaa1e75de8e4c6e70de5b36daeb6239e529413c57e7caf9002a9412c66da6862293f4f54398316a7c3e09f36eb8a5cb77eb265f4de224bc8d271804be04acec6ef37c2503fc142bd1679e474d2f4fa1b5546fc54ff0fb54b6bbad1e307a9897641bb3231878e1998df20299b360b3a632455d740ce3421f9a207ef66507a5c637e6fccc8368b79427fc5a0ebc4c7527883b8498756193a99d955a318d616404d2b4bb0d3f2ebb0620f4d12a59a26490c9ee22cb0bed4a4d5e0229c6cd0c8388f32dda5a36e5779b4eac6f60f8fd3c00a8e683e4fd3a8144a02fb900305383ada179944dee16d6bbd373315de84e09d5ca09c1d0b74129a2df1e7c7649c7b7fba9c18b0a137fc38eb35c3b96feac0c094646383ebe016d8e2f332f48d4740c12f9b3ecb094eadf6bd3040dfdbefaf38a4878537ecaacdfbba45ddba7d5917f78dbc15552c0c1ff3d417620177c0bba9dd86dfadf14a431212d5c31d6e291c009b9ad279935e92d3b245b1139701f90f9e5a2a4a67e34756e33e0681ec9f3d01ed140d55fce8b3e19c755be1f7e1196f6fa393ad34cf299ce81a8f4b2fdc99b4ab2a04b29f3954371e5722b80e6667ff134437c93f5c9883f34467488adca3b9e3ddf08920827487ce08c594665e8e7c31488a3c6e18d1002472b3d67d39d8cd1d76bcf94f874bd91b949dec8312aba85d79e3b44c6dbe26c06201d4ec4e3e17d9105edd729224156b24b76702644d823f1ab157f6e748fb05b44be7498b0f04201abad66f7e77e1193ade043beaccec8774e9bb4e5155f267f4172c332dc4be762ca52aa7f305c98def64f3655125aeb9c01baccf68df91f85b724b3f1f5541547f6d3c96d6112b1ff78930cc254dba5330ad98f70f0e23d55c87dd7a716a5b39dda97e83ebf9ee1ac4dd3d6d76fcf57fa07902341f337bb40ef6a6c141b0df5ea666e3ecf611e7b262fe041e23d7b409f22759b1aeeea0a2d82805c0b8efde41cf766950ce763063136d037e951606dd39b5305855a46d29d5f82ce4e0baf1fba1145272fa92147fe9129f9b448c5150d6c0444f68c2e5b37038b6c39a52f9d3a929b7a6381e21360e74a66f12974ab6bb3c0f9b4636faf58dc02337cb9cddb41cc055c54e61fce5cbaa5b771c4c1a92885809a91792c2e415cbe2097424a70321b8c79dbcbc12299b09f5b013cb215f1249b19fba8d33bb75b7c88fe0d0df4ad171bce4cca1cac7bb15e235ffdfe9a6b702591cacaef31e52eb16780ce67c5591fbb7e6a505cb53163b62cd29a90ee3bf15962951e6b433f87f5b96846e89b294f5a60e5312089216106d677deb8d653d54582e300823bc767f6c2e3a24724fdc6bbab84482a1e654ecbf07b9c88e386b19dd4c98255a6f6a955aa3bc96041aeb8fb2190b3741e384b6ef0efd4f29958e4f49219c967a2e0f35417c35f9377c5589607da4a0e13cd629461c2a99653d0a7269143fbb11659e56fe8212cc7b28a6455d920fce0502bb222682c648ce253f592f6d974e856e99a2279450ea69914f81a891f4f1ae5781014ef4b51c8220e7d605355ce27d742a70f644ee2ba431beefbb43c3cff85772ddb92ddd6310f9fb2967a42dc8a77e13a35f6d44040004608e71d7948ec82efc57270144f86ef13e4d4a093b976dbf6a426e9092e71f3b88eabc892e1b74a398ebe4acbb332749cd41c50feee50b6405614f8cbcbf3f0cd379ea2e3f5b281b46a64c917bf478a3fd7463cac66857fd6d3166317115016ce2ea9cc84686401e4da703d09fb115a494edc3d14d86eb50d92b7830beddadd0fb713b3f338349dc2d13536553ea022aa4ae3b0f6c4542ba65dbe9ff0c08db34b374c3378b701e25d3a1d5949918aab5ded79db2367df7dbfae707063cb743703a91cb2affabce6f81383e6c20a23b405193d11154daa51e8f38c4e846aeef2c499f7c3d537d188be9d1df09db38e15f6dcd8b027abdc58617961585caba172dba50efb50529ae73296e1b7cba5f96895d6a37896a5772ddf9de609b25ebfc90a906eb06c54dc109c960f2825bb34732853989771762d6ea5b607bc57d9a7ef9ba892591b0b9adc679e7964f6ca665f60f2d9697dd337a7a075c1f5878f84a099fb55a08d091bb6d38d0ff8fda80f9c0817813edaffaba389da83d883f2963aa9a3bfc17e4551901604692f61b4c43eb2453a06c485740bf5c9a418e89c63ade965f677f910d2b97a624e3a3c79a40464d91c05c5ce5df89bb2d44912a9e33964490f0a8e978607c92eaf50456654cd1bf83b367c17adadda4c3b47365581e90c9b21076b135167b48d655ef82abecfa9fb2b4bcf965e2b6e2e854f1d5576187a4ca609bd07fc081a83e18dbcd98df5686e9be86048b98471551036b6623f0e50a05fc2c7a18aef4df48d316b8a80be466af3c47e943c2eb79bfa5e1adffe50522407d4d470fb948c7158d58288d947923222e52595738c16ad954db536dabc68581052b25a66277d12f5e6350e7e98957e9be96a03d5126afa7609177fabb81ab3e024208249e52238254f9bb677230eb5f4aeafdefb91e63b0d34fb55a5916640f82e0c770738666a82bbd8201693753f9292de7e90a98c90d5554b9c9062230ea5906e29c042c30befde4424042c88307613e2fd5c839a80a1ab4e203364843fbc2e7eb0a5607f1f828085d6882c33f04c17cbbf4ef7b5631d561f75de0a06e63ea3f2c188ab558b77ced0a800c3f5f417d9718c85bbb68af455492100919e85213be32d3fa198053be240da2644279dc1650061f373e2ca33019c5a7d45584e3ed8fc402ceabbd58c881198e5f53d3ae43f70b0d96d1dedd9a571240bb4eca12d8337c07ca622f85550e3aeaf60831bd0b6f8398845c5532cb834e4d77938f42f084e461461a87a229bb45be2d40bb34b519a4de0ef9b29f48d29439602dba11f0fba4aab63305f9ff40f61a516844fba6601341eb7ae38500a4b5cd0b08edad02f9bfa3564268c89d30d4b28a889b44d809009dd5a1d46e463c0ea6ebdc037f1f469349d629803a00350025ef5b9ce3670a3e2bc9b2a13386b2ce97471922a6845289e68b96a039d59dfc38a42e312ebf47240ca146e29d49a78c3e1650d050ea670f7844eda55eb49bbadfe2c99d9cbad5380db09fdd35c6247c2c332df48952c8861d9a7f148193b3c5b1a17308389fe6f4a7b9b193114a9dd87b16041e33491477cc8e3e10f7b867f0f29641388999ddbf154fe0b332f1bb322bcf000d2de98588318c63a42949832c5a31dd42cc89d9c7a64dc0d92c83d6bb2bc450813982fc295d27d60e40f7706028b3844fe8644a53dc6c200c5ad552ada1e1d6ea4927cc0675b9bda941e8518b9e5662f2ab44a23710c906e9c95a142b903435c69e86e12d9feff824296702a480d7d73b4e6a1c354d6739d9548ab690593b536a1fc32f7bb1b1305bcdf009b337cf9a124cd46c3b947f54a3f68e8e66035bd5188b35a1e42938d104e0828ce8ce069958318e193cd8b2edf8c013969ff12826c45f83a5df8e15a297053d248dffef7332b6060dbc7699f1b1eae38b10a5510fd6f377ccff7f5c116810ff541de5ba76469cca61dcd387f7ee554c4b78fa0c7f944c47cbb0b92fcf347257fe5e976e48dd247ef0a5bf6fb807d5420e2a00b0b6c12f5b4ddc96510a18a1ad9d651a7e97fec5318d09bf2f06b3a9980ab01b777e96281ce1521e3e9ba561690f3da3a91293f5b8aa648bd20ef075c5379f0231e6a5e23028047e2b51a813849fd359d1f0697bb72ac03c98a2976cfbfb3c04ae92e82c4a0ec7eb806d33d99481d0e1c2804f117fd771672c95b55b72a5d6bf40bc481445930f92d7e71d41276341f08bf719f094353fb9ca0d3f4b1d9032d3ab0a197777216213013327f9f613bb8e4cc40a2c6ac1d1a941b7d51eb70bbbd4181119b60990f3470d392b8787e0c3b5d4823e953a9cd8a0c53faeb1b78b9334358ac63003dada21c02d55a3f1062b5bc3a91b4e217fd961580c04fb96d42b91c462d22fec050e3f3f843a9a8808bfcc73b9ee601550f59547e51c623f86187c1f9dca47d9a95998fe3ffd6c1089fd475db0072f05dbf6a1fef2ce961d9c3b0ca4b7407d7b41dcf0ee763839f8f192d1e073b22ebcf7ce513e047d2cea40cb97a95329ec78e187e712a7e38fdc5b24f088fd7a4d779deb330b8dc8082c4123b2b8acc976dd864d2a24d6d69eadfd442d2132688cb77da3d999c0b1775652f4752551959fd2c1d52eb2ee37a74ec11109aae7598493ad6eca4dda87b2af866df7e2b7e4ce5be57382d99c85c6286b428b6f2b5dee234524729cb030ba16eee31f8aec0e73371fc51072ca20303d9f5a9acd8ebc544a40b28d0fb8ed683990f8538188099ef4010eee03f011411f23d31a04f719d93da87ba731f06f1e2599ae11dc49ac652c14d051a6b0f51bb75d6bd3f2653995a9b67ce18fed9449b8898309c7f1fd4efbb5942571326425957b33a95581dcbf6d20004ca9f64b7a4723f14387a2a30e7c988e205c56a62bc94f5b492fa7185a7a82a0b6edc6507b998d779c6e1f25972ec9bb29ceb1ee311869e4cdc44ca2812141111f39144b9bd64c007513c71498b4bbfbce2b41d4361629abc5658fcd4dc992fd6dd14a5b33a38ac6bf9c9314a4935b98ef3880b41b3480682f7732c863a5cd4c9f188ff8f76bff2a8347b740a38133d7fb5ab9f1571d57de6f16a4dda2a976d8901eb2163ec1707306a5e7053476ad53b3c037b2e37cf51f44188bb57360c5aa50a5d90ec94cdbf8ec2c1ead226931f089e15c78f7fee94e82941bdfe70205b596915562aca74a91a15db8963d6f84d83c0ee4908550e3e447b2e2401eced416ed31752dfbf9c10df80c28b1c8c47c6040d0e491d48307f065fd7502b95e712dd60678b9e6b1e2cb7ae7f9eff204d31a9ff5ea33610596d5d44c754e2b72256bba1c9d480cce5376898404c91dc2fd320096714d438d691de1e9c6f5d190830d39d3a86ebe76e2c155198f7b452e517a1015b4d9388fc87a4fbd16e18b417e8ea47c0088e05d573220dc40a9a6e9f3f77175ee2da5f5af2c4cb5af44f821250d70bc0b3047aa11cd04c1ac43af647ea5"}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0xffff, [0x80000001]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc4, 0x9, [0x3ff, 0x1ff]}}]}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x8, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x58, {0x1, 0x14, 0x5, 0x8, [0x200, 0x100000000, 0x0, 0x5, 0xa9, 0x100, 0x401, 0x80000001, 0x1, 0x100000001]}}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x2f, 0x12, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x3, 0x6, [0x9, 0x8001, 0x1198, 0x8, 0x1, 0x9, 0x1, 0x2]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x1f, [0x9, 0x7ff, 0x7fff]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3f}, @pad1, @hao={0xc9, 0x10, @private2}, @jumbo]}}}], 0x11c8}}, {{&(0x7f00000013c0)={0xa, 0x4e20, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001400)="42631de1d2196434c46000dea6726013e4220b365e12ae1f582e8d043f89fe46", 0x20}, {&(0x7f0000001440)="e5c451207d4c44388ddf5834d976f04710c0088946344f838ed0d5d21ea7dfcabf368c50f1862fe1f9ca2d69f3ed0c042816ba08", 0x34}, {&(0x7f0000001480)="6b1f62c904eea93701a0bcb3ace78e91dd3583c55529e9a83cbad5bd1377755dfe1d82bcc38e1c1084ceced153800669921ff6f57c521b7bbc9f95fa08f4bc2988b39d031ac088", 0x47}, {&(0x7f0000001500)="57e3a919864533e397f4aae24960851bd94b12eaec24eec9e26dfe520ac6350a9bdab15ebd0e2035c0b8c4fb9e78fff4bfcba8fc369c85c81afba9a2d404176d0fd70e06099bd87cc156c8e1214eb82933abf0c20ed4275fbb72012aae1217c56a154e2d928de57d831e51b0a922c07514f3f6a5dd6a4af3d617e74f418a17ba62aac85d63504fb311af460a77731346b2c813ccc1fba9b63269d78a", 0x9c}, {&(0x7f00000015c0)="198bdef588b2ce306906706319080849b4ac38884d4b9788b5414e1994922440948e7ed2923c6eaff9c3ef031605371de3aa96224f76a598a54bab2507b089f53e9f34ed2e8456da202f6ab2bfdce627cc0634a10f013a8970e210d3bf0a689a8a7aa7e92ef5aa9ac9d62f355ac33f23a0b4249353f5b61362a76c7ba676b9a4a2d0982b337985ce6e7e8cfa8886f5b0bfaa39a1fb2208ee27809ca545be7c0001f08bd609c06dda4912f7f28b8e696b961ab35b9ada7b05f7202ae642b5595c8a5524a722ac049cf6672349675b22d81e29538431daa2e2e325e074bce24a6c02990b607667a8524607079ea8d945", 0xef}, {&(0x7f00000016c0)="a2be92a65b046ba74962d64cbee5691de55ba1c6cf3d0ba3a83eb11230cab6aaa190f82bb0c2ab3db791a67c26ea1bce106c4dae4c762f28a261feb69d5a9fa63c9d2bc0ca72ee82c2362f7f3a1de135ca146e94ae3277fd7f859cf7f79ab546297b217d08e4abf50189599ea6a55d595625283ee334539d4b03c0cc0e91b14482d7877560cafd92db1ede92c4dfe054610c21e5d2eb9727fc96644fb2747960e40fa09078a2512b421a16990ac47f90feb9a764b527e51cfcefc1c17a1b96fbf97f92334821784c2cb77a41fd05c27ac4cde1e00d5f9deccb0c30a33a7436", 0xdf}, {&(0x7f00000017c0)="94479bcd7f646576542e912c74f8", 0xe}], 0x7, &(0x7f0000001880)=[@dstopts={{0x28, 0x29, 0x37, {0x6c, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x24}}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dstopts={{0x68, 0x29, 0x37, {0x33, 0x9, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xa7, 0x1f, [0xfffffffffffffff7, 0xffffffff, 0x0, 0x20, 0x2, 0x200]}}, @enc_lim={0x4, 0x1, 0x64}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdr={{0x78, 0x29, 0x39, {0xc, 0xc, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x1c0}}], 0x2, 0x8004) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001ac0)={0x0, 0x1, 0x2, 0x3}) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000001b40)={@mcast1, 0xc, r2}) 05:22:48 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 72) 05:22:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xa, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1498.766389] loop7: detected capacity change from 0 to 2048 [ 1498.777201] FAULT_INJECTION: forcing a failure. [ 1498.777201] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.778755] CPU: 1 PID: 9090 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1498.778881] FAULT_INJECTION: forcing a failure. [ 1498.778881] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.779664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1498.779669] Call Trace: [ 1498.779688] dump_stack+0x107/0x167 [ 1498.779713] should_fail.cold+0x5/0xa [ 1498.784572] ? xas_alloc+0x336/0x440 [ 1498.785073] should_failslab+0x5/0x20 [ 1498.785591] kmem_cache_alloc+0x5b/0x310 [ 1498.786142] xas_alloc+0x336/0x440 [ 1498.786622] xas_create+0x34a/0x10d0 [ 1498.787138] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1498.787839] xas_store+0x8c/0x1c40 [ 1498.788332] __xa_store+0x164/0x2d0 [ 1498.788830] ? xa_delete_node+0x280/0x280 [ 1498.789392] ? trace_hardirqs_on+0x5b/0x180 [ 1498.789972] xa_store+0x31/0x50 [ 1498.790416] __io_uring_add_tctx_node+0x1cf/0x520 [ 1498.791069] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1498.791766] ? alloc_fd+0x2e7/0x670 [ 1498.792274] io_uring_setup+0x1fbb/0x2980 [ 1498.792843] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1498.793517] ? wait_for_completion_io+0x270/0x270 [ 1498.794198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1498.794920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.795619] do_syscall_64+0x33/0x40 [ 1498.796140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1498.796836] RIP: 0033:0x7f6e4b79cb19 [ 1498.797336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1498.799795] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1498.800816] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1498.801773] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1498.802738] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1498.803679] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1498.804660] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1498.805634] CPU: 0 PID: 9082 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1498.807154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1498.808993] Call Trace: [ 1498.809576] dump_stack+0x107/0x167 [ 1498.810387] should_fail.cold+0x5/0xa [ 1498.811257] ? create_object.isra.0+0x3a/0xa30 [ 1498.812297] should_failslab+0x5/0x20 [ 1498.813171] kmem_cache_alloc+0x5b/0x310 [ 1498.814083] create_object.isra.0+0x3a/0xa30 [ 1498.815052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1498.816181] kmem_cache_alloc+0x159/0x310 [ 1498.817131] __es_insert_extent+0xed1/0x1370 [ 1498.818131] ext4_es_insert_extent+0x45d/0xf10 [ 1498.819150] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1498.820100] ? lock_downgrade+0x6d0/0x6d0 [ 1498.821035] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1498.822206] ? down_write_killable+0x180/0x180 [ 1498.823229] ext4_map_blocks+0x80b/0x1910 [ 1498.824156] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1498.825156] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1498.826177] ext4_getblk+0x144/0x680 [ 1498.826982] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1498.828054] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1498.829030] ? __brelse+0x84/0xa0 [ 1498.829776] ? __ext4_new_inode+0x148/0x5370 [ 1498.830735] ext4_bread+0x29/0x1f0 [ 1498.831498] ext4_append+0x228/0x4e0 [ 1498.832306] ? ext4_move_extents+0x3060/0x3060 [ 1498.833302] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1498.834361] ext4_init_new_dir+0x25e/0x4d0 [ 1498.835279] ? ext4_init_dot_dotdot+0x610/0x610 [ 1498.836305] ext4_mkdir+0x3c1/0xb10 [ 1498.837110] ? ext4_rmdir+0xf70/0xf70 [ 1498.837957] vfs_mkdir+0x493/0x750 [ 1498.838735] do_mkdirat+0x150/0x2b0 [ 1498.839506] ? user_path_create+0xf0/0xf0 [ 1498.840412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1498.841554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.842667] do_syscall_64+0x33/0x40 [ 1498.843475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1498.844583] RIP: 0033:0x7f7ab951ec27 [ 1498.845379] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1498.849346] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1498.850989] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1498.852540] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1498.854081] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1498.855623] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1498.857167] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:22:48 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x1) 05:22:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:22:48 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) 05:22:48 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:22:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xb, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:22:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:22:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00') 05:22:48 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) [ 1499.055091] EXT4-fs (loop7): invalid first ino: 2875922842 05:23:01 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 73) 05:23:01 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4086, 0xdac, 0xf4ff9f) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 05:23:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xf, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:23:01 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:23:01 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:01 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) 05:23:01 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 76) [ 1511.986685] FAULT_INJECTION: forcing a failure. [ 1511.986685] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.989725] CPU: 0 PID: 9132 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1511.991434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.993476] Call Trace: [ 1511.994131] dump_stack+0x107/0x167 [ 1511.995040] should_fail.cold+0x5/0xa [ 1511.995974] ? create_object.isra.0+0x3a/0xa30 [ 1511.997119] should_failslab+0x5/0x20 [ 1511.998054] kmem_cache_alloc+0x5b/0x310 [ 1511.999078] ? mark_held_locks+0x9e/0xe0 [ 1512.000084] create_object.isra.0+0x3a/0xa30 [ 1512.000159] loop7: detected capacity change from 0 to 2048 [ 1512.001167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1512.001197] kmem_cache_alloc+0x159/0x310 [ 1512.001227] xas_alloc+0x336/0x440 [ 1512.002845] FAULT_INJECTION: forcing a failure. [ 1512.002845] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.003245] xas_create+0x34a/0x10d0 [ 1512.003282] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1512.003308] xas_store+0x8c/0x1c40 [ 1512.010616] __xa_store+0x164/0x2d0 [ 1512.011516] ? xa_delete_node+0x280/0x280 [ 1512.012542] ? trace_hardirqs_on+0x5b/0x180 [ 1512.013635] xa_store+0x31/0x50 [ 1512.014441] __io_uring_add_tctx_node+0x1cf/0x520 [ 1512.015635] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1512.016927] ? alloc_fd+0x2e7/0x670 [ 1512.017839] io_uring_setup+0x1fbb/0x2980 [ 1512.018866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1512.020092] ? wait_for_completion_io+0x270/0x270 [ 1512.021300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1512.022573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1512.023853] do_syscall_64+0x33/0x40 [ 1512.024770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1512.026027] RIP: 0033:0x7f6e4b79cb19 [ 1512.026924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.031425] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1512.033289] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1512.035012] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1512.036754] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1512.038478] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1512.040203] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1512.041952] CPU: 1 PID: 9136 Comm: syz-executor.7 Not tainted 5.10.252 #1 05:23:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1512.042918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1512.044322] Call Trace: [ 1512.044709] dump_stack+0x107/0x167 [ 1512.045225] should_fail.cold+0x5/0xa [ 1512.045775] ? jbd2_journal_add_journal_head+0x1a3/0x540 [ 1512.046553] should_failslab+0x5/0x20 [ 1512.047092] kmem_cache_alloc+0x5b/0x310 [ 1512.047666] jbd2_journal_add_journal_head+0x1a3/0x540 [ 1512.048406] jbd2_journal_get_create_access+0x40/0x570 [ 1512.049165] __ext4_journal_get_create_access+0x43/0x90 [ 1512.049918] ext4_getblk+0x318/0x680 [ 1512.050446] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1512.051142] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1512.051781] ? __brelse+0x84/0xa0 [ 1512.052284] ? __ext4_new_inode+0x148/0x5370 [ 1512.052919] ext4_bread+0x29/0x1f0 [ 1512.053422] ext4_append+0x228/0x4e0 [ 1512.053947] ? ext4_move_extents+0x3060/0x3060 [ 1512.054590] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1512.055272] ext4_init_new_dir+0x25e/0x4d0 [ 1512.055867] ? ext4_init_dot_dotdot+0x610/0x610 [ 1512.056526] ext4_mkdir+0x3c1/0xb10 [ 1512.057064] ? ext4_rmdir+0xf70/0xf70 [ 1512.057623] vfs_mkdir+0x493/0x750 [ 1512.058125] do_mkdirat+0x150/0x2b0 [ 1512.058649] ? user_path_create+0xf0/0xf0 [ 1512.059221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1512.059953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1512.060673] do_syscall_64+0x33/0x40 [ 1512.061199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1512.061895] RIP: 0033:0x7f7ab951ec27 [ 1512.062416] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.064951] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1512.066000] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1512.066980] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1512.067978] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1512.068977] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1512.069946] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1512.071691] ENOMEM in journal_alloc_journal_head, retrying. [ 1512.075785] EXT4-fs (loop7): invalid first ino: 2875922842 05:23:01 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/209, 