, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:40:14 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 10) 03:40:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xfcff, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1051.985753] FAULT_INJECTION: forcing a failure. [ 1051.985753] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.988355] CPU: 1 PID: 7626 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1051.989786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.991508] Call Trace: [ 1051.992074] dump_stack+0x107/0x167 [ 1051.992843] should_fail.cold+0x5/0xa [ 1051.993646] ? percpu_ref_init+0xd8/0x3d0 [ 1051.994525] should_failslab+0x5/0x20 [ 1051.995324] kmem_cache_alloc_trace+0x55/0x320 [ 1051.996292] ? io_tctx_exit_cb+0xf0/0xf0 [ 1051.997139] percpu_ref_init+0xd8/0x3d0 [ 1051.997977] io_uring_setup+0x47a/0x2980 [ 1051.998816] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1051.999814] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1052.000871] ? wait_for_completion_io+0x270/0x270 [ 1052.001909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1052.002996] ? syscall_enter_from_user_mode+0x1d/0x50 03:40:14 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1052.004092] do_syscall_64+0x33/0x40 [ 1052.005105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1052.006185] RIP: 0033:0x7f8bd0804b19 [ 1052.006963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1052.010780] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1052.012352] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1052.013864] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1052.015357] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1052.016864] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1052.018421] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1052.037793] loop3: detected capacity change from 0 to 64512 [ 1052.074423] loop3: detected capacity change from 0 to 64512 03:40:28 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:40:28 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 03:40:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xff0f, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:40:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 11) 03:40:28 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:40:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:40:28 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:28 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1065.794883] FAULT_INJECTION: forcing a failure. [ 1065.794883] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.796856] CPU: 1 PID: 7648 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1065.798130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1065.800269] Call Trace: [ 1065.800956] dump_stack+0x107/0x167 [ 1065.801921] should_fail.cold+0x5/0xa [ 1065.802501] loop3: detected capacity change from 0 to 65024 [ 1065.802905] ? create_object.isra.0+0x3a/0xa30 [ 1065.805254] should_failslab+0x5/0x20 [ 1065.806144] kmem_cache_alloc+0x5b/0x310 [ 1065.807085] create_object.isra.0+0x3a/0xa30 [ 1065.808105] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1065.809288] kmem_cache_alloc_trace+0x151/0x320 [ 1065.810381] ? io_tctx_exit_cb+0xf0/0xf0 [ 1065.811326] percpu_ref_init+0xd8/0x3d0 [ 1065.812254] io_uring_setup+0x47a/0x2980 [ 1065.813195] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1065.814324] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1065.815493] ? wait_for_completion_io+0x270/0x270 [ 1065.816631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1065.817854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1065.819056] do_syscall_64+0x33/0x40 [ 1065.819917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1065.821105] RIP: 0033:0x7f8bd0804b19 [ 1065.821976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1065.826245] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1065.828006] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1065.829665] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1065.831334] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1065.832980] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1065.834636] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1065.864071] loop3: detected capacity change from 0 to 65024 03:40:28 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:40:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xfffc, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:40:28 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) 03:40:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:40:28 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1066.053350] loop3: detected capacity change from 0 to 65024 [ 1066.077075] loop3: detected capacity change from 0 to 65024 03:40:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1066.107738] FAULT_INJECTION: forcing a failure. [ 1066.107738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1066.110867] CPU: 1 PID: 7672 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1066.112321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.114086] Call Trace: [ 1066.114647] dump_stack+0x107/0x167 [ 1066.115488] should_fail.cold+0x5/0xa [ 1066.116300] __alloc_pages_nodemask+0x182/0x600 [ 1066.117284] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1066.118574] ? cap_capable+0x1cd/0x230 [ 1066.119404] alloc_pages_current+0x187/0x280 [ 1066.120330] __get_free_pages+0xc/0xa0 [ 1066.121153] io_uring_setup+0xe27/0x2980 [ 1066.122029] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1066.123095] ? wait_for_completion_io+0x270/0x270 [ 1066.124138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.125250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.126348] do_syscall_64+0x33/0x40 [ 1066.127135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.128218] RIP: 0033:0x7f8bd0804b19 [ 1066.129002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.132942] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1066.134551] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1066.136063] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1066.137766] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1066.139298] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1066.140797] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:40:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 03:40:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:40:42 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x40a2e, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:40:42 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:40:42 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:42 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:40:42 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385a"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1079.440637] loop3: detected capacity change from 0 to 264704 [ 1079.476408] FAULT_INJECTION: forcing a failure. [ 1079.476408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1079.479211] CPU: 0 PID: 7699 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1079.480742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1079.481951] loop3: detected capacity change from 0 to 264704 [ 1079.482637] Call Trace: [ 1079.482665] dump_stack+0x107/0x167 [ 1079.482689] should_fail.cold+0x5/0xa [ 1079.482720] __alloc_pages_nodemask+0x182/0x600 [ 1079.486997] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1079.488363] ? cap_capable+0x1cd/0x230 [ 1079.489263] alloc_pages_current+0x187/0x280 [ 1079.490270] __get_free_pages+0xc/0xa0 [ 1079.491153] io_uring_setup+0xf9a/0x2980 [ 1079.492084] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1079.493220] ? wait_for_completion_io+0x270/0x270 [ 1079.494334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1079.495512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.496672] do_syscall_64+0x33/0x40 [ 1079.497512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1079.498674] RIP: 0033:0x7f8bd0804b19 [ 1079.499511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1079.503655] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1079.505359] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1079.506955] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1079.508535] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1079.510137] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1079.511729] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:40:42 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385a"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:40:42 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:40:42 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x40a2f, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:40:42 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) 03:40:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:40:42 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1079.705377] loop3: detected capacity change from 0 to 264704 [ 1079.726959] FAULT_INJECTION: forcing a failure. [ 1079.726959] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.729516] CPU: 0 PID: 7716 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1079.730946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1079.732682] Call Trace: [ 1079.733234] dump_stack+0x107/0x167 [ 1079.734011] should_fail.cold+0x5/0xa [ 1079.734807] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1079.735966] should_failslab+0x5/0x20 [ 1079.736758] kmem_cache_alloc_trace+0x55/0x320 [ 1079.737709] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1079.738846] io_uring_setup+0x14f6/0x2980 [ 1079.739711] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1079.740761] ? wait_for_completion_io+0x270/0x270 [ 1079.741799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1079.742891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.743967] do_syscall_64+0x33/0x40 [ 1079.744738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1079.745809] RIP: 0033:0x7f8bd0804b19 [ 1079.746588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1079.750440] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1079.752029] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1079.753510] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1079.755016] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1079.756487] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1079.757988] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:40:58 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385a"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:40:58 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, 0x0, 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:40:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:40:58 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, 0x0, 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:40:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) 03:40:58 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:40:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x40a4d, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1095.325605] loop3: detected capacity change from 0 to 264704 [ 1095.350339] FAULT_INJECTION: forcing a failure. [ 1095.350339] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.353014] CPU: 0 PID: 7744 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1095.354480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.356240] Call Trace: [ 1095.356804] dump_stack+0x107/0x167 [ 1095.357586] should_fail.cold+0x5/0xa [ 1095.358414] ? create_object.isra.0+0x3a/0xa30 [ 1095.359383] should_failslab+0x5/0x20 [ 1095.360190] kmem_cache_alloc+0x5b/0x310 [ 1095.361052] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1095.362250] create_object.isra.0+0x3a/0xa30 [ 1095.363181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.364264] kmem_cache_alloc_trace+0x151/0x320 [ 1095.365256] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1095.366417] io_uring_setup+0x14f6/0x2980 [ 1095.367305] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1095.368385] ? wait_for_completion_io+0x270/0x270 [ 1095.369413] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.370533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.371597] do_syscall_64+0x33/0x40 [ 1095.372381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.373463] RIP: 0033:0x7f8bd0804b19 [ 1095.374263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.378167] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1095.379789] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 03:40:58 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1095.381304] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1095.382987] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1095.384492] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1095.385997] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1095.396075] loop3: detected capacity change from 0 to 264704 03:40:58 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:10 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, 0x0, 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:41:10 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:10 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 03:41:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60b"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x80000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1107.640876] FAULT_INJECTION: forcing a failure. [ 1107.640876] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.643955] CPU: 1 PID: 7762 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1107.645486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1107.647361] Call Trace: [ 1107.647955] dump_stack+0x107/0x167 [ 1107.648773] should_fail.cold+0x5/0xa [ 1107.649630] ? alloc_super+0x52/0xa90 [ 1107.650492] should_failslab+0x5/0x20 [ 1107.651337] kmem_cache_alloc_trace+0x55/0x320 [ 1107.652346] ? do_raw_spin_lock+0x121/0x260 [ 1107.653312] ? fput+0x20/0x20 [ 1107.654010] alloc_super+0x52/0xa90 [ 1107.654833] ? fput+0x20/0x20 [ 1107.655526] sget_fc+0x110/0x860 [ 1107.656275] ? set_anon_super+0xc0/0xc0 [ 1107.657162] ? rpc_kill_sb+0x1b0/0x1b0 [ 1107.658018] get_tree_keyed+0x55/0x210 [ 1107.658890] vfs_get_tree+0x8e/0x300 [ 1107.659712] __do_sys_fsconfig+0x8f5/0xc50 [ 1107.660645] ? fscontext_read+0x3b0/0x3b0 [ 1107.661558] ? fput_many+0x2f/0x1a0 [ 1107.662381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1107.663549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1107.664689] do_syscall_64+0x33/0x40 [ 1107.665499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1107.666634] RIP: 0033:0x7f30b7069b19 [ 1107.667433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1107.671432] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1107.673096] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1107.674662] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1107.676217] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.677781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.679334] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 03:41:10 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1107.698453] FAULT_INJECTION: forcing a failure. [ 1107.698453] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.700248] CPU: 0 PID: 7773 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1107.701120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1107.702175] Call Trace: [ 1107.702547] dump_stack+0x107/0x167 [ 1107.703008] should_fail.cold+0x5/0xa [ 1107.703489] ? create_object.isra.0+0x3a/0xa30 [ 1107.704073] should_failslab+0x5/0x20 [ 1107.704551] kmem_cache_alloc+0x5b/0x310 [ 1107.705066] create_object.isra.0+0x3a/0xa30 [ 1107.705620] kmemleak_alloc_percpu+0xa0/0x100 [ 1107.706209] pcpu_alloc+0x4e2/0x1240 [ 1107.706696] ? io_async_queue_proc+0x80/0x80 [ 1107.707254] percpu_ref_init+0x31/0x3d0 [ 1107.707762] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1107.708446] io_uring_setup+0x14f6/0x2980 [ 1107.708970] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1107.709613] ? wait_for_completion_io+0x270/0x270 [ 1107.710269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1107.710946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1107.711593] do_syscall_64+0x33/0x40 [ 1107.712076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1107.712717] RIP: 0033:0x7f8bd0804b19 [ 1107.713199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1107.715571] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1107.716546] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1107.717433] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1107.718363] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1107.719253] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1107.720138] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:41:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1107.734591] loop3: detected capacity change from 0 to 524288 03:41:10 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1107.753831] loop3: detected capacity change from 0 to 524288 03:41:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xe0000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:10 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 03:41:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1107.866048] loop3: detected capacity change from 0 to 917504 [ 1107.947295] FAULT_INJECTION: forcing a failure. [ 1107.947295] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.948804] CPU: 0 PID: 7800 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1107.949582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1107.950548] Call Trace: [ 1107.950856] dump_stack+0x107/0x167 [ 1107.951277] should_fail.cold+0x5/0xa [ 1107.951717] ? create_object.isra.0+0x3a/0xa30 [ 1107.952244] should_failslab+0x5/0x20 [ 1107.952681] kmem_cache_alloc+0x5b/0x310 [ 1107.953147] create_object.isra.0+0x3a/0xa30 [ 1107.953648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1107.954242] kmem_cache_alloc_trace+0x151/0x320 [ 1107.954782] ? do_raw_spin_lock+0x121/0x260 [ 1107.955276] ? fput+0x20/0x20 [ 1107.955638] alloc_super+0x52/0xa90 [ 1107.956055] ? fput+0x20/0x20 [ 1107.956416] sget_fc+0x110/0x860 [ 1107.956804] ? set_anon_super+0xc0/0xc0 [ 1107.957262] ? rpc_kill_sb+0x1b0/0x1b0 [ 1107.957705] get_tree_keyed+0x55/0x210 [ 1107.958151] vfs_get_tree+0x8e/0x300 [ 1107.958601] __do_sys_fsconfig+0x8f5/0xc50 [ 1107.959084] ? fscontext_read+0x3b0/0x3b0 [ 1107.959560] ? fput_many+0x2f/0x1a0 [ 1107.959984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1107.960579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1107.961169] do_syscall_64+0x33/0x40 [ 1107.961597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1107.962192] RIP: 0033:0x7f30b7069b19 [ 1107.962656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1107.964736] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1107.965604] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1107.966434] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1107.967241] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.968043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.968853] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 03:41:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, 0x0, 0x81000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:41:10 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x400000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:10 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:10 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1108.004390] FAULT_INJECTION: forcing a failure. [ 1108.004390] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.005823] CPU: 0 PID: 7802 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1108.006619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1108.007566] Call Trace: [ 1108.007873] dump_stack+0x107/0x167 [ 1108.008293] should_fail.cold+0x5/0xa [ 1108.008728] ? create_object.isra.0+0x3a/0xa30 [ 1108.009247] should_failslab+0x5/0x20 [ 1108.009678] kmem_cache_alloc+0x5b/0x310 [ 1108.010139] create_object.isra.0+0x3a/0xa30 [ 1108.010662] kmemleak_alloc_percpu+0xa0/0x100 [ 1108.011177] pcpu_alloc+0x4e2/0x1240 [ 1108.011571] loop3: detected capacity change from 0 to 4194304 [ 1108.011613] ? io_async_queue_proc+0x80/0x80 [ 1108.013432] percpu_ref_init+0x31/0x3d0 [ 1108.013887] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1108.014516] io_uring_setup+0x14f6/0x2980 [ 1108.014990] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1108.015562] ? wait_for_completion_io+0x270/0x270 [ 1108.016121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1108.016684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1108.017266] do_syscall_64+0x33/0x40 [ 1108.017686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1108.018287] RIP: 0033:0x7f8bd0804b19 [ 1108.018709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1108.020786] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1108.021644] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1108.022478] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1108.023287] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1108.024092] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1108.024902] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:41:10 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1108.066781] loop3: detected capacity change from 0 to 4194304 03:41:27 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:27 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:27 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 3) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:27 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:41:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) [ 1124.394810] FAULT_INJECTION: forcing a failure. [ 1124.394810] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.398764] CPU: 0 PID: 7833 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1124.400368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.402305] Call Trace: [ 1124.402936] dump_stack+0x107/0x167 [ 1124.402943] loop3: detected capacity change from 0 to 16777216 [ 1124.405153] should_fail.cold+0x5/0xa [ 1124.406045] ? selinux_sb_alloc_security+0x41/0x220 [ 1124.407233] should_failslab+0x5/0x20 [ 1124.408127] kmem_cache_alloc_trace+0x55/0x320 [ 1124.409191] ? down_write_nested+0xe4/0x160 [ 1124.410192] selinux_sb_alloc_security+0x41/0x220 [ 1124.411313] security_sb_alloc+0x46/0xa0 [ 1124.412254] ? fput+0x20/0x20 [ 1124.412976] alloc_super+0x1ed/0xa90 [ 1124.413839] ? fput+0x20/0x20 [ 1124.414571] sget_fc+0x110/0x860 [ 1124.415354] ? set_anon_super+0xc0/0xc0 [ 1124.416276] ? rpc_kill_sb+0x1b0/0x1b0 [ 1124.417176] get_tree_keyed+0x55/0x210 [ 1124.418080] vfs_get_tree+0x8e/0x300 [ 1124.418951] __do_sys_fsconfig+0x8f5/0xc50 [ 1124.419936] ? fscontext_read+0x3b0/0x3b0 [ 1124.420889] ? fput_many+0x2f/0x1a0 [ 1124.421749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1124.422972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1124.424173] do_syscall_64+0x33/0x40 [ 1124.425036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.426223] RIP: 0033:0x7f30b7069b19 [ 1124.427091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.431376] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1124.433141] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1124.434809] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1124.436466] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.438116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.439781] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1124.460751] loop3: detected capacity change from 0 to 16777216 03:41:27 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1124.479779] FAULT_INJECTION: forcing a failure. [ 1124.479779] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.482812] CPU: 0 PID: 7839 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1124.484460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.486474] Call Trace: [ 1124.487121] dump_stack+0x107/0x167 [ 1124.488007] should_fail.cold+0x5/0xa [ 1124.488934] ? percpu_ref_init+0xd8/0x3d0 [ 1124.489936] should_failslab+0x5/0x20 [ 1124.490869] kmem_cache_alloc_trace+0x55/0x320 [ 1124.491979] ? io_async_queue_proc+0x80/0x80 [ 1124.493042] percpu_ref_init+0xd8/0x3d0 [ 1124.494026] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1124.495366] io_uring_setup+0x14f6/0x2980 [ 1124.496389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1124.497504] ? wait_for_completion_io+0x270/0x270 [ 1124.498718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1124.500002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1124.501262] do_syscall_64+0x33/0x40 [ 1124.502097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.503207] RIP: 0033:0x7f8bd0804b19 [ 1124.503997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.507967] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1124.509609] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1124.511146] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1124.512683] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1124.514209] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1124.515745] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:41:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:43 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 03:41:43 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:43 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:43 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:41:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1010000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:43 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) [ 1140.219308] loop3: detected capacity change from 0 to 16842752 [ 1140.251491] loop3: detected capacity change from 0 to 16842752 [ 1140.273936] FAULT_INJECTION: forcing a failure. [ 1140.273936] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.275618] CPU: 0 PID: 7866 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1140.276489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.277542] Call Trace: [ 1140.277887] dump_stack+0x107/0x167 [ 1140.278355] should_fail.cold+0x5/0xa [ 1140.278853] ? create_object.isra.0+0x3a/0xa30 [ 1140.279438] should_failslab+0x5/0x20 [ 1140.279921] kmem_cache_alloc+0x5b/0x310 [ 1140.280439] create_object.isra.0+0x3a/0xa30 [ 1140.280993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.281637] kmem_cache_alloc_trace+0x151/0x320 [ 1140.282231] selinux_sb_alloc_security+0x41/0x220 [ 1140.282847] security_sb_alloc+0x46/0xa0 [ 1140.283357] ? fput+0x20/0x20 [ 1140.283750] alloc_super+0x1ed/0xa90 [ 1140.284222] ? fput+0x20/0x20 [ 1140.284617] sget_fc+0x110/0x860 [ 1140.285046] ? set_anon_super+0xc0/0xc0 [ 1140.285555] ? rpc_kill_sb+0x1b0/0x1b0 [ 1140.286045] get_tree_keyed+0x55/0x210 [ 1140.286554] vfs_get_tree+0x8e/0x300 [ 1140.287029] __do_sys_fsconfig+0x8f5/0xc50 [ 1140.287569] ? fscontext_read+0x3b0/0x3b0 [ 1140.288088] ? fput_many+0x2f/0x1a0 [ 1140.288561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.289224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.289881] do_syscall_64+0x33/0x40 [ 1140.290354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.291011] RIP: 0033:0x7f30b7069b19 [ 1140.291480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.293804] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1140.294770] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1140.295675] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1140.296577] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.297484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.298387] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1140.304487] FAULT_INJECTION: forcing a failure. [ 1140.304487] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.306075] CPU: 0 PID: 7868 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1140.306948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.307989] Call Trace: [ 1140.308320] dump_stack+0x107/0x167 [ 1140.308779] should_fail.cold+0x5/0xa [ 1140.309260] ? create_object.isra.0+0x3a/0xa30 [ 1140.309834] should_failslab+0x5/0x20 [ 1140.310312] kmem_cache_alloc+0x5b/0x310 [ 1140.310833] create_object.isra.0+0x3a/0xa30 [ 1140.311386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.312031] kmem_cache_alloc_trace+0x151/0x320 [ 1140.312622] ? io_async_queue_proc+0x80/0x80 [ 1140.313180] percpu_ref_init+0xd8/0x3d0 [ 1140.313688] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1140.314379] io_uring_setup+0x14f6/0x2980 [ 1140.314915] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1140.315556] ? wait_for_completion_io+0x270/0x270 [ 1140.316177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.316844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.317496] do_syscall_64+0x33/0x40 [ 1140.317964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.318620] RIP: 0033:0x7f8bd0804b19 [ 1140.319084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.321383] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1140.322338] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1140.323240] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1140.324133] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1140.325023] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1140.325913] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:41:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1300000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:43 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:43 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 03:41:43 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1140.509033] loop3: detected capacity change from 0 to 33554432 03:41:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) [ 1140.543552] FAULT_INJECTION: forcing a failure. [ 1140.543552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.545391] CPU: 0 PID: 7893 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1140.546368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.547339] Call Trace: [ 1140.547650] dump_stack+0x107/0x167 [ 1140.548068] should_fail.cold+0x5/0xa [ 1140.548519] _copy_to_user+0x2e/0x180 [ 1140.548964] io_uring_setup+0x11b5/0x2980 [ 1140.549452] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1140.550037] ? wait_for_completion_io+0x270/0x270 [ 1140.550624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.551232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.551823] do_syscall_64+0x33/0x40 [ 1140.552258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.552837] RIP: 0033:0x7f8bd0804b19 [ 1140.553268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.555385] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1140.556257] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1140.557075] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1140.557888] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1140.558708] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1140.559533] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1140.576462] loop3: detected capacity change from 0 to 33554432 03:41:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) 03:41:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:58 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2300000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:58 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1155.181587] loop3: detected capacity change from 0 to 36700160 [ 1155.188460] FAULT_INJECTION: forcing a failure. [ 1155.188460] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.191394] CPU: 0 PID: 7903 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1155.192967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.194897] FAULT_INJECTION: forcing a failure. [ 1155.194897] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.197412] Call Trace: [ 1155.197440] dump_stack+0x107/0x167 [ 1155.197463] should_fail.cold+0x5/0xa [ 1155.197484] ? __d_alloc+0x2a/0x990 [ 1155.197502] should_failslab+0x5/0x20 [ 1155.197521] kmem_cache_alloc+0x5b/0x310 [ 1155.197544] __d_alloc+0x2a/0x990 [ 1155.197562] ? find_held_lock+0x2c/0x110 [ 1155.197585] d_alloc_pseudo+0x19/0x70 [ 1155.197603] alloc_file_pseudo+0xce/0x250 [ 1155.197620] ? trace_hardirqs_on+0x5b/0x180 [ 1155.197636] ? alloc_file+0x5a0/0x5a0 [ 1155.197675] anon_inode_getfile+0xc8/0x1f0 [ 1155.208803] io_uring_setup+0x138b/0x2980 [ 1155.209762] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1155.210940] ? wait_for_completion_io+0x270/0x270 [ 1155.212066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.213269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.214453] do_syscall_64+0x33/0x40 [ 1155.215322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.216496] RIP: 0033:0x7f8bd0804b19 [ 1155.217346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.221582] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1155.223338] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1155.224976] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1155.226629] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1155.228291] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1155.229941] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1155.231621] CPU: 1 PID: 7913 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1155.233136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.234957] Call Trace: [ 1155.235543] dump_stack+0x107/0x167 [ 1155.236343] should_fail.cold+0x5/0xa [ 1155.237177] ? create_object.isra.0+0x3a/0xa30 [ 1155.238177] should_failslab+0x5/0x20 [ 1155.239017] kmem_cache_alloc+0x5b/0x310 [ 1155.239914] create_object.isra.0+0x3a/0xa30 [ 1155.240883] kmemleak_alloc_percpu+0xa0/0x100 [ 1155.241874] pcpu_alloc+0x4e2/0x1240 [ 1155.242718] __percpu_init_rwsem+0x22/0x150 [ 1155.243662] alloc_super+0x232/0xa90 [ 1155.244482] ? fput+0x20/0x20 [ 1155.245162] sget_fc+0x110/0x860 [ 1155.245899] ? set_anon_super+0xc0/0xc0 [ 1155.246777] ? rpc_kill_sb+0x1b0/0x1b0 [ 1155.247626] get_tree_keyed+0x55/0x210 [ 1155.248476] vfs_get_tree+0x8e/0x300 [ 1155.249293] __do_sys_fsconfig+0x8f5/0xc50 [ 1155.250218] ? fscontext_read+0x3b0/0x3b0 [ 1155.251125] ? fput_many+0x2f/0x1a0 [ 1155.251935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.253081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.254215] do_syscall_64+0x33/0x40 [ 1155.255038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.256159] RIP: 0033:0x7f30b7069b19 [ 1155.256973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.261021] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1155.262694] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1155.264258] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1155.265819] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.267393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.268945] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1155.283667] loop3: detected capacity change from 0 to 36700160 03:41:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 03:41:58 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:58 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 5) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:58 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 6) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) [ 1155.390944] FAULT_INJECTION: forcing a failure. [ 1155.390944] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.393655] CPU: 1 PID: 7924 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1155.395154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.396974] Call Trace: [ 1155.397558] dump_stack+0x107/0x167 [ 1155.398358] should_fail.cold+0x5/0xa [ 1155.399208] ? create_object.isra.0+0x3a/0xa30 [ 1155.400207] should_failslab+0x5/0x20 [ 1155.401043] kmem_cache_alloc+0x5b/0x310 [ 1155.401935] ? mark_held_locks+0x9e/0xe0 [ 1155.402841] create_object.isra.0+0x3a/0xa30 [ 1155.403812] kmemleak_alloc_percpu+0xa0/0x100 [ 1155.404802] pcpu_alloc+0x4e2/0x1240 [ 1155.405638] __percpu_init_rwsem+0x22/0x150 [ 1155.406587] alloc_super+0x232/0xa90 [ 1155.407412] ? fput+0x20/0x20 [ 1155.408098] sget_fc+0x110/0x860 [ 1155.408838] ? set_anon_super+0xc0/0xc0 [ 1155.409713] ? rpc_kill_sb+0x1b0/0x1b0 [ 1155.410565] get_tree_keyed+0x55/0x210 [ 1155.411429] vfs_get_tree+0x8e/0x300 [ 1155.412246] __do_sys_fsconfig+0x8f5/0xc50 [ 1155.413176] ? fscontext_read+0x3b0/0x3b0 [ 1155.414077] ? fput_many+0x2f/0x1a0 [ 1155.414906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.416060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.417196] do_syscall_64+0x33/0x40 [ 1155.418007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.419138] RIP: 0033:0x7f30b7069b19 [ 1155.419947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.423949] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1155.425618] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1155.427183] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1155.428743] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.430303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.431903] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 03:41:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:41:58 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:58 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:58 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:41:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:41:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) [ 1155.525688] loop3: detected capacity change from 0 to 50331648 03:41:58 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 03:41:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) [ 1155.679943] FAULT_INJECTION: forcing a failure. [ 1155.679943] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.682853] CPU: 0 PID: 7947 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1155.684413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.686298] Call Trace: [ 1155.686916] dump_stack+0x107/0x167 [ 1155.687747] should_fail.cold+0x5/0xa [ 1155.688610] ? create_object.isra.0+0x3a/0xa30 [ 1155.689632] should_failslab+0x5/0x20 [ 1155.690483] kmem_cache_alloc+0x5b/0x310 [ 1155.691425] create_object.isra.0+0x3a/0xa30 [ 1155.692409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.693551] kmem_cache_alloc+0x159/0x310 [ 1155.694482] __d_alloc+0x2a/0x990 [ 1155.695313] ? find_held_lock+0x2c/0x110 [ 1155.696229] d_alloc_pseudo+0x19/0x70 [ 1155.697082] alloc_file_pseudo+0xce/0x250 [ 1155.698013] ? trace_hardirqs_on+0x5b/0x180 [ 1155.698992] ? alloc_file+0x5a0/0x5a0 [ 1155.699867] anon_inode_getfile+0xc8/0x1f0 [ 1155.700836] io_uring_setup+0x138b/0x2980 [ 1155.701773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1155.702913] ? wait_for_completion_io+0x270/0x270 [ 1155.704012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.705170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.706336] do_syscall_64+0x33/0x40 [ 1155.707193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.708360] RIP: 0033:0x7f8bd0804b19 [ 1155.709194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.713310] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1155.715075] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1155.716698] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1155.718257] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1155.719888] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1155.721511] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:41:58 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 7) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:41:58 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1155.813020] FAULT_INJECTION: forcing a failure. [ 1155.813020] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.815955] CPU: 0 PID: 7952 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1155.817589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.819457] Call Trace: [ 1155.820020] dump_stack+0x107/0x167 [ 1155.820788] should_fail.cold+0x5/0xa [ 1155.821593] ? create_object.isra.0+0x3a/0xa30 [ 1155.822550] should_failslab+0x5/0x20 [ 1155.823358] kmem_cache_alloc+0x5b/0x310 [ 1155.824230] create_object.isra.0+0x3a/0xa30 [ 1155.825155] kmemleak_alloc_percpu+0xa0/0x100 [ 1155.826100] pcpu_alloc+0x4e2/0x1240 [ 1155.826915] __percpu_init_rwsem+0x22/0x150 [ 1155.827824] alloc_super+0x232/0xa90 [ 1155.828618] ? fput+0x20/0x20 [ 1155.829317] sget_fc+0x110/0x860 [ 1155.830032] ? set_anon_super+0xc0/0xc0 [ 1155.830955] ? rpc_kill_sb+0x1b0/0x1b0 [ 1155.831782] get_tree_keyed+0x55/0x210 [ 1155.832610] vfs_get_tree+0x8e/0x300 [ 1155.833402] __do_sys_fsconfig+0x8f5/0xc50 [ 1155.834312] ? fscontext_read+0x3b0/0x3b0 [ 1155.835203] ? fput_many+0x2f/0x1a0 [ 1155.835988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.837099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.838204] do_syscall_64+0x33/0x40 [ 1155.839003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.840095] RIP: 0033:0x7f30b7069b19 [ 1155.840897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.844836] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1155.846461] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1155.848054] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1155.849576] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.851190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.852742] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 03:42:11 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 03:42:11 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 8) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3300000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:42:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) 03:42:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 1) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:42:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1169.116804] loop3: detected capacity change from 0 to 53477376 [ 1169.129066] FAULT_INJECTION: forcing a failure. [ 1169.129066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.132781] CPU: 0 PID: 7974 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1169.134762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.137153] Call Trace: [ 1169.137913] dump_stack+0x107/0x167 [ 1169.138964] should_fail.cold+0x5/0xa [ 1169.140064] _copy_from_user+0x2e/0x1b0 [ 1169.141203] __tun_chr_ioctl+0x68f/0x3f40 [ 1169.142395] ? lock_downgrade+0x6d0/0x6d0 [ 1169.143589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1169.144959] ? tun_chr_poll+0x700/0x700 [ 1169.146089] ? wait_for_completion_io+0x270/0x270 [ 1169.147495] ? selinux_file_ioctl+0xb6/0x270 [ 1169.148488] ? tun_chr_compat_ioctl+0x30/0x30 [ 1169.149449] __x64_sys_ioctl+0x19a/0x210 [ 1169.150310] do_syscall_64+0x33/0x40 [ 1169.151110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1169.152192] RIP: 0033:0x7f1e7ddeeb19 [ 1169.152979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.156888] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.158479] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1169.159979] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1169.161486] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.162996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.164494] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1169.173789] FAULT_INJECTION: forcing a failure. [ 1169.173789] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.176379] CPU: 0 PID: 7975 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1169.177987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.180026] Call Trace: [ 1169.180675] dump_stack+0x107/0x167 [ 1169.181568] should_fail.cold+0x5/0xa [ 1169.182508] ? alloc_super+0x52/0xa90 [ 1169.183444] should_failslab+0x5/0x20 [ 1169.184380] kmem_cache_alloc_trace+0x55/0x320 [ 1169.185494] ? do_raw_spin_lock+0x121/0x260 [ 1169.186554] ? fput+0x20/0x20 [ 1169.187344] alloc_super+0x52/0xa90 [ 1169.188234] ? fput+0x20/0x20 [ 1169.188999] sget_fc+0x110/0x860 [ 1169.189829] ? set_anon_super+0xc0/0xc0 [ 1169.190820] ? rpc_kill_sb+0x1b0/0x1b0 [ 1169.191787] get_tree_keyed+0x55/0x210 [ 1169.192746] vfs_get_tree+0x8e/0x300 [ 1169.193666] __do_sys_fsconfig+0x8f5/0xc50 [ 1169.194705] ? fscontext_read+0x3b0/0x3b0 [ 1169.195721] ? fput_many+0x2f/0x1a0 [ 1169.196635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.197913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.199186] do_syscall_64+0x33/0x40 [ 1169.200093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1169.201344] RIP: 0033:0x7fa8c208bb19 [ 1169.202257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.206752] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1169.208599] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1169.210345] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1169.212100] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.213831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.215569] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 [ 1169.228462] FAULT_INJECTION: forcing a failure. [ 1169.228462] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.231429] CPU: 0 PID: 7979 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1169.233076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.235074] Call Trace: [ 1169.235705] dump_stack+0x107/0x167 [ 1169.236574] should_fail.cold+0x5/0xa [ 1169.237475] ? create_object.isra.0+0x3a/0xa30 [ 1169.238551] should_failslab+0x5/0x20 [ 1169.239467] kmem_cache_alloc+0x5b/0x310 [ 1169.240425] ? mark_held_locks+0x9e/0xe0 [ 1169.241392] create_object.isra.0+0x3a/0xa30 [ 1169.242449] kmemleak_alloc_percpu+0xa0/0x100 [ 1169.243534] pcpu_alloc+0x4e2/0x1240 [ 1169.244437] __percpu_init_rwsem+0x22/0x150 [ 1169.245454] alloc_super+0x232/0xa90 [ 1169.246330] ? fput+0x20/0x20 [ 1169.247083] sget_fc+0x110/0x860 [ 1169.247880] ? set_anon_super+0xc0/0xc0 [ 1169.248816] ? rpc_kill_sb+0x1b0/0x1b0 [ 1169.249732] get_tree_keyed+0x55/0x210 [ 1169.250650] vfs_get_tree+0x8e/0x300 [ 1169.251538] __do_sys_fsconfig+0x8f5/0xc50 [ 1169.252533] ? fscontext_read+0x3b0/0x3b0 [ 1169.253495] ? fput_many+0x2f/0x1a0 [ 1169.254373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.255621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.256827] do_syscall_64+0x33/0x40 [ 1169.257693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1169.258903] RIP: 0033:0x7f30b7069b19 [ 1169.259769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.264074] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1169.265851] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1169.267526] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1169.269187] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.270841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.272493] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1169.292259] FAULT_INJECTION: forcing a failure. [ 1169.292259] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.294810] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1169.296307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.298117] Call Trace: [ 1169.298694] dump_stack+0x107/0x167 [ 1169.299504] should_fail.cold+0x5/0xa [ 1169.300336] ? __alloc_file+0x21/0x320 [ 1169.301203] should_failslab+0x5/0x20 [ 1169.302008] kmem_cache_alloc+0x5b/0x310 [ 1169.302875] __alloc_file+0x21/0x320 [ 1169.303653] alloc_empty_file+0x6d/0x170 [ 1169.304509] alloc_file+0x5e/0x5a0 [ 1169.305262] alloc_file_pseudo+0x16a/0x250 [ 1169.306148] ? alloc_file+0x5a0/0x5a0 [ 1169.306974] anon_inode_getfile+0xc8/0x1f0 [ 1169.307875] io_uring_setup+0x138b/0x2980 [ 1169.308756] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1169.309819] ? wait_for_completion_io+0x270/0x270 [ 1169.310871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.311973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.313055] do_syscall_64+0x33/0x40 [ 1169.313841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1169.314934] RIP: 0033:0x7f8bd0804b19 [ 1169.315720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.319589] RSP: 002b:00007f8bcdd59108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1169.321193] RAX: ffffffffffffffda RBX: 00007f8bd0918020 RCX: 00007f8bd0804b19 [ 1169.322693] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1169.324195] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1169.325728] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1169.327248] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:42:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:42:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1169.355482] loop3: detected capacity change from 0 to 53477376 03:42:12 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 03:42:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1169.581474] loop3: detected capacity change from 0 to 67108864 03:42:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x5000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:26 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 9) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:26 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 2) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:42:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 03:42:26 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:26 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r1, 0x0) [ 1183.185856] FAULT_INJECTION: forcing a failure. [ 1183.185856] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.188210] CPU: 0 PID: 8010 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1183.189518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.190706] loop3: detected capacity change from 0 to 83886080 [ 1183.191104] Call Trace: [ 1183.191131] dump_stack+0x107/0x167 [ 1183.191153] should_fail.cold+0x5/0xa [ 1183.193764] ? create_object.isra.0+0x3a/0xa30 [ 1183.194632] should_failslab+0x5/0x20 [ 1183.195383] kmem_cache_alloc+0x5b/0x310 [ 1183.196205] create_object.isra.0+0x3a/0xa30 [ 1183.197085] kmemleak_alloc_percpu+0xa0/0x100 [ 1183.197986] pcpu_alloc+0x4e2/0x1240 [ 1183.198744] __percpu_init_rwsem+0x22/0x150 [ 1183.199614] alloc_super+0x232/0xa90 [ 1183.200354] ? fput+0x20/0x20 [ 1183.200981] sget_fc+0x110/0x860 [ 1183.201652] ? set_anon_super+0xc0/0xc0 [ 1183.202443] ? rpc_kill_sb+0x1b0/0x1b0 [ 1183.203223] get_tree_keyed+0x55/0x210 [ 1183.203996] vfs_get_tree+0x8e/0x300 [ 1183.204734] __do_sys_fsconfig+0x8f5/0xc50 [ 1183.205594] ? fscontext_read+0x3b0/0x3b0 [ 1183.206428] ? fput_many+0x2f/0x1a0 [ 1183.207183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.208233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.209269] do_syscall_64+0x33/0x40 [ 1183.210013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.211052] RIP: 0033:0x7f30b7069b19 [ 1183.211793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:42:26 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1183.215497] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1183.217212] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1183.218644] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1183.220097] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.221360] FAULT_INJECTION: forcing a failure. [ 1183.221360] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.221545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.221562] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1183.225782] CPU: 1 PID: 8012 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1183.226633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.227738] Call Trace: [ 1183.228058] dump_stack+0x107/0x167 [ 1183.228486] should_fail.cold+0x5/0xa [ 1183.228936] ? create_object.isra.0+0x3a/0xa30 [ 1183.229471] should_failslab+0x5/0x20 [ 1183.229922] kmem_cache_alloc+0x5b/0x310 [ 1183.230408] create_object.isra.0+0x3a/0xa30 [ 1183.230924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1183.231539] kmem_cache_alloc+0x159/0x310 [ 1183.232034] __alloc_file+0x21/0x320 [ 1183.232475] alloc_empty_file+0x6d/0x170 [ 1183.232957] alloc_file+0x5e/0x5a0 [ 1183.233386] alloc_file_pseudo+0x16a/0x250 [ 1183.233878] ? alloc_file+0x5a0/0x5a0 [ 1183.234341] anon_inode_getfile+0xc8/0x1f0 [ 1183.234840] io_uring_setup+0x138b/0x2980 [ 1183.235339] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1183.235949] ? wait_for_completion_io+0x270/0x270 [ 1183.236535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.237158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.237771] do_syscall_64+0x33/0x40 [ 1183.238218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.238826] RIP: 0033:0x7f8bd0804b19 [ 1183.239278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.241460] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1183.242351] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1183.243192] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1183.244030] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1183.244865] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1183.245699] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1183.247935] FAULT_INJECTION: forcing a failure. [ 1183.247935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1183.249443] CPU: 1 PID: 8013 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1183.250228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.251180] Call Trace: [ 1183.251487] dump_stack+0x107/0x167 [ 1183.251908] should_fail.cold+0x5/0xa [ 1183.252350] __alloc_pages_nodemask+0x182/0x600 [ 1183.252892] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1183.253155] FAULT_INJECTION: forcing a failure. [ 1183.253155] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.253428] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1183.253440] ? avc_has_extended_perms+0xf40/0xf40 [ 1183.253454] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1183.253463] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1183.253478] kmalloc_large_node+0x55/0x1a0 [ 1183.253491] __kmalloc_node+0x30d/0x420 [ 1183.253502] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 1183.253514] kvmalloc_node+0xc0/0x170 [ 1183.253527] alloc_netdev_mqs+0x97/0xe80 [ 1183.253537] ? tun_napi_poll+0x540/0x540 [ 1183.253553] __tun_chr_ioctl+0x1b62/0x3f40 [ 1183.261567] ? lock_downgrade+0x6d0/0x6d0 [ 1183.262056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1183.262620] ? tun_chr_poll+0x700/0x700 [ 1183.263095] ? wait_for_completion_io+0x270/0x270 [ 1183.263667] ? selinux_file_ioctl+0xb6/0x270 [ 1183.264184] ? tun_chr_compat_ioctl+0x30/0x30 [ 1183.264718] __x64_sys_ioctl+0x19a/0x210 [ 1183.265195] do_syscall_64+0x33/0x40 [ 1183.265631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.266234] RIP: 0033:0x7f1e7ddeeb19 [ 1183.266671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.268856] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.269746] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1183.270592] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1183.271446] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.272284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.273119] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1183.273983] CPU: 0 PID: 8011 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1183.275458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.277190] Call Trace: [ 1183.277745] dump_stack+0x107/0x167 [ 1183.278508] should_fail.cold+0x5/0xa [ 1183.279315] ? create_object.isra.0+0x3a/0xa30 [ 1183.280272] should_failslab+0x5/0x20 [ 1183.281073] kmem_cache_alloc+0x5b/0x310 [ 1183.281926] create_object.isra.0+0x3a/0xa30 [ 1183.282845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1183.283918] kmem_cache_alloc_trace+0x151/0x320 [ 1183.284882] ? do_raw_spin_lock+0x121/0x260 [ 1183.285779] ? fput+0x20/0x20 [ 1183.286428] alloc_super+0x52/0xa90 [ 1183.287203] ? fput+0x20/0x20 [ 1183.287859] sget_fc+0x110/0x860 [ 1183.288569] ? set_anon_super+0xc0/0xc0 [ 1183.289411] ? rpc_kill_sb+0x1b0/0x1b0 [ 1183.290228] get_tree_keyed+0x55/0x210 [ 1183.291058] vfs_get_tree+0x8e/0x300 [ 1183.291847] __do_sys_fsconfig+0x8f5/0xc50 [ 1183.292735] ? fscontext_read+0x3b0/0x3b0 [ 1183.293605] ? fput_many+0x2f/0x1a0 [ 1183.294378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.295492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.296582] do_syscall_64+0x33/0x40 [ 1183.297363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.298437] RIP: 0033:0x7fa8c208bb19 [ 1183.299226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.303102] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1183.304704] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1183.306201] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1183.307723] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.309239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.310753] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:26 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1183.351274] loop3: detected capacity change from 0 to 83886080 [ 1183.366810] FAULT_INJECTION: forcing a failure. [ 1183.366810] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.369451] CPU: 0 PID: 8026 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1183.370955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.372777] Call Trace: [ 1183.373363] dump_stack+0x107/0x167 [ 1183.374166] should_fail.cold+0x5/0xa [ 1183.375016] ? create_object.isra.0+0x3a/0xa30 [ 1183.376019] should_failslab+0x5/0x20 [ 1183.376854] kmem_cache_alloc+0x5b/0x310 [ 1183.377747] ? mark_held_locks+0x9e/0xe0 03:42:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x5050000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1183.378642] create_object.isra.0+0x3a/0xa30 [ 1183.379719] kmemleak_alloc_percpu+0xa0/0x100 [ 1183.380678] pcpu_alloc+0x4e2/0x1240 [ 1183.381486] __percpu_init_rwsem+0x22/0x150 [ 1183.382401] alloc_super+0x232/0xa90 [ 1183.383224] ? fput+0x20/0x20 [ 1183.383891] sget_fc+0x110/0x860 [ 1183.384609] ? set_anon_super+0xc0/0xc0 [ 1183.385450] ? rpc_kill_sb+0x1b0/0x1b0 [ 1183.386275] get_tree_keyed+0x55/0x210 [ 1183.387115] vfs_get_tree+0x8e/0x300 [ 1183.387902] __do_sys_fsconfig+0x8f5/0xc50 [ 1183.388792] ? fscontext_read+0x3b0/0x3b0 [ 1183.389655] ? fput_many+0x2f/0x1a0 [ 1183.390430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.391544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.392634] do_syscall_64+0x33/0x40 [ 1183.393421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.394501] RIP: 0033:0x7f30b7069b19 [ 1183.395288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.399156] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1183.400751] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1183.402244] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1183.403758] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.405251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.406748] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 03:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1183.451798] loop3: detected capacity change from 0 to 84213760 03:42:26 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1183.491427] loop3: detected capacity change from 0 to 84213760 03:42:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) 03:42:26 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 03:42:26 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 3) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:42:26 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 11) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:26 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 3) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1183.575852] FAULT_INJECTION: forcing a failure. [ 1183.575852] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.577269] CPU: 1 PID: 8045 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1183.578092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.579084] Call Trace: [ 1183.579399] dump_stack+0x107/0x167 [ 1183.579828] should_fail.cold+0x5/0xa [ 1183.580286] ? security_file_alloc+0x34/0x170 [ 1183.580815] should_failslab+0x5/0x20 [ 1183.581263] kmem_cache_alloc+0x5b/0x310 [ 1183.581744] security_file_alloc+0x34/0x170 [ 1183.582260] __alloc_file+0xb7/0x320 [ 1183.582701] alloc_empty_file+0x6d/0x170 [ 1183.583183] alloc_file+0x5e/0x5a0 [ 1183.583600] alloc_file_pseudo+0x16a/0x250 [ 1183.584093] ? alloc_file+0x5a0/0x5a0 [ 1183.584552] anon_inode_getfile+0xc8/0x1f0 [ 1183.585053] io_uring_setup+0x138b/0x2980 [ 1183.585543] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1183.586133] ? wait_for_completion_io+0x270/0x270 [ 1183.586705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.587326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.587925] do_syscall_64+0x33/0x40 [ 1183.588358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.588953] RIP: 0033:0x7f8bd0804b19 [ 1183.589389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.591548] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1183.592443] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1183.593270] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1183.594096] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1183.594928] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1183.595764] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1183.600508] FAULT_INJECTION: forcing a failure. [ 1183.600508] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.601989] CPU: 1 PID: 8044 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1183.602794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.603781] Call Trace: [ 1183.604091] dump_stack+0x107/0x167 [ 1183.604527] should_fail.cold+0x5/0xa [ 1183.604979] ? create_object.isra.0+0x3a/0xa30 03:42:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x6000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1183.605523] should_failslab+0x5/0x20 [ 1183.606116] kmem_cache_alloc+0x5b/0x310 [ 1183.606648] create_object.isra.0+0x3a/0xa30 [ 1183.607164] ? kasan_unpoison_shadow+0x33/0x50 [ 1183.607698] kmalloc_large_node+0x124/0x1a0 [ 1183.608209] __kmalloc_node+0x30d/0x420 [ 1183.608679] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 1183.609240] kvmalloc_node+0xc0/0x170 [ 1183.609694] alloc_netdev_mqs+0x97/0xe80 [ 1183.610167] ? tun_napi_poll+0x540/0x540 [ 1183.610640] __tun_chr_ioctl+0x1b62/0x3f40 [ 1183.611144] ? lock_downgrade+0x6d0/0x6d0 [ 1183.611630] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1183.612198] ? tun_chr_poll+0x700/0x700 [ 1183.612668] ? wait_for_completion_io+0x270/0x270 [ 1183.613236] ? selinux_file_ioctl+0xb6/0x270 [ 1183.613753] ? tun_chr_compat_ioctl+0x30/0x30 [ 1183.614287] __x64_sys_ioctl+0x19a/0x210 [ 1183.614760] do_syscall_64+0x33/0x40 [ 1183.615210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.615812] RIP: 0033:0x7f1e7ddeeb19 [ 1183.616247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.618401] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.619291] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1183.620132] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1183.620965] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.621803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.622636] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1183.635333] FAULT_INJECTION: forcing a failure. [ 1183.635333] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.636736] CPU: 1 PID: 8050 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1183.637547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.638532] Call Trace: [ 1183.638846] dump_stack+0x107/0x167 [ 1183.639289] should_fail.cold+0x5/0xa 03:42:26 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) [ 1183.639743] ? prealloc_shrinker+0xb0/0x2f0 [ 1183.640370] should_failslab+0x5/0x20 [ 1183.640850] __kmalloc+0x72/0x390 [ 1183.641262] prealloc_shrinker+0xb0/0x2f0 [ 1183.641745] ? __init_rwsem+0x129/0x1b0 [ 1183.642217] alloc_super+0x863/0xa90 [ 1183.642660] ? fput+0x20/0x20 [ 1183.643036] sget_fc+0x110/0x860 [ 1183.643438] ? set_anon_super+0xc0/0xc0 [ 1183.643905] ? rpc_kill_sb+0x1b0/0x1b0 [ 1183.644370] get_tree_keyed+0x55/0x210 [ 1183.644828] vfs_get_tree+0x8e/0x300 [ 1183.645268] __do_sys_fsconfig+0x8f5/0xc50 [ 1183.645770] ? fscontext_read+0x3b0/0x3b0 [ 1183.646254] ? fput_many+0x2f/0x1a0 [ 1183.646690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.647313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.647924] do_syscall_64+0x33/0x40 [ 1183.648367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.648979] RIP: 0033:0x7f30b7069b19 [ 1183.649420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.651587] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1183.652490] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1183.653337] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1183.654193] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.655066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.655919] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1183.657981] FAULT_INJECTION: forcing a failure. [ 1183.657981] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.659461] CPU: 1 PID: 8049 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1183.660284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.661273] Call Trace: [ 1183.661587] dump_stack+0x107/0x167 [ 1183.662025] should_fail.cold+0x5/0xa [ 1183.662487] ? selinux_sb_alloc_security+0x41/0x220 [ 1183.663086] should_failslab+0x5/0x20 [ 1183.663538] kmem_cache_alloc_trace+0x55/0x320 [ 1183.664076] ? down_write_nested+0xe4/0x160 [ 1183.664588] selinux_sb_alloc_security+0x41/0x220 [ 1183.665158] security_sb_alloc+0x46/0xa0 [ 1183.665636] ? fput+0x20/0x20 [ 1183.666005] alloc_super+0x1ed/0xa90 [ 1183.666453] ? fput+0x20/0x20 [ 1183.666825] sget_fc+0x110/0x860 [ 1183.667237] ? set_anon_super+0xc0/0xc0 [ 1183.667707] ? rpc_kill_sb+0x1b0/0x1b0 [ 1183.668167] get_tree_keyed+0x55/0x210 [ 1183.668628] vfs_get_tree+0x8e/0x300 [ 1183.669067] __do_sys_fsconfig+0x8f5/0xc50 [ 1183.669576] ? fscontext_read+0x3b0/0x3b0 [ 1183.670062] ? fput_many+0x2f/0x1a0 [ 1183.670500] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.671182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.671803] do_syscall_64+0x33/0x40 [ 1183.672253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.672857] RIP: 0033:0x7fa8c208bb19 [ 