0xd1}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000740)=""/211, 0xd3}], 0xa, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f0000000ac0)=""/172, 0xac}, {&(0x7f0000000b80)=""/152, 0x98}, {&(0x7f0000000c40)=""/80, 0x50}, {&(0x7f0000000cc0)=""/138, 0x8a}, {&(0x7f0000000d80)=""/186, 0xba}], 0x6, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000f00), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000f80)=""/244, 0xf4}, {&(0x7f0000001080)=""/18, 0x12}, {&(0x7f0000002100)=""/89, 0x59}, {&(0x7f0000002180)=""/176, 0xb0}, {&(0x7f0000002240)=""/237, 0xed}, {&(0x7f00000010c0)=""/24, 0x18}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/21, 0x15}, {&(0x7f00000023c0)=""/193, 0xc1}], 0x9, &(0x7f0000002580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f00000026c0), 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/48, 0x30}, {&(0x7f0000002780)=""/234, 0xea}, {&(0x7f0000002880)=""/52, 0x34}], 0x3, &(0x7f0000002900)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000004e40)=[{&(0x7f00000029c0)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/171, 0xab}, {&(0x7f0000002b80)=""/249, 0xf9}, {&(0x7f0000002c80)=""/90, 0x5a}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/116, 0x74}, {&(0x7f0000003e00)=""/50, 0x32}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0xa}}, {{&(0x7f0000004f00), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000004f80)=""/87, 0x57}, {&(0x7f0000005000)=""/185, 0xb9}], 0x2}}], 0x6, 0x22, &(0x7f0000005280)={0x0, 0x989680}) syz_open_procfs(r1, &(0x7f00000052c0)='net/ptype\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002340), 0x1010c2, 0x0) io_uring_enter(r2, 0x7d78, 0x3bec, 0x1, &(0x7f0000003d00)={[0x9e]}, 0x8) 05:23:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x10, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:23:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r2, 0x10, 0x0, 0x3ff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:23:16 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 74) 05:23:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x11, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:23:16 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 77) 05:23:16 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) 05:23:16 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@dev}}, {{}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/l2cap\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r3) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 05:23:16 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1526.803417] FAULT_INJECTION: forcing a failure. [ 1526.803417] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.805938] CPU: 0 PID: 9170 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1526.807419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.809218] Call Trace: [ 1526.809804] dump_stack+0x107/0x167 [ 1526.810599] should_fail.cold+0x5/0xa [ 1526.811442] ? xas_alloc+0x336/0x440 [ 1526.812267] should_failslab+0x5/0x20 [ 1526.813123] kmem_cache_alloc+0x5b/0x310 [ 1526.814030] xas_alloc+0x336/0x440 [ 1526.814820] xas_create+0x34a/0x10d0 [ 1526.815661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1526.816836] xas_store+0x8c/0x1c40 [ 1526.817644] __xa_store+0x164/0x2d0 [ 1526.818450] ? xa_delete_node+0x280/0x280 [ 1526.819378] ? trace_hardirqs_on+0x5b/0x180 [ 1526.820339] xa_store+0x31/0x50 [ 1526.821080] __io_uring_add_tctx_node+0x1cf/0x520 [ 1526.822148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1526.823302] ? alloc_fd+0x2e7/0x670 [ 1526.824117] io_uring_setup+0x1fbb/0x2980 [ 1526.825046] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1526.826163] ? wait_for_completion_io+0x270/0x270 [ 1526.827254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.828409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.829538] do_syscall_64+0x33/0x40 [ 1526.830343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.831458] RIP: 0033:0x7f6e4b79cb19 [ 1526.832281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.836358] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1526.838040] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1526.839618] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1526.841202] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1526.842736] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1526.844277] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:23:16 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) 05:23:16 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1526.862437] loop7: detected capacity change from 0 to 2048 [ 1526.864908] FAULT_INJECTION: forcing a failure. [ 1526.864908] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.867369] CPU: 0 PID: 9175 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1526.868857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.870646] Call Trace: [ 1526.871222] dump_stack+0x107/0x167 [ 1526.872021] should_fail.cold+0x5/0xa [ 1526.872856] ? create_object.isra.0+0x3a/0xa30 [ 1526.873866] should_failslab+0x5/0x20 [ 1526.874707] kmem_cache_alloc+0x5b/0x310 05:23:16 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1526.875612] create_object.isra.0+0x3a/0xa30 [ 1526.876732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1526.877875] kmem_cache_alloc+0x159/0x310 [ 1526.878801] __es_insert_extent+0xed1/0x1370 [ 1526.879780] ext4_es_insert_extent+0x45d/0xf10 [ 1526.880779] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1526.881721] ? lock_downgrade+0x6d0/0x6d0 [ 1526.882618] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 1526.883779] ? down_write_killable+0x180/0x180 [ 1526.884781] ext4_map_blocks+0x80b/0x1910 [ 1526.885717] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1526.886714] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1526.887768] ext4_getblk+0x144/0x680 [ 1526.888597] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1526.889716] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1526.890712] ? __brelse+0x84/0xa0 [ 1526.891487] ? __ext4_new_inode+0x148/0x5370 [ 1526.892471] ext4_bread+0x29/0x1f0 [ 1526.893262] ext4_append+0x228/0x4e0 [ 1526.894093] ? ext4_move_extents+0x3060/0x3060 [ 1526.895096] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1526.896163] ext4_init_new_dir+0x25e/0x4d0 [ 1526.897091] ? ext4_init_dot_dotdot+0x610/0x610 [ 1526.898123] ext4_mkdir+0x3c1/0xb10 [ 1526.898922] ? ext4_rmdir+0xf70/0xf70 [ 1526.899764] vfs_mkdir+0x493/0x750 [ 1526.900536] do_mkdirat+0x150/0x2b0 [ 1526.901344] ? user_path_create+0xf0/0xf0 [ 1526.902254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1526.903398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1526.904545] do_syscall_64+0x33/0x40 [ 1526.905379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.906514] RIP: 0033:0x7f7ab951ec27 05:23:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x9c, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1526.907338] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.911452] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1526.913135] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1526.914720] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1526.916272] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1526.917862] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1526.919407] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1526.927385] EXT4-fs (loop7): invalid first ino: 2875922842 05:23:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001080)=""/4111, 0xfffffffffffffea4, 0xd19b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x99c) 05:23:16 executing program 0: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0xe, 0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x4000, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) keyctl$set_reqkey_keyring(0xe, 0x2) 05:23:16 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 75) 05:23:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 78) 05:23:16 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) [ 1527.070340] FAULT_INJECTION: forcing a failure. [ 1527.070340] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.073124] CPU: 1 PID: 9192 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1527.074697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.076571] Call Trace: [ 1527.077199] dump_stack+0x107/0x167 [ 1527.078049] should_fail.cold+0x5/0xa [ 1527.078910] ? create_object.isra.0+0x3a/0xa30 [ 1527.079941] should_failslab+0x5/0x20 [ 1527.080805] kmem_cache_alloc+0x5b/0x310 [ 1527.081724] ? mark_held_locks+0x9e/0xe0 [ 1527.082653] create_object.isra.0+0x3a/0xa30 [ 1527.083635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1527.084782] kmem_cache_alloc+0x159/0x310 [ 1527.085740] xas_alloc+0x336/0x440 [ 1527.086539] xas_create+0x34a/0x10d0 [ 1527.087385] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1527.088574] xas_store+0x8c/0x1c40 [ 1527.089404] __xa_store+0x164/0x2d0 [ 1527.090230] ? xa_delete_node+0x280/0x280 [ 1527.091174] ? trace_hardirqs_on+0x5b/0x180 [ 1527.092163] xa_store+0x31/0x50 [ 1527.092922] __io_uring_add_tctx_node+0x1cf/0x520 [ 1527.094010] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1527.095184] ? alloc_fd+0x2e7/0x670 [ 1527.096010] io_uring_setup+0x1fbb/0x2980 [ 1527.096965] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1527.098099] ? wait_for_completion_io+0x270/0x270 [ 1527.099206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1527.100384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1527.101553] do_syscall_64+0x33/0x40 [ 1527.102398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1527.103551] RIP: 0033:0x7f6e4b79cb19 [ 1527.104385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.108503] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1527.110223] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1527.111822] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1527.113418] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1527.115010] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1527.116595] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:23:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xf0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:23:16 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1527.142129] loop7: detected capacity change from 0 to 2048 [ 1527.144705] FAULT_INJECTION: forcing a failure. [ 1527.144705] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.147186] CPU: 0 PID: 9197 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1527.148669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.150489] Call Trace: [ 1527.151067] dump_stack+0x107/0x167 [ 1527.151864] should_fail.cold+0x5/0xa [ 1527.152698] ? create_object.isra.0+0x3a/0xa30 [ 1527.153691] should_failslab+0x5/0x20 [ 1527.154528] kmem_cache_alloc+0x5b/0x310 [ 1527.155424] create_object.isra.0+0x3a/0xa30 [ 1527.156384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1527.157483] kmem_cache_alloc+0x159/0x310 [ 1527.158383] jbd2_journal_add_journal_head+0x1a3/0x540 [ 1527.159520] jbd2_journal_get_create_access+0x40/0x570 [ 1527.160674] __ext4_journal_get_create_access+0x43/0x90 [ 1527.161856] ext4_getblk+0x318/0x680 [ 1527.162672] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1527.163762] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1527.164741] ? __brelse+0x84/0xa0 [ 1527.165517] ? __ext4_new_inode+0x148/0x5370 [ 1527.166477] ext4_bread+0x29/0x1f0 [ 1527.167244] ext4_append+0x228/0x4e0 [ 1527.168051] ? ext4_move_extents+0x3060/0x3060 [ 1527.169052] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 1527.170121] ext4_init_new_dir+0x25e/0x4d0 [ 1527.171055] ? ext4_init_dot_dotdot+0x610/0x610 [ 1527.172086] ext4_mkdir+0x3c1/0xb10 [ 1527.172901] ? ext4_rmdir+0xf70/0xf70 [ 1527.173744] vfs_mkdir+0x493/0x750 [ 1527.174528] do_mkdirat+0x150/0x2b0 [ 1527.175337] ? user_path_create+0xf0/0xf0 [ 1527.176252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1527.177394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1527.178507] do_syscall_64+0x33/0x40 [ 1527.179324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1527.180422] RIP: 0033:0x7f7ab951ec27 [ 1527.181252] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.185176] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1527.186802] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab951ec27 [ 1527.188313] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 1527.189848] RBP: 00007f7ab6a95040 R08: 0000000000000000 R09: ffffffffffffffff [ 1527.191373] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1527.192885] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1527.200307] EXT4-fs (loop7): invalid first ino: 2875922842 05:23:32 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 79) 05:23:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:32 executing program 4: r0 = gettid() clone3(&(0x7f0000000400)={0x20000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x16}, &(0x7f0000000200)=""/136, 0x88, &(0x7f00000002c0)=""/250, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], 0x6}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) r2 = syz_open_procfs(r1, &(0x7f0000000580)='attr/sockcreate\x00') flistxattr(r2, &(0x7f0000000040)=""/201, 0xc9) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:23:32 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) 05:23:32 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:23:32 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 76) 05:23:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x300, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1543.002051] FAULT_INJECTION: forcing a failure. [ 1543.002051] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.004804] CPU: 0 PID: 9219 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1543.006486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1543.008524] Call Trace: [ 1543.009189] dump_stack+0x107/0x167 [ 1543.010113] should_fail.cold+0x5/0xa [ 1543.011038] ? xas_alloc+0x336/0x440 [ 1543.011964] should_failslab+0x5/0x20 [ 1543.012888] kmem_cache_alloc+0x5b/0x310 [ 1543.013898] xas_alloc+0x336/0x440 [ 1543.014766] xas_create+0x34a/0x10d0 [ 1543.015684] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1543.016958] xas_store+0x8c/0x1c40 [ 1543.017847] __xa_store+0x164/0x2d0 [ 1543.018732] ? xa_delete_node+0x280/0x280 [ 1543.019746] ? trace_hardirqs_on+0x5b/0x180 [ 1543.020801] xa_store+0x31/0x50 [ 1543.021618] __io_uring_add_tctx_node+0x1cf/0x520 [ 1543.022785] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1543.024050] ? alloc_fd+0x2e7/0x670 [ 1543.024962] io_uring_setup+0x1fbb/0x2980 [ 1543.025999] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1543.027235] ? wait_for_completion_io+0x270/0x270 [ 1543.028437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1543.029717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1543.030980] do_syscall_64+0x33/0x40 [ 1543.031893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1543.033153] RIP: 0033:0x7f6e4b79cb19 [ 1543.034053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.038566] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1543.040406] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1543.042135] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1543.043861] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1543.045586] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1543.047308] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1543.056267] loop7: detected capacity change from 0 to 2048 05:23:32 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:32 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) [ 1543.070856] FAULT_INJECTION: forcing a failure. [ 1543.070856] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.073656] CPU: 0 PID: 9229 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1543.075331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1543.077361] Call Trace: [ 1543.078004] dump_stack+0x107/0x167 [ 1543.078895] should_fail.cold+0x5/0xa [ 1543.079824] ? create_object.isra.0+0x3a/0xa30 [ 1543.080942] should_failslab+0x5/0x20 [ 1543.081875] kmem_cache_alloc+0x5b/0x310 [ 1543.082869] create_object.isra.0+0x3a/0xa30 [ 1543.083934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1543.085181] __kmalloc_track_caller+0x177/0x370 [ 1543.086298] ? strndup_user+0x74/0xe0 [ 1543.087223] memdup_user+0x22/0xd0 [ 1543.088082] strndup_user+0x74/0xe0 [ 1543.088965] __x64_sys_mount+0x133/0x300 [ 1543.089966] ? copy_mnt_ns+0xa00/0xa00 [ 1543.090932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1543.092225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1543.093499] do_syscall_64+0x33/0x40 [ 1543.094411] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1543.095666] RIP: 0033:0x7f7ab952104a [ 1543.096565] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.101028] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1543.102861] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1543.104581] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1543.106308] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1543.108031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1543.109817] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:23:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1543.119629] EXT4-fs (loop7): invalid first ino: 2875922842 05:23:46 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 77) 05:23:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x500, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:23:46 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x5, 0x200, 0x7fff, 0xb20b}) pread64(r0, &(0x7f0000001100)=""/4085, 0xff5, 0xf0ff1f) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000240)) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:23:46 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:46 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:23:46 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 80) 05:23:46 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:46 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1557.348065] FAULT_INJECTION: forcing a failure. [ 1557.348065] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.349535] CPU: 0 PID: 9258 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1557.350382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1557.351412] Call Trace: [ 1557.351744] dump_stack+0x107/0x167 [ 1557.352197] should_fail.cold+0x5/0xa [ 1557.352669] ? create_object.isra.0+0x3a/0xa30 [ 1557.353240] should_failslab+0x5/0x20 [ 1557.353709] kmem_cache_alloc+0x5b/0x310 [ 1557.354213] ? mark_held_locks+0x9e/0xe0 [ 1557.354739] create_object.isra.0+0x3a/0xa30 [ 1557.355322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1557.356006] kmem_cache_alloc+0x159/0x310 [ 1557.356557] xas_alloc+0x336/0x440 [ 1557.357031] xas_create+0x34a/0x10d0 [ 1557.357538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1557.358229] xas_store+0x8c/0x1c40 [ 1557.358714] __xa_store+0x164/0x2d0 [ 1557.359198] ? xa_delete_node+0x280/0x280 [ 1557.359759] ? trace_hardirqs_on+0x5b/0x180 [ 1557.360328] xa_store+0x31/0x50 [ 1557.360768] __io_uring_add_tctx_node+0x1cf/0x520 [ 1557.361441] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1557.362136] ? alloc_fd+0x2e7/0x670 [ 1557.362626] io_uring_setup+0x1fbb/0x2980 [ 1557.363173] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1557.363836] ? wait_for_completion_io+0x270/0x270 [ 1557.364489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1557.365182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1557.365856] do_syscall_64+0x33/0x40 [ 1557.366348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1557.367015] RIP: 0033:0x7f6e4b79cb19 [ 1557.367496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.369911] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1557.370913] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1557.371844] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1557.372775] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1557.373699] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1557.374619] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:23:46 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1557.395668] loop7: detected capacity change from 0 to 2048 [ 1557.397165] FAULT_INJECTION: forcing a failure. [ 1557.397165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.398674] CPU: 0 PID: 9270 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1557.399550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1557.400630] Call Trace: [ 1557.400975] dump_stack+0x107/0x167 [ 1557.401455] should_fail.cold+0x5/0xa [ 1557.401958] _copy_from_user+0x2e/0x1b0 [ 1557.402465] memdup_user+0x65/0xd0 [ 1557.402920] strndup_user+0x74/0xe0 [ 1557.403390] __x64_sys_mount+0x133/0x300 [ 1557.403915] ? copy_mnt_ns+0xa00/0xa00 [ 