1183.673299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.675485] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1183.676387] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1183.677230] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1183.678072] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.678920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.679770] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 [ 1183.683985] loop3: detected capacity change from 0 to 100663296 03:42:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x6050000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1183.775827] loop3: detected capacity change from 0 to 100990976 [ 1183.799168] loop3: detected capacity change from 0 to 100990976 03:42:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x7000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:40 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:40 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 4) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:42:40 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:40 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 03:42:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:42:40 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 12) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) [ 1197.160895] FAULT_INJECTION: forcing a failure. [ 1197.160895] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.163552] CPU: 1 PID: 8082 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1197.164996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.166735] Call Trace: [ 1197.167310] dump_stack+0x107/0x167 [ 1197.168098] should_fail.cold+0x5/0xa [ 1197.168898] ? create_object.isra.0+0x3a/0xa30 [ 1197.169848] should_failslab+0x5/0x20 [ 1197.170635] kmem_cache_alloc+0x5b/0x310 [ 1197.171495] create_object.isra.0+0x3a/0xa30 [ 1197.172413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1197.173474] __kmalloc+0x16e/0x390 [ 1197.173798] FAULT_INJECTION: forcing a failure. [ 1197.173798] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.174394] prealloc_shrinker+0xb0/0x2f0 [ 1197.174413] ? __init_rwsem+0x129/0x1b0 [ 1197.174433] alloc_super+0x863/0xa90 [ 1197.174453] ? fput+0x20/0x20 [ 1197.174469] sget_fc+0x110/0x860 [ 1197.174488] ? set_anon_super+0xc0/0xc0 [ 1197.174508] ? rpc_kill_sb+0x1b0/0x1b0 [ 1197.174533] get_tree_keyed+0x55/0x210 [ 1197.183574] vfs_get_tree+0x8e/0x300 [ 1197.184348] __do_sys_fsconfig+0x8f5/0xc50 [ 1197.185442] ? fscontext_read+0x3b0/0x3b0 [ 1197.186290] ? fput_many+0x2f/0x1a0 [ 1197.187240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.188328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.189648] do_syscall_64+0x33/0x40 [ 1197.190494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.191811] RIP: 0033:0x7f30b7069b19 [ 1197.192635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.197362] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1197.199347] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1197.201174] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1197.203004] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.204857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.206708] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1197.208601] CPU: 0 PID: 8085 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1197.210070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.211839] Call Trace: [ 1197.212402] dump_stack+0x107/0x167 [ 1197.213179] should_fail.cold+0x5/0xa [ 1197.213987] ? create_object.isra.0+0x3a/0xa30 [ 1197.214952] should_failslab+0x5/0x20 [ 1197.215770] kmem_cache_alloc+0x5b/0x310 [ 1197.216638] create_object.isra.0+0x3a/0xa30 [ 1197.217566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1197.218651] kmem_cache_alloc_trace+0x151/0x320 [ 1197.219652] selinux_sb_alloc_security+0x41/0x220 [ 1197.220674] security_sb_alloc+0x46/0xa0 [ 1197.221543] ? fput+0x20/0x20 [ 1197.222206] alloc_super+0x1ed/0xa90 [ 1197.222998] ? fput+0x20/0x20 [ 1197.223334] FAULT_INJECTION: forcing a failure. [ 1197.223334] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.223679] sget_fc+0x110/0x860 [ 1197.226652] ? set_anon_super+0xc0/0xc0 [ 1197.227503] ? rpc_kill_sb+0x1b0/0x1b0 [ 1197.228332] get_tree_keyed+0x55/0x210 [ 1197.229173] vfs_get_tree+0x8e/0x300 [ 1197.229962] __do_sys_fsconfig+0x8f5/0xc50 [ 1197.230863] ? fscontext_read+0x3b0/0x3b0 [ 1197.231757] ? fput_many+0x2f/0x1a0 [ 1197.232546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.233655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.234745] do_syscall_64+0x33/0x40 [ 1197.235546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.236625] RIP: 0033:0x7fa8c208bb19 [ 1197.237407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.241308] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1197.242910] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1197.244424] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1197.245928] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.247442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.248934] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 [ 1197.250476] CPU: 1 PID: 8088 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1197.251861] FAULT_INJECTION: forcing a failure. [ 1197.251861] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.251904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.251918] Call Trace: [ 1197.256447] dump_stack+0x107/0x167 [ 1197.257188] should_fail.cold+0x5/0xa [ 1197.257963] ? create_object.isra.0+0x3a/0xa30 [ 1197.258912] should_failslab+0x5/0x20 [ 1197.259723] kmem_cache_alloc+0x5b/0x310 [ 1197.260566] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1197.261690] create_object.isra.0+0x3a/0xa30 [ 1197.262592] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1197.263637] kmem_cache_alloc+0x159/0x310 [ 1197.264488] security_file_alloc+0x34/0x170 [ 1197.265368] __alloc_file+0xb7/0x320 [ 1197.266121] alloc_empty_file+0x6d/0x170 [ 1197.266948] alloc_file+0x5e/0x5a0 [ 1197.267693] alloc_file_pseudo+0x16a/0x250 [ 1197.268570] ? alloc_file+0x5a0/0x5a0 [ 1197.269371] anon_inode_getfile+0xc8/0x1f0 [ 1197.270236] io_uring_setup+0x138b/0x2980 [ 1197.271098] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1197.272146] ? wait_for_completion_io+0x270/0x270 [ 1197.273155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.274226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.275294] do_syscall_64+0x33/0x40 [ 1197.276060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.277107] RIP: 0033:0x7f8bd0804b19 [ 1197.277877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.281627] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1197.283185] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1197.284632] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1197.286100] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1197.287569] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1197.289018] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1197.290498] CPU: 0 PID: 8081 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1197.291973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.293721] Call Trace: [ 1197.294285] dump_stack+0x107/0x167 [ 1197.295075] should_fail.cold+0x5/0xa [ 1197.295891] ? create_object.isra.0+0x3a/0xa30 [ 1197.296862] should_failslab+0x5/0x20 [ 1197.297677] kmem_cache_alloc+0x5b/0x310 [ 1197.298545] create_object.isra.0+0x3a/0xa30 [ 1197.299499] kmemleak_alloc_percpu+0xa0/0x100 [ 1197.300471] pcpu_alloc+0x4e2/0x1240 [ 1197.301284] alloc_netdev_mqs+0x104/0xe80 [ 1197.302166] ? tun_napi_poll+0x540/0x540 [ 1197.303041] __tun_chr_ioctl+0x1b62/0x3f40 [ 1197.303954] ? lock_downgrade+0x6d0/0x6d0 [ 1197.304831] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.305859] ? tun_chr_poll+0x700/0x700 [ 1197.306697] ? wait_for_completion_io+0x270/0x270 [ 1197.307746] ? selinux_file_ioctl+0xb6/0x270 [ 1197.308689] ? tun_chr_compat_ioctl+0x30/0x30 [ 1197.309644] __x64_sys_ioctl+0x19a/0x210 [ 1197.310509] do_syscall_64+0x33/0x40 [ 1197.311313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.312400] RIP: 0033:0x7f1e7ddeeb19 [ 1197.313193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.317086] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1197.318692] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1197.320207] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1197.321728] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.323245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.324757] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:42:40 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 13) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1197.347061] loop3: detected capacity change from 0 to 117440512 [ 1197.391309] loop3: detected capacity change from 0 to 117440512 [ 1197.467804] FAULT_INJECTION: forcing a failure. [ 1197.467804] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.470725] CPU: 1 PID: 8098 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1197.472155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.473876] Call Trace: [ 1197.474436] dump_stack+0x107/0x167 [ 1197.475210] should_fail.cold+0x5/0xa [ 1197.476002] ? __list_lru_init+0xcd/0x890 [ 1197.476893] should_failslab+0x5/0x20 [ 1197.477688] __kmalloc+0x72/0x390 [ 1197.478415] __list_lru_init+0xcd/0x890 [ 1197.479266] alloc_super+0x8b8/0xa90 [ 1197.480054] ? fput+0x20/0x20 [ 1197.480850] sget_fc+0x110/0x860 [ 1197.481567] ? set_anon_super+0xc0/0xc0 [ 1197.482399] ? rpc_kill_sb+0x1b0/0x1b0 [ 1197.483216] get_tree_keyed+0x55/0x210 [ 1197.484223] vfs_get_tree+0x8e/0x300 [ 1197.484990] __do_sys_fsconfig+0x8f5/0xc50 [ 1197.486080] ? fscontext_read+0x3b0/0x3b0 [ 1197.486921] ? fput_many+0x2f/0x1a0 [ 1197.487881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.489227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.490375] do_syscall_64+0x33/0x40 [ 1197.491334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.492455] RIP: 0033:0x7f30b7069b19 [ 1197.493407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.497184] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1197.498767] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1197.500252] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1197.501716] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.503198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.504665] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 03:42:55 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 14) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:55 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:42:55 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x7050000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:55 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 03:42:55 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 5) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:42:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 5) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1213.058628] FAULT_INJECTION: forcing a failure. [ 1213.058628] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.061313] CPU: 0 PID: 8105 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1213.062749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.064516] Call Trace: [ 1213.065069] dump_stack+0x107/0x167 [ 1213.065878] should_fail.cold+0x5/0xa [ 1213.066665] ? create_object.isra.0+0x3a/0xa30 [ 1213.067619] should_failslab+0x5/0x20 [ 1213.068401] kmem_cache_alloc+0x5b/0x310 [ 1213.069428] ? mark_held_locks+0x9e/0xe0 [ 1213.070274] create_object.isra.0+0x3a/0xa30 [ 1213.071182] kmemleak_alloc_percpu+0xa0/0x100 [ 1213.072130] pcpu_alloc+0x4e2/0x1240 [ 1213.072919] alloc_netdev_mqs+0x104/0xe80 [ 1213.073768] ? tun_napi_poll+0x540/0x540 [ 1213.074604] __tun_chr_ioctl+0x1b62/0x3f40 [ 1213.075498] ? lock_downgrade+0x6d0/0x6d0 [ 1213.076349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1213.077338] ? tun_chr_poll+0x700/0x700 [ 1213.078368] ? wait_for_completion_io+0x270/0x270 [ 1213.079403] ? selinux_file_ioctl+0xb6/0x270 [ 1213.080532] ? tun_chr_compat_ioctl+0x30/0x30 [ 1213.081482] __x64_sys_ioctl+0x19a/0x210 [ 1213.082534] do_syscall_64+0x33/0x40 [ 1213.083332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.084631] RIP: 0033:0x7f1e7ddeeb19 [ 1213.085396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.090119] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.091780] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1213.093226] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1213.094687] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.096173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.097899] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1213.105667] FAULT_INJECTION: forcing a failure. [ 1213.105667] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.108316] CPU: 1 PID: 8114 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1213.109773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.111532] Call Trace: [ 1213.112081] dump_stack+0x107/0x167 [ 1213.112871] should_fail.cold+0x5/0xa [ 1213.113685] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1213.114794] should_failslab+0x5/0x20 [ 1213.115629] kmem_cache_alloc_trace+0x55/0x320 [ 1213.116634] io_uring_alloc_task_context+0x99/0x6a0 [ 1213.117706] ? io_import_iovec+0x1120/0x1120 [ 1213.118671] ? lock_downgrade+0x6d0/0x6d0 [ 1213.119565] ? do_raw_spin_lock+0x121/0x260 [ 1213.120500] ? rwlock_bug.part.0+0x90/0x90 [ 1213.121419] __io_uring_add_tctx_node+0x2c6/0x520 [ 1213.122445] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1213.123566] ? alloc_fd+0x2e7/0x670 [ 1213.124340] io_uring_setup+0x1fbb/0x2980 [ 1213.125259] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1213.126329] ? wait_for_completion_io+0x270/0x270 [ 1213.126731] FAULT_INJECTION: forcing a failure. [ 1213.126731] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.127390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.127411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.127434] do_syscall_64+0x33/0x40 [ 1213.127454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.127466] RIP: 0033:0x7f8bd0804b19 [ 1213.127490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.138863] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1213.140484] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1213.142020] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1213.143570] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1213.145095] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1213.146663] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1213.148270] CPU: 0 PID: 8119 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1213.149767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.151578] Call Trace: [ 1213.152149] dump_stack+0x107/0x167 [ 1213.152887] FAULT_INJECTION: forcing a failure. [ 1213.152887] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.152952] should_fail.cold+0x5/0xa [ 1213.156182] ? create_object.isra.0+0x3a/0xa30 [ 1213.157183] should_failslab+0x5/0x20 [ 1213.158009] kmem_cache_alloc+0x5b/0x310 [ 1213.158874] create_object.isra.0+0x3a/0xa30 [ 1213.159872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1213.160973] __kmalloc+0x16e/0x390 [ 1213.161758] __list_lru_init+0xcd/0x890 [ 1213.162632] alloc_super+0x8b8/0xa90 [ 1213.163464] ? fput+0x20/0x20 [ 1213.164123] sget_fc+0x110/0x860 [ 1213.164861] ? set_anon_super+0xc0/0xc0 [ 1213.165738] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.166597] get_tree_keyed+0x55/0x210 [ 1213.167452] vfs_get_tree+0x8e/0x300 [ 1213.168254] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.169162] ? fscontext_read+0x3b0/0x3b0 [ 1213.170067] ? fput_many+0x2f/0x1a0 [ 1213.170871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.172045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.173181] do_syscall_64+0x33/0x40 [ 1213.173987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.175093] RIP: 0033:0x7f30b7069b19 [ 1213.175913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.179942] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.181610] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1213.183170] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.184729] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.186287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.187846] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1213.189435] CPU: 1 PID: 8115 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1213.190934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.192717] Call Trace: [ 1213.193304] dump_stack+0x107/0x167 [ 1213.194105] should_fail.cold+0x5/0xa [ 1213.194929] ? create_object.isra.0+0x3a/0xa30 [ 1213.195914] should_failslab+0x5/0x20 [ 1213.196753] kmem_cache_alloc+0x5b/0x310 [ 1213.197650] create_object.isra.0+0x3a/0xa30 [ 1213.198600] kmemleak_alloc_percpu+0xa0/0x100 [ 1213.199588] pcpu_alloc+0x4e2/0x1240 [ 1213.200429] __percpu_init_rwsem+0x22/0x150 [ 1213.201341] alloc_super+0x232/0xa90 [ 1213.202144] ? fput+0x20/0x20 [ 1213.202812] sget_fc+0x110/0x860 [ 1213.203540] ? set_anon_super+0xc0/0xc0 [ 1213.204389] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.205221] get_tree_keyed+0x55/0x210 [ 1213.206075] vfs_get_tree+0x8e/0x300 [ 1213.206894] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.207821] ? fscontext_read+0x3b0/0x3b0 [ 1213.208730] ? fput_many+0x2f/0x1a0 [ 1213.209534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.210673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.211811] do_syscall_64+0x33/0x40 [ 1213.212615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.213745] RIP: 0033:0x7fa8c208bb19 [ 1213.214575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.218574] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.220208] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1213.221745] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.223322] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.224864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.226414] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 [ 1213.234782] loop3: detected capacity change from 0 to 117768192 [ 1213.237544] FAULT_INJECTION: forcing a failure. [ 1213.237544] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.239959] CPU: 0 PID: 8113 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1213.241342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.243023] Call Trace: [ 1213.243576] dump_stack+0x107/0x167 [ 1213.244320] should_fail.cold+0x5/0xa [ 1213.245089] ? alloc_super+0x52/0xa90 [ 1213.245850] should_failslab+0x5/0x20 [ 1213.246616] kmem_cache_alloc_trace+0x55/0x320 [ 1213.247540] ? do_raw_spin_lock+0x121/0x260 [ 1213.248406] ? fput+0x20/0x20 [ 1213.249037] alloc_super+0x52/0xa90 [ 1213.249778] ? fput+0x20/0x20 [ 1213.250404] sget_fc+0x110/0x860 [ 1213.251087] ? set_anon_super+0xc0/0xc0 [ 1213.251897] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.252680] get_tree_keyed+0x55/0x210 [ 1213.253469] vfs_get_tree+0x8e/0x300 [ 1213.254220] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.255077] ? fscontext_read+0x3b0/0x3b0 [ 1213.255918] ? fput_many+0x2f/0x1a0 [ 1213.256674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.257732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.258778] do_syscall_64+0x33/0x40 [ 1213.259536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.260563] RIP: 0033:0x7f5f86ebeb19 [ 1213.261305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.265037] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.266579] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1213.268047] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.269482] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.270910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.272352] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:42:56 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) [ 1213.338375] loop3: detected capacity change from 0 to 117768192 03:42:56 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 6) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1213.411576] FAULT_INJECTION: forcing a failure. [ 1213.411576] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.414336] CPU: 1 PID: 8133 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1213.415743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.417465] Call Trace: [ 1213.418030] dump_stack+0x107/0x167 [ 1213.418797] should_fail.cold+0x5/0xa [ 1213.419610] ? create_object.isra.0+0x3a/0xa30 [ 1213.420551] should_failslab+0x5/0x20 [ 1213.421358] kmem_cache_alloc+0x5b/0x310 [ 1213.422201] ? mark_held_locks+0x9e/0xe0 [ 1213.423053] create_object.isra.0+0x3a/0xa30 [ 1213.423990] kmemleak_alloc_percpu+0xa0/0x100 [ 1213.424931] pcpu_alloc+0x4e2/0x1240 [ 1213.425867] __percpu_init_rwsem+0x22/0x150 [ 1213.426778] alloc_super+0x232/0xa90 [ 1213.427572] ? fput+0x20/0x20 [ 1213.428225] sget_fc+0x110/0x860 [ 1213.428930] ? set_anon_super+0xc0/0xc0 [ 1213.429760] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.430579] get_tree_keyed+0x55/0x210 [ 1213.431408] vfs_get_tree+0x8e/0x300 [ 1213.432190] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.433067] ? fscontext_read+0x3b0/0x3b0 [ 1213.433923] ? fput_many+0x2f/0x1a0 [ 1213.434698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.435810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.436896] do_syscall_64+0x33/0x40 [ 1213.437670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.438746] RIP: 0033:0x7fa8c208bb19 [ 1213.439537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.443320] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.444877] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1213.446338] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.447806] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.449286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.450752] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 [ 1213.469349] FAULT_INJECTION: forcing a failure. [ 1213.469349] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.471941] CPU: 1 PID: 8132 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1213.473406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.475169] Call Trace: [ 1213.475729] dump_stack+0x107/0x167 [ 1213.476510] should_fail.cold+0x5/0xa [ 1213.477313] ? create_object.isra.0+0x3a/0xa30 [ 1213.478285] should_failslab+0x5/0x20 [ 1213.479092] kmem_cache_alloc+0x5b/0x310 [ 1213.479975] create_object.isra.0+0x3a/0xa30 [ 1213.480893] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1213.481955] kmem_cache_alloc_trace+0x151/0x320 [ 1213.482935] io_uring_alloc_task_context+0x99/0x6a0 [ 1213.483986] ? io_import_iovec+0x1120/0x1120 [ 1213.484902] ? lock_downgrade+0x6d0/0x6d0 [ 1213.485779] ? do_raw_spin_lock+0x121/0x260 [ 1213.486686] ? rwlock_bug.part.0+0x90/0x90 [ 1213.487592] __io_uring_add_tctx_node+0x2c6/0x520 [ 1213.488598] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1213.489671] ? alloc_fd+0x2e7/0x670 [ 1213.490445] io_uring_setup+0x1fbb/0x2980 [ 1213.491332] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1213.492386] ? wait_for_completion_io+0x270/0x270 [ 1213.493447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.494530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.495613] do_syscall_64+0x33/0x40 [ 1213.496391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.497445] RIP: 0033:0x7f8bd0804b19 [ 1213.498215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.502014] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1213.503581] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1213.505070] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1213.506554] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1213.508054] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1213.509533] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:42:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:56 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 6) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:42:56 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1213.558921] FAULT_INJECTION: forcing a failure. [ 1213.558921] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.561464] CPU: 0 PID: 8141 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1213.561967] loop3: detected capacity change from 0 to 134217728 [ 1213.562842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.562850] Call Trace: [ 1213.562879] dump_stack+0x107/0x167 [ 1213.562912] should_fail.cold+0x5/0xa [ 1213.567866] ? __hw_addr_create_ex+0x5b/0x2c0 [ 1213.568787] should_failslab+0x5/0x20 [ 1213.569567] kmem_cache_alloc_trace+0x55/0x320 [ 1213.570500] __hw_addr_create_ex+0x5b/0x2c0 [ 1213.571398] __hw_addr_add_ex+0x1ed/0x2b0 [ 1213.572242] dev_addr_init+0x10b/0x1f0 [ 1213.573026] ? __hw_addr_ref_sync_dev+0x3b0/0x3b0 [ 1213.574020] alloc_netdev_mqs+0x13c/0xe80 [ 1213.574858] ? tun_napi_poll+0x540/0x540 [ 1213.575696] __tun_chr_ioctl+0x1b62/0x3f40 [ 1213.576551] ? lock_downgrade+0x6d0/0x6d0 [ 1213.577383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1213.578352] ? tun_chr_poll+0x700/0x700 [ 1213.579149] ? wait_for_completion_io+0x270/0x270 [ 1213.580169] ? selinux_file_ioctl+0xb6/0x270 [ 1213.581057] ? tun_chr_compat_ioctl+0x30/0x30 [ 1213.581961] __x64_sys_ioctl+0x19a/0x210 [ 1213.582783] do_syscall_64+0x33/0x40 [ 1213.583550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.584585] RIP: 0033:0x7f1e7ddeeb19 [ 1213.585328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.589027] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.590564] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1213.592019] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1213.593454] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.594892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.596332] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:42:56 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:56 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 15) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:56 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1213.631221] loop3: detected capacity change from 0 to 134217728 03:42:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) [ 1213.678421] FAULT_INJECTION: forcing a failure. [ 1213.678421] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.681053] CPU: 1 PID: 8150 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1213.682470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.684189] Call Trace: [ 1213.684747] dump_stack+0x107/0x167 [ 1213.685506] should_fail.cold+0x5/0xa [ 1213.686298] ? create_object.isra.0+0x3a/0xa30 [ 1213.687258] should_failslab+0x5/0x20 [ 1213.688062] kmem_cache_alloc+0x5b/0x310 [ 1213.688918] create_object.isra.0+0x3a/0xa30 [ 1213.689826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1213.690887] kmem_cache_alloc_trace+0x151/0x320 [ 1213.691860] ? do_raw_spin_lock+0x121/0x260 [ 1213.692787] ? fput+0x20/0x20 [ 1213.693449] alloc_super+0x52/0xa90 [ 1213.694229] ? fput+0x20/0x20 [ 1213.694897] sget_fc+0x110/0x860 [ 1213.695628] ? set_anon_super+0xc0/0xc0 [ 1213.696477] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.697328] get_tree_keyed+0x55/0x210 [ 1213.698158] vfs_get_tree+0x8e/0x300 [ 1213.698935] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.699375] FAULT_INJECTION: forcing a failure. [ 1213.699375] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.699829] ? hrtimer_interrupt+0x771/0x9b0 [ 1213.702982] ? fscontext_read+0x3b0/0x3b0 [ 1213.703862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.704951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.706026] do_syscall_64+0x33/0x40 [ 1213.706791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.707856] RIP: 0033:0x7f5f86ebeb19 [ 1213.708628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.712431] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.714001] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1213.715476] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.716935] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.718394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.719909] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1213.721430] CPU: 0 PID: 8152 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1213.722819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.724497] Call Trace: [ 1213.725040] dump_stack+0x107/0x167 [ 1213.725778] should_fail.cold+0x5/0xa [ 1213.726549] ? kvmalloc_node+0x119/0x170 [ 1213.727392] should_failslab+0x5/0x20 [ 1213.728173] __kmalloc_node+0x76/0x420 [ 1213.728954] ? lockdep_init_map_type+0x2c7/0x780 [ 1213.729905] kvmalloc_node+0x119/0x170 [ 1213.730688] __list_lru_init+0x511/0x890 [ 1213.731520] alloc_super+0x8b8/0xa90 [ 1213.732265] ? fput+0x20/0x20 [ 1213.732891] sget_fc+0x110/0x860 [ 1213.733569] ? set_anon_super+0xc0/0xc0 [ 1213.734372] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.735150] get_tree_keyed+0x55/0x210 [ 1213.735951] vfs_get_tree+0x8e/0x300 [ 1213.736703] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.737561] ? fscontext_read+0x3b0/0x3b0 [ 1213.738386] ? fput_many+0x2f/0x1a0 [ 1213.739128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.740192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.741233] do_syscall_64+0x33/0x40 [ 1213.741989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.743031] RIP: 0033:0x7f30b7069b19 [ 1213.743795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.744888] FAULT_INJECTION: forcing a failure. [ 1213.744888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1213.747520] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.747544] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1213.747556] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.747567] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.747578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.747590] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1213.759832] CPU: 1 PID: 8155 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1213.761258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.762987] Call Trace: [ 1213.763566] dump_stack+0x107/0x167 [ 1213.764327] should_fail.cold+0x5/0xa [ 1213.765140] __alloc_pages_nodemask+0x182/0x600 [ 1213.766114] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1213.767400] ? kmem_cache_alloc+0x301/0x310 [ 1213.768296] alloc_pages_current+0x187/0x280 [ 1213.769213] allocate_slab+0x26f/0x380 [ 1213.770028] ___slab_alloc+0x470/0x700 [ 1213.770866] ? create_object.isra.0+0x3a/0xa30 [ 1213.771827] ? fs_reclaim_acquire+0xa5/0x100 [ 1213.772743] ? create_object.isra.0+0x3a/0xa30 [ 1213.773685] ? kmem_cache_alloc+0x301/0x310 [ 1213.774582] kmem_cache_alloc+0x301/0x310 [ 1213.775460] create_object.isra.0+0x3a/0xa30 [ 1213.776365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1213.777411] kmem_cache_alloc_trace+0x151/0x320 [ 1213.778408] io_uring_alloc_task_context+0x99/0x6a0 [ 1213.779448] ? io_import_iovec+0x1120/0x1120 [ 1213.780361] ? lock_downgrade+0x6d0/0x6d0 [ 1213.781223] ? do_raw_spin_lock+0x121/0x260 [ 1213.782124] ? rwlock_bug.part.0+0x90/0x90 [ 1213.783010] __io_uring_add_tctx_node+0x2c6/0x520 [ 1213.784014] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1213.785099] ? alloc_fd+0x2e7/0x670 [ 1213.785873] io_uring_setup+0x1fbb/0x2980 [ 1213.786733] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1213.787788] ? wait_for_completion_io+0x270/0x270 [ 1213.788815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.790163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.791294] do_syscall_64+0x33/0x40 [ 1213.792072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.793123] RIP: 0033:0x7f8bd0804b19 [ 1213.793904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.797704] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1213.799308] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1213.800769] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1213.802260] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1213.803765] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1213.805264] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:42:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8050000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:42:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r6, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:42:56 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 7) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:42:56 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1213.860789] FAULT_INJECTION: forcing a failure. [ 1213.860789] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.863331] CPU: 1 PID: 8162 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1213.864777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.866553] Call Trace: [ 1213.867111] dump_stack+0x107/0x167 [ 1213.867869] should_fail.cold+0x5/0xa [ 1213.868677] ? create_object.isra.0+0x3a/0xa30 [ 1213.869659] should_failslab+0x5/0x20 [ 1213.870460] kmem_cache_alloc+0x5b/0x310 [ 1213.871366] create_object.isra.0+0x3a/0xa30 [ 1213.872310] kmemleak_alloc_percpu+0xa0/0x100 [ 1213.873243] pcpu_alloc+0x4e2/0x1240 [ 1213.874022] __percpu_init_rwsem+0x22/0x150 [ 1213.874899] alloc_super+0x232/0xa90 [ 1213.875678] ? fput+0x20/0x20 [ 1213.876325] sget_fc+0x110/0x860 [ 1213.877026] ? set_anon_super+0xc0/0xc0 [ 1213.877839] ? rpc_kill_sb+0x1b0/0x1b0 [ 1213.878638] get_tree_keyed+0x55/0x210 [ 1213.879435] vfs_get_tree+0x8e/0x300 [ 1213.880198] __do_sys_fsconfig+0x8f5/0xc50 [ 1213.881065] ? fscontext_read+0x3b0/0x3b0 [ 1213.881911] ? fput_many+0x2f/0x1a0 [ 1213.882669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.883775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.884832] do_syscall_64+0x33/0x40 [ 1213.885601] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.886678] RIP: 0033:0x7fa8c208bb19 [ 1213.887456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.891270] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1213.892841] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1213.894286] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1213.895764] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.897227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.898701] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:42:56 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:42:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) [ 1213.993948] FAULT_INJECTION: forcing a failure. [ 1213.993948] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.996749] CPU: 0 PID: 8171 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1213.998187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.999939] Call Trace: [ 1214.000497] dump_stack+0x107/0x167 [ 1214.001262] should_fail.cold+0x5/0xa [ 1214.002065] ? create_object.isra.0+0x3a/0xa30 [ 1214.003029] should_failslab+0x5/0x20 [ 1214.003835] kmem_cache_alloc+0x5b/0x310 [ 1214.004690] create_object.isra.0+0x3a/0xa30 [ 1214.005616] kmemleak_alloc_percpu+0xa0/0x100 [ 1214.006555] pcpu_alloc+0x4e2/0x1240 [ 1214.007372] __percpu_counter_init+0x10d/0x2d0 [ 1214.008325] io_uring_alloc_task_context+0xcc/0x6a0 [ 1214.009372] ? io_import_iovec+0x1120/0x1120 [ 1214.010289] ? lock_downgrade+0x6d0/0x6d0 [ 1214.011157] ? do_raw_spin_lock+0x121/0x260 [ 1214.012071] ? rwlock_bug.part.0+0x90/0x90 [ 1214.012961] __io_uring_add_tctx_node+0x2c6/0x520 [ 1214.013967] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1214.015059] ? alloc_fd+0x2e7/0x670 [ 1214.015839] io_uring_setup+0x1fbb/0x2980 [ 1214.016716] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1214.017771] ? wait_for_completion_io+0x270/0x270 [ 1214.018794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.019897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.020973] do_syscall_64+0x33/0x40 [ 1214.021751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.022825] RIP: 0033:0x7f8bd0804b19 [ 1214.023608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.027458] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1214.029046] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1214.030531] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1214.032030] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1214.033521] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1214.035029] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:43:10 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 7) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:43:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 03:43:10 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 8) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:10 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 3) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x9000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:43:10 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 16) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1228.065949] loop3: detected capacity change from 0 to 135266304 03:43:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1228.082300] FAULT_INJECTION: forcing a failure. [ 1228.082300] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.083916] CPU: 1 PID: 8188 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1228.084749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.085853] Call Trace: [ 1228.086208] dump_stack+0x107/0x167 [ 1228.086673] should_fail.cold+0x5/0xa [ 1228.087184] ? create_object.isra.0+0x3a/0xa30 [ 1228.087794] should_failslab+0x5/0x20 [ 1228.088299] kmem_cache_alloc+0x5b/0x310 [ 1228.088831] create_object.isra.0+0x3a/0xa30 [ 1228.089415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.090062] __kmalloc_node+0x1ae/0x420 [ 1228.090576] ? lockdep_init_map_type+0x2c7/0x780 [ 1228.091199] kvmalloc_node+0x119/0x170 [ 1228.091706] __list_lru_init+0x511/0x890 [ 1228.092249] alloc_super+0x8b8/0xa90 [ 1228.092743] ? fput+0x20/0x20 [ 1228.093157] sget_fc+0x110/0x860 [ 1228.093588] ? set_anon_super+0xc0/0xc0 [ 1228.094093] ? rpc_kill_sb+0x1b0/0x1b0 [ 1228.094609] get_tree_keyed+0x55/0x210 [ 1228.095124] vfs_get_tree+0x8e/0x300 [ 1228.095628] __do_sys_fsconfig+0x8f5/0xc50 [ 1228.096189] ? fscontext_read+0x3b0/0x3b0 [ 1228.096733] ? fput_many+0x2f/0x1a0 [ 1228.097194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.097887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.098569] do_syscall_64+0x33/0x40 [ 1228.099064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.099724] RIP: 0033:0x7f30b7069b19 [ 1228.100217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.102648] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1228.103663] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1228.104619] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1228.105563] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.106511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1228.107445] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1228.122983] FAULT_INJECTION: forcing a failure. [ 1228.122983] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.125761] CPU: 0 PID: 8189 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1228.127235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.129041] Call Trace: [ 1228.129617] dump_stack+0x107/0x167 [ 1228.130408] should_fail.cold+0x5/0xa [ 1228.131225] ? create_object.isra.0+0x3a/0xa30 [ 1228.132212] should_failslab+0x5/0x20 [ 1228.133027] kmem_cache_alloc+0x5b/0x310 [ 1228.133905] ? lock_release+0x680/0x680 [ 1228.134762] create_object.isra.0+0x3a/0xa30 [ 1228.135709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.136808] kmem_cache_alloc_trace+0x151/0x320 [ 1228.137813] __hw_addr_create_ex+0x5b/0x2c0 [ 1228.138741] __hw_addr_add_ex+0x1ed/0x2b0 [ 1228.139648] dev_addr_init+0x10b/0x1f0 [ 1228.140481] ? __hw_addr_ref_sync_dev+0x3b0/0x3b0 [ 1228.141529] alloc_netdev_mqs+0x13c/0xe80 [ 1228.142421] ? tun_napi_poll+0x540/0x540 [ 1228.143308] __tun_chr_ioctl+0x1b62/0x3f40 [ 1228.144237] ? lock_downgrade+0x6d0/0x6d0 [ 1228.145127] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1228.146144] ? tun_chr_poll+0x700/0x700 [ 1228.146977] ? wait_for_completion_io+0x270/0x270 [ 1228.148013] ? selinux_file_ioctl+0xb6/0x270 [ 1228.148951] ? tun_chr_compat_ioctl+0x30/0x30 [ 1228.149896] __x64_sys_ioctl+0x19a/0x210 [ 1228.150754] do_syscall_64+0x33/0x40 [ 1228.151555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.152638] RIP: 0033:0x7f1e7ddeeb19 03:43:11 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1228.153421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.157554] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.158678] FAULT_INJECTION: forcing a failure. [ 1228.158678] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.159159] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1228.159171] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1228.159182] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.159197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.166647] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1228.168231] CPU: 1 PID: 8193 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1228.169111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.170101] Call Trace: [ 1228.170490] dump_stack+0x107/0x167 [ 1228.170967] should_fail.cold+0x5/0xa [ 1228.171472] ? create_object.isra.0+0x3a/0xa30 [ 1228.172033] should_failslab+0x5/0x20 [ 1228.172519] kmem_cache_alloc+0x5b/0x310 [ 1228.173046] ? mark_held_locks+0x9e/0xe0 [ 1228.173571] create_object.isra.0+0x3a/0xa30 [ 1228.174120] kmemleak_alloc_percpu+0xa0/0x100 [ 1228.174705] pcpu_alloc+0x4e2/0x1240 [ 1228.175193] __percpu_init_rwsem+0x22/0x150 [ 1228.175766] alloc_super+0x232/0xa90 [ 1228.176256] ? fput+0x20/0x20 [ 1228.176658] sget_fc+0x110/0x860 [ 1228.177094] ? set_anon_super+0xc0/0xc0 [ 1228.177603] ? rpc_kill_sb+0x1b0/0x1b0 [ 1228.178108] get_tree_keyed+0x55/0x210 [ 1228.178622] vfs_get_tree+0x8e/0x300 [ 1228.179078] __do_sys_fsconfig+0x8f5/0xc50 [ 1228.179590] ? fscontext_read+0x3b0/0x3b0 [ 1228.180095] ? fput_many+0x2f/0x1a0 [ 1228.180550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.181192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.181822] do_syscall_64+0x33/0x40 [ 1228.182264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.182898] RIP: 0033:0x7fa8c208bb19 [ 1228.183362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.185576] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1228.186516] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1228.187412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1228.188267] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.189143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.190006] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:43:11 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 17) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1228.204875] FAULT_INJECTION: forcing a failure. [ 1228.204875] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.206547] CPU: 1 PID: 8192 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1228.206629] FAULT_INJECTION: forcing a failure. [ 1228.206629] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.207349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.207375] Call Trace: [ 1228.207389] dump_stack+0x107/0x167 [ 1228.207403] should_fail.cold+0x5/0xa [ 1228.207418] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1228.207429] should_failslab+0x5/0x20 [ 1228.207441] kmem_cache_alloc_trace+0x55/0x320 [ 1228.207456] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1228.207468] ? io_import_iovec+0x1120/0x1120 [ 1228.207480] ? lock_downgrade+0x6d0/0x6d0 [ 1228.207491] ? do_raw_spin_lock+0x121/0x260 [ 1228.207501] ? rwlock_bug.part.0+0x90/0x90 [ 1228.207517] __io_uring_add_tctx_node+0x2c6/0x520 [ 1228.207528] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1228.207539] ? alloc_fd+0x2e7/0x670 [ 1228.207558] io_uring_setup+0x1fbb/0x2980 [ 1228.207575] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1228.207585] ? wait_for_completion_io+0x270/0x270 [ 1228.207611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.220370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.221019] do_syscall_64+0x33/0x40 [ 1228.221488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.222130] RIP: 0033:0x7f8bd0804b19 [ 1228.222583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.224778] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1228.225673] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1228.226529] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1228.227348] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1228.228198] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1228.229086] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1228.230009] CPU: 0 PID: 8191 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1228.231501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.233281] Call Trace: [ 1228.233850] dump_stack+0x107/0x167 [ 1228.234642] should_fail.cold+0x5/0xa [ 1228.235484] ? selinux_sb_alloc_security+0x41/0x220 [ 1228.236563] should_failslab+0x5/0x20 [ 1228.237391] kmem_cache_alloc_trace+0x55/0x320 [ 1228.238372] ? down_write_nested+0xe4/0x160 [ 1228.239317] selinux_sb_alloc_security+0x41/0x220 [ 1228.240349] security_sb_alloc+0x46/0xa0 [ 1228.241232] ? fput+0x20/0x20 [ 1228.241904] alloc_super+0x1ed/0xa90 [ 1228.242713] ? fput+0x20/0x20 [ 1228.243403] sget_fc+0x110/0x860 [ 1228.244142] ? set_anon_super+0xc0/0xc0 [ 1228.244997] ? rpc_kill_sb+0x1b0/0x1b0 [ 1228.245837] get_tree_keyed+0x55/0x210 [ 1228.246680] vfs_get_tree+0x8e/0x300 [ 1228.247494] __do_sys_fsconfig+0x8f5/0xc50 [ 1228.248397] ? fscontext_read+0x3b0/0x3b0 [ 1228.249264] ? fput_many+0x2f/0x1a0 [ 1228.250038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.251169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.252288] do_syscall_64+0x33/0x40 [ 1228.253087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.254190] RIP: 0033:0x7f5f86ebeb19 [ 1228.254988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.258974] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1228.260608] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1228.262132] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1228.263680] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.265198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.266697] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1228.272043] loop3: detected capacity change from 0 to 135266304 03:43:11 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:43:11 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 9) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:11 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 8) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1228.360797] FAULT_INJECTION: forcing a failure. [ 1228.360797] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.363394] CPU: 0 PID: 8206 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 1228.364891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.366669] Call Trace: [ 1228.367243] dump_stack+0x107/0x167 [ 1228.368033] should_fail.cold+0x5/0xa [ 1228.368854] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1228.369939] should_failslab+0x5/0x20 [ 1228.370755] kmem_cache_alloc_trace+0x55/0x320 [ 1228.371745] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1228.372789] __list_lru_init+0x44d/0x890 [ 1228.373677] alloc_super+0x8b8/0xa90 [ 1228.374476] ? fput+0x20/0x20 [ 1228.375133] sget_fc+0x110/0x860 [ 1228.375855] ? set_anon_super+0xc0/0xc0 [ 1228.376691] ? rpc_kill_sb+0x1b0/0x1b0 [ 1228.377515] get_tree_keyed+0x55/0x210 [ 1228.378341] vfs_get_tree+0x8e/0x300 [ 1228.379137] __do_sys_fsconfig+0x8f5/0xc50 [ 1228.380057] ? fscontext_read+0x3b0/0x3b0 [ 1228.380939] ? fput_many+0x2f/0x1a0 [ 1228.381730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.382858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.383972] do_syscall_64+0x33/0x40 [ 1228.384775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.385868] RIP: 0033:0x7f30b7069b19 [ 1228.386665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.390638] RSP: 002b:00007f30b45df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1228.392279] RAX: ffffffffffffffda RBX: 00007f30b717cf60 RCX: 00007f30b7069b19 [ 1228.393805] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1228.395330] RBP: 00007f30b45df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.396846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1228.398369] R13: 00007ffd3ac1e70f R14: 00007f30b45df300 R15: 0000000000022000 [ 1228.427863] FAULT_INJECTION: forcing a failure. [ 1228.427863] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.429316] CPU: 1 PID: 8208 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1228.430145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.431124] Call Trace: [ 1228.431452] dump_stack+0x107/0x167 [ 1228.431872] should_fail.cold+0x5/0xa [ 1228.432332] ? create_object.isra.0+0x3a/0xa30 [ 1228.432869] should_failslab+0x5/0x20 [ 1228.433326] kmem_cache_alloc+0x5b/0x310 [ 1228.433817] create_object.isra.0+0x3a/0xa30 [ 1228.434346] kmemleak_alloc_percpu+0xa0/0x100 [ 1228.434881] pcpu_alloc+0x4e2/0x1240 [ 1228.435332] __percpu_init_rwsem+0x22/0x150 [ 1228.435857] alloc_super+0x232/0xa90 [ 1228.436309] ? fput+0x20/0x20 [ 1228.436678] sget_fc+0x110/0x860 [ 1228.437073] ? set_anon_super+0xc0/0xc0 [ 1228.437541] ? rpc_kill_sb+0x1b0/0x1b0 [ 1228.437998] get_tree_keyed+0x55/0x210 [ 1228.438458] vfs_get_tree+0x8e/0x300 [ 1228.438907] __do_sys_fsconfig+0x8f5/0xc50 [ 1228.439419] ? fscontext_read+0x3b0/0x3b0 [ 1228.439907] ? fput_many+0x2f/0x1a0 [ 1228.440337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.440961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.441565] do_syscall_64+0x33/0x40 [ 1228.441999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.442583] RIP: 0033:0x7fa8c208bb19 [ 1228.443093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.445630] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1228.446491] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1228.447307] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1228.448153] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.448958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.449791] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:43:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) [ 1228.473547] FAULT_INJECTION: forcing a failure. [ 1228.473547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1228.475083] CPU: 1 PID: 8210 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1228.475906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.476991] Call Trace: [ 1228.477317] dump_stack+0x107/0x167 [ 1228.477823] should_fail.cold+0x5/0xa [ 1228.478354] __alloc_pages_nodemask+0x182/0x600 [ 1228.478930] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1228.479765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.480451] ? __hw_addr_create_ex+0x223/0x2c0 [ 1228.481089] kmalloc_large_node+0x55/0x1a0 [ 1228.481679] __kmalloc_node+0x30d/0x420 [ 1228.482229] kvmalloc_node+0xc0/0x170 [ 1228.482752] alloc_netdev_mqs+0x774/0xe80 [ 1228.483306] __tun_chr_ioctl+0x1b62/0x3f40 [ 1228.483880] ? lock_downgrade+0x6d0/0x6d0 [ 1228.484454] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1228.485113] ? tun_chr_poll+0x700/0x700 [ 1228.485658] ? wait_for_completion_io+0x270/0x270 [ 1228.486219] ? selinux_file_ioctl+0xb6/0x270 [ 1228.486826] ? tun_chr_compat_ioctl+0x30/0x30 [ 1228.487398] __x64_sys_ioctl+0x19a/0x210 [ 1228.487952] do_syscall_64+0x33/0x40 [ 1228.488409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.489023] RIP: 0033:0x7f1e7ddeeb19 [ 1228.489439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.491795] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.492722] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1228.493688] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1228.494677] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.495683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.496594] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1228.497698] FAULT_INJECTION: forcing a failure. [ 1228.497698] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.500340] CPU: 0 PID: 8212 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1228.501815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.503603] Call Trace: [ 1228.504175] dump_stack+0x107/0x167 [ 1228.504961] should_fail.cold+0x5/0xa [ 1228.505786] ? create_object.isra.0+0x3a/0xa30 [ 1228.506766] should_failslab+0x5/0x20 [ 1228.507595] kmem_cache_alloc+0x5b/0x310 [ 1228.508483] create_object.isra.0+0x3a/0xa30 [ 1228.509430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.510528] kmem_cache_alloc_trace+0x151/0x320 [ 1228.511546] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1228.512640] ? io_import_iovec+0x1120/0x1120 [ 1228.513576] ? lock_downgrade+0x6d0/0x6d0 [ 1228.514463] ? do_raw_spin_lock+0x121/0x260 [ 1228.515392] ? rwlock_bug.part.0+0x90/0x90 [ 1228.516310] __io_uring_add_tctx_node+0x2c6/0x520 [ 1228.517397] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1228.518515] ? alloc_fd+0x2e7/0x670 [ 1228.519315] io_uring_setup+0x1fbb/0x2980 [ 1228.520214] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1228.521299] ? wait_for_completion_io+0x270/0x270 [ 1228.522360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.523493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.524597] do_syscall_64+0x33/0x40 [ 1228.525399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.526494] RIP: 0033:0x7f8bd0804b19 [ 1228.527288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.531273] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1228.532890] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1228.534426] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1228.535970] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1228.537510] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1228.539041] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:43:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 9) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:43:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x9050000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:43:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) 03:43:27 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:27 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:43:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:43:27 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 18) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:27 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1244.673706] loop3: detected capacity change from 0 to 135266304 [ 1244.686051] FAULT_INJECTION: forcing a failure. [ 1244.686051] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.688796] CPU: 1 PID: 8224 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1244.690265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1244.692069] Call Trace: [ 1244.692648] dump_stack+0x107/0x167 [ 1244.693438] should_fail.cold+0x5/0xa [ 1244.694271] ? create_object.isra.0+0x3a/0xa30 [ 1244.695259] should_failslab+0x5/0x20 [ 1244.696092] kmem_cache_alloc+0x5b/0x310 [ 1244.696993] create_object.isra.0+0x3a/0xa30 [ 1244.697939] ? kasan_unpoison_shadow+0x33/0x50 [ 1244.698935] kmalloc_large_node+0x124/0x1a0 [ 1244.699892] __kmalloc_node+0x30d/0x420 [ 1244.700068] FAULT_INJECTION: forcing a failure. [ 1244.700068] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.700750] kvmalloc_node+0xc0/0x170 [ 1244.700772] alloc_netdev_mqs+0x774/0xe80 [ 1244.700799] __tun_chr_ioctl+0x1b62/0x3f40 [ 1244.700823] ? lock_downgrade+0x6d0/0x6d0 [ 1244.700843] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1244.700859] ? tun_chr_poll+0x700/0x700 [ 1244.700878] ? wait_for_completion_io+0x270/0x270 [ 1244.700909] ? selinux_file_ioctl+0xb6/0x270 [ 1244.700934] ? tun_chr_compat_ioctl+0x30/0x30 [ 1244.711490] __x64_sys_ioctl+0x19a/0x210 [ 1244.712378] do_syscall_64+0x33/0x40 [ 1244.713179] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1244.714267] RIP: 0033:0x7f1e7ddeeb19 [ 1244.715067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.718981] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.720601] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1244.722102] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1244.723619] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.725129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.726644] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1244.728214] CPU: 0 PID: 8231 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1244.729669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1244.731414] Call Trace: [ 1244.731985] dump_stack+0x107/0x167 [ 1244.732759] should_fail.cold+0x5/0xa [ 1244.733564] ? create_object.isra.0+0x3a/0xa30 [ 1244.734519] should_failslab+0x5/0x20 [ 1244.735314] kmem_cache_alloc+0x5b/0x310 [ 1244.736193] create_object.isra.0+0x3a/0xa30 [ 1244.737093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1244.738153] kmem_cache_alloc_trace+0x151/0x320 [ 1244.739138] selinux_sb_alloc_security+0x41/0x220 [ 1244.740161] security_sb_alloc+0x46/0xa0 [ 1244.741018] ? fput+0x20/0x20 [ 1244.741668] alloc_super+0x1ed/0xa90 [ 1244.742450] ? fput+0x20/0x20 [ 1244.743108] sget_fc+0x110/0x860 [ 1244.743818] ? set_anon_super+0xc0/0xc0 [ 1244.744652] ? rpc_kill_sb+0x1b0/0x1b0 [ 1244.745468] get_tree_keyed+0x55/0x210 [ 1244.746291] vfs_get_tree+0x8e/0x300 [ 1244.747069] __do_sys_fsconfig+0x8f5/0xc50 [ 1244.747969] ? fscontext_read+0x3b0/0x3b0 [ 1244.748828] ? fput_many+0x2f/0x1a0 [ 1244.749607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1244.750711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1244.751807] do_syscall_64+0x33/0x40 [ 1244.752600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1244.753681] RIP: 0033:0x7f5f86ebeb19 [ 1244.754459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.758303] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1244.759913] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1244.761414] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1244.762904] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.764396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.765886] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1244.786341] loop3: detected capacity change from 0 to 135266304 [ 1244.789796] FAULT_INJECTION: forcing a failure. [ 1244.789796] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.792252] CPU: 0 PID: 8235 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1244.793700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1244.795444] Call Trace: [ 1244.796012] dump_stack+0x107/0x167 [ 1244.796782] should_fail.cold+0x5/0xa [ 1244.797591] ? create_object.isra.0+0x3a/0xa30 [ 1244.798555] should_failslab+0x5/0x20 [ 1244.799357] kmem_cache_alloc+0x5b/0x310 [ 1244.800229] ? mark_held_locks+0x9e/0xe0 [ 1244.801096] create_object.isra.0+0x3a/0xa30 [ 1244.802032] kmemleak_alloc_percpu+0xa0/0x100 [ 1244.802980] pcpu_alloc+0x4e2/0x1240 [ 1244.803787] __percpu_init_rwsem+0x22/0x150 [ 1244.804696] alloc_super+0x232/0xa90 [ 1244.805484] ? fput+0x20/0x20 [ 1244.806138] sget_fc+0x110/0x860 [ 1244.806850] ? set_anon_super+0xc0/0xc0 [ 1244.807690] ? rpc_kill_sb+0x1b0/0x1b0 [ 1244.808507] get_tree_keyed+0x55/0x210 [ 1244.809326] vfs_get_tree+0x8e/0x300 [ 1244.810106] __do_sys_fsconfig+0x8f5/0xc50 [ 1244.810995] ? fscontext_read+0x3b0/0x3b0 [ 1244.811862] ? fput_many+0x2f/0x1a0 [ 1244.812635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1244.813725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1244.814808] do_syscall_64+0x33/0x40 [ 1244.815608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1244.816689] RIP: 0033:0x7fa8c208bb19 03:43:27 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 5) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1244.817469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.821567] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1244.823170] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1244.824672] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1244.826174] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.827667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1244.829143] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 [ 1244.833372] FAULT_INJECTION: forcing a failure. [ 1244.833372] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.835960] CPU: 0 PID: 8226 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1244.837392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1244.839135] Call Trace: [ 1244.839699] dump_stack+0x107/0x167 [ 1244.840479] should_fail.cold+0x5/0xa [ 1244.841286] ? create_object.isra.0+0x3a/0xa30 [ 1244.842256] should_failslab+0x5/0x20 [ 1244.843077] kmem_cache_alloc+0x5b/0x310 [ 1244.843964] create_object.isra.0+0x3a/0xa30 [ 1244.844754] FAULT_INJECTION: forcing a failure. [ 1244.844754] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.844888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1244.844917] kmem_cache_alloc_trace+0x151/0x320 [ 1244.849342] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1244.850414] ? io_import_iovec+0x1120/0x1120 [ 1244.851334] ? lock_downgrade+0x6d0/0x6d0 [ 1244.852209] ? do_raw_spin_lock+0x121/0x260 [ 1244.853120] ? rwlock_bug.part.0+0x90/0x90 [ 1244.854013] __io_uring_add_tctx_node+0x2c6/0x520 [ 1244.855025] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1244.856130] ? alloc_fd+0x2e7/0x670 [ 1244.856909] io_uring_setup+0x1fbb/0x2980 [ 1244.857796] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1244.858854] ? wait_for_completion_io+0x270/0x270 [ 1244.859889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1244.860995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1244.862077] do_syscall_64+0x33/0x40 [ 1244.862859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1244.863943] RIP: 0033:0x7f8bd0804b19 [ 1244.864730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.868603] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1244.870202] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1244.871712] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1244.873217] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1244.874707] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1244.876216] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1244.877758] CPU: 1 PID: 8241 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1244.879242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1244.881488] Call Trace: [ 1244.882172] dump_stack+0x107/0x167 [ 1244.883098] should_fail.cold+0x5/0xa [ 1244.884098] ? create_object.isra.0+0x3a/0xa30 [ 1244.885138] should_failslab+0x5/0x20 [ 1244.885949] kmem_cache_alloc+0x5b/0x310 [ 1244.886814] create_object.isra.0+0x3a/0xa30 [ 1244.887762] kmemleak_alloc_percpu+0xa0/0x100 [ 1244.888716] pcpu_alloc+0x4e2/0x1240 [ 1244.889514] __percpu_init_rwsem+0x22/0x150 [ 1244.890423] alloc_super+0x232/0xa90 [ 1244.891207] ? fput+0x20/0x20 [ 1244.891882] sget_fc+0x110/0x860 [ 1244.892593] ? set_anon_super+0xc0/0xc0 [ 1244.893425] ? rpc_kill_sb+0x1b0/0x1b0 [ 1244.894237] get_tree_keyed+0x55/0x210 [ 1244.895057] vfs_get_tree+0x8e/0x300 [ 1244.895844] __do_sys_fsconfig+0x8f5/0xc50 [ 1244.896740] ? fscontext_read+0x3b0/0x3b0 [ 1244.897593] ? fput_many+0x2f/0x1a0 [ 1244.898364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1244.899457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1244.900539] do_syscall_64+0x33/0x40 [ 1244.901316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1244.902464] RIP: 0033:0x7f5f86ebeb19 [ 1244.903241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.907159] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1244.908774] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1244.910319] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1244.911853] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.913362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.914865] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:43:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 10) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:43:27 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:43:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xa000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1245.020762] FAULT_INJECTION: forcing a failure. [ 1245.020762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1245.023789] CPU: 1 PID: 8246 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1245.025387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1245.027312] Call Trace: [ 1245.027942] dump_stack+0x107/0x167 [ 1245.028795] should_fail.cold+0x5/0xa [ 1245.029698] __alloc_pages_nodemask+0x182/0x600 [ 1245.030791] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1245.032159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1245.033278] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1245.034358] kmalloc_large_node+0x55/0x1a0 [ 1245.035260] ? lockdep_init_map_type+0x2c7/0x780 [ 1245.036270] __kmalloc_node+0x30d/0x420 [ 1245.037123] ? lockdep_init_map_type+0x2c7/0x780 [ 1245.038123] kvmalloc_node+0xc0/0x170 [ 1245.038942] alloc_netdev_mqs+0x911/0xe80 [ 1245.039834] __tun_chr_ioctl+0x1b62/0x3f40 [ 1245.040737] ? lock_downgrade+0x6d0/0x6d0 [ 1245.041641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1245.042661] ? tun_chr_poll+0x700/0x700 [ 1245.043500] ? wait_for_completion_io+0x270/0x270 [ 1245.044550] ? selinux_file_ioctl+0xb6/0x270 [ 1245.045485] ? tun_chr_compat_ioctl+0x30/0x30 [ 1245.046412] __x64_sys_ioctl+0x19a/0x210 [ 1245.047282] do_syscall_64+0x33/0x40 [ 1245.048069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1245.049164] RIP: 0033:0x7f1e7ddeeb19 [ 1245.049944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1245.053831] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.055438] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1245.056961] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1245.058456] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.059978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1245.061493] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:43:40 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:40 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 11) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:43:40 