1557.404418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1557.405094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1557.405772] do_syscall_64+0x33/0x40 [ 1557.406249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1557.406900] RIP: 0033:0x7f7ab952104a [ 1557.407379] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.409740] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1557.410720] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1557.411635] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1557.412565] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1557.413477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1557.414380] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:23:46 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) 05:23:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x6) 05:23:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x600, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:23:46 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:23:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) write$vga_arbiter(r1, 0x0, 0x3f00) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/149, 0x95}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/113, 0x71}], 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ftruncate(r3, 0x5) 05:23:46 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:24:01 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 81) 05:24:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) [ 1572.376006] FAULT_INJECTION: forcing a failure. [ 1572.376006] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.378193] CPU: 1 PID: 9307 Comm: syz-executor.5 Not tainted 5.10.252 #1 05:24:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x6) 05:24:01 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 78) 05:24:01 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x6) 05:24:01 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x700, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1572.379366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1572.380940] Call Trace: [ 1572.381411] dump_stack+0x107/0x167 [ 1572.382035] should_fail.cold+0x5/0xa [ 1572.382694] ? xas_alloc+0x336/0x440 [ 1572.383327] should_failslab+0x5/0x20 [ 1572.383980] kmem_cache_alloc+0x5b/0x310 [ 1572.384674] xas_alloc+0x336/0x440 [ 1572.385286] xas_create+0x34a/0x10d0 [ 1572.385945] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1572.386833] xas_store+0x8c/0x1c40 [ 1572.387453] __xa_store+0x164/0x2d0 [ 1572.388071] ? xa_delete_node+0x280/0x280 [ 1572.388785] ? trace_hardirqs_on+0x5b/0x180 [ 1572.389531] xa_store+0x31/0x50 [ 1572.390093] __io_uring_add_tctx_node+0x1cf/0x520 [ 1572.390908] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1572.391796] ? alloc_fd+0x2e7/0x670 [ 1572.392426] io_uring_setup+0x1fbb/0x2980 [ 1572.393137] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1572.394007] ? wait_for_completion_io+0x270/0x270 [ 1572.394887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1572.395790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1572.396704] do_syscall_64+0x33/0x40 [ 1572.397359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1572.398272] RIP: 0033:0x7f6e4b79cb19 [ 1572.398904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.402187] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1572.403553] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1572.404842] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1572.406129] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1572.407384] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1572.408627] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:24:01 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1572.442184] loop7: detected capacity change from 0 to 2048 [ 1572.444315] FAULT_INJECTION: forcing a failure. [ 1572.444315] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.446338] CPU: 1 PID: 9314 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1572.447530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1572.448964] Call Trace: [ 1572.449436] dump_stack+0x107/0x167 [ 1572.450066] should_fail.cold+0x5/0xa [ 1572.450732] should_failslab+0x5/0x20 [ 1572.451386] __kmalloc_track_caller+0x79/0x370 [ 1572.452170] ? strndup_user+0x74/0xe0 [ 1572.452833] memdup_user+0x22/0xd0 [ 1572.453464] strndup_user+0x74/0xe0 [ 1572.454100] __x64_sys_mount+0x17c/0x300 [ 1572.454800] ? copy_mnt_ns+0xa00/0xa00 [ 1572.455486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1572.456408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1572.457324] do_syscall_64+0x33/0x40 [ 1572.457978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1572.458865] RIP: 0033:0x7f7ab952104a [ 1572.459511] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.462714] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1572.464042] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1572.465278] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1572.466532] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1572.467774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1572.469013] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:24:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x6) 05:24:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x900, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:01 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:24:01 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:24:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x0) 05:24:01 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) 05:24:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x0) 05:24:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x6) 05:24:15 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:15 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xa00, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 79) 05:24:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 82) 05:24:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYBLOB="29000000000000000010000000000000810000000000000008000000bb00dd9e08000000000000000100000001000000200000000200000008000000ff0f000000000000026d0000000000000700000000000000fdffffffffffffff100000000000000000000028490c13aefbb3f1ab4a670000000000000000000100000000000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0xd8}) pipe2(&(0x7f0000001040)={0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {r6}], 0xd8}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001600)=ANY=[@ANYRES64=r10, @ANYBLOB="2900000000000000001000000000000081000000000008000000000000000800000000000000010000000100000020000000020000000800000005000000ff0f00000000000002000000000000000300000000000000fdffffffffffffff10000000000000001000"/120]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {0x0, r11}, {r9}], 0xd8}) pipe2(&(0x7f0000001040)={0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {r20}], 0xd8}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=r24, @ANYBLOB="2900000000000000001000000000000081000000000000000800000000eaffff07000000000000180100000005000000ff0f00000000000002000000000000000300000000000000fdffffffffffffff10000000000000000000000000000000000000000000000000000000000000000000000000000000d1f643da29956823977cf93068f087a2db72f6b4bc3e4bfcdbbbca2c607c5c1ccd2309a3a2007c00000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {0x0, r28}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r26}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r29}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {r20}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r27}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r30}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {0x0, r25}, {r23}], 0xd8}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000061c80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r6}, {}, {0x0, r19}], 0x5, "856cf8d1a48dd1"}) [ 1586.650094] loop7: detected capacity change from 0 to 2048 [ 1586.651508] FAULT_INJECTION: forcing a failure. [ 1586.651508] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.654095] CPU: 1 PID: 9357 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1586.655576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1586.656186] FAULT_INJECTION: forcing a failure. [ 1586.656186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.657351] Call Trace: [ 1586.657377] dump_stack+0x107/0x167 [ 1586.657401] should_fail.cold+0x5/0xa [ 1586.657428] ? create_object.isra.0+0x3a/0xa30 [ 1586.663012] should_failslab+0x5/0x20 [ 1586.663842] kmem_cache_alloc+0x5b/0x310 [ 1586.664708] ? mark_held_locks+0x9e/0xe0 [ 1586.665584] create_object.isra.0+0x3a/0xa30 [ 1586.666515] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1586.667606] kmem_cache_alloc+0x159/0x310 [ 1586.668502] xas_alloc+0x336/0x440 [ 1586.669263] xas_create+0x34a/0x10d0 [ 1586.670134] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1586.671263] xas_store+0x8c/0x1c40 [ 1586.672036] __xa_store+0x164/0x2d0 [ 1586.672815] ? xa_delete_node+0x280/0x280 [ 1586.673711] ? trace_hardirqs_on+0x5b/0x180 [ 1586.674642] xa_store+0x31/0x50 [ 1586.675356] __io_uring_add_tctx_node+0x1cf/0x520 [ 1586.676401] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1586.677518] ? alloc_fd+0x2e7/0x670 [ 1586.678302] io_uring_setup+0x1fbb/0x2980 [ 1586.679194] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1586.680269] ? wait_for_completion_io+0x270/0x270 [ 1586.681310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1586.682423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1586.683526] do_syscall_64+0x33/0x40 [ 1586.684314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1586.685394] RIP: 0033:0x7f6e4b79cb19 [ 1586.686194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.690051] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1586.691635] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1586.693131] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1586.694652] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1586.696204] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1586.697922] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1586.699661] CPU: 0 PID: 9359 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1586.701155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1586.702949] Call Trace: [ 1586.703524] dump_stack+0x107/0x167 [ 1586.704319] should_fail.cold+0x5/0xa [ 1586.705164] _copy_from_user+0x2e/0x1b0 [ 1586.706050] memdup_user+0x65/0xd0 [ 1586.706832] strndup_user+0x74/0xe0 [ 1586.707624] __x64_sys_mount+0x133/0x300 [ 1586.708500] ? copy_mnt_ns+0xa00/0xa00 [ 1586.709350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1586.710493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1586.711601] do_syscall_64+0x33/0x40 [ 1586.712401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1586.713531] RIP: 0033:0x7f7ab952104a [ 1586.714344] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.718300] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1586.719925] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1586.721472] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1586.723036] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1586.724589] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1586.726130] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:24:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x0) 05:24:16 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) write$vga_arbiter(r0, 0x0, 0x3f00) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020004200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0xffffffffffffffbf}], 0x0, &(0x7f0000000080)={[{@shortname_mixed}]}) 05:24:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x6) 05:24:16 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) 05:24:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xb00, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 83) [ 1586.864787] audit: type=1400 audit(1773293056.149:34): avc: denied { relabelto } for pid=9369 comm="syz-executor.0" name="SCO" dev="sockfs" ino=33468 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:setrans_exec_t:s0 tclass=bluetooth_socket permissive=1 [ 1586.907108] loop7: detected capacity change from 0 to 2048 [ 1586.909602] FAULT_INJECTION: forcing a failure. [ 1586.909602] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.912072] CPU: 0 PID: 9380 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1586.913551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1586.914775] FAULT_INJECTION: forcing a failure. [ 1586.914775] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.915337] Call Trace: [ 1586.915370] dump_stack+0x107/0x167 [ 1586.919061] should_fail.cold+0x5/0xa [ 1586.919904] should_failslab+0x5/0x20 [ 1586.920724] __kmalloc_track_caller+0x79/0x370 [ 1586.921719] ? strndup_user+0x74/0xe0 [ 1586.922548] memdup_user+0x22/0xd0 [ 1586.923319] strndup_user+0x74/0xe0 [ 1586.924114] __x64_sys_mount+0x17c/0x300 [ 1586.924986] ? copy_mnt_ns+0xa00/0xa00 [ 1586.925837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1586.926960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1586.928076] do_syscall_64+0x33/0x40 [ 1586.928872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1586.929986] RIP: 0033:0x7f7ab952104a [ 1586.930804] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.934809] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1586.936448] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1586.937997] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1586.939544] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1586.941077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1586.942627] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1586.944203] CPU: 1 PID: 9383 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1586.945670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1586.947425] Call Trace: 05:24:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002e952c9c61d6a33752da312f4387becc45d709423fd44c874539adfba1eb08a9c8853b7a77493949357493e3560f75dfeae3e0eaa95458a6e76f07061ae720f0584249cb2e53364ff5a13c23c5f9d238f8bc68bbde84323a7b70196efc1caa144b7b8c9a9cdd418a5e4fc5b99ad550a1d09c3e52e829ff91f8f8e544668f6d641df2ba797da5aaec4c7854f302b48d7ede16390415f6a1ca567583e85d4e49b82875c7fb38d50038a1443f2dbed3f198ce38858c3bd037441ffd6d573b1cdb675ec8fdb92aaa3ee624baf5c501735c6811aa4bc7e63dddf60ad162fa11915854c2f221232b755ce2a3"]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[@timestamp], 0x1) pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000d00)='./file0\x00', 0x0, 0x100) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x0) setfsgid(0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = inotify_init1(0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x1, 0x7a, &(0x7f0000000040)="6fdd00c5de5923a83504302de58142f8e74880ee3c8270e1e17abfe2569f852f2ddbe9a23802cb00611e8d4115b2c27e5c64c6d2a7d152361c9dfb592415cc8d89145bdd6daa79a92980c0de52e4d5c740e14ab201938972d941ca6faadf04d65731f0fe01b7a7875cc6bc0864cc02b89615b713196725d1df30"}, {0x4, 0x4e, &(0x7f00000000c0)="5b419b487d32954642c5bbf001d940dc57141ac7de7dd584dfcb0db8aba0d44968dbb5bbef465359c9e7fb026894a3e8d1532d8cb613924fd1b7d362f64fbaec51ceb6f70f62544423b0fcea9afe", 0x1, 0x5348ba8488f2efd5}, {0xffffffff, 0x58, &(0x7f0000000140)="1d7934d3ad939bb0e8accb09241888e06584903fcbab9dd2c6d9efc4d24e2155678c6e9ac90b329499d48a92fdddee268af62216719b462d869d2842578c16e3b1bf429c1a47d942d300b22310335438a5e46ebeab81d2b2", 0x1, 0x1}, {0x3f, 0x7, &(0x7f00000001c0)="e4b94dd5cd32cd", 0x0, 0x1}]}) [ 1586.947990] dump_stack+0x107/0x167 [ 1586.949016] should_fail.cold+0x5/0xa [ 1586.949875] ? kvmalloc_node+0x119/0x170 [ 1586.950733] should_failslab+0x5/0x20 [ 1586.951549] __kmalloc_node+0x76/0x420 [ 1586.952377] kvmalloc_node+0x119/0x170 [ 1586.953204] seq_read_iter+0x9d6/0x12b0 [ 1586.954071] seq_read+0x3dd/0x5b0 [ 1586.954809] ? seq_read_iter+0x12b0/0x12b0 [ 1586.955708] ? find_held_lock+0x2c/0x110 [ 1586.956577] ? fsnotify_perm.part.0+0x22d/0x620 [ 1586.957570] ? seq_read_iter+0x12b0/0x12b0 05:24:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 1) [ 1586.958465] proc_reg_read+0x22a/0x300 [ 1586.959381] ? proc_reg_write+0x300/0x300 [ 1586.960294] vfs_read+0x228/0x620 [ 1586.961031] __x64_sys_pread64+0x201/0x260 [ 1586.961928] ? ksys_pread64+0x1b0/0x1b0 [ 1586.962779] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1586.963887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1586.964980] do_syscall_64+0x33/0x40 [ 1586.965782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1586.966862] RIP: 0033:0x7fb57e954b19 [ 1586.967652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.971548] RSP: 002b:00007fb57beca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1586.973182] RAX: ffffffffffffffda RBX: 00007fb57ea67f60 RCX: 00007fb57e954b19 [ 1586.974688] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1586.976189] RBP: 00007fb57beca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1586.977679] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1586.979196] R13: 00007fff4a725c4f R14: 00007fb57beca300 R15: 0000000000022000 05:24:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) r2 = openat(r1, &(0x7f0000000280)='/proc/self/exe\x00', 0x105400, 0x24) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x10}}, 0x4048010) socket$nl_audit(0x10, 0x3, 0x9) signalfd(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r0, r2, 0x0, 0x100000001) 05:24:30 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 05:24:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xf00, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0xa01}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8) r1 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r1, 0x7f, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1001000, &(0x7f00000001c0)=ANY=[]) epoll_create(0x81) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) sendfile(r1, 0xffffffffffffffff, &(0x7f00000003c0)=0x9, 0x3) writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000001880)="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", 0xe2}, {&(0x7f0000000040)="92e65a9475b434b58c39dfa017e698eafebe4651809d5ef5", 0x18}, {&(0x7f0000000500)="a28f65b4ca6056f869e0493eaf10d935825a5248c24be04e68fe1896f94d42829946faf0520ecbc58e5bf65ee9e17e051eb8ec5028587e49360bc6cace1d99bbf20fcd9dac4935b32d8441642c274337edf18d67ad596b19e5b8a58ab29932b83066fea75955637cb2d31d73cb0fbb6cf50b20ed517690aa225ffd557c5037599ea3fac09acf0aef0f0188607f61fda30c73849aad5192e394582f67e1cc84c4d42691e4af20ef79717020e335a55f0a6eeb81a5268fc7938149615c7eaa8874cbd447a0614bfb615c102bed", 0xcc}, {&(0x7f00000001c0)="091b3ceefba1cfd405a14eb8bec141db738815231be9927b242ab055747a610b67c815c53e2eb11826b015bcb62b82e96f755e38ea5cc28bb47d5cecb954cab05d1b4b96e6844f5d91bd6b819f3653193b508a1a2fb408a6e1f8776b4ca9d114c6bfdcfa60ae52973dc43a31cfe8714eb4121d4f80647ab96d7b376a51113d4a229900ac4d25404e9187c6290d49ab0a24d4bfbd09dc35a6", 0x98}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="fd1df38506b16a8d4987c385ec78b2172e919896b1bf2aec4db9fb1943a0ed51a7143aa87010d957cc0f40ab060bdc541fe9a92eb34c5b44893be8ec24997042424412330e267f68535a8c562329c92e1f9cd00655e9df1f847eb406f6083a4b928c3c4703fb5465513711c2163dfc52b30a4074e83cb1cc2979ca460252b31747045523bc24e9255c0fc41fbf27080d33d744c1d0eca2ea56c1", 0x3f}, {&(0x7f0000000400)="69d89149a3dc55540600000008ac2c48003a887535fd6f2cefcd1ca54305ea16537e32c3d84eb0479de8574c244425df1996701b73aca29c0ad1766aff5ad19199fb9dd905a328b5b6c27b4faf5dbba1ea2110dfe8977b111fe44515af60b25ab110a1ae4949c09af9bf9b727bbbda6f9b0b3f1e8b712b6822645cfc1c702ecfc70838c1b66ae3a53e5275b6ca8e7a123a023e000000000000007c600b2a80e7c6358e9312037871aa4ced2df5a656c702000000c4df116349501f8bae8c6abc9dd3c014fb", 0xa4}], 0x7) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 05:24:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x3, 0x4, 0x8}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) [ 1601.100587] FAULT_INJECTION: forcing a failure. [ 1601.100587] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.103041] CPU: 1 PID: 9409 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1601.104520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.106233] Call Trace: [ 1601.106809] dump_stack+0x107/0x167 [ 1601.107600] should_fail.cold+0x5/0xa [ 1601.108427] ? create_object.isra.0+0x3a/0xa30 [ 1601.109413] should_failslab+0x5/0x20 [ 1601.110249] kmem_cache_alloc+0x5b/0x310 [ 1601.111136] create_object.isra.0+0x3a/0xa30 [ 1601.112085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 05:24:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x6) 05:24:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 84) 05:24:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 2) 05:24:30 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 80) [ 1601.113188] __kmalloc_node+0x1ae/0x420 [ 1601.114250] kvmalloc_node+0x119/0x170 [ 1601.115096] seq_read_iter+0x9d6/0x12b0 [ 1601.115976] seq_read+0x3dd/0x5b0 [ 1601.116729] ? seq_read_iter+0x12b0/0x12b0 [ 1601.117656] ? find_held_lock+0x2c/0x110 [ 1601.118559] ? fsnotify_perm.part.0+0x22d/0x620 [ 1601.119570] ? seq_read_iter+0x12b0/0x12b0 [ 1601.120488] proc_reg_read+0x22a/0x300 [ 1601.121337] ? proc_reg_write+0x300/0x300 [ 1601.122243] vfs_read+0x228/0x620 [ 1601.123000] __x64_sys_pread64+0x201/0x260 [ 1601.123912] ? ksys_pread64+0x1b0/0x1b0 [ 1601.124782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.125927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.126273] FAULT_INJECTION: forcing a failure. [ 1601.126273] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.127050] do_syscall_64+0x33/0x40 [ 1601.127074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.127097] RIP: 0033:0x7fb57e954b19 [ 1601.132213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.136206] RSP: 002b:00007fb57beca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1601.137866] RAX: ffffffffffffffda RBX: 00007fb57ea67f60 RCX: 00007fb57e954b19 [ 1601.139413] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1601.140966] RBP: 00007fb57beca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.142517] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1601.144066] R13: 00007fff4a725c4f R14: 00007fb57beca300 R15: 0000000000022000 [ 1601.145661] CPU: 0 PID: 9414 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1601.147176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.149003] Call Trace: [ 1601.149587] dump_stack+0x107/0x167 [ 1601.150403] should_fail.cold+0x5/0xa [ 1601.151239] ? xas_alloc+0x336/0x440 [ 1601.152054] should_failslab+0x5/0x20 [ 1601.152889] kmem_cache_alloc+0x5b/0x310 [ 1601.153796] xas_alloc+0x336/0x440 [ 1601.154581] xas_create+0x34a/0x10d0 [ 1601.155414] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1601.156572] xas_store+0x8c/0x1c40 [ 1601.157369] __xa_store+0x164/0x2d0 [ 1601.158180] ? xa_delete_node+0x280/0x280 [ 1601.159100] ? trace_hardirqs_on+0x5b/0x180 [ 1601.160058] xa_store+0x31/0x50 [ 1601.160785] __io_uring_add_tctx_node+0x1cf/0x520 [ 1601.161851] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1601.162998] ? alloc_fd+0x2e7/0x670 [ 1601.163810] io_uring_setup+0x1fbb/0x2980 [ 1601.164729] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1601.165852] ? wait_for_completion_io+0x270/0x270 [ 1601.166935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.168091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.169228] do_syscall_64+0x33/0x40 [ 1601.170058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.171181] RIP: 0033:0x7f6e4b79cb19 [ 1601.171997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.176046] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1601.177722] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1601.179290] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1601.180855] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1601.182427] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1601.182711] EXT4-fs (sda): re-mounted. Opts: (null) [ 1601.183990] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1601.202943] loop7: detected capacity change from 0 to 2048 05:24:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x1100, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1601.207893] FAULT_INJECTION: forcing a failure. [ 1601.207893] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.210331] CPU: 1 PID: 9416 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1601.211794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.213575] Call Trace: [ 1601.214152] dump_stack+0x107/0x167 [ 1601.214939] should_fail.cold+0x5/0xa [ 1601.215771] ? copy_mount_options+0x55/0x180 [ 1601.216714] should_failslab+0x5/0x20 [ 1601.217530] kmem_cache_alloc_trace+0x55/0x320 [ 1601.218522] ? _copy_from_user+0xfb/0x1b0 [ 1601.219420] copy_mount_options+0x55/0x180 [ 1601.220330] __x64_sys_mount+0x1a8/0x300 [ 1601.221198] ? copy_mnt_ns+0xa00/0xa00 [ 1601.222052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.223190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.224301] do_syscall_64+0x33/0x40 [ 1601.225102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.226207] RIP: 0033:0x7f7ab952104a [ 1601.227007] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.230971] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1601.232629] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1601.234388] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1601.236213] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1601.238044] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1601.239596] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1601.275081] EXT4-fs (sda): re-mounted. Opts: (null) 05:24:30 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) 05:24:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x0) 05:24:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) write$vga_arbiter(r2, 0x0, 0x3f00) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000080)={{r1}, 0x0, 0x1a, @unused=[0xff, 0xffff, 0xfffffffffffffffd, 0xffffffffffffffc1], @devid}) 05:24:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 3) 05:24:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x2000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:30 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, @loopback, @loopback, 0x700, 0x10, 0x0, 0x8}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x102, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="dd3dcd94ef4a7b802d0b01860b747dae3162fd112abbff5ecd8337a9a17afe92588f02f2c70b0a3a2b0561764204fb529cf3adc9a460b2fa5380a98c4bdbea774d7cfa67e464ca5c182d33ea2a83d4646ed7454863fad3b48ef954e0bcba9f1c566bb081c9239fcdd37090454b84770a6dde4b74c580ec1ce9ca5f304353ca5fa47f115f70be56c1278da97ecf305eda6193a97b047c83b9afb0d24b025598391e598d6d64940bffbad01ac363cf274f63b662bc7835a9ecb95d1c00a8187fd94ac5b4a8dbfad08520c9b6a804fea0b97f1600106ebcacf5643140a3823982aa91c240915ba9524c8819cdd8", 0xec}], 0x1, &(0x7f0000000340)=[@hopopts={{0x90, 0x29, 0x36, {0x62, 0xe, '\x00', [@generic={0xff, 0x71, "287d1f15e872271abf749411c16ec350c0d4b087029915739006ac8d46f57111257915099c459f90bd7788ded24b5349594b0e5499a2cb007ab98a7c3b5c5caa6d839c5cf5a04b85e2b72812e1ed6e816e4dd8a194a9931c148cda3a4897c21c74ccc68e089cc24a1df8bdc619255d67b0"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0xab}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="294cbb868f73a862830088958891807c5023a9c179c85d0578503df8f719c3e1cc11ce711f879a82d4a70a2b9cdf420433ea432b5b75bb8f906a9f5e791d369e8c5297a299159a0fa03be21230b871e7d709ed98d6796108c136871d37bec48edc82578cf1a636409f76b861dc7049a339097cfd91ef7f96df2e6d36be1025d6cba5ecf6f9b16a84a171296677e7221f40cd6e1e3c0570756ec658aee84a50f276c18fb002e72b85a38131ed340a18a6eb7d62751c4da032a490c65af27ba4c36b15", 0xc2}, {&(0x7f0000000580)="712ce31b9c305ab06ec96fe6e10be02790fed8350b95ce5b5fab1b6d91de24144a208e6046bd14714ed7c9d7b9c49b2117a03066689423f0c04088dd0319e4c1449c48c3863313abe5644d8bcead6e80e3f452eecfdc720cd50d7ae43488741d92f591efa2d4115d66f10829300ba1", 0x6f}, {&(0x7f0000000600)="ee629162a947f24bf386fd0ee2f82ee64bd4dbee1768e6fb811251d283bf83e0f93fe38eac71d437834748c7445afe070a879167e6f798526e0ae1fedb46a157098ca1cb509afbc9d6119d9d88fc4bc0995a42fe948621c6879243da96e3b20f8684498aa840c2acd7c71bc73ea45dce261e73c4f96868605102e57d3ba667196b", 0x81}, {&(0x7f00000006c0)="b398c6cc59384727b4c2a4676d0ab8f0ccd8c718380f360f6cccf7266422ca1da1822d8edf57580925a09c250f9aa3cfe58e300f331d06a751b51af6aed555b7cf3aeb64e0651d58545998a07e03b2bbdd7d3bce942280cf1a5e7bcf198320e2de812f81c1422c193350380b0634dc3e5ee159aeaf0e8dc8a489aa6c2fda8665f0862a2c7f11c6f255bf1e6b470888eec95acede87016084277ade7c2a7aec34388708a925ceced761f768e564fac778173ef15188a6f109410cb8", 0xbb}], 0x4, &(0x7f0000000780)=[@hopopts={{0x88, 0x29, 0x36, {0x3a, 0xd, '\x00', [@enc_lim, @generic={0x6, 0x67, "30ddfffdc155c9f9feb7da5004faa077b1bcc053da29e674ab7dc1afc2665bbb61b2aa84e0b4b49db80565905da590fbb82df73dd35a726fe2dda7b9e1e0879823e16a0562b544b8a4413a469c77eeafddfd9de4ddfc2d081d367cc7d64c319589a54dceacc677"}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x84, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x2, [0x6]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x89, 0x2, 0x3, 0x3, 0x0, [@mcast1]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @loopback, @rand_addr=' \x01\x00', @private2, @dev={0xfe, 0x80, '\x00', 0x3d}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x180}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x1, @mcast2, 0x9}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000940)="49f4", 0x2}], 0x1, &(0x7f00000009c0)=[@dontfrag={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts={{0x58, 0x29, 0x37, {0x3b, 0x8, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x2b, "f311095ead3dd3a4acada5f78c7700935113cd909835f2cda7f90e9cbf10ec22c48b88940b9b011ed236b8"}, @generic={0xd7}, @generic={0x7, 0x3, "64db95"}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x29, 0x6, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}], 0xd0}}], 0x3, 0x0) dup2(r2, r1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x10, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 05:24:30 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x2) [ 1601.420637] FAULT_INJECTION: forcing a failure. [ 1601.420637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.423265] CPU: 0 PID: 9433 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1601.424737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.426541] Call Trace: [ 1601.427118] dump_stack+0x107/0x167 [ 1601.427908] should_fail.cold+0x5/0xa [ 1601.428744] _copy_to_iter+0x264/0x12d0 [ 1601.429617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.430757] ? __local_bh_enable_ip+0x9d/0x100 [ 1601.431742] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1601.432803] ? __virt_addr_valid+0x170/0x5d0 [ 1601.433764] ? __check_object_size+0x319/0x440 [ 1601.434755] seq_read_iter+0x71a/0x12b0 [ 1601.435633] seq_read+0x3dd/0x5b0 [ 1601.436394] ? seq_read_iter+0x12b0/0x12b0 [ 1601.437305] ? find_held_lock+0x2c/0x110 [ 1601.438214] ? fsnotify_perm.part.0+0x22d/0x620 [ 1601.439223] ? seq_read_iter+0x12b0/0x12b0 [ 1601.440150] proc_reg_read+0x22a/0x300 [ 1601.440993] ? proc_reg_write+0x300/0x300 [ 1601.441908] vfs_read+0x228/0x620 [ 1601.442667] __x64_sys_pread64+0x201/0x260 [ 1601.443587] ? ksys_pread64+0x1b0/0x1b0 [ 1601.444451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.445596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.446737] do_syscall_64+0x33/0x40 [ 1601.447553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.448671] RIP: 0033:0x7fb57e954b19 [ 1601.449482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.453534] RSP: 002b:00007fb57beca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1601.455201] RAX: ffffffffffffffda RBX: 00007fb57ea67f60 RCX: 00007fb57e954b19 [ 1601.456756] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1601.458322] RBP: 00007fb57beca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.459879] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1601.461432] R13: 00007fff4a725c4f R14: 00007fb57beca300 R15: 0000000000022000 05:24:45 executing program 0: ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000001c0)={0x4, &(0x7f00000003c0)=[{0x3f, 0xc2, &(0x7f0000000240)="a33e5922922bbbad0dde52836b79281b582f7a3c5a35a3c23b30aa5f948c810ea0ac98610cae8c9050f2eeb071341bdf9bfc7ac386d3f0d13f32237b871f5d12f270d66942e03996372bd70eacdd9ae43803d3e67ff7b2a0a40f7d9b602b981208d30ba17b0ea40eddf071c80c6852bee121dce4d6e905c6a13f6bb1ac248a440e2a1bda70f09998346697c9281461ff92ea79d16cf93cf8deb5e08f2a12be3091f75f5a0e2d3d8f7cdc80686d1b562402ba5dc99f11bd21088a95d59796a4e718ce", 0x1, 0x1}, {0x9, 0x36, &(0x7f00000000c0)="9adf16ec53b540da927948967f871466193f2954f39c21b507ceb57851ed1b901ad24a1a92d9195999c12e2025e65eda28d8ccad084f", 0x0, 0x1}, {0x40, 0x68, &(0x7f0000000140)="7662c29a0a0da8ba165e5ebb05f7a9adcb564d99e608db73b98c67343bf48eee2bc663cac7e3c02b9b3f4984683dc687ddd35390c8b123470291559e2a17df0b4afdbc071095619a8795ea7b08b17aa654e8bb7d67ba24ab0a3e6edcd118e549092e2120fb8de1d3", 0x1, 0x1}, {0x800, 0x7b, &(0x7f0000000340)="3babef59f58705c2aeae7d31f5ac59601f2ab08219ecd5b696f20422ec66dbd96915cb75994f0fbd1c418673eada9f5a5e811667447df09caf7d56ddb48b25c257c2141e239449c1549597f61e83cf89f0bb6f4612c0272838a3cc945e4071ce42cce5d51e8a229e0a21d81d4e4eeeb1749043a52803932543d074", 0x0, 0x1}]}) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002", 0x2d}, {0x0, 0x0, 0x12000}], 0x0, &(0x7f0000011200)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200000, 0x50) creat(&(0x7f0000000080)='./file0\x00', 0x108) 05:24:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/20, 0x14, 0x9) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:24:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 4) 05:24:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x9c00, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 85) 05:24:45 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 81) [ 1615.918702] FAULT_INJECTION: forcing a failure. 05:24:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x0) 05:24:45 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$set_reqkey_keyring(0xe, 0x0) [ 1615.918702] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.920591] CPU: 1 PID: 9454 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1615.921523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.922653] Call Trace: [ 1615.923013] dump_stack+0x107/0x167 [ 1615.923510] should_fail.cold+0x5/0xa [ 1615.924027] ? create_object.isra.0+0x3a/0xa30 [ 1615.924651] should_failslab+0x5/0x20 [ 1615.925166] kmem_cache_alloc+0x5b/0x310 [ 1615.925670] FAULT_INJECTION: forcing a failure. [ 1615.925670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1615.927281] ? mark_held_locks+0x9e/0xe0 [ 1615.927298] create_object.isra.0+0x3a/0xa30 [ 1615.927310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1615.927328] kmem_cache_alloc+0x159/0x310 [ 1615.927347] xas_alloc+0x336/0x440 [ 1615.927363] xas_create+0x34a/0x10d0 [ 1615.927385] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1615.927402] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1615.927418] xas_store+0x8c/0x1c40 [ 1615.933097] __xa_store+0x164/0x2d0 [ 1615.933593] ? xa_delete_node+0x280/0x280 [ 1615.934163] ? trace_hardirqs_on+0x5b/0x180 [ 1615.934747] xa_store+0x31/0x50 [ 1615.935195] __io_uring_add_tctx_node+0x1cf/0x520 [ 1615.935840] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1615.936541] ? alloc_fd+0x2e7/0x670 [ 1615.937037] io_uring_setup+0x1fbb/0x2980 [ 1615.937606] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1615.938301] ? wait_for_completion_io+0x270/0x270 [ 1615.938965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1615.939685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1615.940380] do_syscall_64+0x33/0x40 [ 1615.940883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1615.941563] RIP: 0033:0x7f6e4b79cb19 [ 1615.942069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.944526] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1615.945564] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1615.946537] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1615.947494] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1615.948445] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1615.949407] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1615.950402] CPU: 0 PID: 9462 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1615.951896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.953702] Call Trace: [ 1615.953904] loop7: detected capacity change from 0 to 2048 [ 1615.954295] dump_stack+0x107/0x167 [ 1615.954320] should_fail.cold+0x5/0xa [ 1615.956642] __alloc_pages_nodemask+0x182/0x600 [ 1615.957035] FAULT_INJECTION: forcing a failure. [ 1615.957035] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.957651] ? add_mm_counter_fast+0x220/0x220 [ 1615.957676] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1615.961406] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1615.962560] ? lock_downgrade+0x6d0/0x6d0 [ 1615.963464] ? mark_held_locks+0x9e/0xe0 [ 1615.964354] alloc_pages_vma+0xbb/0x410 [ 1615.965224] handle_mm_fault+0x152f/0x3500 [ 1615.966164] ? __pmd_alloc+0x630/0x630 [ 1615.967021] ? vmacache_find+0x55/0x2a0 [ 1615.967886] ? vmacache_update+0xce/0x140 [ 1615.968792] do_user_addr_fault+0x56e/0xc60 [ 1615.969740] exc_page_fault+0xa2/0x1a0 [ 1615.970603] asm_exc_page_fault+0x1e/0x30 [ 1615.971505] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 1615.972675] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 b3 0b 1d 02 0f 1f 00 0f 01 [ 1615.976662] RSP: 0018:ffff888041b3faa8 EFLAGS: 00050206 [ 1615.977802] RAX: 0000000000000001 RBX: 0000000000000045 RCX: 0000000000000008 [ 1615.979310] RDX: 0000000000000005 RSI: ffff888049194006 RDI: 0000000020001100 [ 1615.980847] RBP: 0000000020001100 R08: 0000000000000000 R09: ffff88804919404a [ 1615.982391] R10: ffffed1009232809 R11: 0000000000000001 R12: ffff888049194006 [ 1615.983929] R13: 0000000020001145 R14: 00007ffffffff000 R15: 0000000000000000 [ 1615.985499] copyout.part.0+0x10b/0x140 [ 1615.986368] _copy_to_iter+0x293/0x12d0 [ 1615.987244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1615.988377] ? __local_bh_enable_ip+0x9d/0x100 [ 1615.989363] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1615.990434] ? __virt_addr_valid+0x170/0x5d0 [ 1615.991386] ? __check_object_size+0x319/0x440 [ 1615.992380] seq_read_iter+0x71a/0x12b0 [ 1615.993258] seq_read+0x3dd/0x5b0 [ 1615.994018] ? seq_read_iter+0x12b0/0x12b0 [ 1615.994933] ? find_held_lock+0x2c/0x110 [ 1615.995827] ? fsnotify_perm.part.0+0x22d/0x620 [ 1615.996837] ? seq_read_iter+0x12b0/0x12b0 [ 1615.997754] proc_reg_read+0x22a/0x300 [ 1615.998611] ? proc_reg_write+0x300/0x300 [ 1615.999509] vfs_read+0x228/0x620 [ 1616.000267] __x64_sys_pread64+0x201/0x260 [ 1616.001184] ? ksys_pread64+0x1b0/0x1b0 [ 1616.002057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.003191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.004309] do_syscall_64+0x33/0x40 [ 1616.005112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.006224] RIP: 0033:0x7fb57e954b19 [ 1616.007025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.011002] RSP: 002b:00007fb57beca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1616.012641] RAX: ffffffffffffffda RBX: 00007fb57ea67f60 RCX: 00007fb57e954b19 [ 1616.014189] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1616.015727] RBP: 00007fb57beca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.017266] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1616.018814] R13: 00007fff4a725c4f R14: 00007fb57beca300 R15: 0000000000022000 [ 1616.020382] CPU: 1 PID: 9450 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1616.021295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.022382] Call Trace: [ 1616.022724] dump_stack+0x107/0x167 [ 1616.023206] should_fail.cold+0x5/0xa [ 1616.023705] ? create_object.isra.0+0x3a/0xa30 [ 1616.024308] should_failslab+0x5/0x20 [ 1616.024916] kmem_cache_alloc+0x5b/0x310 [ 1616.025452] create_object.isra.0+0x3a/0xa30 [ 1616.026025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1616.026691] kmem_cache_alloc_trace+0x151/0x320 [ 1616.027308] copy_mount_options+0x55/0x180 [ 1616.027869] __x64_sys_mount+0x1a8/0x300 [ 1616.028397] ? copy_mnt_ns+0xa00/0xa00 [ 1616.028914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.029595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.030278] do_syscall_64+0x33/0x40 [ 1616.030762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.031434] RIP: 0033:0x7f7ab952104a [ 1616.031918] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.034304] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1616.035288] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1616.036220] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1616.037131] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1616.038052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1616.038991] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:24:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 5) 05:24:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xc7040, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/bus/platform', 0x4200, 0x4) openat(r0, &(0x7f0000000640)='./file1\x00', 0x121000, 0x180) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000280), 0x5403, &(0x7f0000000380)={'trans=unix,', {[{@nodevmap}, {@aname}, {@msize={'msize', 0x3d, 0x4}}, {@cache_mmap}], [{@subj_type={'subj_type', 0x3d, '!