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 6) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:43:40 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:43:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xb000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:43:40 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 11) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) [ 1257.747975] FAULT_INJECTION: forcing a failure. [ 1257.747975] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.750706] CPU: 1 PID: 8259 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1257.752219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.754053] Call Trace: [ 1257.754640] dump_stack+0x107/0x167 [ 1257.755452] should_fail.cold+0x5/0xa [ 1257.756308] ? prealloc_shrinker+0xb0/0x2f0 [ 1257.757262] should_failslab+0x5/0x20 [ 1257.758105] __kmalloc+0x72/0x390 [ 1257.758883] prealloc_shrinker+0xb0/0x2f0 [ 1257.759810] ? __init_rwsem+0x129/0x1b0 [ 1257.760692] alloc_super+0x863/0xa90 [ 1257.761517] ? fput+0x20/0x20 [ 1257.762209] sget_fc+0x110/0x860 [ 1257.762958] ? set_anon_super+0xc0/0xc0 [ 1257.763850] ? rpc_kill_sb+0x1b0/0x1b0 [ 1257.764715] get_tree_keyed+0x55/0x210 [ 1257.765588] vfs_get_tree+0x8e/0x300 [ 1257.766426] __do_sys_fsconfig+0x8f5/0xc50 [ 1257.767376] ? fscontext_read+0x3b0/0x3b0 [ 1257.768301] ? fput_many+0x2f/0x1a0 [ 1257.769129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.770297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.771450] do_syscall_64+0x33/0x40 [ 1257.772285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.773418] RIP: 0033:0x7fa8c208bb19 [ 1257.774244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.778321] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1257.780005] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1257.781578] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1257.783147] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.784718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.786283] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:43:40 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1257.811898] FAULT_INJECTION: forcing a failure. [ 1257.811898] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.813712] loop3: detected capacity change from 0 to 135266304 [ 1257.814514] CPU: 1 PID: 8267 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1257.816635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.818442] Call Trace: [ 1257.819017] dump_stack+0x107/0x167 [ 1257.819840] should_fail.cold+0x5/0xa [ 1257.820674] ? create_object.isra.0+0x3a/0xa30 [ 1257.821673] should_failslab+0x5/0x20 [ 1257.822505] kmem_cache_alloc+0x5b/0x310 [ 1257.823393] ? mark_held_locks+0x9e/0xe0 [ 1257.824292] create_object.isra.0+0x3a/0xa30 [ 1257.825259] kmemleak_alloc_percpu+0xa0/0x100 [ 1257.826243] pcpu_alloc+0x4e2/0x1240 [ 1257.827079] __percpu_init_rwsem+0x22/0x150 [ 1257.828027] alloc_super+0x232/0xa90 [ 1257.828840] ? fput+0x20/0x20 [ 1257.829518] sget_fc+0x110/0x860 [ 1257.830256] ? set_anon_super+0xc0/0xc0 [ 1257.831125] ? rpc_kill_sb+0x1b0/0x1b0 [ 1257.831979] get_tree_keyed+0x55/0x210 [ 1257.832820] vfs_get_tree+0x8e/0x300 [ 1257.833623] __do_sys_fsconfig+0x8f5/0xc50 [ 1257.834539] ? fscontext_read+0x3b0/0x3b0 [ 1257.835427] ? fput_many+0x2f/0x1a0 [ 1257.836236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.837370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.838486] do_syscall_64+0x33/0x40 [ 1257.839290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.840404] RIP: 0033:0x7f5f86ebeb19 [ 1257.841206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.845188] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1257.846827] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1257.848375] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1257.849919] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.851648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.853385] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1257.860618] FAULT_INJECTION: forcing a failure. [ 1257.860618] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.862224] CPU: 0 PID: 8277 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1257.863140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.864156] Call Trace: [ 1257.864517] dump_stack+0x107/0x167 [ 1257.865005] should_fail.cold+0x5/0xa [ 1257.865517] ? create_object.isra.0+0x3a/0xa30 [ 1257.866122] should_failslab+0x5/0x20 [ 1257.866623] kmem_cache_alloc+0x5b/0x310 [ 1257.867115] create_object.isra.0+0x3a/0xa30 [ 1257.867700] ? kasan_unpoison_shadow+0x33/0x50 [ 1257.868248] kmalloc_large_node+0x124/0x1a0 [ 1257.868821] __kmalloc_node+0x30d/0x420 [ 1257.869352] ? lockdep_init_map_type+0x2c7/0x780 [ 1257.869977] kvmalloc_node+0xc0/0x170 [ 1257.870478] alloc_netdev_mqs+0x911/0xe80 [ 1257.871024] __tun_chr_ioctl+0x1b62/0x3f40 [ 1257.871582] ? lock_downgrade+0x6d0/0x6d0 [ 1257.872145] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1257.872725] ? tun_chr_poll+0x700/0x700 [ 1257.873250] ? wait_for_completion_io+0x270/0x270 [ 1257.873888] ? selinux_file_ioctl+0xb6/0x270 [ 1257.874471] ? tun_chr_compat_ioctl+0x30/0x30 03:43:40 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 12) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:40 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x2, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1257.875070] __x64_sys_ioctl+0x19a/0x210 [ 1257.875814] do_syscall_64+0x33/0x40 [ 1257.876309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.876933] RIP: 0033:0x7f1e7ddeeb19 [ 1257.877428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.879846] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.880841] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1257.881691] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1257.882644] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.883505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.884451] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1257.897774] FAULT_INJECTION: forcing a failure. [ 1257.897774] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.899298] CPU: 0 PID: 8270 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1257.900202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.901267] Call Trace: [ 1257.901584] dump_stack+0x107/0x167 [ 1257.902052] should_fail.cold+0x5/0xa [ 1257.902506] ? create_object.isra.0+0x3a/0xa30 [ 1257.903097] should_failslab+0x5/0x20 [ 1257.903586] kmem_cache_alloc+0x5b/0x310 [ 1257.904129] create_object.isra.0+0x3a/0xa30 [ 1257.904694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1257.905346] __kmalloc+0x16e/0x390 [ 1257.905813] io_wq_create+0xeb/0xc00 [ 1257.906296] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1257.906950] ? io_import_iovec+0x1120/0x1120 [ 1257.907516] ? io_apoll_task_func+0x2d0/0x2d0 [ 1257.908097] ? __io_req_find_next+0x300/0x300 [ 1257.908668] ? do_raw_spin_lock+0x121/0x260 [ 1257.909214] ? rwlock_bug.part.0+0x90/0x90 [ 1257.909757] __io_uring_add_tctx_node+0x2c6/0x520 [ 1257.910378] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1257.911050] ? alloc_fd+0x2e7/0x670 [ 1257.911523] io_uring_setup+0x1fbb/0x2980 [ 1257.912065] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1257.912704] ? wait_for_completion_io+0x270/0x270 [ 1257.913328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.914000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.914665] do_syscall_64+0x33/0x40 [ 1257.915136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.915803] RIP: 0033:0x7f8bd0804b19 [ 1257.916276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.918630] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1257.919596] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1257.920510] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1257.921343] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1257.922244] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1257.923150] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1257.949704] loop3: detected capacity change from 0 to 135266304 03:43:40 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1257.976571] FAULT_INJECTION: forcing a failure. [ 1257.976571] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.978304] CPU: 0 PID: 8285 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1257.979162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.980119] Call Trace: [ 1257.980462] dump_stack+0x107/0x167 [ 1257.980927] should_fail.cold+0x5/0xa [ 1257.981411] ? create_object.isra.0+0x3a/0xa30 [ 1257.981987] should_failslab+0x5/0x20 [ 1257.982463] kmem_cache_alloc+0x5b/0x310 [ 1257.982980] create_object.isra.0+0x3a/0xa30 [ 1257.983529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1257.984176] __kmalloc+0x16e/0x390 [ 1257.984630] prealloc_shrinker+0xb0/0x2f0 [ 1257.985144] ? __init_rwsem+0x129/0x1b0 [ 1257.985640] alloc_super+0x863/0xa90 [ 1257.986099] ? fput+0x20/0x20 [ 1257.986484] sget_fc+0x110/0x860 [ 1257.986904] ? set_anon_super+0xc0/0xc0 [ 1257.987401] ? rpc_kill_sb+0x1b0/0x1b0 [ 1257.987892] get_tree_keyed+0x55/0x210 [ 1257.988331] vfs_get_tree+0x8e/0x300 [ 1257.988784] __do_sys_fsconfig+0x8f5/0xc50 [ 1257.989261] ? fscontext_read+0x3b0/0x3b0 [ 1257.989772] ? fput_many+0x2f/0x1a0 [ 1257.990190] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.990837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.991417] do_syscall_64+0x33/0x40 [ 1257.991887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.992525] RIP: 0033:0x7fa8c208bb19 [ 1257.992944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.995202] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1257.996147] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1257.997023] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1257.997896] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.998773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.999648] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:43:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) 03:43:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:43:40 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 7) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1258.089845] FAULT_INJECTION: forcing a failure. [ 1258.089845] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.091390] CPU: 0 PID: 8291 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1258.092220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.093151] Call Trace: [ 1258.093473] dump_stack+0x107/0x167 [ 1258.093909] should_fail.cold+0x5/0xa [ 1258.094366] ? create_object.isra.0+0x3a/0xa30 [ 1258.094910] should_failslab+0x5/0x20 [ 1258.095363] kmem_cache_alloc+0x5b/0x310 [ 1258.095864] create_object.isra.0+0x3a/0xa30 [ 1258.096397] kmemleak_alloc_percpu+0xa0/0x100 [ 1258.096934] pcpu_alloc+0x4e2/0x1240 [ 1258.097391] __percpu_init_rwsem+0x22/0x150 [ 1258.097906] alloc_super+0x232/0xa90 [ 1258.098350] ? fput+0x20/0x20 [ 1258.098721] sget_fc+0x110/0x860 [ 1258.099125] ? set_anon_super+0xc0/0xc0 [ 1258.099599] ? rpc_kill_sb+0x1b0/0x1b0 [ 1258.100075] get_tree_keyed+0x55/0x210 [ 1258.100537] vfs_get_tree+0x8e/0x300 [ 1258.100978] __do_sys_fsconfig+0x8f5/0xc50 [ 1258.101481] ? fscontext_read+0x3b0/0x3b0 [ 1258.101963] ? fput_many+0x2f/0x1a0 [ 1258.102399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.103016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.103625] do_syscall_64+0x33/0x40 [ 1258.104071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.104678] RIP: 0033:0x7f5f86ebeb19 [ 1258.105116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.107292] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1258.108198] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1258.109039] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1258.109878] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.110712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.111552] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1258.150528] FAULT_INJECTION: forcing a failure. [ 1258.150528] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.151930] CPU: 0 PID: 8295 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1258.152749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.153737] Call Trace: [ 1258.154056] dump_stack+0x107/0x167 [ 1258.154495] should_fail.cold+0x5/0xa [ 1258.154949] ? io_wq_create+0x6ef/0xc00 [ 1258.155421] should_failslab+0x5/0x20 [ 1258.155888] kmem_cache_alloc_node_trace+0x59/0x340 [ 1258.156482] io_wq_create+0x6ef/0xc00 [ 1258.156938] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1258.157542] ? io_import_iovec+0x1120/0x1120 [ 1258.158062] ? io_apoll_task_func+0x2d0/0x2d0 [ 1258.158599] ? __io_req_find_next+0x300/0x300 [ 1258.159129] ? do_raw_spin_lock+0x121/0x260 [ 1258.159636] ? rwlock_bug.part.0+0x90/0x90 [ 1258.160155] __io_uring_add_tctx_node+0x2c6/0x520 [ 1258.160725] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1258.161339] ? alloc_fd+0x2e7/0x670 [ 1258.161774] io_uring_setup+0x1fbb/0x2980 [ 1258.162273] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1258.162874] ? wait_for_completion_io+0x270/0x270 [ 1258.163455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.164088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.164699] do_syscall_64+0x33/0x40 [ 1258.165138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.165750] RIP: 0033:0x7f8bd0804b19 [ 1258.166187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.168376] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1258.169279] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1258.170133] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1258.170978] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1258.171829] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1258.172674] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:43:55 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x3, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:55 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 8) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:55 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:43:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xc000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:43:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) 03:43:55 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 12) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:43:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 13) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:55 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1272.598086] FAULT_INJECTION: forcing a failure. [ 1272.598086] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.599917] CPU: 1 PID: 8309 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1272.600825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.601910] Call Trace: [ 1272.602269] dump_stack+0x107/0x167 [ 1272.602757] should_fail.cold+0x5/0xa [ 1272.603271] ? io_wq_create+0x6ef/0xc00 [ 1272.603793] should_failslab+0x5/0x20 [ 1272.604305] kmem_cache_alloc_node_trace+0x59/0x340 [ 1272.604973] io_wq_create+0x6ef/0xc00 [ 1272.605484] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1272.606152] ? io_import_iovec+0x1120/0x1120 [ 1272.606732] ? io_apoll_task_func+0x2d0/0x2d0 [ 1272.607330] ? __io_req_find_next+0x300/0x300 [ 1272.607922] ? do_raw_spin_lock+0x121/0x260 [ 1272.608483] ? rwlock_bug.part.0+0x90/0x90 [ 1272.609044] __io_uring_add_tctx_node+0x2c6/0x520 [ 1272.609680] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1272.610366] ? alloc_fd+0x2e7/0x670 [ 1272.610846] io_uring_setup+0x1fbb/0x2980 [ 1272.611389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1272.612057] ? wait_for_completion_io+0x270/0x270 [ 1272.612707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.613389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.614069] do_syscall_64+0x33/0x40 [ 1272.614563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.615227] RIP: 0033:0x7f8bd0804b19 [ 1272.615716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.618145] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1272.619142] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1272.620091] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1272.620522] FAULT_INJECTION: forcing a failure. [ 1272.620522] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.621023] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1272.621031] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1272.621039] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1272.623528] FAULT_INJECTION: forcing a failure. [ 1272.623528] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.624341] CPU: 0 PID: 8302 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1272.633006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.635129] Call Trace: [ 1272.635829] dump_stack+0x107/0x167 [ 1272.636767] should_fail.cold+0x5/0xa [ 1272.637580] ? create_object.isra.0+0x3a/0xa30 [ 1272.638554] should_failslab+0x5/0x20 [ 1272.639363] kmem_cache_alloc+0x5b/0x310 [ 1272.640236] ? mark_held_locks+0x9e/0xe0 [ 1272.641104] create_object.isra.0+0x3a/0xa30 [ 1272.642033] kmemleak_alloc_percpu+0xa0/0x100 [ 1272.642988] pcpu_alloc+0x4e2/0x1240 [ 1272.643817] __percpu_init_rwsem+0x22/0x150 [ 1272.644734] alloc_super+0x232/0xa90 [ 1272.645524] ? fput+0x20/0x20 [ 1272.646181] sget_fc+0x110/0x860 [ 1272.646896] ? set_anon_super+0xc0/0xc0 [ 1272.647732] ? rpc_kill_sb+0x1b0/0x1b0 [ 1272.648562] get_tree_keyed+0x55/0x210 [ 1272.649387] vfs_get_tree+0x8e/0x300 [ 1272.650176] __do_sys_fsconfig+0x8f5/0xc50 [ 1272.651074] ? fscontext_read+0x3b0/0x3b0 [ 1272.651950] ? fput_many+0x2f/0x1a0 [ 1272.652728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.653845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.654932] do_syscall_64+0x33/0x40 [ 1272.655715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.656801] RIP: 0033:0x7f5f86ebeb19 [ 1272.657585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.661505] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1272.663102] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1272.664623] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1272.666130] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.667634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.669132] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1272.670665] CPU: 1 PID: 8316 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1272.671586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.672666] Call Trace: [ 1272.673016] dump_stack+0x107/0x167 [ 1272.673492] should_fail.cold+0x5/0xa [ 1272.674002] ? register_netdevice+0x3f4/0x1480 [ 1272.674587] should_failslab+0x5/0x20 [ 1272.675073] kmem_cache_alloc_trace+0x55/0x320 [ 1272.675660] register_netdevice+0x3f4/0x1480 [ 1272.676225] ? memset+0x20/0x50 [ 1272.676653] ? netdev_change_features+0xb0/0xb0 [ 1272.677241] ? alloc_netdev_mqs+0xab1/0xe80 [ 1272.677799] __tun_chr_ioctl+0x20f9/0x3f40 [ 1272.678356] ? lock_downgrade+0x6d0/0x6d0 [ 1272.678886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1272.679503] ? tun_chr_poll+0x700/0x700 [ 1272.680019] ? wait_for_completion_io+0x270/0x270 [ 1272.680640] ? selinux_file_ioctl+0xb6/0x270 [ 1272.681201] ? tun_chr_compat_ioctl+0x30/0x30 [ 1272.681776] __x64_sys_ioctl+0x19a/0x210 [ 1272.682293] do_syscall_64+0x33/0x40 [ 1272.682765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.683421] RIP: 0033:0x7f1e7ddeeb19 [ 1272.683902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.686234] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.687210] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1272.688110] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1272.689017] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.689918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1272.690828] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1272.699694] loop3: detected capacity change from 0 to 135266304 [ 1272.710818] FAULT_INJECTION: forcing a failure. [ 1272.710818] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.713571] CPU: 0 PID: 8313 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1272.715028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.716799] Call Trace: [ 1272.717368] dump_stack+0x107/0x167 [ 1272.718142] should_fail.cold+0x5/0xa [ 1272.718947] ? __list_lru_init+0xcd/0x890 [ 1272.719831] should_failslab+0x5/0x20 [ 1272.720646] __kmalloc+0x72/0x390 [ 1272.721389] __list_lru_init+0xcd/0x890 [ 1272.722243] alloc_super+0x8b8/0xa90 [ 1272.723033] ? fput+0x20/0x20 [ 1272.723691] sget_fc+0x110/0x860 [ 1272.724420] ? set_anon_super+0xc0/0xc0 [ 1272.725260] ? rpc_kill_sb+0x1b0/0x1b0 [ 1272.726087] get_tree_keyed+0x55/0x210 [ 1272.726907] vfs_get_tree+0x8e/0x300 [ 1272.727690] __do_sys_fsconfig+0x8f5/0xc50 [ 1272.728598] ? fscontext_read+0x3b0/0x3b0 [ 1272.729465] ? fput_many+0x2f/0x1a0 [ 1272.730245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.731350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.732551] do_syscall_64+0x33/0x40 [ 1272.733332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.734409] RIP: 0033:0x7fa8c208bb19 [ 1272.735205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.739089] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1272.740693] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1272.742188] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1272.743682] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.745180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1272.746671] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:43:55 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1272.765763] loop3: detected capacity change from 0 to 135266304 03:43:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) 03:43:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xc300000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:43:55 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6}, 0x1e) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1272.841760] FAULT_INJECTION: forcing a failure. [ 1272.841760] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.843304] CPU: 1 PID: 8330 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1272.844115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.845100] Call Trace: [ 1272.845419] dump_stack+0x107/0x167 [ 1272.845853] should_fail.cold+0x5/0xa [ 1272.846310] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1272.846901] should_failslab+0x5/0x20 [ 1272.847352] kmem_cache_alloc_trace+0x55/0x320 [ 1272.847904] __io_uring_add_tctx_node+0x15c/0x520 [ 1272.848470] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1272.849084] ? alloc_fd+0x2e7/0x670 [ 1272.849517] io_uring_setup+0x1fbb/0x2980 [ 1272.850009] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1272.850603] ? wait_for_completion_io+0x270/0x270 [ 1272.851184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.851801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.852418] do_syscall_64+0x33/0x40 [ 1272.852857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.853458] RIP: 0033:0x7f8bd0804b19 [ 1272.853896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.856057] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1272.856946] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1272.857783] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1272.858617] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1272.859459] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1272.860307] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:43:55 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 13) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:43:55 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:43:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 14) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:43:55 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x4, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1272.890595] loop3: detected capacity change from 0 to 135266304 [ 1272.936390] FAULT_INJECTION: forcing a failure. [ 1272.936390] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.938953] CPU: 0 PID: 8338 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1272.940357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.942031] Call Trace: [ 1272.942572] dump_stack+0x107/0x167 [ 1272.943319] should_fail.cold+0x5/0xa [ 1272.944108] ? create_object.isra.0+0x3a/0xa30 [ 1272.945033] should_failslab+0x5/0x20 [ 1272.945808] kmem_cache_alloc+0x5b/0x310 [ 1272.946643] create_object.isra.0+0x3a/0xa30 [ 1272.947521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1272.948553] kmem_cache_alloc_trace+0x151/0x320 [ 1272.949502] register_netdevice+0x3f4/0x1480 [ 1272.950391] ? memset+0x20/0x50 [ 1272.951064] ? netdev_change_features+0xb0/0xb0 [ 1272.952017] ? alloc_netdev_mqs+0xab1/0xe80 [ 1272.952896] __tun_chr_ioctl+0x20f9/0x3f40 [ 1272.953762] ? lock_downgrade+0x6d0/0x6d0 [ 1272.954603] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1272.955574] ? tun_chr_poll+0x700/0x700 [ 1272.956398] ? wait_for_completion_io+0x270/0x270 [ 1272.957387] ? selinux_file_ioctl+0xb6/0x270 [ 1272.958291] ? tun_chr_compat_ioctl+0x30/0x30 [ 1272.959209] __x64_sys_ioctl+0x19a/0x210 [ 1272.960078] do_syscall_64+0x33/0x40 [ 1272.960847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.961902] RIP: 0033:0x7f1e7ddeeb19 [ 1272.962657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.966429] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.968005] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1272.969456] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1272.970899] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.972372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1272.973824] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1273.037025] FAULT_INJECTION: forcing a failure. [ 1273.037025] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.039543] CPU: 0 PID: 8347 Comm: syz-executor.1 Not tainted 5.10.257 #1 [ 1273.040937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.042628] Call Trace: [ 1273.043171] dump_stack+0x107/0x167 [ 1273.043933] should_fail.cold+0x5/0xa [ 1273.044710] ? create_object.isra.0+0x3a/0xa30 [ 1273.045629] should_failslab+0x5/0x20 [ 1273.046413] kmem_cache_alloc+0x5b/0x310 [ 1273.047243] create_object.isra.0+0x3a/0xa30 [ 1273.048136] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1273.049172] __kmalloc+0x16e/0x390 [ 1273.049909] __list_lru_init+0xcd/0x890 [ 1273.050718] alloc_super+0x8b8/0xa90 [ 1273.051475] ? fput+0x20/0x20 [ 1273.052117] sget_fc+0x110/0x860 [ 1273.052814] ? set_anon_super+0xc0/0xc0 [ 1273.053629] ? rpc_kill_sb+0x1b0/0x1b0 [ 1273.054423] get_tree_keyed+0x55/0x210 [ 1273.055230] vfs_get_tree+0x8e/0x300 [ 1273.056009] __do_sys_fsconfig+0x8f5/0xc50 [ 1273.056876] ? fscontext_read+0x3b0/0x3b0 [ 1273.057713] ? fput_many+0x2f/0x1a0 [ 1273.058461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1273.059531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.060584] do_syscall_64+0x33/0x40 [ 1273.061340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1273.062372] RIP: 0033:0x7fa8c208bb19 [ 1273.063133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.066852] RSP: 002b:00007fa8bf601188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1273.068401] RAX: ffffffffffffffda RBX: 00007fa8c219ef60 RCX: 00007fa8c208bb19 [ 1273.069821] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1273.071261] RBP: 00007fa8bf6011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.072712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.074148] R13: 00007fff0a1cbcef R14: 00007fa8bf601300 R15: 0000000000022000 03:44:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 15) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 14) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:44:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:44:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 03:44:12 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x5, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:12 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 9) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xd000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1289.167639] loop3: detected capacity change from 0 to 135266304 [ 1289.182427] FAULT_INJECTION: forcing a failure. [ 1289.182427] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.185019] CPU: 1 PID: 8361 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1289.186473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.188293] Call Trace: [ 1289.188872] dump_stack+0x107/0x167 [ 1289.189673] should_fail.cold+0x5/0xa [ 1289.190466] FAULT_INJECTION: forcing a failure. [ 1289.190466] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.190513] ? create_object.isra.0+0x3a/0xa30 [ 1289.193900] should_failslab+0x5/0x20 [ 1289.194732] kmem_cache_alloc+0x5b/0x310 [ 1289.195590] ? mark_held_locks+0x9e/0xe0 [ 1289.196447] create_object.isra.0+0x3a/0xa30 [ 1289.197406] kmemleak_alloc_percpu+0xa0/0x100 [ 1289.198357] pcpu_alloc+0x4e2/0x1240 [ 1289.199188] __percpu_init_rwsem+0x22/0x150 [ 1289.200193] alloc_super+0x232/0xa90 [ 1289.200973] ? fput+0x20/0x20 [ 1289.201650] sget_fc+0x110/0x860 [ 1289.202393] ? set_anon_super+0xc0/0xc0 [ 1289.203256] ? rpc_kill_sb+0x1b0/0x1b0 [ 1289.204106] get_tree_keyed+0x55/0x210 [ 1289.204957] vfs_get_tree+0x8e/0x300 [ 1289.205768] __do_sys_fsconfig+0x8f5/0xc50 [ 1289.206690] ? fscontext_read+0x3b0/0x3b0 [ 1289.207592] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1289.208785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.209923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.211012] do_syscall_64+0x33/0x40 [ 1289.211786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.212881] RIP: 0033:0x7f5f86ebeb19 [ 1289.213691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.217698] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1289.219334] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1289.220889] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1289.222438] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.223991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.225546] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1289.227163] CPU: 0 PID: 8355 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1289.228680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.230480] Call Trace: [ 1289.231056] dump_stack+0x107/0x167 [ 1289.231848] should_fail.cold+0x5/0xa [ 1289.232704] ? create_object.isra.0+0x3a/0xa30 [ 1289.233693] should_failslab+0x5/0x20 [ 1289.234518] kmem_cache_alloc+0x5b/0x310 [ 1289.235401] create_object.isra.0+0x3a/0xa30 [ 1289.236386] kmemleak_alloc_percpu+0xa0/0x100 [ 1289.237362] pcpu_alloc+0x4e2/0x1240 [ 1289.238182] ? tun_attach.isra.0+0x1760/0x1760 [ 1289.239166] tun_net_init+0x55/0x650 [ 1289.239983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.241092] ? tun_attach.isra.0+0x1760/0x1760 [ 1289.242085] register_netdevice+0x560/0x1480 [ 1289.243037] ? netdev_change_features+0xb0/0xb0 [ 1289.244075] ? alloc_netdev_mqs+0xab1/0xe80 [ 1289.245018] __tun_chr_ioctl+0x20f9/0x3f40 [ 1289.245935] ? lock_downgrade+0x6d0/0x6d0 [ 1289.246807] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1289.247822] ? tun_chr_poll+0x700/0x700 [ 1289.248706] ? wait_for_completion_io+0x270/0x270 [ 1289.249731] ? selinux_file_ioctl+0xb6/0x270 [ 1289.250651] ? tun_chr_compat_ioctl+0x30/0x30 [ 1289.251605] __x64_sys_ioctl+0x19a/0x210 [ 1289.252499] do_syscall_64+0x33/0x40 [ 1289.253284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.254362] RIP: 0033:0x7f1e7ddeeb19 [ 1289.255163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.259164] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.260825] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1289.262358] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1289.263869] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.265434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1289.266967] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1289.285727] FAULT_INJECTION: forcing a failure. [ 1289.285727] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.288346] CPU: 1 PID: 8370 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1289.289801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.291537] Call Trace: [ 1289.292102] dump_stack+0x107/0x167 [ 1289.292894] should_fail.cold+0x5/0xa [ 1289.293731] ? create_object.isra.0+0x3a/0xa30 [ 1289.294691] should_failslab+0x5/0x20 [ 1289.295483] kmem_cache_alloc+0x5b/0x310 [ 1289.296342] create_object.isra.0+0x3a/0xa30 [ 1289.297298] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.298405] kmem_cache_alloc_trace+0x151/0x320 [ 1289.299423] __io_uring_add_tctx_node+0x15c/0x520 [ 1289.300484] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1289.301617] ? alloc_fd+0x2e7/0x670 [ 1289.302420] io_uring_setup+0x1fbb/0x2980 [ 1289.303301] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1289.304359] ? wait_for_completion_io+0x270/0x270 [ 1289.305425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.306546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.307662] do_syscall_64+0x33/0x40 [ 1289.308452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.309566] RIP: 0033:0x7f8bd0804b19 [ 1289.310368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.314272] RSP: 002b:00007f8bcdd59108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1289.315924] RAX: ffffffffffffffda RBX: 00007f8bd0918020 RCX: 00007f8bd0804b19 [ 1289.317428] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1289.318968] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1289.320517] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1289.322053] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1289.350833] loop3: detected capacity change from 0 to 135266304 03:44:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xd300000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:44:12 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1289.445564] loop3: detected capacity change from 0 to 135266304 03:44:12 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1289.476337] loop3: detected capacity change from 0 to 135266304 03:44:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) 03:44:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:44:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xf000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:44:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 15) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1289.552438] FAULT_INJECTION: forcing a failure. [ 1289.552438] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.554993] CPU: 1 PID: 8388 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1289.556429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.558153] Call Trace: [ 1289.558715] dump_stack+0x107/0x167 [ 1289.559480] should_fail.cold+0x5/0xa [ 1289.560283] ? create_object.isra.0+0x3a/0xa30 [ 1289.561247] should_failslab+0x5/0x20 [ 1289.562044] kmem_cache_alloc+0x5b/0x310 [ 1289.562894] ? mark_held_locks+0x9e/0xe0 [ 1289.563739] create_object.isra.0+0x3a/0xa30 [ 1289.564677] kmemleak_alloc_percpu+0xa0/0x100 [ 1289.565631] pcpu_alloc+0x4e2/0x1240 [ 1289.566437] __percpu_init_rwsem+0x22/0x150 [ 1289.567350] alloc_super+0x232/0xa90 [ 1289.568137] ? fput+0x20/0x20 [ 1289.568786] sget_fc+0x110/0x860 [ 1289.569491] ? set_anon_super+0xc0/0xc0 [ 1289.570322] ? rpc_kill_sb+0x1b0/0x1b0 [ 1289.571142] get_tree_keyed+0x55/0x210 [ 1289.571956] vfs_get_tree+0x8e/0x300 [ 1289.572746] __do_sys_fsconfig+0x8f5/0xc50 [ 1289.573636] ? fscontext_read+0x3b0/0x3b0 [ 1289.574494] ? fput_many+0x2f/0x1a0 [ 1289.575266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.576379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.577447] do_syscall_64+0x33/0x40 [ 1289.578234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.579309] RIP: 0033:0x7f5f86ebeb19 [ 1289.580092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.583911] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1289.585509] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1289.586989] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1289.588484] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.589975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1289.591455] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1289.601832] FAULT_INJECTION: forcing a failure. [ 1289.601832] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.604796] CPU: 0 PID: 8390 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1289.606244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.607993] Call Trace: [ 1289.608569] dump_stack+0x107/0x167 [ 1289.609340] should_fail.cold+0x5/0xa [ 1289.610147] ? xas_alloc+0x336/0x440 [ 1289.610935] should_failslab+0x5/0x20 [ 1289.611729] kmem_cache_alloc+0x5b/0x310 [ 1289.612618] ? stack_trace_consume_entry+0x160/0x160 [ 1289.613678] xas_alloc+0x336/0x440 [ 1289.614423] xas_create+0x34a/0x10d0 [ 1289.615217] ? kernel_text_address+0xf2/0x120 [ 1289.616183] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1289.617280] xas_store+0x8c/0x1c40 [ 1289.618036] __xa_store+0x164/0x2d0 [ 1289.618806] ? xa_delete_node+0x280/0x280 [ 1289.619675] ? trace_hardirqs_on+0x5b/0x180 [ 1289.620621] xa_store+0x31/0x50 [ 1289.621320] __io_uring_add_tctx_node+0x1cf/0x520 [ 1289.622337] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1289.623429] ? alloc_fd+0x2e7/0x670 [ 1289.624242] io_uring_setup+0x1fbb/0x2980 [ 1289.625129] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1289.626207] ? wait_for_completion_io+0x270/0x270 [ 1289.627241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.628362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.629452] do_syscall_64+0x33/0x40 [ 1289.630230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.631292] RIP: 0033:0x7f8bd0804b19 [ 1289.632095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.635933] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1289.637577] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1289.639073] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1289.640578] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1289.642083] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1289.643579] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1289.670588] loop3: detected capacity change from 0 to 135266304 [ 1289.677704] FAULT_INJECTION: forcing a failure. [ 1289.677704] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.680319] CPU: 0 PID: 8400 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1289.681756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.683503] Call Trace: [ 1289.684099] dump_stack+0x107/0x167 [ 1289.684872] should_fail.cold+0x5/0xa [ 1289.685680] ? create_object.isra.0+0x3a/0xa30 [ 1289.686639] should_failslab+0x5/0x20 [ 1289.687441] kmem_cache_alloc+0x5b/0x310 [ 1289.688325] ? mark_held_locks+0x9e/0xe0 [ 1289.689189] create_object.isra.0+0x3a/0xa30 [ 1289.690113] kmemleak_alloc_percpu+0xa0/0x100 [ 1289.691063] pcpu_alloc+0x4e2/0x1240 [ 1289.691854] ? tun_attach.isra.0+0x1760/0x1760 [ 1289.692835] tun_net_init+0x55/0x650 [ 1289.693624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.694694] ? tun_attach.isra.0+0x1760/0x1760 [ 1289.695653] register_netdevice+0x560/0x1480 [ 1289.696618] ? netdev_change_features+0xb0/0xb0 [ 1289.697605] ? alloc_netdev_mqs+0xab1/0xe80 [ 1289.698531] __tun_chr_ioctl+0x20f9/0x3f40 [ 1289.699423] ? lock_downgrade+0x6d0/0x6d0 [ 1289.700319] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1289.701334] ? tun_chr_poll+0x700/0x700 [ 1289.702173] ? wait_for_completion_io+0x270/0x270 [ 1289.703187] ? selinux_file_ioctl+0xb6/0x270 [ 1289.704130] ? tun_chr_compat_ioctl+0x30/0x30 [ 1289.705067] __x64_sys_ioctl+0x19a/0x210 [ 1289.705921] do_syscall_64+0x33/0x40 [ 1289.706710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.707902] RIP: 0033:0x7f1e7ddeeb19 [ 1289.708839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.712733] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.714344] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1289.715826] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1289.717352] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.718848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1289.720356] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1289.748301] loop3: detected capacity change from 0 to 135266304 03:44:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:44:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 16) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:44:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) 03:44:27 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x2, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:44:27 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x9, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:27 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 11) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:27 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1304.574796] FAULT_INJECTION: forcing a failure. [ 1304.574796] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.575648] FAULT_INJECTION: forcing a failure. [ 1304.575648] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.577544] CPU: 1 PID: 8418 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1304.581690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.583487] Call Trace: [ 1304.584068] dump_stack+0x107/0x167 [ 1304.584858] should_fail.cold+0x5/0xa [ 1304.585670] ? selinux_tun_dev_alloc_security+0x43/0x180 [ 1304.586843] should_failslab+0x5/0x20 [ 1304.587656] kmem_cache_alloc_trace+0x55/0x320 [ 1304.588670] selinux_tun_dev_alloc_security+0x43/0x180 [ 1304.589819] security_tun_dev_alloc_security+0x46/0xa0 [ 1304.590910] tun_net_init+0x133/0x650 [ 1304.591693] ? tun_attach.isra.0+0x1760/0x1760 [ 1304.592676] register_netdevice+0x560/0x1480 [ 1304.593609] ? netdev_change_features+0xb0/0xb0 [ 1304.594558] ? alloc_netdev_mqs+0xab1/0xe80 [ 1304.595500] __tun_chr_ioctl+0x20f9/0x3f40 [ 1304.596436] ? lock_downgrade+0x6d0/0x6d0 [ 1304.597343] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1304.598391] ? tun_chr_poll+0x700/0x700 [ 1304.599233] ? wait_for_completion_io+0x270/0x270 [ 1304.600262] ? selinux_file_ioctl+0xb6/0x270 [ 1304.601206] ? tun_chr_compat_ioctl+0x30/0x30 [ 1304.602162] __x64_sys_ioctl+0x19a/0x210 [ 1304.603019] do_syscall_64+0x33/0x40 [ 1304.603803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.604930] RIP: 0033:0x7f1e7ddeeb19 [ 1304.605710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.609695] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1304.611357] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1304.612855] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1304.614404] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.615954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.617477] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1304.619016] CPU: 0 PID: 8423 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1304.620707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.622667] Call Trace: [ 1304.623312] dump_stack+0x107/0x167 [ 1304.624213] should_fail.cold+0x5/0xa [ 1304.625145] ? prealloc_shrinker+0xb0/0x2f0 [ 1304.626198] should_failslab+0x5/0x20 [ 1304.627121] __kmalloc+0x72/0x390 [ 1304.627964] prealloc_shrinker+0xb0/0x2f0 [ 1304.628981] ? __init_rwsem+0x129/0x1b0 [ 1304.629924] alloc_super+0x863/0xa90 [ 1304.630819] ? fput+0x20/0x20 [ 1304.631561] sget_fc+0x110/0x860 [ 1304.632388] ? set_anon_super+0xc0/0xc0 [ 1304.633344] ? rpc_kill_sb+0x1b0/0x1b0 [ 1304.634281] get_tree_keyed+0x55/0x210 [ 1304.635209] vfs_get_tree+0x8e/0x300 [ 1304.636088] __do_sys_fsconfig+0x8f5/0xc50 [ 1304.637101] ? fscontext_read+0x3b0/0x3b0 [ 1304.638064] ? fput_many+0x2f/0x1a0 [ 1304.638943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.640184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.641399] do_syscall_64+0x33/0x40 [ 1304.642279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.643476] RIP: 0033:0x7f5f86ebeb19 [ 1304.644379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.648728] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1304.650522] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1304.652184] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1304.653833] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.655506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.657199] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1304.661061] loop3: detected capacity change from 0 to 135266304 [ 1304.669838] FAULT_INJECTION: forcing a failure. [ 1304.669838] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.672581] CPU: 0 PID: 8422 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1304.674180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.676105] Call Trace: [ 1304.676738] dump_stack+0x107/0x167 [ 1304.677590] should_fail.cold+0x5/0xa [ 1304.678489] ? ___slab_alloc+0x155/0x700 [ 1304.679427] ? create_object.isra.0+0x3a/0xa30 [ 1304.680488] should_failslab+0x5/0x20 [ 1304.681363] kmem_cache_alloc+0x5b/0x310 [ 1304.682300] create_object.isra.0+0x3a/0xa30 [ 1304.683301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1304.684479] kmem_cache_alloc+0x159/0x310 [ 1304.685439] xas_alloc+0x336/0x440 [ 1304.686256] xas_create+0x34a/0x10d0 [ 1304.687132] ? kernel_text_address+0xf2/0x120 [ 1304.688193] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1304.689440] xas_store+0x8c/0x1c40 [ 1304.690293] __xa_store+0x164/0x2d0 [ 1304.691146] ? xa_delete_node+0x280/0x280 [ 1304.692154] ? trace_hardirqs_on+0x5b/0x180 [ 1304.693170] xa_store+0x31/0x50 [ 1304.693932] __io_uring_add_tctx_node+0x1cf/0x520 [ 1304.695039] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1304.696238] ? alloc_fd+0x2e7/0x670 [ 1304.697082] io_uring_setup+0x1fbb/0x2980 [ 1304.698047] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1304.699201] ? wait_for_completion_io+0x270/0x270 [ 1304.700340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.701537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.702701] do_syscall_64+0x33/0x40 [ 1304.703548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.704718] RIP: 0033:0x7f8bd0804b19 [ 1304.705580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.709782] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 03:44:27 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1304.711500] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1304.713368] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1304.714977] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1304.716593] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1304.718201] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:44:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 17) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:44:27 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x14, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:44:27 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 12) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1304.881427] FAULT_INJECTION: forcing a failure. [ 1304.881427] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.884308] CPU: 1 PID: 8440 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1304.885765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.887512] Call Trace: [ 1304.888080] dump_stack+0x107/0x167 [ 1304.888865] should_fail.cold+0x5/0xa [ 1304.889675] ? create_object.isra.0+0x3a/0xa30 [ 1304.890639] should_failslab+0x5/0x20 [ 1304.891439] kmem_cache_alloc+0x5b/0x310 [ 1304.892312] create_object.isra.0+0x3a/0xa30 [ 1304.893242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1304.894316] kmem_cache_alloc_trace+0x151/0x320 [ 1304.895299] selinux_tun_dev_alloc_security+0x43/0x180 [ 1304.896412] security_tun_dev_alloc_security+0x46/0xa0 [ 1304.897512] tun_net_init+0x133/0x650 [ 1304.898316] ? tun_attach.isra.0+0x1760/0x1760 [ 1304.899281] register_netdevice+0x560/0x1480 [ 1304.900227] ? netdev_change_features+0xb0/0xb0 [ 1304.901234] ? alloc_netdev_mqs+0xab1/0xe80 [ 1304.902147] __tun_chr_ioctl+0x20f9/0x3f40 [ 1304.903067] ? lock_downgrade+0x6d0/0x6d0 [ 1304.903963] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1304.905011] ? tun_chr_poll+0x700/0x700 [ 1304.905855] ? wait_for_completion_io+0x270/0x270 [ 1304.906911] ? selinux_file_ioctl+0xb6/0x270 [ 1304.907852] ? tun_chr_compat_ioctl+0x30/0x30 [ 1304.908808] __x64_sys_ioctl+0x19a/0x210 [ 1304.909676] do_syscall_64+0x33/0x40 [ 1304.910459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.911551] RIP: 0033:0x7f1e7ddeeb19 [ 1304.912364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.916318] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1304.917917] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1304.919412] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1304.920927] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.922440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.923971] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:44:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x11000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:44:27 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:27 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x3, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) [ 1304.981930] FAULT_INJECTION: forcing a failure. [ 1304.981930] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.984568] CPU: 1 PID: 8446 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1304.986023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.987760] Call Trace: [ 1304.988338] dump_stack+0x107/0x167 [ 1304.989123] should_fail.cold+0x5/0xa [ 1304.989948] ? create_object.isra.0+0x3a/0xa30 [ 1304.990917] should_failslab+0x5/0x20 [ 1304.991728] kmem_cache_alloc+0x5b/0x310 [ 1304.992595] create_object.isra.0+0x3a/0xa30 [ 1304.993504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1304.994550] __kmalloc+0x16e/0x390 [ 1304.995295] prealloc_shrinker+0xb0/0x2f0 [ 1304.996156] ? __init_rwsem+0x129/0x1b0 [ 1304.996985] alloc_super+0x863/0xa90 [ 1304.997760] ? fput+0x20/0x20 [ 1304.998420] sget_fc+0x110/0x860 [ 1304.999140] ? set_anon_super+0xc0/0xc0 [ 1304.999988] ? rpc_kill_sb+0x1b0/0x1b0 [ 1305.000808] get_tree_keyed+0x55/0x210 [ 1305.001608] vfs_get_tree+0x8e/0x300 [ 1305.002356] __do_sys_fsconfig+0x8f5/0xc50 [ 1305.003242] ? fscontext_read+0x3b0/0x3b0 [ 1305.004107] ? fput_many+0x2f/0x1a0 [ 1305.004882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.005960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.007014] do_syscall_64+0x33/0x40 [ 1305.007772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.008862] RIP: 0033:0x7f5f86ebeb19 [ 1305.009634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.013516] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1305.015104] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1305.016616] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1305.018112] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.019578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.021057] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1305.097421] FAULT_INJECTION: forcing a failure. [ 1305.097421] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.100324] CPU: 0 PID: 8456 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1305.101805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.103586] Call Trace: [ 1305.104177] dump_stack+0x107/0x167 [ 1305.104970] should_fail.cold+0x5/0xa [ 1305.105801] ? create_object.isra.0+0x3a/0xa30 [ 1305.106791] should_failslab+0x5/0x20 [ 1305.107594] kmem_cache_alloc+0x5b/0x310 [ 1305.108486] create_object.isra.0+0x3a/0xa30 [ 1305.109431] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.110518] kmem_cache_alloc+0x159/0x310 [ 1305.111399] xas_alloc+0x336/0x440 [ 1305.112166] xas_create+0x34a/0x10d0 [ 1305.112960] ? kernel_text_address+0xf2/0x120 [ 1305.113923] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1305.115052] xas_store+0x8c/0x1c40 [ 1305.115813] __xa_store+0x164/0x2d0 [ 1305.116609] ? xa_delete_node+0x280/0x280 [ 1305.117520] ? trace_hardirqs_on+0x5b/0x180 [ 1305.118466] xa_store+0x31/0x50 [ 1305.119166] __io_uring_add_tctx_node+0x1cf/0x520 [ 1305.120222] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1305.121332] ? alloc_fd+0x2e7/0x670 [ 1305.122135] io_uring_setup+0x1fbb/0x2980 [ 1305.123042] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1305.124150] ? wait_for_completion_io+0x270/0x270 [ 1305.125221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.126360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.127485] do_syscall_64+0x33/0x40 [ 1305.128314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.129429] RIP: 0033:0x7f8bd0804b19 [ 1305.130234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.134202] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1305.135850] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1305.137356] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1305.138884] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1305.140441] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1305.141989] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:44:28 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:28 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x2e, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x12010000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:44:28 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:44:28 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 13) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:28 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x4, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:28 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1305.272854] loop3: detected capacity change from 0 to 135266304 03:44:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) [ 1305.315803] loop3: detected capacity change from 0 to 135266304 [ 1305.322846] FAULT_INJECTION: forcing a failure. [ 1305.322846] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.325460] CPU: 0 PID: 8473 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1305.326931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.328712] Call Trace: [ 1305.329288] dump_stack+0x107/0x167 [ 1305.330071] should_fail.cold+0x5/0xa [ 1305.330894] ? __list_lru_init+0xcd/0x890 [ 1305.331782] should_failslab+0x5/0x20 [ 1305.332606] __kmalloc+0x72/0x390 [ 1305.333341] __list_lru_init+0xcd/0x890 [ 1305.334181] alloc_super+0x8b8/0xa90 [ 1305.334966] ? fput+0x20/0x20 [ 1305.335619] sget_fc+0x110/0x860 [ 1305.336346] ? set_anon_super+0xc0/0xc0 [ 1305.337184] ? rpc_kill_sb+0x1b0/0x1b0 [ 1305.338002] get_tree_keyed+0x55/0x210 [ 1305.338826] vfs_get_tree+0x8e/0x300 [ 1305.339617] __do_sys_fsconfig+0x8f5/0xc50 [ 1305.340528] ? fscontext_read+0x3b0/0x3b0 [ 1305.341401] ? fput_many+0x2f/0x1a0 [ 1305.342187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.343280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.344385] do_syscall_64+0x33/0x40 [ 1305.345170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.346253] RIP: 0033:0x7f5f86ebeb19 [ 1305.347041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.350921] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1305.352526] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1305.354030] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1305.355560] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.357107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.358643] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1305.433628] FAULT_INJECTION: forcing a failure. [ 1305.433628] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.435585] CPU: 1 PID: 8485 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1305.436705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.438066] Call Trace: [ 1305.438506] dump_stack+0x107/0x167 [ 1305.439106] should_fail.cold+0x5/0xa [ 1305.439749] ? create_object.isra.0+0x3a/0xa30 [ 1305.440517] should_failslab+0x5/0x20 [ 1305.441133] kmem_cache_alloc+0x5b/0x310 [ 1305.441818] create_object.isra.0+0x3a/0xa30 [ 1305.442541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.443386] kmem_cache_alloc+0x159/0x310 [ 1305.444086] xas_alloc+0x336/0x440 [ 1305.444685] xas_create+0x34a/0x10d0 [ 1305.445306] ? kernel_text_address+0xf2/0x120 [ 1305.446052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1305.446921] xas_store+0x8c/0x1c40 [ 1305.447518] __xa_store+0x164/0x2d0 [ 1305.448116] ? xa_delete_node+0x280/0x280 [ 1305.448814] ? trace_hardirqs_on+0x5b/0x180 [ 1305.449529] xa_store+0x31/0x50 [ 1305.450056] __io_uring_add_tctx_node+0x1cf/0x520 [ 1305.450820] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1305.451685] ? alloc_fd+0x2e7/0x670 [ 1305.452288] io_uring_setup+0x1fbb/0x2980 [ 1305.452949] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1305.453772] ? wait_for_completion_io+0x270/0x270 [ 1305.454549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.455379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.456172] do_syscall_64+0x33/0x40 [ 1305.456774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.457545] RIP: 0033:0x7f8bd0804b19 [ 1305.458136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.460996] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1305.462195] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1305.463255] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1305.464371] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1305.465501] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1305.466560] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:44:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) 03:44:49 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:49 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 14) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:49 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:44:49 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x5, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:49 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x13000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:44:49 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 18) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1326.874924] FAULT_INJECTION: forcing a failure. [ 1326.874924] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.877504] CPU: 0 PID: 8495 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1326.878944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.879550] FAULT_INJECTION: forcing a failure. [ 1326.879550] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.880703] Call Trace: [ 1326.880730] dump_stack+0x107/0x167 [ 1326.880753] should_fail.cold+0x5/0xa [ 1326.880775] ? create_object.isra.0+0x3a/0xa30 [ 1326.880794] should_failslab+0x5/0x20 [ 1326.880813] kmem_cache_alloc+0x5b/0x310 [ 1326.880839] create_object.isra.0+0x3a/0xa30 [ 1326.888819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1326.889878] __kmalloc+0x16e/0x390 [ 1326.890635] __list_lru_init+0xcd/0x890 [ 1326.891469] alloc_super+0x8b8/0xa90 [ 1326.892257] ? fput+0x20/0x20 [ 1326.892920] sget_fc+0x110/0x860 [ 1326.893623] ? set_anon_super+0xc0/0xc0 [ 1326.894467] ? rpc_kill_sb+0x1b0/0x1b0 [ 1326.895273] get_tree_keyed+0x55/0x210 [ 1326.896081] vfs_get_tree+0x8e/0x300 [ 1326.896876] __do_sys_fsconfig+0x8f5/0xc50 [ 1326.897761] ? fscontext_read+0x3b0/0x3b0 [ 1326.898625] ? fput_many+0x2f/0x1a0 [ 1326.899408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.900510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.901592] do_syscall_64+0x33/0x40 [ 1326.902367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.903450] RIP: 0033:0x7f5f86ebeb19 [ 1326.904226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.908083] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1326.909682] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1326.911172] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1326.912662] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.914150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.915643] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1326.917177] CPU: 1 PID: 8501 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1326.918613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.920351] Call Trace: [ 1326.920912] dump_stack+0x107/0x167 [ 1326.921679] should_fail.cold+0x5/0xa [ 1326.922475] ? kvmalloc_node+0xc0/0x170 [ 1326.923305] should_failslab+0x5/0x20 [ 1326.924098] __kmalloc_node+0x76/0x420 [ 1326.924921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.926019] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1326.927083] kvmalloc_node+0xc0/0x170 [ 1326.927880] tun_attach.isra.0+0x840/0x1760 [ 1326.928792] ? trace_hardirqs_on+0x5b/0x180 [ 1326.929713] ? lockdep_init_map_type+0x2c7/0x780 [ 1326.930707] ? init_timer_key+0x12a/0x240 [ 1326.931585] tun_net_init+0x45e/0x650 [ 1326.932402] ? tun_attach.isra.0+0x1760/0x1760 [ 1326.933372] register_netdevice+0x560/0x1480 [ 1326.934299] ? netdev_change_features+0xb0/0xb0 [ 1326.935276] ? alloc_netdev_mqs+0xab1/0xe80 [ 1326.935569] FAULT_INJECTION: forcing a failure. [ 1326.935569] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.936181] __tun_chr_ioctl+0x20f9/0x3f40 [ 1326.936205] ? lock_downgrade+0x6d0/0x6d0 [ 1326.936223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1326.936240] ? tun_chr_poll+0x700/0x700 [ 1326.936259] ? wait_for_completion_io+0x270/0x270 [ 1326.936294] ? selinux_file_ioctl+0xb6/0x270 [ 1326.943993] ? tun_chr_compat_ioctl+0x30/0x30 [ 1326.944947] __x64_sys_ioctl+0x19a/0x210 [ 1326.945802] do_syscall_64+0x33/0x40 [ 1326.946581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.947657] RIP: 0033:0x7f1e7ddeeb19 [ 1326.948444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.952268] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1326.953874] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1326.955355] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1326.956853] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.958339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.959831] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1326.961363] CPU: 0 PID: 8505 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1326.962806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.964552] Call Trace: [ 1326.965106] dump_stack+0x107/0x167 [ 1326.965874] should_fail.cold+0x5/0xa [ 1326.966678] ? xas_alloc+0x336/0x440 [ 1326.967464] should_failslab+0x5/0x20 [ 1326.968264] kmem_cache_alloc+0x5b/0x310 [ 1326.969136] xas_alloc+0x336/0x440 [ 1326.969877] xas_create+0x34a/0x10d0 [ 1326.970668] ? kernel_text_address+0xf2/0x120 [ 1326.971606] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1326.972711] xas_store+0x8c/0x1c40 [ 1326.973475] __xa_store+0x164/0x2d0 [ 1326.974236] ? xa_delete_node+0x280/0x280 [ 1326.975104] ? trace_hardirqs_on+0x5b/0x180 [ 1326.976012] xa_store+0x31/0x50 [ 1326.976715] __io_uring_add_tctx_node+0x1cf/0x520 [ 1326.977728] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1326.978825] ? alloc_fd+0x2e7/0x670 [ 1326.979603] io_uring_setup+0x1fbb/0x2980 [ 1326.980490] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1326.981544] ? wait_for_completion_io+0x270/0x270 [ 1326.982580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.983672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.984761] do_syscall_64+0x33/0x40 [ 1326.985541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.986602] RIP: 0033:0x7f8bd0804b19 [ 1326.987372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.991211] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1326.992804] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1326.994285] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1326.995766] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 03:44:49 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1326.997252] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1326.998963] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1327.001673] loop3: detected capacity change from 0 to 135266304 [ 1327.051310] loop3: detected capacity change from 0 to 135266304 03:44:49 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:44:50 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x10, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:44:50 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) 03:45:04 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x11, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:04 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, 0x0, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:45:04 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x9, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:04 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 19) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:45:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x15000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:45:04 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 15) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:04 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1341.828437] FAULT_INJECTION: forcing a failure. [ 1341.828437] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.830952] CPU: 1 PID: 8533 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1341.832347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.834025] Call Trace: [ 1341.834575] dump_stack+0x107/0x167 [ 1341.835309] should_fail.cold+0x5/0xa [ 1341.835538] FAULT_INJECTION: forcing a failure. [ 1341.835538] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.836096] ? xas_alloc+0x336/0x440 [ 1341.839206] should_failslab+0x5/0x20 [ 1341.839969] kmem_cache_alloc+0x5b/0x310 [ 1341.840809] xas_alloc+0x336/0x440 [ 1341.841527] xas_create+0x34a/0x10d0 [ 1341.842274] ? kernel_text_address+0xf2/0x120 [ 1341.843173] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1341.844233] xas_store+0x8c/0x1c40 [ 1341.844973] __xa_store+0x164/0x2d0 [ 1341.845710] ? xa_delete_node+0x280/0x280 [ 1341.846568] ? trace_hardirqs_on+0x5b/0x180 [ 1341.847444] xa_store+0x31/0x50 [ 1341.848115] __io_uring_add_tctx_node+0x1cf/0x520 [ 