\'`%%\\@$'}}, {@uid_eq}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', r1}}, {@obj_user={'obj_user', 0x3d, ']}*+^}\xd7@@$:-'}}, {@permit_directio}]}}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x805402, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1041880, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$9p_rdma(&(0x7f0000000440), &(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@aname={'aname', 0x3d, ']}*+^}\xd7@@$:-'}}, {@common=@msize={'msize', 0x3d, 0xfd9}}, {@common=@cache_mmap}, {@sq={'sq', 0x3d, 0x80}}], [{@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r2}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'subj_type'}}, {@subj_role={'subj_role', 0x3d, 'context'}}, {@smackfshat={'smackfshat', 0x3d, '.$]'}}, {@seclabel}]}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 05:24:45 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='attr/current\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:24:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xf000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x0) [ 1616.108286] FAULT_INJECTION: forcing a failure. [ 1616.108286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.109853] CPU: 1 PID: 9472 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1616.110711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.111747] Call Trace: [ 1616.112081] dump_stack+0x107/0x167 [ 1616.112539] should_fail.cold+0x5/0xa [ 1616.113030] _copy_to_user+0x2e/0x180 [ 1616.113525] simple_read_from_buffer+0xcc/0x160 [ 1616.114132] proc_fail_nth_read+0x198/0x230 [ 1616.114693] ? proc_sessionid_read+0x230/0x230 [ 1616.115266] ? security_file_permission+0xb1/0xe0 [ 1616.115874] ? proc_sessionid_read+0x230/0x230 [ 1616.116453] vfs_read+0x228/0x620 [ 1616.116901] ksys_read+0x12d/0x260 [ 1616.117354] ? vfs_write+0xb10/0xb10 [ 1616.117832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.118490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.119143] do_syscall_64+0x33/0x40 [ 1616.119612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.120256] RIP: 0033:0x7fb57e90769c [ 1616.120729] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1616.123044] RSP: 002b:00007fb57beca170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1616.123997] RAX: ffffffffffffffda RBX: 0000000000000045 RCX: 00007fb57e90769c [ 1616.124901] RDX: 000000000000000f RSI: 00007fb57beca1e0 RDI: 0000000000000004 [ 1616.125783] RBP: 00007fb57beca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.126684] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1616.127569] R13: 00007fff4a725c4f R14: 00007fb57beca300 R15: 0000000000022000 [ 1616.131118] ====================================================== [ 1616.131118] WARNING: the mand mount option is being deprecated and [ 1616.131118] will be removed in v5.15! [ 1616.131118] ====================================================== 05:24:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000100)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000200)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)) 05:24:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x9, 0x1]) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:24:45 executing program 6: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000240)={{0x1f, 0xe3}, 'port1\x00', 0x40, 0x20, 0x7fffffff, 0x2, 0x294800, 0x2ed, 0x6, 0x0, 0x5, 0x40}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b47, &(0x7f0000000000)={0x0, "f565a1d0675bc0e09ee36e45d863b732f28df691480f4445d8b0d41ea96e7c9ca899282f6c61e3b75726a5e7980aaabaed02cf4fc814a7f4bb2c55a8984521b11fe4ee2f339417afdb35cbd67d1219653e2b29431186bbd1c828f96f2fa46951f0d590cb97391482440faac3ca74d217d65ffa87d7a5b00c8967fa8f3310ad0a864f26808bdccf0e02448b750a4d2ae0d70772c154b2e5eda32b9a3d4c39e4ffb61188f6a90b074b39d57f96704d3505319258d80f91c9cffd2cb83ef6fa43cdeaa015923826ace0e963f273fa3d6af30697f7f14931804436ff8940db29792447b87d0cbf2a4f0ba266cfa1d65744d15fcdfc137a0d7b0d52c353b2dfce4ba65b003d575a5dafc58dc12d3f1bc073653dce94ffe43387442384c659813c467f89dab3a20ccc0cf6549e32a6178c820c3ef5aa3572e8e6dee79e06b11f2d9c4764e01cd39eed0c82f5fee2df3ccbb571d4227b6bb9f816dc6ff2c2ec2baaec7b74fc6263fb3eafe6c6a231bce4a179223e508a55cb5699289878102b40b1bff139d4787cab8a9b2c0286c88a2bc7ca6d0c099fd74fb939cf057994358cf910a866eab7ca7217336d886025ca2e4d88889c25d6f1106a8012cc2d29e211a8dd036af4ba8b3a754369a37d160b4d3eb5c2ee6040cc1721d8f7c0d01fd5d11a3b59b906522ab17e8b2b9c81d7bdb6288e6795d88b6d481b73c150b25e7a43002169"}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000300)) dup(r0) [ 1616.257059] EXT4-fs (loop7): invalid first ino: 2875922842 05:24:57 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 86) 05:24:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x80000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x7, 0x1e, 0x800, 0x6, "a422a6dfa4fe6540bccec630782841fe3946793e7906161aacc202ba77457b3a"}) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) r2 = dup(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="38db9ef35dc54f2f266bbab68fef3b69a8b6ef6abc09f9141f3b537905b1188f120dc79f8b1dda3efa335d1cf941197cc4cf7bed345a7f759e218bf31b652ed8d33e49929e09f3745bd8c30687f4acffe991e49d655fc0a27529219b389d2356a498dd", 0x63}, {&(0x7f00000001c0)="4f6383eee370bf249379f95dcd6001eef8db18d96fe9ab8246a9c2121d27b4b72127f0277a2c97ef601575f59681ce42a63c7cac66541c61bf2dc1523dcf8a81e6fea9c4e1d11e7d90e9fbf281e80e20a846043488", 0x55}], 0x2) openat(r2, &(0x7f0000000040)='./file0\x00', 0x240, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000000c) 05:24:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 1) 05:24:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001040)=""/4095, 0xfff, 0xf0ff1f) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x2275, &(0x7f00000005c0)={@lba}) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) 05:24:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:24:58 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 82) 05:24:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000300)=""/136, 0x88, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8801) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe72501000f3fe6d8040000000000005ae2c01572b966306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab06096a31eafce28aa4854600"/150], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x8, 0x4, 0x2d2000, 0x79, @mcast1, @rand_addr=' \x01\x00', 0x40, 0x20, 0x1, 0x7}}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) 05:24:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0x45, 0x6) [ 1628.755004] loop7: detected capacity change from 0 to 2048 [ 1628.756497] FAULT_INJECTION: forcing a failure. [ 1628.756497] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.757937] CPU: 1 PID: 9509 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1628.758815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1628.759855] Call Trace: [ 1628.760199] dump_stack+0x107/0x167 [ 1628.760662] should_fail.cold+0x5/0xa [ 1628.761145] ? create_object.isra.0+0x3a/0xa30 [ 1628.761722] should_failslab+0x5/0x20 [ 1628.762216] kmem_cache_alloc+0x5b/0x310 [ 1628.762730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1628.763395] create_object.isra.0+0x3a/0xa30 [ 1628.763950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1628.764593] kmem_cache_alloc+0x159/0x310 [ 1628.765123] getname_flags.part.0+0x50/0x4f0 [ 1628.765695] user_path_at_empty+0xa1/0x100 [ 1628.766246] __x64_sys_mount+0x1e9/0x300 [ 1628.766761] ? copy_mnt_ns+0xa00/0xa00 [ 1628.767258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1628.767923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1628.768576] do_syscall_64+0x33/0x40 [ 1628.769050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1628.769700] RIP: 0033:0x7f7ab952104a [ 1628.770191] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.772660] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1628.773614] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1628.774517] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1628.775419] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1628.776317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1628.777215] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 [ 1628.780437] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1628.795389] FAULT_INJECTION: forcing a failure. [ 1628.795389] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.797878] CPU: 0 PID: 9511 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1628.799355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1628.801138] Call Trace: [ 1628.801715] dump_stack+0x107/0x167 [ 1628.802508] should_fail.cold+0x5/0xa [ 1628.803332] ? xas_alloc+0x336/0x440 [ 1628.804132] should_failslab+0x5/0x20 [ 1628.804953] kmem_cache_alloc+0x5b/0x310 [ 1628.805829] xas_alloc+0x336/0x440 [ 1628.806612] xas_create+0x34a/0x10d0 [ 1628.807432] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1628.808563] xas_store+0x8c/0x1c40 [ 1628.809132] FAULT_INJECTION: forcing a failure. [ 1628.809132] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.809346] __xa_store+0x164/0x2d0 [ 1628.811515] ? xa_delete_node+0x280/0x280 [ 1628.812418] ? trace_hardirqs_on+0x5b/0x180 [ 1628.813363] xa_store+0x31/0x50 [ 1628.814091] __io_uring_add_tctx_node+0x1cf/0x520 [ 1628.815130] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1628.816255] ? alloc_fd+0x2e7/0x670 [ 1628.817051] io_uring_setup+0x1fbb/0x2980 [ 1628.817967] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1628.819060] ? wait_for_completion_io+0x270/0x270 [ 1628.820123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1628.821253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1628.822382] do_syscall_64+0x33/0x40 [ 1628.823185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1628.824287] RIP: 0033:0x7f6e4b79cb19 [ 1628.825090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.829051] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1628.830698] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1628.832232] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1628.833767] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1628.835313] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1628.836849] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1628.838419] CPU: 1 PID: 9512 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 1628.839263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1628.840275] Call Trace: [ 1628.840603] dump_stack+0x107/0x167 [ 1628.841052] should_fail.cold+0x5/0xa [ 1628.841520] ? kvmalloc_node+0x119/0x170 [ 1628.842028] should_failslab+0x5/0x20 [ 1628.842510] __kmalloc_node+0x76/0x420 [ 1628.842990] kvmalloc_node+0x119/0x170 [ 1628.843475] seq_read_iter+0x9d6/0x12b0 [ 1628.843977] seq_read+0x3dd/0x5b0 [ 1628.844405] ? seq_read_iter+0x12b0/0x12b0 [ 1628.844929] ? find_held_lock+0x2c/0x110 [ 1628.845445] ? fsnotify_perm.part.0+0x22d/0x620 [ 1628.846031] ? seq_read_iter+0x12b0/0x12b0 [ 1628.846553] proc_reg_read+0x22a/0x300 [ 1628.847033] ? proc_reg_write+0x300/0x300 [ 1628.847547] vfs_read+0x228/0x620 [ 1628.847978] __x64_sys_pread64+0x201/0x260 [ 1628.848502] ? ksys_pread64+0x1b0/0x1b0 [ 1628.848996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1628.849642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1628.850280] do_syscall_64+0x33/0x40 [ 1628.850736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1628.851360] RIP: 0033:0x7fcc6313bb19 [ 1628.851817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.854046] RSP: 002b:00007fcc606b1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1628.854986] RAX: ffffffffffffffda RBX: 00007fcc6324ef60 RCX: 00007fcc6313bb19 [ 1628.855853] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1628.856715] RBP: 00007fcc606b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1628.857577] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1628.858447] R13: 00007ffd2cb3dd7f R14: 00007fcc606b1300 R15: 0000000000022000 05:24:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 87) 05:24:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0x200020f2, 0x6) 05:24:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xf0ffff, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:24:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="9aa2b99237553019ebbab63cfcd7ab966afa29d4709faa75f918d025ab9324339963ea4a71fa8b6d9d4142071fc2f9cfe1fb78f6a4bb71ee4ed231d873cbe0eda36fd2d6ba1bf38e89c9148c5db5821d22bca4f3ece466ec7b58a41fa19dd638ec38cc1393e9a80ef1c068a7b57127af6b6412947b64db0bf4c7fbadf47b9ed210fcfc8ead399689acedc18329573fe4529687310c2544a69059ee6c0f40ae7c3c065514e9c8", 0xa6, 0x1}, {&(0x7f0000000180)="851d4683767e3ab3dc39e28ceb22f7849eea1479edcdd0674281c3539984d1d9e775e1f0773dfb256391c351b6a3d32ffd568431e4de6965aed10c3f2c660a41fe611127db00349f38482dbfbddd23e8654cca67c97b7873e74f8469be30344bff05c734a3ce535b97943cdb259536836eca190bc6c4a148044e6001f1027f0bae15e22a992abf691c2276790e7b5b801dec160c23de63b94b86e78565", 0x9d, 0x3c3}], 0x1871834, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e9f36d40289c28a0093c50dc01b65742f6970365f5a9faa1b6c6162656c002c0f402c5c5e24277de4145d5d5b248c2c2c7569643e", @ANYRESDEC, @ANYBLOB="2c6673757569643d3562620e653254622d626266322d393333662d563436372d39306166326362632c00"]) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000300)=0x3) lremovexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:24:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x5, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4c, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r6 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x6800) shmdt(r6) 05:24:58 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 83) [ 1628.952271] FAULT_INJECTION: forcing a failure. [ 1628.952271] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.953706] CPU: 1 PID: 9525 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1628.954139] loop7: detected capacity change from 0 to 2048 [ 1628.954510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1628.954523] Call Trace: [ 1628.957007] dump_stack+0x107/0x167 [ 1628.957441] should_fail.cold+0x5/0xa [ 1628.957891] ? ___slab_alloc+0x360/0x700 [ 1628.958375] ? create_object.isra.0+0x3a/0xa30 [ 1628.958915] should_failslab+0x5/0x20 [ 1628.959359] kmem_cache_alloc+0x5b/0x310 [ 1628.959840] create_object.isra.0+0x3a/0xa30 [ 1628.960354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1628.960950] kmem_cache_alloc+0x159/0x310 [ 1628.961445] xas_alloc+0x336/0x440 [ 1628.961862] xas_create+0x34a/0x10d0 [ 1628.962321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1628.962942] xas_store+0x8c/0x1c40 [ 1628.963018] FAULT_INJECTION: forcing a failure. [ 1628.963018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.963368] __xa_store+0x164/0x2d0 [ 1628.966227] ? xa_delete_node+0x280/0x280 [ 1628.966718] ? trace_hardirqs_on+0x5b/0x180 [ 1628.967220] xa_store+0x31/0x50 [ 1628.967606] __io_uring_add_tctx_node+0x1cf/0x520 [ 1628.968161] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1628.968767] ? alloc_fd+0x2e7/0x670 [ 1628.969192] io_uring_setup+0x1fbb/0x2980 [ 1628.969678] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1628.970269] ? wait_for_completion_io+0x270/0x270 [ 1628.970840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1628.971442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1628.972045] do_syscall_64+0x33/0x40 [ 1628.972478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1628.973071] RIP: 0033:0x7f6e4b79cb19 [ 1628.973499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.975626] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1628.976513] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1628.977339] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1628.978177] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1628.979002] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1628.979824] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1628.980669] CPU: 0 PID: 9523 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1628.982171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1628.983959] Call Trace: [ 1628.984537] dump_stack+0x107/0x167 [ 1628.985331] should_fail.cold+0x5/0xa [ 1628.986168] strncpy_from_user+0x34/0x470 [ 1628.987070] getname_flags.part.0+0x95/0x4f0 [ 1628.988024] user_path_at_empty+0xa1/0x100 [ 1628.988938] __x64_sys_mount+0x1e9/0x300 [ 1628.989812] ? copy_mnt_ns+0xa00/0xa00 [ 1628.990663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1628.991796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1628.992914] do_syscall_64+0x33/0x40 [ 1628.993723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1628.994831] RIP: 0033:0x7f7ab952104a [ 1628.995633] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.999614] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1629.001253] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1629.002812] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1629.004346] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1629.005883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1629.007438] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:24:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0xf) [ 1629.028994] loop4: detected capacity change from 0 to 1536 [ 1629.434394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.901034] FAULT_INJECTION: forcing a failure. [ 1646.901034] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.903653] CPU: 0 PID: 9550 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 1646.905167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.907008] Call Trace: [ 1646.907604] dump_stack+0x107/0x167 [ 1646.908408] should_fail.cold+0x5/0xa [ 1646.909269] ? create_object.isra.0+0x3a/0xa30 [ 1646.910298] should_failslab+0x5/0x20 [ 1646.911149] kmem_cache_alloc+0x5b/0x310 [ 1646.912070] create_object.isra.0+0x3a/0xa30 [ 1646.913057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.914429] __kmalloc_node+0x1ae/0x420 [ 1646.915320] kvmalloc_node+0x119/0x170 [ 1646.916190] seq_read_iter+0x9d6/0x12b0 [ 1646.917110] seq_read+0x3dd/0x5b0 [ 1646.917881] ? seq_read_iter+0x12b0/0x12b0 [ 1646.918833] ? find_held_lock+0x2c/0x110 [ 1646.919753] ? fsnotify_perm.part.0+0x22d/0x620 [ 1646.920803] ? seq_read_iter+0x12b0/0x12b0 [ 1646.921754] proc_reg_read+0x22a/0x300 [ 1646.922636] ? proc_reg_write+0x300/0x300 [ 1646.923551] vfs_read+0x228/0x620 [ 1646.924336] __x64_sys_pread64+0x201/0x260 [ 1646.925288] ? ksys_pread64+0x1b0/0x1b0 [ 1646.926198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.927356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.928501] do_syscall_64+0x33/0x40 [ 1646.929350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.930488] RIP: 0033:0x7fcc6313bb19 [ 1646.931322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.935419] RSP: 002b:00007fcc606b1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1646.937497] RAX: ffffffffffffffda RBX: 00007fcc6324ef60 RCX: 00007fcc6313bb19 [ 1646.939232] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1646.940825] RBP: 00007fcc606b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.942420] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1646.944003] R13: 00007ffd2cb3dd7f R14: 00007fcc606b1300 R15: 0000000000022000 05:25:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000300)=""/136, 0x88, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8801) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe72501000f3fe6d8040000000000005ae2c01572b966306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab06096a31eafce28aa4854600"/150], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x8, 0x4, 0x2d2000, 0x79, @mcast1, @rand_addr=' \x01\x00', 0x40, 0x20, 0x1, 0x7}}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) 05:25:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x1000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:16 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 84) 05:25:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) 05:25:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 88) 05:25:16 executing program 0: add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000540)='J,', 0x80000, r1) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000540)='J,', 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='id_legacy\x00', 0x0, &(0x7f0000000280)="2cf86acd8db592e3b3d258de38aa5fc1c2808ed0227994db6a29a6fbce5e", 0x1e, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="9188bb9a9b188bb3f8821f7b879fe8", 0xf, r3) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) 05:25:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x4b) 05:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 2) [ 1646.969507] FAULT_INJECTION: forcing a failure. [ 1646.969507] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.972200] CPU: 0 PID: 9561 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1646.973735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.975573] Call Trace: [ 1646.976173] dump_stack+0x107/0x167 [ 1646.976985] should_fail.cold+0x5/0xa [ 1646.977852] ? xas_alloc+0x336/0x440 [ 1646.978700] should_failslab+0x5/0x20 [ 1646.979530] kmem_cache_alloc+0x5b/0x310 [ 1646.980433] xas_alloc+0x336/0x440 [ 1646.981229] xas_create+0x34a/0x10d0 [ 1646.982083] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1646.983261] xas_store+0x8c/0x1c40 [ 1646.984067] __xa_store+0x164/0x2d0 [ 1646.984883] ? xa_delete_node+0x280/0x280 [ 1646.985824] ? trace_hardirqs_on+0x5b/0x180 [ 1646.986823] xa_store+0x31/0x50 [ 1646.987549] __io_uring_add_tctx_node+0x1cf/0x520 [ 1646.988632] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1646.989804] ? alloc_fd+0x2e7/0x670 [ 1646.990646] io_uring_setup+0x1fbb/0x2980 [ 1646.991568] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1646.992692] ? wait_for_completion_io+0x270/0x270 [ 1646.993790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.995026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.996162] do_syscall_64+0x33/0x40 [ 1646.996997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.998153] RIP: 0033:0x7f6e4b79cb19 [ 1646.998988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.003068] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1647.004737] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1647.006333] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1647.007915] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1647.009477] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1647.011078] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:25:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x2000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1647.018264] loop7: detected capacity change from 0 to 2048 [ 1647.027391] FAULT_INJECTION: forcing a failure. [ 1647.027391] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.031087] CPU: 0 PID: 9564 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1647.032604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.034444] Call Trace: [ 1647.035036] dump_stack+0x107/0x167 [ 1647.035845] should_fail.cold+0x5/0xa [ 1647.036686] ? alloc_fs_context+0x58/0x870 [ 1647.037619] should_failslab+0x5/0x20 [ 1647.038629] kmem_cache_alloc_trace+0x55/0x320 [ 1647.039912] alloc_fs_context+0x58/0x870 [ 1647.040962] path_mount+0xac3/0x2200 [ 1647.041806] ? strncpy_from_user+0x9e/0x470 [ 1647.042774] ? finish_automount+0xa90/0xa90 [ 1647.043736] ? getname_flags.part.0+0x1dd/0x4f0 [ 1647.044778] __x64_sys_mount+0x282/0x300 [ 1647.045691] ? copy_mnt_ns+0xa00/0xa00 [ 1647.046563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.047736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.048873] do_syscall_64+0x33/0x40 [ 1647.049714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.050858] RIP: 0033:0x7f7ab952104a [ 1647.051683] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.055765] RSP: 002b:00007f7ab6a94fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1647.057414] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f7ab952104a [ 1647.059016] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f7ab6a95000 [ 1647.060609] RBP: 00007f7ab6a95040 R08: 00007f7ab6a95040 R09: 0000000020000000 [ 1647.062206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1647.063791] R13: 0000000020000140 R14: 00007f7ab6a95000 R15: 0000000020000240 05:25:16 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000001040)={0x11f4, 0x3b, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@typed={0x79, 0x26, 0x0, 0x0, @binary="52fc534c9718e2682e22ecda47cfb941f9824662e988536df18aab4ccdd9930ae556fea3e295dfd28e80e86ae3fa3f25afc52e902523720a19dd9e683b1555e26133f1b4cbac5537d5e98d515502eb52e146c77165f838cf7b2001c8bf928d3543948016cac2e5ff8534fb83e654803074fc9d58eb"}, @generic="433fab10c81ffe68491e864677ba82599f10d12f688d21d505e67bd41f6b6effe699c2522b968fcddd5e8196811e0d8de8a719722bfc2492d2653280d181e997dfd4add3040ffc41e47d2a348bd7a35cdffba7500557f300abd8009c086902b5e1fd0f43be204788d421c987dc9a90e1ad9dc8316790cba290", @generic="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", @generic="67beb61e7d46b4f3369b270071c9eb9fa242eb7857ccf478cf11bb780dce8617cd1e0abc866ef6ce3bf7f8bdc320fb0f512646c58e1865125df63cf1b1d883a14870f7ae05400d56cbde4c73b413ebafb1b98d0528f9cdef64beb83db4c052ee608949e34f4a0130409319f08956726187e4ed0414ba198290cd99e0c5c902872d9d3f58ba32f8e97fddd466c54ed495ab691cf998a9998f7d18b0e305dec80b744cd6f3b96e34a7ecad44e336c4ab0541bba473d54f085bb3f4ae1b29d8ccde6d0ee5fae7a43037f425c7e614a872f51ce4fd4558c359c97b04cc8c9fd9d1345f496a732acb24402a"]}, 0x11f4}}, 0x44800) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x5, 0x3, 0x1, 'queue1\x00', 0x4}) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x14, 0x2c, 0xcd2781b960712dff}, 0x14}}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@fowner_eq}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pread64(r5, &(0x7f0000000080)=""/136, 0x88, 0x8001) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) 05:25:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x3000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 3) 05:25:16 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 85) 05:25:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) (fail_nth: 89) [ 1647.380178] FAULT_INJECTION: forcing a failure. [ 1647.380178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1647.382836] CPU: 0 PID: 9583 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 1647.384315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.386106] Call Trace: [ 1647.386698] dump_stack+0x107/0x167 [ 1647.387493] should_fail.cold+0x5/0xa [ 1647.388340] _copy_to_iter+0x264/0x12d0 [ 1647.389247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.390408] ? __local_bh_enable_ip+0x9d/0x100 [ 1647.391422] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1647.392509] ? __virt_addr_valid+0x170/0x5d0 [ 1647.393475] ? __check_object_size+0x319/0x440 [ 1647.394486] seq_read_iter+0x71a/0x12b0 [ 1647.395372] seq_read+0x3dd/0x5b0 [ 1647.396142] ? seq_read_iter+0x12b0/0x12b0 [ 1647.397070] ? find_held_lock+0x2c/0x110 [ 1647.397975] ? fsnotify_perm.part.0+0x22d/0x620 [ 1647.399007] ? seq_read_iter+0x12b0/0x12b0 [ 1647.399942] proc_reg_read+0x22a/0x300 [ 1647.400788] ? proc_reg_write+0x300/0x300 [ 1647.401694] vfs_read+0x228/0x620 [ 1647.402478] __x64_sys_pread64+0x201/0x260 [ 1647.403407] ? ksys_pread64+0x1b0/0x1b0 [ 1647.404280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.405431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.406576] do_syscall_64+0x33/0x40 [ 1647.407402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.408524] RIP: 0033:0x7fcc6313bb19 [ 1647.409349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.413384] RSP: 002b:00007fcc606b1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1647.415053] RAX: ffffffffffffffda RBX: 00007fcc6324ef60 RCX: 00007fcc6313bb19 [ 1647.416647] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1647.418210] RBP: 00007fcc606b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.419781] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1647.421346] R13: 00007ffd2cb3dd7f R14: 00007fcc606b1300 R15: 0000000000022000 [ 1647.450284] FAULT_INJECTION: forcing a failure. [ 1647.450284] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.452455] CPU: 1 PID: 9587 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1647.453718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.455260] Call Trace: [ 1647.455767] dump_stack+0x107/0x167 [ 1647.456450] should_fail.cold+0x5/0xa [ 1647.457168] ? xas_alloc+0x336/0x440 [ 1647.457975] should_failslab+0x5/0x20 [ 1647.458707] kmem_cache_alloc+0x5b/0x310 [ 1647.459478] xas_alloc+0x336/0x440 [ 1647.460268] xas_create+0x34a/0x10d0 [ 1647.460979] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1647.462019] xas_store+0x8c/0x1c40 [ 1647.462829] __xa_store+0x164/0x2d0 [ 1647.463514] ? xa_delete_node+0x280/0x280 [ 1647.464306] ? trace_hardirqs_on+0x5b/0x180 [ 1647.465100] xa_store+0x31/0x50 [ 1647.465707] __io_uring_add_tctx_node+0x1cf/0x520 [ 1647.466599] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1647.467572] ? alloc_fd+0x2e7/0x670 [ 1647.468266] io_uring_setup+0x1fbb/0x2980 [ 1647.469067] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1647.470104] ? wait_for_completion_io+0x270/0x270 [ 1647.471039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.472136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.473281] do_syscall_64+0x33/0x40 [ 1647.474013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.474966] RIP: 0033:0x7f6e4b79cb19 [ 1647.475678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.479027] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1647.480653] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1647.481973] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1647.483288] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1647.484586] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1647.485878] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:25:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x4000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) [ 1647.544519] loop7: detected capacity change from 0 to 2048 [ 1647.554360] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1647.797778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.947815] FAULT_INJECTION: forcing a failure. [ 1663.947815] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.949498] CPU: 0 PID: 9602 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1663.950488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.951672] Call Trace: [ 1663.952054] dump_stack+0x107/0x167 [ 1663.952576] should_fail.cold+0x5/0xa [ 1663.953124] ? xas_alloc+0x336/0x440 [ 1663.953668] should_failslab+0x5/0x20 [ 1663.954231] kmem_cache_alloc+0x5b/0x310 [ 1663.954850] xas_alloc+0x336/0x440 [ 1663.955389] xas_create+0x34a/0x10d0 [ 1663.955951] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1663.956727] xas_store+0x8c/0x1c40 [ 1663.957262] __xa_store+0x164/0x2d0 [ 1663.957808] ? xa_delete_node+0x280/0x280 [ 1663.958436] ? trace_hardirqs_on+0x5b/0x180 [ 1663.959090] xa_store+0x31/0x50 [ 1663.959588] __io_uring_add_tctx_node+0x1cf/0x520 [ 1663.960311] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1663.961097] ? alloc_fd+0x2e7/0x670 [ 1663.961653] io_uring_setup+0x1fbb/0x2980 [ 1663.962283] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1663.963054] ? wait_for_completion_io+0x270/0x270 [ 1663.963794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.964579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.965354] do_syscall_64+0x33/0x40 [ 1663.965915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.966689] RIP: 0033:0x7f6e4b79cb19 [ 1663.967245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.970281] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1663.971431] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1663.972499] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1663.973566] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1663.974544] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1663.975606] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1663.977146] FAULT_INJECTION: forcing a failure. [ 1663.977146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1663.979767] CPU: 1 PID: 9611 Comm: syz-executor.1 Not tainted 5.10.252 #1 05:25:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 4) 05:25:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000300)=""/136, 0x88, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8801) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe72501000f3fe6d8040000000000005ae2c01572b966306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab06096a31eafce28aa4854600"/150], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x8, 0x4, 0x2d2000, 0x79, @mcast1, @rand_addr=' \x01\x00', 0x40, 0x20, 0x1, 0x7}}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) 05:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pread64(r0, &(0x7f0000000040)=""/24, 0x18, 0x18) 05:25:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x401) r1 = syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x1dc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_setup(0x69cd, &(0x7f0000000140)={0x0, 0x95c1, 0x10, 0x2, 0x29d, 0x0, r1}, &(0x7f0000000000/0xc00000)=nil, &(0x7f00001ea000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) syz_io_uring_setup(0x4e6e, &(0x7f00000000c0)={0x0, 0x9491, 0x10, 0x0, 0x2c2, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000dc0)=0x59f6, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8}, 0x0, 0xe8d, 0x5, 0x0, 0x0, 0xc4d, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000380)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0xff, 0xff, 0x400, 0x1ff, 0x3f, 0x8, 0xd22c, 0x0, 0x100000000, 0x0, 0xac2, 0x7, 0x100, 0x2, 0x6, 0x20, 0x8, 0x5, 0x8001, 0xfaa200000000000, 0x4046, 0x0, 0x100000000, 0x6, 0xbce, 0xffffffffffff06c8, 0xfffffffffffffeff, 0x7, 0x4, 0x0, 0x401, 0xfc9a, 0xaa7, 0x8, 0xfffffffffffff842, 0x40, 0x1, 0x5c09, 0x5, 0x80000000, 0x8, 0x8, 0x8, 0x1400000000, 0x2, 0x7, 0xc10, 0xa1, 0x1ff, 0x3730, 0xe557, 0x1ff, 0x2c8, 0x10000, 0x0, 0x3f, 0xdb6, 0x4, 0x1, 0x2, 0xc23, 0x7, 0x8, 0x400]}) pread64(r7, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r6, r7}}, 0x200) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x6, 0x0, @fd=r0, 0x7, {0x0, r0}, 0x1ff, 0x0, 0x1, {0x0, r6, r0}}, 0xfffffffb) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pread64(r8, &(0x7f0000000040)=""/90, 0x5a, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x0, 0x7, 0x64, 0x0, 0x0, 0x54400, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3b6, 0x1, @perf_bp={&(0x7f0000000280), 0x6}, 0x6200, 0x3f, 0x1, 0x1, 0x4e0e, 0x200, 0x1de, 0x0, 0x8, 0x0, 0x1}, r9, 0x5, 0xffffffffffffffff, 0x8) 05:25:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x5000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:25:33 executing program 0: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000021) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x23f, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3ec2c6", 0x209, 0x6, 0x0, @loopback, @empty, {[@routing={0x21, 0x8, 0x2, 0xe3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x2c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x11, 0xa, '\x00', [@generic={0x6, 0x1, "90"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x40, 0x81, [0x8, 0x9, 0x9, 0x1]}}, @hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @loopback}]}, @fragment={0x1d, 0x0, 0x3f, 0x1, 0x0, 0x5, 0x65}, @dstopts={0xff, 0x11, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @empty}, @pad1, @pad1, @generic={0x5, 0x7, "ceff9f0ed4efe6"}, @generic={0x7, 0x4f, "869204484c3f61faad7a0cf7477c623d253da8c8e07bdff23a435f48c67da6a7ffd769b8c6d51654e0ae857f5e4fbab2a1c64cda2ebc6c056c4c61ce1d4c317e33bb7a6d2283906adc0ac020f6c4be"}, @ra]}, @routing={0x89, 0x6, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @hopopts={0x2f, 0x0, '\x00', [@pad1]}], {{0x4e20, 0x4e23, r0, r3, 0x1, 0x0, 0x10, 0x4, 0x1, 0x0, 0x94a, {[@sack={0x5, 0x2a, [0x5, 0x6, 0x13, 0x3f, 0x8000, 0x2, 0x3, 0x7, 0x8, 0x5]}]}}, {"1af01435bfc805b66dbe96d92ca68667401b33d928785925660b692bb035bd89e4fdbc66e2d92eb45e537905d2448df8c53c117b3a9ed456a5"}}}}}}}, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000200)={@empty, @random="220bef5e54a4", @void, {@mpls_mc={0x8848, {[{0x2}, {0x101}], @generic="f9c077bedf6ed8b24e4a60315cbf8260c2e8ee79338a1f0373ff091ec32a6c907f77d4cb834a838ceaa8f155ff371e34886924d697aa4d14453eeb8c0b6e06b847b5a4a97d8a2e944d57fd3363dc258ca3ce9772333c9d1fea1d814dab1092"}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x8f5, 0xf9b, 0xc57, 0xf4e]}) 05:25:33 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 86) [ 1663.981255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.983351] Call Trace: [ 1663.983913] dump_stack+0x107/0x167 [ 1663.984686] should_fail.cold+0x5/0xa [ 1663.985481] __alloc_pages_nodemask+0x182/0x600 [ 1663.986465] ? add_mm_counter_fast+0x220/0x220 [ 1663.987422] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1663.988692] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1663.989798] ? lock_downgrade+0x6d0/0x6d0 [ 1663.990673] ? mark_held_locks+0x9e/0xe0 [ 1663.991528] alloc_pages_vma+0xbb/0x410 [ 1663.992359] handle_mm_fault+0x152f/0x3500 [ 1663.993255] ? __pmd_alloc+0x630/0x630 [ 1663.994053] ? vmacache_find+0x55/0x2a0 [ 1663.994881] ? vmacache_update+0xce/0x140 [ 1663.995750] do_user_addr_fault+0x56e/0xc60 [ 1663.996668] exc_page_fault+0xa2/0x1a0 [ 1663.997501] asm_exc_page_fault+0x1e/0x30 [ 1663.998534] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 1663.999848] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 b3 0b 1d 02 0f 1f 00 0f 01 [ 1664.004350] RSP: 0018:ffff888048ef7aa8 EFLAGS: 00050206 [ 1664.005686] RAX: 0000000000000001 RBX: 0000000000000045 RCX: 0000000000000008 [ 1664.007451] RDX: 0000000000000005 RSI: ffff88804871e006 RDI: 0000000020001100 [ 1664.009217] RBP: 0000000020001100 R08: 0000000000000000 R09: ffff88804871e04a [ 1664.010977] R10: ffffed10090e3c09 R11: 0000000000000001 R12: ffff88804871e006 [ 1664.012754] R13: 0000000020001145 R14: 00007ffffffff000 R15: 0000000000000000 [ 1664.014555] copyout.part.0+0x10b/0x140 [ 1664.015545] _copy_to_iter+0x293/0x12d0 [ 1664.016537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.017836] ? __local_bh_enable_ip+0x9d/0x100 [ 1664.018984] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1664.020189] ? __virt_addr_valid+0x170/0x5d0 [ 1664.021261] ? __check_object_size+0x319/0x440 [ 1664.022394] seq_read_iter+0x71a/0x12b0 [ 1664.023403] seq_read+0x3dd/0x5b0 [ 1664.024251] ? seq_read_iter+0x12b0/0x12b0 [ 1664.025280] ? find_held_lock+0x2c/0x110 [ 1664.026291] ? fsnotify_perm.part.0+0x22d/0x620 [ 1664.027444] ? seq_read_iter+0x12b0/0x12b0 [ 1664.028486] proc_reg_read+0x22a/0x300 [ 1664.029440] ? proc_reg_write+0x300/0x300 [ 1664.030476] vfs_read+0x228/0x620 [ 1664.031305] __x64_sys_pread64+0x201/0x260 [ 1664.032339] ? ksys_pread64+0x1b0/0x1b0 [ 1664.033309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.034580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.035827] do_syscall_64+0x33/0x40 [ 1664.036743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.037980] RIP: 0033:0x7fcc6313bb19 [ 1664.038896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.043323] RSP: 002b:00007fcc606b1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1664.045155] RAX: ffffffffffffffda RBX: 00007fcc6324ef60 RCX: 00007fcc6313bb19 [ 1664.046877] RDX: 0000000000000ff2 RSI: 0000000020001100 RDI: 0000000000000003 [ 1664.048600] RBP: 00007fcc606b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.050346] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1664.052081] R13: 00007ffd2cb3dd7f R14: 00007fcc606b1300 R15: 0000000000022000 [ 1664.060528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 05:25:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x6000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:33 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 87) [ 1664.079650] loop7: detected capacity change from 0 to 2048 [ 1664.092481] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1664.111738] FAULT_INJECTION: forcing a failure. [ 1664.111738] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.114459] CPU: 1 PID: 9625 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1664.116373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1664.118301] Call Trace: [ 1664.119054] dump_stack+0x107/0x167 [ 1664.119928] should_fail.cold+0x5/0xa [ 1664.121001] ? ___slab_alloc+0x155/0x700 [ 1664.122136] ? create_object.isra.0+0x3a/0xa30 [ 1664.123256] should_failslab+0x5/0x20 [ 1664.124153] kmem_cache_alloc+0x5b/0x310 [ 1664.125122] create_object.isra.0+0x3a/0xa30 [ 1664.126147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1664.127353] kmem_cache_alloc+0x159/0x310 [ 1664.128329] xas_alloc+0x336/0x440 [ 1664.129172] xas_create+0x34a/0x10d0 [ 1664.130068] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1664.131310] xas_store+0x8c/0x1c40 [ 1664.132160] __xa_store+0x164/0x2d0 [ 1664.133011] ? xa_delete_node+0x280/0x280 [ 1664.133985] ? trace_hardirqs_on+0x5b/0x180 [ 1664.135015] xa_store+0x31/0x50 [ 1664.135793] __io_uring_add_tctx_node+0x1cf/0x520 [ 1664.136922] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1664.138136] ? alloc_fd+0x2e7/0x670 [ 1664.139013] io_uring_setup+0x1fbb/0x2980 [ 1664.139982] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1664.141148] ? wait_for_completion_io+0x270/0x270 [ 1664.142284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.143506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.144699] do_syscall_64+0x33/0x40 [ 1664.145564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.146757] RIP: 0033:0x7f6e4b79cb19 [ 1664.147616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.151818] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1664.153570] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1664.155227] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1664.156868] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1664.158505] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1664.160133] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:25:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x7000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000300)=""/136, 0x88, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8801) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe72501000f3fe6d8040000000000005ae2c01572b966306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab06096a31eafce28aa4854600"/150], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x8, 0x4, 0x2d2000, 0x79, @mcast1, @rand_addr=' \x01\x00', 0x40, 0x20, 0x1, 0x7}}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) 05:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000040)={{r0}, "89fbe6579e97e3dce4a161b6cb40b112466cf4d63a0bdfcc17d650ac287180a58c61127b1f784dc58ab73a1c22281f82bd5bdfcd864dce820f8ad52a0f33bf9ed626a8587321943f622ebe129fb62e994e50b912692de8a4c7016a281a5d28b5363d2bc08950dd243cab476b86dec345bf0673e6f0fcf8444f0eb51e5c36666a78a4dd1e2294cfa03356521e43ff1a00505062e99c09a51ca1225c6bea647b73317df6d7c9350a9c8e0eade2876d9baf61620eb696c9ade816b3692ced678a0a65f961478b527b34e8f5a412d42b69b935034d1c1e3f516c7d8a38d387c0af0f0bfcde649a22df272dfbf4e3e4c17c40731fd481d340fb66b1d5f451cf583d8eb116c6ec8769db7d204234795e9ae0f70e169fc9ca6639bc1cb5c64b40c8c7aa5b97c2d9e01bfaab7d73c81b092a85bb3d6edcd9882a9ce4f21902a1f3b51ed45f568bcf8fc989eb24408657af3c263253229ffb95bead483509b9504774f644793bc26d2a3aded143d6a5be623c730c8dfe806b2cc2ef7267d32f85758fae5254254a3ff21f72fe48a13673fc0b965018abb46def0f405a8b16f8b2c8ab698c50fd0cbfc501a5407c883e588277bfb86a52ceff872fb4d8c0102f3fdb666426aad46bbb2a715a8b69e90f9acb243c6193288461db51603c5083cad913c9b5f67ad69b086038f07249ddc6876cd05803477aaaf1f9bda171798f65756887ff00eb6f6a174636f127e63c3321a8098ee44596f6f66157f3f9c3deb840508003bd29908f27132aa932397c28890c02b0886fb77c0267f9edaae0d5842c0e1697ff086acdbc7aa1298776cd9cc9a79d580f86ca9df556dab8b3ca4a9bd91818bcb02d397a3d92789b92e997bf8591f8873cb06e12fd780906f6a79483cd2fe3e2ff6da079a0e37a887a2aa1f051ae95126bae33f2d08dc1a182881dcb45a7bbaa6c76c004278f834fa3884a289768f645b8dd0a1075ecada56d42e7b058b6ab2cf5f6951258506553f083077cb61d9fab232d1ebb5bb723b6aa9a1e086cd1318fb4057046a6f6abf29392a2a20dd92dc90547ddc0381206549295a648b0ebe7438a803e517327035a2f802771ede303376163fa2501e0f41f07da506820893213f4dea7de8248dd8bdbee67f18d6bb93939c077adad67659626bd7250af49bc12bc854e1c172446211aa5d4b968ee8b560a1fddeba0fd7608da5d6b1e6c22e52b09264cb6255e3158d9f6ffc3f974f90fcac6cd0345a3cb35b747b0e2ff4d58a2e2d47348f31873b4846970af8df7b59f206e4a7902ca805e7b932c42e306cc6971c23a03829a16adc6c30f757a82ceeefd8e15bc99e63dcb84ac429b6f0b5e3bbff49f773bafcb7fe943e7a6139529b7baf476003f1b3fd7bbc4b28df146ccf2ff49785dad7a2a22fe4cd19204776781a75fbade35b536057ea98a546bb942ba1a03539c8639b746d11bd3ffcb27aa9faddc4f3dd8a3dcdc1b40b0664d53472ae235ceb650723b7f88f1eaeb3345c693a71d6209b9d4a819dc5fb941055720afb4105c800ee658d7e00483f9bc80a2bf59362f4015d4c6b89aa90a4a21f0ed8b427a89f532d7ee9def17908dc775b1c971a01d43187c512b1cb8ae3f137a77b6395b56f4176f4dfe6e347039ef02fee112995076afec051d9459ed9dbea38fb4a78a3b06f4a3f408d5482ff6ea805edcf03b5f2f595c52ca77105ee98d933e7e1c3708534f1281cfb51b6cc72c68939aec2d069cf044b6c1267dc7b5d5f77828245a6d17e4b9a3b9025cb4043c875838a1333c49ea6e1cadab1c17163ac021d4f86864e16eb904da8dc9d121bc62fefb972414c88933df2589b9cc2cb676549f9642eea78d3df7cd5f23bc6684ecff6b5800f02a6d7428e61aa7f956bd65d47a99186308ff64c63cac7f02c61a322126f692d09493143bea6c874d33e4a4c32c3f9788a367192ff639c21bf82d25284eef3ca08bd527f6f6773f7fb116fa89a5a7187e9f8cf5082d1a84a93cabccb3b077b109045c7c0673bbe0851f82ab14bb6660b6679bf60d20c36913568b49fa99d38576db036aabcf6541679b19cfac68033df2858d8bb52cc076d4585d87a30945e93b4df71a47381665fe6c15850a756f6075fab564f93b2b962c54ac8a9698976fd36fe265181e4c2f9f980a09f0cafadb36bee3011be270ba91929908af1e630e24fdc7ab858987d064412d1b9dbef0379c4f7854b2c868715fdfc2df2d0e940d432ec3cd15b29111b1aead50dfffb4d05e9ea598962732eb39fecd25e77cda54f699be366944e537d36d805ded3b2a4a2f56ce4b5b0c054087185a8e4470088ed5604644f54a37e928684c74500a84bef2f0fd11a77fe7622ab3f6dd8d31c20a223773350fe48dd3c5ae94cc7c68c1d33218eab454e6773fda41a0256b6df295a0cb3c62afa8caceb3354779d53c145d7aa9b2f2079ae6f5ce2e11ca991d0820800a01dfb6d1e46fb5e7d2d43edd659cde52bd4419b66d869eed6e14661d0fbfd625e7ba818e941833ebf83b3f3e23d275c713d66dee677c25891869e6e1055a0a901b36cc93f3cfa31f25d887cb566c617410497a3ba4f39891a9c0b68aebf7d48d942f16d945302634d63a085268022427e76687180e4615ed3505888032f119490dc1454143490273beeff9dfe43e366453c311f70db65990cf7e5984603e12b88aae70e5c6d16c3d8eaf2edab3f736639e3d11546ef450ac554be0a80a75e8606526f7c126e1b8e718ca5727492612219c3a71bc648f9adfe1b5f273fb9168c62c259fc16ec472bee56351ab057a3808e56b58e96ae5c6e05b6fc8c479b4e850d1a9e87fda65a6e5289a6f413687c00d000a0dd0558eab61b48685b58f6ea03acfc3b7d597f2a6219982cfcd7dc527711cf5db45f7a86fbf35f2d513c39aae7932bea5d32fce173f59c4d2e91ef8df981bd0628c09c72800a7c8e2ccb491b9588e578290a0a260ad17b33625ea61f189f18e6a41707284d3bf6dd29fc13c72068c0085d447adde20f726d0825b69affc4b29a4b6fbd5dc9c7c6d0e5ced093cfd0fd94c98c872f886ab6d3d49bbfd8e8b0c3d76d95625b12f1cbbbdc2e7f725f930b4efa3661fa2fdfc344a957969138ef8fb4d29ad60df860cff46317c40c0d158067e56f338fc1a3dcef11cbd2ae837118832a401f5ddcd4c29d45a39dbdb7e4cdab690d2934e1255ab7a4c836ca5e6617828d0e105199dc2b6cb324b58bf334210ee9aa41b3d402d31ef4689c1868bef23a92f147134464704f0c1621e9163d3cc9da513abddb7380a2eea703e43616b39598bc9fdfd2809f2e2db0a9e03e178d2a147fcbfaffbd5e5a5476892e4769ca80eef173f90cec17dd045e4c186d844731dff5aa45e7d0ffeabf572370485dcfaeeed506c37f78add07d6dd66faca3317bc97869ef50174033964c94e7d4c478914f08c6004a14762f72840908b22ba2217bc097c5a8869250d26c40b1e0d60b7ccfee97c0dd80385b47d8692b221503d3c9173afd49e7506df2b70b2a4149469fe8c0d4cc8cb999653525bd0e273e5816df8766e326b7c7a048852703e79bc5d2f2584233fa45d365485c16ccc0a0c583a4fb19aed316819de15585e7a5b6eb4cc53293efb1ff51fa4ead8f287b3b18ee518f4872f1aaa99aff63b9b2676cf2cb5088bda8c382701cfa89e598e140b54b933f170e226c379341862cbab04eb85a3f7d6a82064825a9a34b609cdb33a547da5e1be612951914a4e0a0b32a2cd1fb815a7c963936fe4116e8f21b0364482ce1ebc67ab91bb5cc725cebcfe169b96a4c65fae9e9cca56d0edf682a70ca4c91ab593ec0d1b557d87e28931197cb12463872f8e4f19f53cc4cf623612ab0ee68c13abc89c04ffd30710e6368ffd4af4f337674f4b500c8463cc34acb0b4ede002c6ff06d37438d6df0f4fe95beeb15c5ac41e279e4f273a3deb7f786a6f2eab00954427203cd9a8cbcdeed5fac5055a82e7af9120f931af4b5a55182fd361ed0ac08b255938eee73c6214c12a983ce333e70dd1547c437ef3e9d1161a735186bc879cdaece1e4a14d52144440ef8d33249a390a0da5dc8eab7f7121ffee14da20481213e84e9671a124f63d94bdd7e48392171505a82e4153ad6c9c6f066e6bc5ccc084809c9e9ecf82add3831c709d0d971bb990b5839d38d2c4d19e77e83ddea0850eaa7381709e3880daf943b4b3b832f523bbcf9926c36ba3100a5df0ce23bd2b8d0b5e18a031370667bbefa6fdd3dc80e3bf27e106aae576e000c214078c7ad65c51c05445e82c1bb2f9f73e02d18e2604a71bd630ff1f9fda0c1511c819644078af0774356001f79d85cb27faa9ea1151ff24c18d255160a1f64a0242ecf597832f960010dabb0cf92dc33d5f7a180c54f1f2ce41399732f735101aaadca956403cd1f74806455a1090d6d080ab40abdb7e4a1738270fbee04f4d48c782d634263b75bebaa404ddec7c6da2e12d4a860d32de6d3b5c7a167ef1454bbcfc7819472faf42dd388e4893123e32247450a64cbca89d6d466ddc3ce88e7029d1fe07fedf532fb8b69a9d70d589fd8c34b449a6732cce1ca554414e8d339732599af1574c0c61e475ce77d6b3d87da9e3cb878f217b432a0fc159b79dff71741b8f442c747b84a92c78a175f69c58b9cdeb2874f91c172433dfafc2be9ec059b8647b341ffd995e138951b957bd3a745049f29092a5433904c337094994b1b30e55b2ae56fef8c99e0c87ef9e413ff6795345e3d43b1a63dd0f68bcae1aa43f25791ee0c82ac9ad5188808ee5e66c756efad1f490640b343385bdc47fbe81d116f067cb1857f2e30615e5b9a555a7caae326755206d240a15f91d0cbfde5aada1b86fe04620c5aa9d713b40172d297fa40a496ec3732e35c709a5620663c5efab102b922ea049ebc05ab21c2b75c294c40a0915a4bce2db3728bb9c5eea631dd447c831f4099d70409b91d60b65171bc570b0f6007a4eb491e16ae7dc22444375a44f082bbf1a12adbc94dcd30e9d7e0b3749d4e2f819bc7bf04a3fecdfd9365a52fad2e87a8cb55cb3b9a9067351788cad873603b8235ccab6995b17478b5e327bd7feefab4575700b2af3f8ef91848f8e3972d63705a2ae14ed88b2b348cb704faf97a328800390f8c162b3ed1d76cd4c7dc6fb9f5bc8cdf0638ca4f7af86d9af7381fb04996c362a23438fa7b92bbc284267f0dae5183466b7dc04a89794c046b696ec207dffc621f34ad0fc3ed4c6ae0c61d31462fe41d068705031d70628fa4a863fbbbc347b211a3539d6e4702f57eca9dd46d970fb7f3b016a743c456af930448a627786df1514380901cb90675b55fa0f6244faea5719821b57221493dfb7e0a642588642da747c260f46b8941bf10cb0c82d618089f87d6b43376f7d1336282711b0cf5618611fc9e96b0eeba3f96dffb79731099e0247dd9ea6aa127d05d442659c982a418d4c3494f16f29ba0bf87a33d55436c9c2c8f36964ac14d4bbaded5ae1311b508ae3240b6c15b799c4a8b3bb4cb3e23fbb80017346d5da48809dc395fd6e511ea9ba49de6bffcfcc3f05263f3e9e2f6e346cd7415bc8816ed79865e8a38324bc55551e439f11e706298ad107845a0e2fdea165753c644ee48ed58b9cc2b386c25f4e57bda74501faeedbea4befefba39e69af4bba8fa6197230401d029df86e038e157113feb77d24e50b2af6d8c7ffd21d41663ae6c49d73b9c1bd40ce26b269731b045d6c61edd4d7b54d477208fe83c7ae0ebfff2c8bfae"}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x810, 0xffffffffffffffff, 0x6352d000) [ 1664.238465] loop7: detected capacity change from 0 to 2048 05:25:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) (fail_nth: 5) 05:25:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x8000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1664.253511] EXT4-fs (loop7): invalid first ino: 2875922842 05:25:33 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000001040)={0x11f4, 0x3b, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@typed={0x79, 0x26, 0x0, 0x0, @binary="52fc534c9718e2682e22ecda47cfb941f9824662e988536df18aab4ccdd9930ae556fea3e295dfd28e80e86ae3fa3f25afc52e902523720a19dd9e683b1555e26133f1b4cbac5537d5e98d515502eb52e146c77165f838cf7b2001c8bf928d3543948016cac2e5ff8534fb83e654803074fc9d58eb"}, @generic="433fab10c81ffe68491e864677ba82599f10d12f688d21d505e67bd41f6b6effe699c2522b968fcddd5e8196811e0d8de8a719722bfc2492d2653280d181e997dfd4add3040ffc41e47d2a348bd7a35cdffba7500557f300abd8009c086902b5e1fd0f43be204788d421c987dc9a90e1ad9dc8316790cba290", @generic="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", @generic="67beb61e7d46b4f3369b270071c9eb9fa242eb7857ccf478cf11bb780dce8617cd1e0abc866ef6ce3bf7f8bdc320fb0f512646c58e1865125df63cf1b1d883a14870f7ae05400d56cbde4c73b413ebafb1b98d0528f9cdef64beb83db4c052ee608949e34f4a0130409319f08956726187e4ed0414ba198290cd99e0c5c902872d9d3f58ba32f8e97fddd466c54ed495ab691cf998a9998f7d18b0e305dec80b744cd6f3b96e34a7ecad44e336c4ab0541bba473d54f085bb3f4ae1b29d8ccde6d0ee5fae7a43037f425c7e614a872f51ce4fd4558c359c97b04cc8c9fd9d1345f496a732acb24402a"]}, 0x11f4}}, 0x44800) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x5, 0x3, 0x1, 'queue1\x00', 0x4}) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x14, 0x2c, 0xcd2781b960712dff}, 0x14}}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@fowner_eq}, {@fsname={'fsname', 0x3d, '.'}}, {@fowner_gt}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pread64(r5, &(0x7f0000000080)=""/136, 0x88, 0x8001) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) 05:25:33 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 88) 05:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xfff, 0x81) 05:25:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x400, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) fcntl$setown(r1, 0x8, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:25:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x9000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:33 executing program 2: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0)) r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/154, 0x9a}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}], 0x3, 0x40000000, &(0x7f0000000840)={0x77359400}) waitid(0x2, r2, &(0x7f0000000880), 0x1, &(0x7f0000000900)) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') pread64(r3, &(0x7f0000001100)=""/4076, 0xfec, 0x6) 05:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000040)=""/4094, 0xffe, 0xf0f71f) [ 1664.456902] FAULT_INJECTION: forcing a failure. [ 1664.456902] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.458272] CPU: 0 PID: 9663 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1664.459078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1664.460047] Call Trace: [ 1664.460359] dump_stack+0x107/0x167 [ 1664.460786] should_fail.cold+0x5/0xa [ 1664.461233] ? xas_alloc+0x336/0x440 [ 1664.461672] should_failslab+0x5/0x20 [ 1664.462116] kmem_cache_alloc+0x5b/0x310 [ 1664.462601] xas_alloc+0x336/0x440 [ 1664.463020] xas_create+0x34a/0x10d0 [ 1664.463471] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1664.464083] xas_store+0x8c/0x1c40 [ 1664.464507] __xa_store+0x164/0x2d0 [ 1664.464936] ? xa_delete_node+0x280/0x280 [ 1664.465427] ? trace_hardirqs_on+0x5b/0x180 [ 1664.465939] xa_store+0x31/0x50 [ 1664.466341] __io_uring_add_tctx_node+0x1cf/0x520 [ 1664.466908] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1664.467523] ? alloc_fd+0x2e7/0x670 [ 1664.467957] io_uring_setup+0x1fbb/0x2980 [ 1664.468448] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1664.469042] ? wait_for_completion_io+0x270/0x270 [ 1664.469619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.470232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.470845] do_syscall_64+0x33/0x40 [ 1664.471278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.471876] RIP: 0033:0x7f6e4b79cb19 [ 1664.472321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.474467] RSP: 002b:00007f6e48d12108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1664.475352] RAX: ffffffffffffffda RBX: 00007f6e4b8aff60 RCX: 00007f6e4b79cb19 [ 1664.476186] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 000000000000567d [ 1664.477020] RBP: 0000000020000040 R08: 0000000020000100 R09: 0000000020000100 [ 1664.477851] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100 [ 1664.478684] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:25:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x28cc3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4) dup2(r2, r1) pread64(r2, &(0x7f0000000580)=""/4086, 0x20001c08, 0xf0ff1f) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x41c}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xfd, 0x81, 0x2, 0x4, 0x0, 0x0, 0x48000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x1}, 0x12, 0xfff, 0x7, 0x9, 0x100000000, 0x2, 0xb0d, 0x0, 0x6, 0x0, 0xfff}, 0x0, 0xb, 0xffffffffffffffff, 0x9) 05:25:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:25:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0x45, 0x6) [ 1665.092647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 05:25:51 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 89) 05:25:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xa000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1682.134647] FAULT_INJECTION: forcing a failure. [ 1682.134647] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.137429] CPU: 1 PID: 9691 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1682.138917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.140712] Call Trace: [ 1682.141288] dump_stack+0x107/0x167 [ 1682.142081] should_fail.cold+0x5/0xa [ 1682.142921] ? create_object.isra.0+0x3a/0xa30 [ 1682.143907] should_failslab+0x5/0x20 [ 1682.144731] kmem_cache_alloc+0x5b/0x310 [ 1682.145618] create_object.isra.0+0x3a/0xa30 [ 1682.146572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1682.147678] kmem_cache_alloc+0x159/0x310 [ 1682.148583] vm_area_dup+0x78/0x290 [ 1682.149376] ? lock_release+0x680/0x680 [ 1682.150244] ? mark_lock+0xf5/0x2df0 [ 1682.151067] ? lock_chain_count+0x20/0x20 [ 1682.151961] ? mark_lock+0xf5/0x2df0 [ 1682.152765] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1682.153886] ? lock_chain_count+0x20/0x20 [ 1682.154790] ? mark_lock+0xf5/0x2df0 [ 1682.155592] ? vm_area_alloc+0x110/0x110 [ 1682.156468] ? __lock_acquire+0x1657/0x5b00 [ 1682.157414] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1682.158542] ? SOFTIRQ_verbose+0x10/0x10 [ 1682.159411] ? vmacache_find+0x55/0x2a0 [ 1682.160265] __split_vma+0xa8/0x4e0 [ 1682.161054] __do_munmap+0x365/0x1260 [ 1682.161878] ? arch_get_unmapped_area+0x450/0x450 [ 1682.162930] ? lock_release+0x680/0x680 [ 1682.163126] loop7: detected capacity change from 0 to 2048 [ 1682.163777] mmap_region+0x7cc/0x1500 [ 1682.165407] do_mmap+0x868/0x1370 [ 1682.166356] vm_mmap_pgoff+0x198/0x1f0 [ 1682.167256] ? randomize_page+0xb0/0xb0 [ 1682.168124] ksys_mmap_pgoff+0x41c/0x560 [ 1682.168993] ? find_mergeable_anon_vma+0x250/0x250 [ 1682.170049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.171187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.172292] do_syscall_64+0x33/0x40 [ 1682.173087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.174183] RIP: 0033:0x7f6e4b79cb62 [ 1682.174993] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1682.176354] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1682.178911] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1682.178931] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1682.178943] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1682.178957] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1682.185848] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1682.187365] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:25:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pidfd_getfd(r0, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3ff, 0x80, 0x0, 0x6}, {0x1f, 0x4, 0xb0}, {0x1000, 0x3f, 0x9, 0x3}, {0x81, 0xeb, 0x5, 0x5}]}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:var_lock_t:s0\x00', 0x20, 0x1) 05:25:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r0, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$TCXONC(r0, 0x540a, 0x3) 05:25:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x10010009fd}, {&(0x7f0000000500)="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", 0x2c2, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x979}, 0x4008, 0x0, 0x0, 0x0, 0x2, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000440)={0x0, 0x0, 0x7fffffff, 0x0, 0x0, "34bded5c1dce558baad1c0f3cfb4960ea69b51"}) write$P9_RREADLINK(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0911c6355b0e00047374b2ce90e880321c1a9cbddc61f63efa01e30dfc631d5225ea34a1036451487b6d3228cdbaa76b76b858185a96418934d6a13c74dfbc23da9ae8eed37ede363b6bbb950000"], 0x16) ioctl$SG_IO(0xffffffffffffffff, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00, 0x1, 0x2000000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) accept(r3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x402000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0xfffffffffffffffa, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) 05:25:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0x200020f2, 0x6) 05:25:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82002, 0x0) lseek(r1, 0x3, 0x2) 05:25:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:25:51 executing program 4: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000100)=[{0x1, 0x40, 0x1800}, {0x1, 0x1f, 0x800}, {0x1, 0xe79}], 0x3) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)={r1, r2+60000000}) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x4a41}, {0x0, 0x0, 0x1c00}, {0x2, 0x400, 0x400}], 0x3, &(0x7f0000000200)={0x0, 0x989680}) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}], 0x3) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000080)=""/14) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000001140)=""/4096) unshare(0x48020200) 05:25:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x4b) [ 1682.244690] loop6: detected capacity change from 0 to 41947648 [ 1682.256401] loop7: detected capacity change from 0 to 2048 [ 1682.262621] EXT4-fs (loop7): invalid first ino: 2875922842 05:25:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xb000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:25:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000003100)="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", 0x107c, r1}, 0x68) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r2) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r6, r5) write$vga_arbiter(r5, 0x0, 0x3f00) write$vga_arbiter(r5, &(0x7f0000000080), 0xf) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140), 0xf) pread64(r4, &(0x7f0000001100)=""/4082, 0xff2, 0x9) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r7, 0xffffffffffffffff) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x3f00) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@other={'lock', ' ', 'io'}, 0x8) 05:25:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) [ 1682.396894] loop7: detected capacity change from 0 to 2048 [ 1682.428490] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1682.445237] loop7: detected capacity change from 0 to 2048 [ 1682.452910] EXT4-fs (loop7): invalid first ino: 2875922842 05:26:05 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 90) 05:26:05 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000002080)=""/4103, 0x1007, 0xf0ff1c) 05:26:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:26:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0xf000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:26:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pidfd_getfd(r0, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3ff, 0x80, 0x0, 0x6}, {0x1f, 0x4, 0xb0}, {0x1000, 0x3f, 0x9, 0x3}, {0x81, 0xeb, 0x5, 0x5}]}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:var_lock_t:s0\x00', 0x20, 0x1) 05:26:05 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='fd\x00') pread64(r1, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:26:05 executing program 2: ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x8, &(0x7f00000000c0)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001100)=""/4082, 0xff2, 0x6) r2 = socket(0x1d, 0x6, 0x96a) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a0, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3882}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "e2bd71ea3983a2f88d14ec4dff1c37bed241d8e2f3b136403071f03cbd875114680c6e6f52de0431b31e61ba10c7803597ff9bf4623acc6716517d07d1adb3c0207b88f8b51a0d5faecc2685caf5081991427681edd16da2daee4f2d708cb9fb18b0db330b88a99a1291da076df3861f7ad973ff787ab9af1727878514c0af62670c4505b9b518b3d45f9be0744846765767201534dbb85e2709eda216f3bf45b1ec5a31e50a883be5a23f16b32e2a5f5006940a7d53b2000b68ebb91b6a805526ffc70d5d4d2c11679759ecd4fa821181a5efd4a756047daaf398"}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1a0}}, 0x40810) 05:26:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x108, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) fcntl$setlease(r3, 0x400, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000a17000/0xd000)=nil, 0xd000, 0x1, 0x20010, r6, 0xd1bdc000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000240)='ethtool\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) [ 1696.182405] FAULT_INJECTION: forcing a failure. [ 1696.182405] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.184835] CPU: 1 PID: 9742 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1696.186297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.188056] Call Trace: [ 1696.188628] dump_stack+0x107/0x167 [ 1696.189406] should_fail.cold+0x5/0xa [ 1696.190229] ? anon_vma_clone+0xdc/0x590 [ 1696.191103] should_failslab+0x5/0x20 [ 1696.191909] kmem_cache_alloc+0x5b/0x310 [ 1696.192774] anon_vma_clone+0xdc/0x590 [ 1696.193606] __split_vma+0x17c/0x4e0 [ 1696.194396] __do_munmap+0x365/0x1260 [ 1696.195206] ? arch_get_unmapped_area+0x450/0x450 [ 1696.196205] ? lock_release+0x680/0x680 [ 1696.197031] mmap_region+0x7cc/0x1500 [ 1696.197831] do_mmap+0x868/0x1370 [ 1696.198580] vm_mmap_pgoff+0x198/0x1f0 [ 1696.199404] ? randomize_page+0xb0/0xb0 [ 1696.200239] ksys_mmap_pgoff+0x41c/0x560 [ 1696.201095] ? find_mergeable_anon_vma+0x250/0x250 [ 1696.202130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.203220] ? syscall_enter_from_user_mode+0x1d/0x50 05:26:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0xc8, r2, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x0, 0xfffffff9, 0xc0, @mcast1, @mcast2, 0x1, 0x7800, 0x4, 0x7}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4c010}, 0x40000) [ 1696.204296] do_syscall_64+0x33/0x40 [ 1696.205318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.206397] RIP: 0033:0x7f6e4b79cb62 [ 1696.207195] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1696.211078] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1696.212704] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1696.214208] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1696.215695] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1696.217164] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1696.218637] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1696.245312] loop7: detected capacity change from 0 to 2048 [ 1696.260110] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1696.283712] loop7: detected capacity change from 0 to 2048 [ 1696.289974] EXT4-fs (loop7): invalid first ino: 2875922842 05:26:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8) 05:26:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:sshd_exec_t:s0\x00', 0x21, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0xfffff1c5}) 05:26:21 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:26:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/2, 0x2, 0x2, 0x3}, @fda={0x66646185, 0x3, 0x0, 0x28}, @fda={0x66646185, 0x0, 0x2, 0x37}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}, 0x1000}, @free_buffer, @register_looper], 0xdf, 0x0, &(0x7f00000001c0)="9fbfec07eeb88b0d91ae7a4fc69994d3b7a20efd1f7021c2fdd30b42cca9a9a23486b7fc1a57b53455b051c5356e46d9c72cab8882b442f479057a879c90373d838d7341f8885de4042d0427bd7076d2a13351b3909f828ee25aed71ce6be7caa66d221f7db8634db4a315f91f8ddeb611abacaafc0a2069b3cd71e1e4305b650de96979c3359ddb1f253a5f5956e5f7862957a77215218f73907fdb7936bd21f6027e39d0a6446c048f4201b4a056c017a7eec487254a3bef883354b6e29413512424666c206cedf0f5904f88b654123a8ab0bb1b0d77a5d09e11cbf46abd"}) 05:26:21 executing program 6: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 05:26:21 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 91) 05:26:21 executing program 4: init_module(&(0x7f0000000100)='\b\x00\x00\x00\x00d\xb6\x15\xbb\x90|\x06rf\xf1z\x83`\xdb\x8b\xf7\xbf\x9a\xedX\xec\xaa\x17a\x90\x1a\xc69}d\x92{] \x12\xa13\x7fq\xd8c3k\xd4I~S\xe1\x16\xb10\x8cG(z\xa6\xf8\xcc\x84cu:\xf8+\xcd\x16\xd0\xaa{\xcb\x93\xad\xa1)a\xf3\x87\xb8{sl\xd5N\xdd\x99\x04O\xb4\xec\xbe\x13\xb1!dt\xac\x145E\xd0\xe5 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1712.154882] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1712.156504] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1712.158013] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1712.159538] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1712.161055] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1712.162566] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 05:26:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:26:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x11000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:26:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r2, r1) write$vga_arbiter(r1, 0x0, 0x3f00) flistxattr(r1, &(0x7f0000000040)=""/35, 0x23) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:26:21 executing program 0: init_module(&(0x7f0000000100)='\b\x00\x00\x00\x00d\xb6\x15\xbb\x90|\x06rf\xf1z\x83`\xdb\x8b\xf7\xbf\x9a\xedX\xec\xaa\x17a\x90\x1a\xc69}d\x92{] \x12\xa13\x7fq\xd8c3k\xd4I~S\xe1\x16\xb10\x8cG(z\xa6\xf8\xcc\x84cu:\xf8+\xcd\x16\xd0\xaa{\xcb\x93\xad\xa1)a\xf3\x87\xb8{sl\xd5N\xdd\x99\x04O\xb4\xec\xbe\x13\xb1!dt\xac\x145E\xd0\xe5 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1712.381700] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1712.383376] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1712.384966] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1712.386491] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1712.388120] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1712.389645] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1712.423160] EXT4-fs (loop7): invalid first ino: 2875922842 05:26:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) faccessat2(r0, &(0x7f0000000140)='./file0\x00', 0x10, 0x1000) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb5, 0x101042) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @local}, 0x1a, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='veth0_vlan\x00', 0x1, 0x77de, 0x2fa2}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r2, 0x2275, &(0x7f00000005c0)={@lba}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1712.469281] loop7: detected capacity change from 0 to 2048 [ 1712.493090] EXT4-fs (loop7): invalid first ino: 2875922842 05:26:39 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 93) 05:26:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) pread64(r0, &(0x7f0000000040)=""/230, 0xe6, 0x9) 05:26:39 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000040)=""/72, 0x48, 0x8) syz_io_uring_setup(0x6ea4, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x5) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r3) fcntl$setlease(r4, 0x400, 0x2) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x1, 0x108) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4082, 0xff2, 0x6) 05:26:39 executing program 2: r0 = fork() ptrace(0x10, 0xffffffffffffffff) waitid(0x0, r0, 0x0, 0x40000000, &(0x7f0000000200)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) r3 = clone3(&(0x7f0000000500)={0x8000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x1e}, &(0x7f0000000440)=""/24, 0x18, &(0x7f0000000480)=""/55, &(0x7f00000004c0)=[r0, r2, r0, r0, r2, 0xffffffffffffffff, r0, r0], 0x8, {r1}}, 0x58) waitid(0x0, r3, &(0x7f0000000580), 0x4, &(0x7f00000002c0)) pread64(r1, &(0x7f0000001100)=""/4082, 0xff2, 0x6) r4 = shmget$private(0x0, 0x3000, 0x54000020, &(0x7f0000ffa000/0x3000)=nil) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616edf000000000000006e6f3d91e31b121a4ded3205dc49bb21857810b4ba747892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa2aa580d91f1b367e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef401e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db", @ANYRESOCT=r6, @ANYBLOB="2cefff7fa3", @ANYRESHEX, @ANYRESDEC=r7, @ANYRESDEC=r8, @ANYRES32=r5]) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) r10 = getpid() shmctl$IPC_SET(r4, 0x1, &(0x7f00000000c0)={{0x2, 0xee00, 0xee01, 0xee00, r7, 0x1a4, 0x9}, 0x10000, 0xa90, 0x2, 0x80000001, r9, r10, 0x8}) 05:26:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x20000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:26:39 executing program 0: init_module(&(0x7f0000000100)='\b\x00\x00\x00\x00d\xb6\x15\xbb\x90|\x06rf\xf1z\x83`\xdb\x8b\xf7\xbf\x9a\xedX\xec\xaa\x17a\x90\x1a\xc69}d\x92{] \x12\xa13\x7fq\xd8c3k\xd4I~S\xe1\x16\xb10\x8cG(z\xa6\xf8\xcc\x84cu:\xf8+\xcd\x16\xd0\xaa{\xcb\x93\xad\xa1)a\xf3\x87\xb8{sl\xd5N\xdd\x99\x04O\xb4\xec\xbe\x13\xb1!dt\xac\x145E\xd0\xe50xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@version_u}]}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80000, 0x80) [ 1730.061320] FAULT_INJECTION: forcing a failure. [ 1730.061320] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.064450] CPU: 0 PID: 9831 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1730.064580] Module has invalid ELF structures [ 1730.066243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1730.066251] Call Trace: [ 1730.066281] dump_stack+0x107/0x167 [ 1730.066310] should_fail.cold+0x5/0xa [ 1730.072028] ? create_object.isra.0+0x3a/0xa30 [ 1730.073218] should_failslab+0x5/0x20 [ 1730.074216] kmem_cache_alloc+0x5b/0x310 [ 1730.075297] create_object.isra.0+0x3a/0xa30 [ 1730.076443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1730.077775] kmem_cache_alloc+0x159/0x310 [ 1730.078871] vm_area_alloc+0x1c/0x110 [ 1730.079875] mmap_region+0x982/0x1500 [ 1730.080884] do_mmap+0x868/0x1370 [ 1730.081805] vm_mmap_pgoff+0x198/0x1f0 [ 1730.082830] ? randomize_page+0xb0/0xb0 [ 1730.083899] ksys_mmap_pgoff+0x41c/0x560 [ 1730.084963] ? find_mergeable_anon_vma+0x250/0x250 [ 1730.086242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1730.087623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1730.088825] do_syscall_64+0x33/0x40 [ 1730.089630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1730.090733] RIP: 0033:0x7f6e4b79cb62 [ 1730.091544] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1730.095528] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1730.097176] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1730.098722] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1730.100271] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1730.101814] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1730.103366] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1730.119512] loop7: detected capacity change from 0 to 2048 [ 1730.129110] 9p: Unknown uid 18446744073709551615 [ 1730.136436] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1730.152914] loop7: detected capacity change from 0 to 2048 [ 1730.158055] EXT4-fs (loop7): invalid first ino: 2875922842 05:26:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x9c000000, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:26:39 executing program 0: init_module(&(0x7f0000000100)='\b\x00\x00\x00\x00d\xb6\x15\xbb\x90|\x06rf\xf1z\x83`\xdb\x8b\xf7\xbf\x9a\xedX\xec\xaa\x17a\x90\x1a\xc69}d\x92{] \x12\xa13\x7fq\xd8c3k\xd4I~S\xe1\x16\xb10\x8cG(z\xa6\xf8\xcc\x84cu:\xf8+\xcd\x16\xd0\xaa{\xcb\x93\xad\xa1)a\xf3\x87\xb8{sl\xd5N\xdd\x99\x04O\xb4\xec\xbe\x13\xb1!dt\xac\x145E\xd0\xe50xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x80000001) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) 05:26:39 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xb, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) 05:26:39 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x8001, 0x508c1) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x4f1, 0x2, 0xed}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x7fff) fork() r1 = fork() getcwd(&(0x7f0000000000)=""/155, 0x9b) r2 = getpgrp(r1) sched_rr_get_interval(r1, &(0x7f00000000c0)) r3 = geteuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, r3, 0x0, 0x0, 0x1}, 0x800, 0x3, 0x0, 0x2800, 0x0, r1, 0x4}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) r4 = getpgrp(r2) ptrace(0x10, r4) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) ptrace(0x10, r2) fork() syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x8, 0x0, &(0x7f0000000200), 0x1300064, &(0x7f00000004c0)=ANY=[]) 05:26:39 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x567d, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 94) [ 1730.257619] Module has invalid ELF structures 05:26:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = fork() ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x8, 0xca, 0x40, 0x0, 0x4, 0x20031, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x2000, 0xfe00000000000000, 0x5, 0x3, 0x566, 0x0, 0x6, 0x0, 0x5, 0x0, 0xab}, r1, 0xb, r0, 0x0) pread64(r0, &(0x7f0000001100)=""/4082, 0xff2, 0x6) [ 1730.292314] loop7: detected capacity change from 0 to 2048 [ 1730.298207] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1730.318500] loop7: detected capacity change from 0 to 2048 [ 1730.323405] EXT4-fs (loop7): invalid first ino: 2875922842 05:26:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x9effffff, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 05:26:39 executing program 0: init_module(&(0x7f0000000100)='\b\x00\x00\x00\x00d\xb6\x15\xbb\x90|\x06rf\xf1z\x83`\xdb\x8b\xf7\xbf\x9a\xedX\xec\xaa\x17a\x90\x1a\xc69}d\x92{] \x12\xa13\x7fq\xd8c3k\xd4I~S\xe1\x16\xb10\x8cG(z\xa6\xf8\xcc\x84cu:\xf8+\xcd\x16\xd0\xaa{\xcb\x93\xad\xa1)a\xf3\x87\xb8{sl\xd5N\xdd\x99\x04O\xb4\xec\xbe\x13\xb1!dt\xac\x145E\xd0\xe5 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1730.376457] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1730.378104] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1730.379660] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1730.381198] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1730.382747] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1730.384294] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1730.414644] Module has invalid ELF structures 05:26:39 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xd, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100011f0000000000000000000000000000cff918817ba0e8ce9a196babe010703473ebdaf2d323", 0x62, 0x400}], 0x0, &(0x7f0000000240)) [ 1730.514499] loop7: detected capacity change from 0 to 2048 [ 1730.542129] ------------[ cut here ]------------ [ 1730.543436] WARNING: CPU: 0 PID: 9873 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1730.544844] EXT4-fs (loop7): invalid first ino: 2875922842 [ 1730.545366] Modules linked in: [ 1730.547423] CPU: 0 PID: 9873 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1730.548912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1730.550736] RIP: 0010:get_pat_info+0x216/0x270 [ 1730.551765] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 b1 88 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 9a 88 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 b5 a5 5a 00 e9 [ 1730.555757] RSP: 0018:ffff888048387890 EFLAGS: 00010216 [ 1730.562648] RAX: 000000000001449d RBX: ffff888048054500 RCX: ffffc900049fe000 [ 1730.564252] RDX: 0000000000040000 RSI: ffffffff81125466 RDI: 0000000000000007 [ 1730.565848] RBP: ffff888048387948 R08: 0000000000000000 R09: ffff888048387818 [ 1730.567458] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1730.569078] R13: 1ffff11009070f12 R14: 0000000000000000 R15: ffff888048054550 [ 1730.570675] FS: 00007f6e48d12700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1730.572481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1730.573813] CR2: 00007feb2ce92ae0 CR3: 00000000483e8000 CR4: 0000000000350ef0 [ 1730.575421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1730.577015] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1730.578598] Call Trace: [ 1730.579237] ? pgprot_writethrough+0xc0/0xc0 [ 1730.580231] ? finish_task_switch+0x126/0x5d0 [ 1730.581243] ? finish_task_switch+0xef/0x5d0 [ 1730.582265] untrack_pfn+0xdc/0x240 [ 1730.583112] ? track_pfn_insert+0x150/0x150 [ 1730.584099] ? lock_downgrade+0x6d0/0x6d0 [ 1730.585041] ? uprobe_munmap+0x1c/0x560 [ 1730.585964] unmap_single_vma+0x1bc/0x300 [ 1730.586914] zap_page_range_single+0x2ce/0x450 [ 1730.587954] ? unmap_single_vma+0x300/0x300 [ 1730.588930] ? remap_pfn_range_internal+0xc56/0xf60 [ 1730.590069] ? lookup_memtype+0x5b/0x200 [ 1730.591011] ? apply_to_existing_page_range+0x40/0x40 [ 1730.592193] remap_pfn_range+0x139/0x160 [ 1730.593123] ? remap_pfn_range_notrack+0x70/0x70 [ 1730.594207] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1730.595391] io_uring_mmap+0x398/0x530 [ 1730.596278] mmap_file+0x5e/0xe0 [ 1730.597058] mmap_region+0xc4d/0x1500 [ 1730.597937] do_mmap+0x868/0x1370 [ 1730.598702] vm_mmap_pgoff+0x198/0x1f0 [ 1730.599608] ? randomize_page+0xb0/0xb0 [ 1730.600525] ksys_mmap_pgoff+0x41c/0x560 [ 1730.601458] ? find_mergeable_anon_vma+0x250/0x250 [ 1730.602572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1730.603779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1730.604971] do_syscall_64+0x33/0x40 [ 1730.605785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1730.606968] RIP: 0033:0x7f6e4b79cb62 [ 1730.607828] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1730.611852] RSP: 002b:00007f6e48d120f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1730.613556] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e4b79cb62 [ 1730.615152] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 1730.616741] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1730.618314] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1730.619904] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020ffd000 [ 1730.621507] irq event stamp: 1647 [ 1730.622298] hardirqs last enabled at (1657): [] console_unlock+0x92d/0xb40 [ 1730.624184] hardirqs last disabled at (1666): [] console_unlock+0x839/0xb40 [ 1730.626073] softirqs last enabled at (1076): [] asm_call_irq_on_stack+0x12/0x20 [ 1730.628064] softirqs last disabled at (1007): [] asm_call_irq_on_stack+0x12/0x20 [ 1730.630023] ---[ end trace cbc534c755f481db ]--- [ 1730.645143] loop7: detected capacity change from 0 to 2048 [ 1730.660387] EXT4-fs (loop7): invalid first ino: 2875922842 VM DIAGNOSIS: 05:26:39 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8271 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff8880483872a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000038 R13=0000000000000038 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e82c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6e48d12700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb2ce92ae0 CR3=00000000483e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=1ffff11001fb5e01 RDX=dffffc0000000000 RSI=ffff88800fdaff18 RDI=ffff88800fdaf3e8 RBP=ffff88800fda8000 RSP=ffff88800fdaf300 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032047 R11=1ffff11001fb5e68 R12=ffff88800fdaff48 R13=ffff88800fdaf3d8 R14=1ffff11001fb5e68 R15=ffffffff85a2174a RIP=ffffffff81109562 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb226366900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb22578f9b0 CR3=000000000dae8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=9822118b7bc7bf92000000000060e040 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=84a1a89dfccee6fb00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000