1341.849089] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1341.850148] ? alloc_fd+0x2e7/0x670 [ 1341.850888] io_uring_setup+0x1fbb/0x2980 [ 1341.851729] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1341.852601] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1341.853615] ? tick_program_event+0xa8/0x140 [ 1341.854519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.855574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.856620] do_syscall_64+0x33/0x40 [ 1341.857368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.858400] RIP: 0033:0x7f8bd0804b19 [ 1341.859142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.862855] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1341.864386] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1341.865827] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1341.867254] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1341.868694] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1341.870122] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1341.871594] CPU: 0 PID: 8547 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1341.873058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.874808] Call Trace: [ 1341.875376] dump_stack+0x107/0x167 [ 1341.876149] should_fail.cold+0x5/0xa [ 1341.876978] ? create_object.isra.0+0x3a/0xa30 [ 1341.877937] should_failslab+0x5/0x20 [ 1341.878742] kmem_cache_alloc+0x5b/0x310 [ 1341.879599] create_object.isra.0+0x3a/0xa30 [ 1341.880317] loop3: detected capacity change from 0 to 135266304 [ 1341.880531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1341.880557] __kmalloc_node+0x1ae/0x420 [ 1341.883627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.884752] kvmalloc_node+0xc0/0x170 [ 1341.885555] tun_attach.isra.0+0x840/0x1760 [ 1341.886460] ? trace_hardirqs_on+0x5b/0x180 [ 1341.887377] ? lockdep_init_map_type+0x2c7/0x780 [ 1341.888379] ? init_timer_key+0x12a/0x240 [ 1341.889265] tun_net_init+0x45e/0x650 [ 1341.890061] ? tun_attach.isra.0+0x1760/0x1760 [ 1341.891028] register_netdevice+0x560/0x1480 [ 1341.891959] ? netdev_change_features+0xb0/0xb0 [ 1341.892951] ? alloc_netdev_mqs+0xab1/0xe80 [ 1341.893861] __tun_chr_ioctl+0x20f9/0x3f40 [ 1341.894754] ? lock_downgrade+0x6d0/0x6d0 [ 1341.895631] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1341.896646] ? tun_chr_poll+0x700/0x700 [ 1341.897484] ? wait_for_completion_io+0x270/0x270 [ 1341.898511] ? selinux_file_ioctl+0xb6/0x270 [ 1341.899441] ? tun_chr_compat_ioctl+0x30/0x30 [ 1341.900382] __x64_sys_ioctl+0x19a/0x210 [ 1341.901256] do_syscall_64+0x33/0x40 [ 1341.902039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.903114] RIP: 0033:0x7f1e7ddeeb19 [ 1341.903897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.907759] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.909356] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1341.910853] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1341.912346] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.913843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.915321] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1341.928041] FAULT_INJECTION: forcing a failure. [ 1341.928041] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.930649] CPU: 1 PID: 8549 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1341.932101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.933864] Call Trace: [ 1341.934428] dump_stack+0x107/0x167 [ 1341.935198] should_fail.cold+0x5/0xa [ 1341.936007] ? kvmalloc_node+0x119/0x170 03:45:04 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x12, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1341.936863] should_failslab+0x5/0x20 [ 1341.937900] __kmalloc_node+0x76/0x420 [ 1341.938722] ? lockdep_init_map_type+0x2c7/0x780 [ 1341.939715] kvmalloc_node+0x119/0x170 [ 1341.940549] __list_lru_init+0x511/0x890 [ 1341.941412] alloc_super+0x8b8/0xa90 [ 1341.942211] ? fput+0x20/0x20 [ 1341.942861] sget_fc+0x110/0x860 [ 1341.943570] ? set_anon_super+0xc0/0xc0 [ 1341.944414] ? rpc_kill_sb+0x1b0/0x1b0 [ 1341.945247] get_tree_keyed+0x55/0x210 [ 1341.946065] vfs_get_tree+0x8e/0x300 [ 1341.946851] __do_sys_fsconfig+0x8f5/0xc50 [ 1341.947747] ? fscontext_read+0x3b0/0x3b0 [ 1341.948617] ? fput_many+0x2f/0x1a0 [ 1341.949387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.950491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.951576] do_syscall_64+0x33/0x40 [ 1341.952360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.953442] RIP: 0033:0x7f5f86ebeb19 [ 1341.954219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.958093] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1341.959693] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1341.961197] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1341.962688] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.964182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.965693] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1341.993958] loop3: detected capacity change from 0 to 135266304 03:45:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 03:45:04 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 16) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:04 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x14, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:04 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, 0x0, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:45:05 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1342.143901] FAULT_INJECTION: forcing a failure. [ 1342.143901] name failslab, interval 1, probability 0, space 0, times 0 03:45:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x20000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1342.146518] CPU: 1 PID: 8561 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1342.148149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1342.149911] Call Trace: [ 1342.150476] dump_stack+0x107/0x167 [ 1342.151242] should_fail.cold+0x5/0xa [ 1342.152040] ? xas_alloc+0x336/0x440 [ 1342.152831] should_failslab+0x5/0x20 [ 1342.153629] kmem_cache_alloc+0x5b/0x310 [ 1342.154485] xas_alloc+0x336/0x440 [ 1342.155233] xas_create+0x34a/0x10d0 [ 1342.156021] ? kernel_text_address+0xf2/0x120 [ 1342.156983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1342.158086] xas_store+0x8c/0x1c40 [ 1342.158850] __xa_store+0x164/0x2d0 [ 1342.159613] ? xa_delete_node+0x280/0x280 [ 1342.160513] ? trace_hardirqs_on+0x5b/0x180 [ 1342.161431] xa_store+0x31/0x50 [ 1342.162127] __io_uring_add_tctx_node+0x1cf/0x520 [ 1342.163135] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1342.164237] ? alloc_fd+0x2e7/0x670 [ 1342.165019] io_uring_setup+0x1fbb/0x2980 [ 1342.165900] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1342.166956] ? wait_for_completion_io+0x270/0x270 [ 1342.167991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1342.169104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1342.170181] do_syscall_64+0x33/0x40 [ 1342.170961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1342.172044] RIP: 0033:0x7f8bd0804b19 [ 1342.172828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.176668] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1342.178264] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1342.179764] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1342.181256] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1342.182754] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1342.184253] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1342.194918] FAULT_INJECTION: forcing a failure. [ 1342.194918] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.197545] CPU: 1 PID: 8564 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1342.198990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1342.200732] Call Trace: [ 1342.201291] dump_stack+0x107/0x167 [ 1342.202060] should_fail.cold+0x5/0xa [ 1342.202862] ? create_object.isra.0+0x3a/0xa30 [ 1342.203820] should_failslab+0x5/0x20 [ 1342.204629] kmem_cache_alloc+0x5b/0x310 [ 1342.205495] create_object.isra.0+0x3a/0xa30 [ 1342.206408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1342.207482] __kmalloc_node+0x1ae/0x420 [ 1342.208321] ? lockdep_init_map_type+0x2c7/0x780 [ 1342.209337] kvmalloc_node+0x119/0x170 [ 1342.210153] __list_lru_init+0x511/0x890 [ 1342.211019] alloc_super+0x8b8/0xa90 [ 1342.211822] ? fput+0x20/0x20 [ 1342.212479] sget_fc+0x110/0x860 [ 1342.213207] ? set_anon_super+0xc0/0xc0 [ 1342.214053] ? rpc_kill_sb+0x1b0/0x1b0 [ 1342.214867] get_tree_keyed+0x55/0x210 [ 1342.215697] vfs_get_tree+0x8e/0x300 [ 1342.216499] __do_sys_fsconfig+0x8f5/0xc50 [ 1342.217419] ? fscontext_read+0x3b0/0x3b0 [ 1342.218288] ? fput_many+0x2f/0x1a0 [ 1342.219081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1342.220187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1342.221284] do_syscall_64+0x33/0x40 [ 1342.222079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1342.223154] RIP: 0033:0x7f5f86ebeb19 [ 1342.223939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.227827] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1342.229443] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1342.230946] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1342.232451] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.233959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.235456] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:45:05 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2e, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:21 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2f, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) 03:45:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 20) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:45:21 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 17) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:21 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x2e, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x20100000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:45:21 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:45:21 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, 0x0, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1358.512061] FAULT_INJECTION: forcing a failure. [ 1358.512061] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.514547] CPU: 0 PID: 8596 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1358.515927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1358.517362] FAULT_INJECTION: forcing a failure. [ 1358.517362] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.517605] Call Trace: [ 1358.517632] dump_stack+0x107/0x167 [ 1358.517656] should_fail.cold+0x5/0xa [ 1358.521954] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1358.522971] should_failslab+0x5/0x20 [ 1358.523735] kmem_cache_alloc_trace+0x55/0x320 [ 1358.524671] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1358.525661] __list_lru_init+0x44d/0x890 [ 1358.526487] alloc_super+0x8b8/0xa90 [ 1358.527235] ? fput+0x20/0x20 [ 1358.527860] sget_fc+0x110/0x860 [ 1358.528540] ? set_anon_super+0xc0/0xc0 [ 1358.529351] ? rpc_kill_sb+0x1b0/0x1b0 [ 1358.530132] get_tree_keyed+0x55/0x210 [ 1358.530910] vfs_get_tree+0x8e/0x300 [ 1358.531655] __do_sys_fsconfig+0x8f5/0xc50 [ 1358.532502] ? fscontext_read+0x3b0/0x3b0 [ 1358.533334] ? fput_many+0x2f/0x1a0 [ 1358.534084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1358.535145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1358.536179] do_syscall_64+0x33/0x40 [ 1358.536938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1358.537961] RIP: 0033:0x7f5f86ebeb19 [ 1358.538701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.542399] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1358.543927] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1358.545366] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1358.546795] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.548214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.549649] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1358.551120] CPU: 1 PID: 8592 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1358.552579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1358.552714] FAULT_INJECTION: forcing a failure. [ 1358.552714] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.554355] Call Trace: [ 1358.554378] dump_stack+0x107/0x167 [ 1358.554401] should_fail.cold+0x5/0xa [ 1358.554422] ? create_object.isra.0+0x3a/0xa30 [ 1358.554439] should_failslab+0x5/0x20 [ 1358.554458] kmem_cache_alloc+0x5b/0x310 [ 1358.554477] ? mark_held_locks+0x9e/0xe0 [ 1358.554501] create_object.isra.0+0x3a/0xa30 [ 1358.563122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1358.564194] kmem_cache_alloc+0x159/0x310 [ 1358.565105] xas_alloc+0x336/0x440 [ 1358.565856] xas_create+0x34a/0x10d0 [ 1358.566656] ? kernel_text_address+0xf2/0x120 [ 1358.567596] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1358.568738] xas_store+0x8c/0x1c40 [ 1358.569515] __xa_store+0x164/0x2d0 [ 1358.570286] ? xa_delete_node+0x280/0x280 [ 1358.571173] ? trace_hardirqs_on+0x5b/0x180 [ 1358.572095] xa_store+0x31/0x50 [ 1358.572826] __io_uring_add_tctx_node+0x1cf/0x520 [ 1358.573833] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1358.574941] ? alloc_fd+0x2e7/0x670 [ 1358.575723] io_uring_setup+0x1fbb/0x2980 [ 1358.576618] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1358.577702] ? wait_for_completion_io+0x270/0x270 [ 1358.578756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1358.579863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1358.580987] do_syscall_64+0x33/0x40 [ 1358.581786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1358.582871] RIP: 0033:0x7f8bd0804b19 [ 1358.583660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.587581] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1358.589216] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1358.590729] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1358.592237] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1358.593771] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1358.595285] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1358.596853] CPU: 0 PID: 8597 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1358.598232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1358.599883] Call Trace: [ 1358.600411] dump_stack+0x107/0x167 [ 1358.601155] should_fail.cold+0x5/0xa [ 1358.601926] should_failslab+0x5/0x20 [ 1358.602685] __kmalloc_track_caller+0x79/0x370 [ 1358.603605] ? kstrdup_const+0x53/0x80 [ 1358.604387] kstrdup+0x36/0x70 [ 1358.605041] kstrdup_const+0x53/0x80 [ 1358.605775] kvasprintf_const+0x10c/0x1a0 [ 1358.606619] kobject_set_name_vargs+0x56/0x150 [ 1358.607539] dev_set_name+0xbb/0xf0 [ 1358.608262] ? device_initialize+0x620/0x620 [ 1358.609149] ? lockdep_init_map_type+0x2c7/0x780 [ 1358.610115] netdev_register_kobject+0xbd/0x3b0 [ 1358.611049] register_netdevice+0xd73/0x1480 [ 1358.611931] ? netdev_change_features+0xb0/0xb0 [ 1358.612875] ? alloc_netdev_mqs+0xab1/0xe80 [ 1358.613746] __tun_chr_ioctl+0x20f9/0x3f40 [ 1358.614599] ? lock_downgrade+0x6d0/0x6d0 [ 1358.615426] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1358.616388] ? tun_chr_poll+0x700/0x700 [ 1358.617193] ? wait_for_completion_io+0x270/0x270 [ 1358.618159] ? selinux_file_ioctl+0xb6/0x270 [ 1358.619038] ? tun_chr_compat_ioctl+0x30/0x30 [ 1358.619938] __x64_sys_ioctl+0x19a/0x210 [ 1358.620758] do_syscall_64+0x33/0x40 [ 1358.621499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1358.622525] RIP: 0033:0x7f1e7ddeeb19 [ 1358.623272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.626936] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1358.628449] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1358.629875] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1358.631298] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.632727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.634147] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1358.649713] loop3: detected capacity change from 0 to 135266304 03:45:21 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:45:21 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfc, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1371.377801] FAULT_INJECTION: forcing a failure. [ 1371.377801] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.379473] CPU: 1 PID: 8622 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1371.380367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.381431] Call Trace: [ 1371.381780] dump_stack+0x107/0x167 [ 1371.382254] should_fail.cold+0x5/0xa [ 1371.382740] ? create_object.isra.0+0x3a/0xa30 [ 1371.383325] should_failslab+0x5/0x20 [ 1371.383820] kmem_cache_alloc+0x5b/0x310 [ 1371.384335] ? mark_lock+0xf5/0x2df0 [ 1371.384828] create_object.isra.0+0x3a/0xa30 [ 1371.385383] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1371.386038] __kmalloc_track_caller+0x177/0x370 [ 1371.386628] ? kstrdup_const+0x53/0x80 [ 1371.387131] kstrdup+0x36/0x70 [ 1371.387538] kstrdup_const+0x53/0x80 [ 1371.388010] kvasprintf_const+0x10c/0x1a0 [ 1371.388541] kobject_set_name_vargs+0x56/0x150 [ 1371.389152] dev_set_name+0xbb/0xf0 [ 1371.389616] ? device_initialize+0x620/0x620 [ 1371.390183] ? lockdep_init_map_type+0x2c7/0x780 [ 1371.390815] netdev_register_kobject+0xbd/0x3b0 [ 1371.391413] register_netdevice+0xd73/0x1480 [ 1371.391973] ? netdev_change_features+0xb0/0xb0 [ 1371.392562] ? alloc_netdev_mqs+0xab1/0xe80 [ 1371.393121] __tun_chr_ioctl+0x20f9/0x3f40 [ 1371.393667] ? lock_downgrade+0x6d0/0x6d0 [ 1371.394193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1371.394802] ? tun_chr_poll+0x700/0x700 [ 1371.395311] ? wait_for_completion_io+0x270/0x270 [ 1371.395933] ? selinux_file_ioctl+0xb6/0x270 [ 1371.396495] ? tun_chr_compat_ioctl+0x30/0x30 [ 1371.397074] __x64_sys_ioctl+0x19a/0x210 [ 1371.397815] do_syscall_64+0x33/0x40 [ 1371.398331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 03:45:34 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:34 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:45:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2e000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:45:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 03:45:34 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 18) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:34 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:45:34 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 21) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:45:34 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x300, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1371.399128] RIP: 0033:0x7f1e7ddeeb19 [ 1371.399723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.402069] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1371.403047] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1371.403947] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1371.404858] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.405761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.406673] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1371.415556] FAULT_INJECTION: forcing a failure. [ 1371.415556] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.417068] CPU: 1 PID: 8631 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1371.417939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.418999] Call Trace: [ 1371.419336] dump_stack+0x107/0x167 [ 1371.419809] should_fail.cold+0x5/0xa [ 1371.420309] ? xas_alloc+0x336/0x440 [ 1371.420800] should_failslab+0x5/0x20 [ 1371.421286] kmem_cache_alloc+0x5b/0x310 [ 1371.421803] xas_alloc+0x336/0x440 [ 1371.422281] xas_create+0x34a/0x10d0 [ 1371.422780] ? kernel_text_address+0xf2/0x120 [ 1371.423356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1371.424043] xas_store+0x8c/0x1c40 [ 1371.424509] __xa_store+0x164/0x2d0 [ 1371.424982] ? xa_delete_node+0x280/0x280 [ 1371.425505] ? trace_hardirqs_on+0x5b/0x180 [ 1371.426068] xa_store+0x31/0x50 [ 1371.426495] __io_uring_add_tctx_node+0x1cf/0x520 [ 1371.427104] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1371.427768] ? alloc_fd+0x2e7/0x670 [ 1371.428233] io_uring_setup+0x1fbb/0x2980 [ 1371.428760] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1371.429418] ? wait_for_completion_io+0x270/0x270 [ 1371.430046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.430704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.431360] do_syscall_64+0x33/0x40 [ 1371.431841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.432490] RIP: 0033:0x7f8bd0804b19 [ 1371.432972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.435301] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1371.436255] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1371.437160] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1371.438062] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1371.438967] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1371.439860] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1371.441688] FAULT_INJECTION: forcing a failure. [ 1371.441688] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.443198] CPU: 1 PID: 8624 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1371.444064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.445116] Call Trace: [ 1371.445442] dump_stack+0x107/0x167 [ 1371.445894] should_fail.cold+0x5/0xa [ 1371.446367] ? create_object.isra.0+0x3a/0xa30 [ 1371.446929] should_failslab+0x5/0x20 [ 1371.447407] kmem_cache_alloc+0x5b/0x310 [ 1371.447917] create_object.isra.0+0x3a/0xa30 [ 1371.448464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1371.449104] kmem_cache_alloc_trace+0x151/0x320 [ 1371.449687] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1371.450304] __list_lru_init+0x44d/0x890 [ 1371.450824] alloc_super+0x8b8/0xa90 [ 1371.451290] ? fput+0x20/0x20 [ 1371.451677] sget_fc+0x110/0x860 [ 1371.452095] ? set_anon_super+0xc0/0xc0 [ 1371.452607] ? rpc_kill_sb+0x1b0/0x1b0 [ 1371.453099] get_tree_keyed+0x55/0x210 [ 1371.453589] vfs_get_tree+0x8e/0x300 [ 1371.454050] __do_sys_fsconfig+0x8f5/0xc50 [ 1371.454579] ? fscontext_read+0x3b0/0x3b0 [ 1371.455093] ? fput_many+0x2f/0x1a0 [ 1371.455560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.456211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.456865] do_syscall_64+0x33/0x40 [ 1371.457331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.457969] RIP: 0033:0x7f5f86ebeb19 [ 1371.458434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.460704] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1371.461652] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1371.462532] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1371.463420] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.464302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.465195] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1371.467224] loop3: detected capacity change from 0 to 135266304 03:45:34 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:45:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) [ 1371.531987] loop3: detected capacity change from 0 to 135266304 03:45:34 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:34 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1100, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1371.613015] FAULT_INJECTION: forcing a failure. [ 1371.613015] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.615887] CPU: 0 PID: 8640 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1371.617502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.619449] Call Trace: [ 1371.620065] dump_stack+0x107/0x167 [ 1371.620914] should_fail.cold+0x5/0xa [ 1371.621802] ? create_object.isra.0+0x3a/0xa30 [ 1371.622864] should_failslab+0x5/0x20 [ 1371.623761] kmem_cache_alloc+0x5b/0x310 [ 1371.624714] ? mark_held_locks+0x9e/0xe0 [ 1371.625666] create_object.isra.0+0x3a/0xa30 [ 1371.626691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1371.627878] kmem_cache_alloc+0x159/0x310 [ 1371.628852] xas_alloc+0x336/0x440 [ 1371.629676] xas_create+0x34a/0x10d0 [ 1371.630552] ? kernel_text_address+0xf2/0x120 [ 1371.631593] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1371.632824] xas_store+0x8c/0x1c40 [ 1371.633670] __xa_store+0x164/0x2d0 [ 1371.634523] ? xa_delete_node+0x280/0x280 [ 1371.635478] ? trace_hardirqs_on+0x5b/0x180 [ 1371.636478] xa_store+0x31/0x50 [ 1371.637240] __io_uring_add_tctx_node+0x1cf/0x520 [ 1371.638345] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1371.639542] ? alloc_fd+0x2e7/0x670 [ 1371.640387] io_uring_setup+0x1fbb/0x2980 [ 1371.641362] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1371.642523] ? wait_for_completion_io+0x270/0x270 [ 1371.643653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.644856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.646039] do_syscall_64+0x33/0x40 [ 1371.646888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.648056] RIP: 0033:0x7f8bd0804b19 [ 1371.648915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.653105] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1371.654831] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1371.656458] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1371.658078] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1371.659689] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1371.661312] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:45:34 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:45:34 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 19) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:34 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 22) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:45:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2e0a0400, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1371.753493] FAULT_INJECTION: forcing a failure. [ 1371.753493] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.754764] FAULT_INJECTION: forcing a failure. [ 1371.754764] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.756420] CPU: 0 PID: 8657 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1371.758920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.760781] Call Trace: [ 1371.761380] dump_stack+0x107/0x167 [ 1371.762199] should_fail.cold+0x5/0xa [ 1371.763065] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1371.764200] should_failslab+0x5/0x20 [ 1371.765070] kmem_cache_alloc_trace+0x55/0x320 [ 1371.766093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1371.767241] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1371.768350] __list_lru_init+0x44d/0x890 [ 1371.769320] alloc_super+0x8b8/0xa90 [ 1371.770161] ? fput+0x20/0x20 [ 1371.770874] sget_fc+0x110/0x860 [ 1371.771636] ? set_anon_super+0xc0/0xc0 [ 1371.772542] ? rpc_kill_sb+0x1b0/0x1b0 [ 1371.773428] get_tree_keyed+0x55/0x210 [ 1371.774306] vfs_get_tree+0x8e/0x300 [ 1371.775145] __do_sys_fsconfig+0x8f5/0xc50 [ 1371.776104] ? fscontext_read+0x3b0/0x3b0 [ 1371.777047] ? fput_many+0x2f/0x1a0 [ 1371.777884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.779070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.780240] do_syscall_64+0x33/0x40 [ 1371.781089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.782244] RIP: 0033:0x7f5f86ebeb19 [ 1371.783086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.787223] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1371.788944] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1371.790552] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1371.792156] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.793765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.795375] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1371.797014] CPU: 1 PID: 8658 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1371.797800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.798742] Call Trace: [ 1371.799041] dump_stack+0x107/0x167 [ 1371.799457] should_fail.cold+0x5/0xa [ 1371.799896] ? device_add+0x1096/0x1cb0 [ 1371.800345] should_failslab+0x5/0x20 [ 1371.800786] kmem_cache_alloc_trace+0x55/0x320 [ 1371.801301] ? kfree_const+0x51/0x60 [ 1371.801731] device_add+0x1096/0x1cb0 [ 1371.802164] ? lockdep_init_map_type+0x2c7/0x780 [ 1371.802703] ? devlink_add_symlinks+0x970/0x970 [ 1371.803244] netdev_register_kobject+0x17a/0x3b0 [ 1371.803793] register_netdevice+0xd73/0x1480 [ 1371.804295] ? netdev_change_features+0xb0/0xb0 [ 1371.804830] ? alloc_netdev_mqs+0xab1/0xe80 [ 1371.805324] __tun_chr_ioctl+0x20f9/0x3f40 [ 1371.805807] ? lock_downgrade+0x6d0/0x6d0 [ 1371.806276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1371.806848] ? tun_chr_poll+0x700/0x700 [ 1371.807296] ? wait_for_completion_io+0x270/0x270 [ 1371.807852] ? selinux_file_ioctl+0xb6/0x270 [ 1371.808352] ? tun_chr_compat_ioctl+0x30/0x30 [ 1371.808873] __x64_sys_ioctl+0x19a/0x210 [ 1371.809334] do_syscall_64+0x33/0x40 [ 1371.809758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.810334] RIP: 0033:0x7f1e7ddeeb19 [ 1371.810757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.812854] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1371.813717] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1371.814525] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1371.815335] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 03:45:34 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1371.816144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.817187] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:45:34 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1200, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1371.839862] loop3: detected capacity change from 0 to 135266304 [ 1371.930863] loop3: detected capacity change from 0 to 135266304 03:45:48 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 20) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:48 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x11, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2f0a0400, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:45:48 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 23) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:45:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:45:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) 03:45:48 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:45:48 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2e00, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1386.087085] FAULT_INJECTION: forcing a failure. [ 1386.087085] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.088949] CPU: 0 PID: 8681 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1386.089861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.090964] Call Trace: [ 1386.091321] dump_stack+0x107/0x167 [ 1386.091820] should_fail.cold+0x5/0xa [ 1386.092334] ? xas_alloc+0x336/0x440 [ 1386.092827] should_failslab+0x5/0x20 [ 1386.093350] kmem_cache_alloc+0x5b/0x310 [ 1386.093899] xas_alloc+0x336/0x440 [ 1386.094375] xas_create+0x34a/0x10d0 [ 1386.094874] ? kernel_text_address+0xf2/0x120 [ 1386.095468] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1386.096164] xas_store+0x8c/0x1c40 [ 1386.096643] __xa_store+0x164/0x2d0 [ 1386.097136] ? xa_delete_node+0x280/0x280 [ 1386.097690] ? trace_hardirqs_on+0x5b/0x180 [ 1386.098269] xa_store+0x31/0x50 [ 1386.098705] __io_uring_add_tctx_node+0x1cf/0x520 [ 1386.099347] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1386.100041] ? alloc_fd+0x2e7/0x670 [ 1386.100539] io_uring_setup+0x1fbb/0x2980 [ 1386.101092] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1386.101758] ? wait_for_completion_io+0x270/0x270 [ 1386.102422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1386.103127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1386.103820] do_syscall_64+0x33/0x40 [ 1386.104315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1386.105014] RIP: 0033:0x7f8bd0804b19 [ 1386.105507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1386.107961] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1386.108961] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1386.109908] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1386.110857] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1386.111802] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1386.112754] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1386.127416] FAULT_INJECTION: forcing a failure. [ 1386.127416] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.130462] CPU: 1 PID: 8686 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1386.132069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.134274] Call Trace: [ 1386.135052] dump_stack+0x107/0x167 [ 1386.136099] should_fail.cold+0x5/0xa [ 1386.137114] ? create_object.isra.0+0x3a/0xa30 03:45:49 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1386.138163] should_failslab+0x5/0x20 [ 1386.139250] kmem_cache_alloc+0x5b/0x310 [ 1386.140211] ? mark_held_locks+0x9e/0xe0 [ 1386.140495] loop3: detected capacity change from 0 to 135266304 [ 1386.141174] create_object.isra.0+0x3a/0xa30 [ 1386.141194] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1386.141224] kmem_cache_alloc_trace+0x151/0x320 [ 1386.145290] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1386.146451] __list_lru_init+0x44d/0x890 [ 1386.147418] alloc_super+0x8b8/0xa90 [ 1386.148299] ? fput+0x20/0x20 [ 1386.149061] sget_fc+0x110/0x860 [ 1386.149862] ? set_anon_super+0xc0/0xc0 [ 1386.150803] ? rpc_kill_sb+0x1b0/0x1b0 [ 1386.151723] get_tree_keyed+0x55/0x210 [ 1386.152652] vfs_get_tree+0x8e/0x300 [ 1386.153538] __do_sys_fsconfig+0x8f5/0xc50 [ 1386.154547] ? fscontext_read+0x3b0/0x3b0 [ 1386.155516] ? fput_many+0x2f/0x1a0 [ 1386.156384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1386.157625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1386.158852] do_syscall_64+0x33/0x40 [ 1386.159731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1386.160975] RIP: 0033:0x7f5f86ebeb19 [ 1386.161872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1386.162797] FAULT_INJECTION: forcing a failure. [ 1386.162797] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.166226] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1386.166251] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1386.166263] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1386.166276] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1386.166288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1386.166301] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1386.173728] CPU: 0 PID: 8687 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1386.174598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.175643] Call Trace: [ 1386.175982] dump_stack+0x107/0x167 [ 1386.176447] should_fail.cold+0x5/0xa [ 1386.176946] ? create_object.isra.0+0x3a/0xa30 [ 1386.177526] should_failslab+0x5/0x20 [ 1386.178007] kmem_cache_alloc+0x5b/0x310 [ 1386.178527] create_object.isra.0+0x3a/0xa30 [ 1386.179084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1386.179739] kmem_cache_alloc_trace+0x151/0x320 [ 1386.180343] device_add+0x1096/0x1cb0 [ 1386.180834] ? lockdep_init_map_type+0x2c7/0x780 [ 1386.181443] ? devlink_add_symlinks+0x970/0x970 [ 1386.182043] netdev_register_kobject+0x17a/0x3b0 [ 1386.182642] register_netdevice+0xd73/0x1480 [ 1386.183197] ? netdev_change_features+0xb0/0xb0 [ 1386.183798] ? alloc_netdev_mqs+0xab1/0xe80 [ 1386.184341] __tun_chr_ioctl+0x20f9/0x3f40 [ 1386.184882] ? lock_downgrade+0x6d0/0x6d0 [ 1386.185419] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1386.186031] ? tun_chr_poll+0x700/0x700 [ 1386.186535] ? wait_for_completion_io+0x270/0x270 [ 1386.187164] ? selinux_file_ioctl+0xb6/0x270 [ 1386.187732] ? tun_chr_compat_ioctl+0x30/0x30 [ 1386.188334] __x64_sys_ioctl+0x19a/0x210 [ 1386.188850] do_syscall_64+0x33/0x40 [ 1386.189329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1386.189975] RIP: 0033:0x7f1e7ddeeb19 [ 1386.190437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1386.192732] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.193693] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1386.194592] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1386.195485] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1386.196384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1386.197289] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) [ 1386.217840] loop3: detected capacity change from 0 to 135266304 03:45:49 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 21) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:45:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:45:49 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2f00, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1386.278628] FAULT_INJECTION: forcing a failure. [ 1386.278628] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.280280] CPU: 0 PID: 8702 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1386.281116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.282115] Call Trace: [ 1386.282437] dump_stack+0x107/0x167 [ 1386.282875] should_fail.cold+0x5/0xa [ 1386.283337] ? create_object.isra.0+0x3a/0xa30 [ 1386.283886] should_failslab+0x5/0x20 [ 1386.284344] kmem_cache_alloc+0x5b/0x310 [ 1386.284832] ? mark_held_locks+0x9e/0xe0 [ 1386.285330] create_object.isra.0+0x3a/0xa30 [ 1386.285856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1386.286468] kmem_cache_alloc+0x159/0x310 [ 1386.286977] xas_alloc+0x336/0x440 [ 1386.287410] xas_create+0x34a/0x10d0 [ 1386.287864] ? kernel_text_address+0xf2/0x120 [ 1386.288404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1386.289033] xas_store+0x8c/0x1c40 [ 1386.289468] __xa_store+0x164/0x2d0 [ 1386.289911] ? xa_delete_node+0x280/0x280 [ 1386.290413] ? trace_hardirqs_on+0x5b/0x180 [ 1386.290933] xa_store+0x31/0x50 [ 1386.291338] __io_uring_add_tctx_node+0x1cf/0x520 [ 1386.291915] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1386.292540] ? alloc_fd+0x2e7/0x670 [ 1386.292990] io_uring_setup+0x1fbb/0x2980 [ 1386.293498] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1386.294109] ? wait_for_completion_io+0x270/0x270 [ 1386.294708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1386.295343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1386.295960] do_syscall_64+0x33/0x40 [ 1386.296412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1386.297023] RIP: 0033:0x7f8bd0804b19 [ 1386.297467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1386.299660] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1386.300566] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1386.301425] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1386.302279] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1386.303129] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1386.303979] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1386.307771] FAULT_INJECTION: forcing a failure. [ 1386.307771] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.309271] CPU: 0 PID: 8703 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1386.310102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1386.311090] Call Trace: [ 1386.311401] dump_stack+0x107/0x167 [ 1386.311832] should_fail.cold+0x5/0xa [ 1386.312293] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1386.312890] should_failslab+0x5/0x20 [ 1386.313345] kmem_cache_alloc_trace+0x55/0x320 [ 1386.313883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1386.314484] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1386.315064] __list_lru_init+0x44d/0x890 [ 1386.315555] alloc_super+0x8b8/0xa90 [ 1386.315995] ? fput+0x20/0x20 [ 1386.316362] sget_fc+0x110/0x860 [ 1386.316760] ? set_anon_super+0xc0/0xc0 [ 1386.317237] ? rpc_kill_sb+0x1b0/0x1b0 [ 1386.317694] get_tree_keyed+0x55/0x210 [ 1386.318160] vfs_get_tree+0x8e/0x300 [ 1386.318611] __do_sys_fsconfig+0x8f5/0xc50 [ 1386.319113] ? fscontext_read+0x3b0/0x3b0 [ 1386.319596] ? fput_many+0x2f/0x1a0 [ 1386.320037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1386.320659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1386.321270] do_syscall_64+0x33/0x40 [ 1386.321710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1386.322315] RIP: 0033:0x7f5f86ebeb19 [ 1386.322754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1386.324935] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1386.325837] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1386.326678] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1386.327532] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1386.328369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1386.329214] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1386.329650] loop3: detected capacity change from 0 to 135266304 03:45:49 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x13, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:01 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) 03:46:01 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 22) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x40000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:01 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:01 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3f00, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:01 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x15, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:01 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 24) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1398.919644] loop3: detected capacity change from 0 to 135266304 [ 1398.933651] FAULT_INJECTION: forcing a failure. [ 1398.933651] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.936306] CPU: 1 PID: 8726 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1398.937768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1398.939516] Call Trace: [ 1398.940141] dump_stack+0x107/0x167 [ 1398.940926] should_fail.cold+0x5/0xa [ 1398.941749] ? xas_alloc+0x336/0x440 [ 1398.942535] should_failslab+0x5/0x20 [ 1398.943341] kmem_cache_alloc+0x5b/0x310 [ 1398.944202] xas_alloc+0x336/0x440 [ 1398.944957] xas_create+0x34a/0x10d0 [ 1398.945743] FAULT_INJECTION: forcing a failure. [ 1398.945743] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.948078] ? kernel_text_address+0xf2/0x120 [ 1398.949032] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1398.950160] xas_store+0x8c/0x1c40 [ 1398.950924] __xa_store+0x164/0x2d0 [ 1398.951696] ? xa_delete_node+0x280/0x280 [ 1398.952580] ? trace_hardirqs_on+0x5b/0x180 [ 1398.953507] xa_store+0x31/0x50 [ 1398.954204] __io_uring_add_tctx_node+0x1cf/0x520 [ 1398.955219] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1398.956327] ? alloc_fd+0x2e7/0x670 [ 1398.957124] io_uring_setup+0x1fbb/0x2980 [ 1398.958019] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1398.959090] ? wait_for_completion_io+0x270/0x270 [ 1398.960131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1398.961278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1398.962366] do_syscall_64+0x33/0x40 [ 1398.963149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1398.964224] RIP: 0033:0x7f8bd0804b19 [ 1398.965009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1398.968903] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1398.970512] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1398.972016] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1398.973535] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1398.975040] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1398.976544] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1398.978090] CPU: 0 PID: 8734 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1398.979525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1398.981231] Call Trace: [ 1398.981782] dump_stack+0x107/0x167 [ 1398.982538] should_fail.cold+0x5/0xa [ 1398.983324] should_failslab+0x5/0x20 [ 1398.984104] __kmalloc_track_caller+0x79/0x370 [ 1398.985023] ? kstrdup_const+0x53/0x80 [ 1398.985833] kstrdup+0x36/0x70 [ 1398.986494] kstrdup_const+0x53/0x80 [ 1398.987269] __kernfs_new_node+0x9d/0x860 [ 1398.988129] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1398.989112] ? map_id_range_down+0x1c4/0x340 [ 1398.990017] ? projid_m_show+0x220/0x220 [ 1398.990851] ? __lockdep_reset_lock+0x180/0x180 [ 1398.991814] kernfs_new_node+0x18d/0x250 [ 1398.992643] kernfs_create_dir_ns+0x49/0x160 [ 1398.993563] sysfs_create_dir_ns+0x127/0x290 [ 1398.994455] ? sysfs_create_mount_point+0xb0/0xb0 [ 1398.995427] ? rwlock_bug.part.0+0x90/0x90 [ 1398.996290] ? net_namespace+0xe/0x40 [ 1398.997076] ? device_namespace+0x95/0xd0 [ 1398.997939] kobject_add_internal+0x25e/0xa30 [ 1398.998860] kobject_add+0x150/0x1c0 [ 1398.999626] ? kset_create_and_add+0x1a0/0x1a0 [ 1399.000561] ? lockdep_init_map_type+0x2c7/0x780 [ 1399.001574] device_add+0x35a/0x1cb0 [ 1399.002333] ? lockdep_init_map_type+0x2c7/0x780 [ 1399.003300] ? devlink_add_symlinks+0x970/0x970 [ 1399.004260] netdev_register_kobject+0x17a/0x3b0 [ 1399.005242] register_netdevice+0xd73/0x1480 [ 1399.006143] ? netdev_change_features+0xb0/0xb0 [ 1399.007092] ? alloc_netdev_mqs+0xab1/0xe80 [ 1399.007974] __tun_chr_ioctl+0x20f9/0x3f40 [ 1399.008841] ? lock_downgrade+0x6d0/0x6d0 [ 1399.009701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.010677] ? tun_chr_poll+0x700/0x700 [ 1399.011485] ? wait_for_completion_io+0x270/0x270 [ 1399.012479] ? selinux_file_ioctl+0xb6/0x270 [ 1399.013389] ? tun_chr_compat_ioctl+0x30/0x30 [ 1399.014300] __x64_sys_ioctl+0x19a/0x210 [ 1399.015131] do_syscall_64+0x33/0x40 [ 1399.015886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1399.016927] RIP: 0033:0x7f1e7ddeeb19 [ 1399.017699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.021438] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.022981] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1399.024429] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1399.025899] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.027340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.028792] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1399.030569] kobject_add_internal failed for veth0_vlan (error: -12 parent: net) 03:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) [ 1399.056617] loop3: detected capacity change from 0 to 135266304 [ 1399.066028] FAULT_INJECTION: forcing a failure. [ 1399.066028] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.069018] CPU: 0 PID: 8732 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1399.070461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.072178] Call Trace: [ 1399.072741] dump_stack+0x107/0x167 [ 1399.073519] should_fail.cold+0x5/0xa [ 1399.074343] ? create_object.isra.0+0x3a/0xa30 [ 1399.075306] should_failslab+0x5/0x20 [ 1399.076094] kmem_cache_alloc+0x5b/0x310 [ 1399.077299] ? mark_held_locks+0x9e/0xe0 [ 1399.078020] create_object.isra.0+0x3a/0xa30 [ 1399.078805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1399.079716] kmem_cache_alloc_trace+0x151/0x320 [ 1399.080558] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1399.081462] __list_lru_init+0x44d/0x890 [ 1399.082196] alloc_super+0x8b8/0xa90 [ 1399.082863] ? fput+0x20/0x20 [ 1399.083424] sget_fc+0x110/0x860 [ 1399.084027] ? set_anon_super+0xc0/0xc0 [ 1399.084743] ? rpc_kill_sb+0x1b0/0x1b0 [ 1399.085447] get_tree_keyed+0x55/0x210 [ 1399.086144] vfs_get_tree+0x8e/0x300 [ 1399.086816] __do_sys_fsconfig+0x8f5/0xc50 [ 1399.087572] ? fscontext_read+0x3b0/0x3b0 [ 1399.088295] ? fput_many+0x2f/0x1a0 [ 1399.088956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1399.089904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.090818] do_syscall_64+0x33/0x40 [ 1399.091473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1399.092368] RIP: 0033:0x7f5f86ebeb19 [ 1399.093019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.096242] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1399.097587] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1399.098839] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1399.100084] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.101328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.102565] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:46:02 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2e, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:02 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1399.204674] FAULT_INJECTION: forcing a failure. [ 1399.204674] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.207302] CPU: 1 PID: 8748 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1399.208756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.210516] Call Trace: [ 1399.211080] dump_stack+0x107/0x167 [ 1399.211855] should_fail.cold+0x5/0xa [ 1399.212664] ? create_object.isra.0+0x3a/0xa30 [ 1399.213634] should_failslab+0x5/0x20 [ 1399.214445] kmem_cache_alloc+0x5b/0x310 [ 1399.215309] ? mark_held_locks+0x9e/0xe0 [ 1399.216172] create_object.isra.0+0x3a/0xa30 [ 1399.217109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1399.218188] kmem_cache_alloc+0x159/0x310 [ 1399.219074] xas_alloc+0x336/0x440 [ 1399.219832] xas_create+0x34a/0x10d0 [ 1399.220639] ? kernel_text_address+0xf2/0x120 [ 1399.221603] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1399.222720] xas_store+0x8c/0x1c40 [ 1399.223492] __xa_store+0x164/0x2d0 [ 1399.224271] ? xa_delete_node+0x280/0x280 [ 1399.225172] ? trace_hardirqs_on+0x5b/0x180 [ 1399.226102] xa_store+0x31/0x50 [ 1399.226809] __io_uring_add_tctx_node+0x1cf/0x520 [ 1399.227841] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1399.228947] ? alloc_fd+0x2e7/0x670 [ 1399.229742] io_uring_setup+0x1fbb/0x2980 [ 1399.230632] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1399.231700] ? wait_for_completion_io+0x270/0x270 [ 1399.232746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1399.233867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.234965] do_syscall_64+0x33/0x40 [ 1399.235756] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1399.236838] RIP: 0033:0x7f8bd0804b19 [ 1399.237633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.241547] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1399.243156] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1399.244668] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1399.246188] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1399.247693] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1399.249217] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:46:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x48000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:02 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x4000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:02 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 25) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:46:02 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 23) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:02 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2f, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1399.352012] loop3: detected capacity change from 0 to 135266304 [ 1399.354539] FAULT_INJECTION: forcing a failure. [ 1399.354539] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.357240] CPU: 1 PID: 8759 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1399.358700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.360447] Call Trace: [ 1399.361009] dump_stack+0x107/0x167 [ 1399.361801] should_fail.cold+0x5/0xa [ 1399.362616] ? create_object.isra.0+0x3a/0xa30 [ 1399.363580] should_failslab+0x5/0x20 [ 1399.364385] kmem_cache_alloc+0x5b/0x310 [ 1399.365251] ? find_held_lock+0x2c/0x110 [ 1399.366117] create_object.isra.0+0x3a/0xa30 [ 1399.367058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1399.368148] __kmalloc_track_caller+0x177/0x370 [ 1399.369144] ? kstrdup_const+0x53/0x80 [ 1399.369969] kstrdup+0x36/0x70 [ 1399.370648] kstrdup_const+0x53/0x80 [ 1399.371435] __kernfs_new_node+0x9d/0x860 [ 1399.372313] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1399.373343] ? map_id_range_down+0x1c4/0x340 [ 1399.374285] ? projid_m_show+0x220/0x220 [ 1399.375147] ? __lockdep_reset_lock+0x180/0x180 [ 1399.376129] kernfs_new_node+0x18d/0x250 [ 1399.376996] kernfs_create_dir_ns+0x49/0x160 [ 1399.377946] sysfs_create_dir_ns+0x127/0x290 [ 1399.378875] ? sysfs_create_mount_point+0xb0/0xb0 [ 1399.379889] ? rwlock_bug.part.0+0x90/0x90 [ 1399.380780] ? net_namespace+0xe/0x40 [ 1399.381595] ? device_namespace+0x95/0xd0 [ 1399.382481] kobject_add_internal+0x25e/0xa30 [ 1399.383441] kobject_add+0x150/0x1c0 [ 1399.384228] ? kset_create_and_add+0x1a0/0x1a0 [ 1399.385205] ? lockdep_init_map_type+0x2c7/0x780 [ 1399.386222] device_add+0x35a/0x1cb0 [ 1399.387018] ? lockdep_init_map_type+0x2c7/0x780 [ 1399.388023] ? devlink_add_symlinks+0x970/0x970 [ 1399.389076] netdev_register_kobject+0x17a/0x3b0 [ 1399.390094] register_netdevice+0xd73/0x1480 [ 1399.391037] ? netdev_change_features+0xb0/0xb0 [ 1399.392025] ? alloc_netdev_mqs+0xab1/0xe80 [ 1399.392953] __tun_chr_ioctl+0x20f9/0x3f40 [ 1399.393862] ? lock_downgrade+0x6d0/0x6d0 [ 1399.394744] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.395757] ? tun_chr_poll+0x700/0x700 [ 1399.396597] ? wait_for_completion_io+0x270/0x270 [ 1399.397647] ? selinux_file_ioctl+0xb6/0x270 [ 1399.398581] ? tun_chr_compat_ioctl+0x30/0x30 [ 1399.399538] __x64_sys_ioctl+0x19a/0x210 [ 1399.399566] FAULT_INJECTION: forcing a failure. [ 1399.399566] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.400400] do_syscall_64+0x33/0x40 [ 1399.400423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1399.400436] RIP: 0033:0x7f1e7ddeeb19 [ 1399.400455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.400466] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.400486] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1399.400507] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1399.413997] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.415508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.417021] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1399.418583] CPU: 0 PID: 8764 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1399.420043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.421811] Call Trace: [ 1399.422379] dump_stack+0x107/0x167 [ 1399.423163] should_fail.cold+0x5/0xa [ 1399.423979] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1399.425068] should_failslab+0x5/0x20 [ 1399.425890] kmem_cache_alloc_trace+0x55/0x320 [ 1399.426867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1399.427954] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1399.428999] __list_lru_init+0x44d/0x890 [ 1399.429875] alloc_super+0x8b8/0xa90 [ 1399.430665] ? fput+0x20/0x20 [ 1399.431327] sget_fc+0x110/0x860 [ 1399.432049] ? set_anon_super+0xc0/0xc0 [ 1399.432897] ? rpc_kill_sb+0x1b0/0x1b0 [ 1399.433721] get_tree_keyed+0x55/0x210 [ 1399.434546] vfs_get_tree+0x8e/0x300 [ 1399.435331] __do_sys_fsconfig+0x8f5/0xc50 [ 1399.436225] ? fscontext_read+0x3b0/0x3b0 [ 1399.437107] ? fput_many+0x2f/0x1a0 [ 1399.437891] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1399.438993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.440087] do_syscall_64+0x33/0x40 [ 1399.440876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1399.441988] RIP: 0033:0x7f5f86ebeb19 [ 1399.442779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.446708] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1399.448336] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1399.449862] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1399.451382] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.452900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.454432] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:46:15 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 24) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:15 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfc, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:15 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:46:15 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfcff, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 03:46:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4c000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 26) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1412.259996] FAULT_INJECTION: forcing a failure. [ 1412.259996] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.260678] FAULT_INJECTION: forcing a failure. [ 1412.260678] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.261499] CPU: 0 PID: 8790 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1412.261507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.261511] Call Trace: [ 1412.261537] dump_stack+0x107/0x167 [ 1412.266678] should_fail.cold+0x5/0xa [ 1412.267161] ? xas_alloc+0x336/0x440 [ 1412.267629] should_failslab+0x5/0x20 [ 1412.268105] kmem_cache_alloc+0x5b/0x310 [ 1412.268617] xas_alloc+0x336/0x440 [ 1412.269061] xas_create+0x34a/0x10d0 [ 1412.269549] ? kernel_text_address+0xf2/0x120 [ 1412.270114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.270768] xas_store+0x8c/0x1c40 [ 1412.271223] __xa_store+0x164/0x2d0 [ 1412.271680] ? xa_delete_node+0x280/0x280 [ 1412.272206] ? trace_hardirqs_on+0x5b/0x180 [ 1412.272746] xa_store+0x31/0x50 [ 1412.273161] __io_uring_add_tctx_node+0x1cf/0x520 [ 1412.273772] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1412.274431] ? alloc_fd+0x2e7/0x670 [ 1412.274893] io_uring_setup+0x1fbb/0x2980 [ 1412.275424] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1412.276054] ? wait_for_completion_io+0x270/0x270 [ 1412.276671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.277333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.277971] do_syscall_64+0x33/0x40 [ 1412.278437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.279067] RIP: 0033:0x7f8bd0804b19 [ 1412.279526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.281819] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1412.282755] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1412.283637] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1412.284519] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1412.285412] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1412.286289] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1412.287224] CPU: 1 PID: 8781 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1412.288877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.290847] Call Trace: [ 1412.291484] dump_stack+0x107/0x167 [ 1412.292350] should_fail.cold+0x5/0xa [ 1412.293263] ? create_object.isra.0+0x3a/0xa30 [ 1412.294341] should_failslab+0x5/0x20 [ 1412.295237] kmem_cache_alloc+0x5b/0x310 [ 1412.296195] ? mark_held_locks+0x9e/0xe0 [ 1412.297157] create_object.isra.0+0x3a/0xa30 [ 1412.298207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.299443] kmem_cache_alloc_trace+0x151/0x320 [ 1412.300577] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1412.301786] __list_lru_init+0x44d/0x890 [ 1412.302779] alloc_super+0x8b8/0xa90 [ 1412.303683] ? fput+0x20/0x20 [ 1412.304440] sget_fc+0x110/0x860 [ 1412.305270] ? set_anon_super+0xc0/0xc0 [ 1412.306236] ? rpc_kill_sb+0x1b0/0x1b0 [ 1412.307180] get_tree_keyed+0x55/0x210 [ 1412.308128] vfs_get_tree+0x8e/0x300 [ 1412.309029] __do_sys_fsconfig+0x8f5/0xc50 [ 1412.310069] ? fscontext_read+0x3b0/0x3b0 [ 1412.311067] ? fput_many+0x2f/0x1a0 [ 1412.311965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.313254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.314506] do_syscall_64+0x33/0x40 [ 1412.315414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.316655] RIP: 0033:0x7f5f86ebeb19 [ 1412.317566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.322034] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1412.323867] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1412.325578] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1412.327287] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.328991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.330703] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1412.334631] loop3: detected capacity change from 0 to 135266304 [ 1412.356482] FAULT_INJECTION: forcing a failure. [ 1412.356482] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.358100] CPU: 0 PID: 8796 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1412.358931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.359920] Call Trace: [ 1412.360242] dump_stack+0x107/0x167 [ 1412.360680] should_fail.cold+0x5/0xa [ 1412.361138] ? __kernfs_new_node+0xd4/0x860 [ 1412.361665] should_failslab+0x5/0x20 [ 1412.362122] kmem_cache_alloc+0x5b/0x310 [ 1412.362609] __kernfs_new_node+0xd4/0x860 [ 1412.363111] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1412.363687] ? map_id_range_down+0x1c4/0x340 [ 1412.364212] ? projid_m_show+0x220/0x220 [ 1412.364702] ? __lockdep_reset_lock+0x180/0x180 [ 1412.365274] kernfs_new_node+0x18d/0x250 [ 1412.365762] kernfs_create_dir_ns+0x49/0x160 [ 1412.366293] sysfs_create_dir_ns+0x127/0x290 [ 1412.366815] ? sysfs_create_mount_point+0xb0/0xb0 [ 1412.367391] ? rwlock_bug.part.0+0x90/0x90 [ 1412.367897] ? net_namespace+0xe/0x40 [ 1412.368356] ? device_namespace+0x95/0xd0 [ 1412.368856] kobject_add_internal+0x25e/0xa30 [ 1412.369409] kobject_add+0x150/0x1c0 [ 1412.369852] ? kset_create_and_add+0x1a0/0x1a0 [ 1412.370400] ? lockdep_init_map_type+0x2c7/0x780 [ 1412.370968] device_add+0x35a/0x1cb0 [ 1412.371412] ? lockdep_init_map_type+0x2c7/0x780 [ 1412.371971] ? devlink_add_symlinks+0x970/0x970 [ 1412.372535] netdev_register_kobject+0x17a/0x3b0 [ 1412.373101] register_netdevice+0xd73/0x1480 [ 1412.373634] ? netdev_change_features+0xb0/0xb0 [ 1412.374188] ? alloc_netdev_mqs+0xab1/0xe80 [ 1412.374702] __tun_chr_ioctl+0x20f9/0x3f40 [ 1412.375210] ? lock_downgrade+0x6d0/0x6d0 [ 1412.375705] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.376272] ? tun_chr_poll+0x700/0x700 [ 1412.376748] ? wait_for_completion_io+0x270/0x270 [ 1412.377350] ? selinux_file_ioctl+0xb6/0x270 [ 1412.377870] ? tun_chr_compat_ioctl+0x30/0x30 [ 1412.378403] __x64_sys_ioctl+0x19a/0x210 [ 1412.378887] do_syscall_64+0x33/0x40 [ 1412.379335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.379944] RIP: 0033:0x7f1e7ddeeb19 [ 1412.380384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.382574] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1412.383485] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1412.384332] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1412.385168] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.386015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.386854] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1412.387868] kobject_add_internal failed for veth0_vlan (error: -12 parent: net) 03:46:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:15 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xff03, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1412.430649] loop3: detected capacity change from 0 to 135266304 03:46:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 03:46:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 27) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:46:15 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x300, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1412.494518] FAULT_INJECTION: forcing a failure. [ 1412.494518] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.497292] CPU: 1 PID: 8810 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1412.498779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.500592] Call Trace: [ 1412.501183] dump_stack+0x107/0x167 [ 1412.501984] should_fail.cold+0x5/0xa [ 1412.502823] ? create_object.isra.0+0x3a/0xa30 [ 1412.503813] should_failslab+0x5/0x20 [ 1412.504685] kmem_cache_alloc+0x5b/0x310 03:46:15 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 25) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1412.505738] ? mark_held_locks+0x9e/0xe0 [ 1412.506836] create_object.isra.0+0x3a/0xa30 [ 1412.507934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.509224] kmem_cache_alloc+0x159/0x310 [ 1412.510250] xas_alloc+0x336/0x440 03:46:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4d0a0400, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) [ 1412.511145] xas_create+0x34a/0x10d0 [ 1412.512191] ? kernel_text_address+0xf2/0x120 [ 1412.513326] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.514641] xas_store+0x8c/0x1c40 [ 1412.515546] __xa_store+0x164/0x2d0 [ 1412.516457] ? xa_delete_node+0x280/0x280 [ 1412.517516] ? trace_hardirqs_on+0x5b/0x180 [ 1412.518605] xa_store+0x31/0x50 [ 1412.519429] __io_uring_add_tctx_node+0x1cf/0x520 [ 1412.520614] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1412.521911] ? alloc_fd+0x2e7/0x670 [ 1412.522819] io_uring_setup+0x1fbb/0x2980 [ 1412.523847] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1412.525090] ? wait_for_completion_io+0x270/0x270 [ 1412.526318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.527620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.528889] do_syscall_64+0x33/0x40 [ 1412.529810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.531065] RIP: 0033:0x7f8bd0804b19 [ 1412.531988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.534948] FAULT_INJECTION: forcing a failure. [ 1412.534948] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.536530] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1412.536555] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1412.536567] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1412.536580] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1412.536593] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1412.536611] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1412.548401] CPU: 0 PID: 8814 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1412.549195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.550138] Call Trace: [ 1412.550447] dump_stack+0x107/0x167 [ 1412.550862] should_fail.cold+0x5/0xa [ 1412.551303] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1412.551877] should_failslab+0x5/0x20 [ 1412.552315] kmem_cache_alloc_trace+0x55/0x320 [ 1412.552834] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.553420] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1412.553982] __list_lru_init+0x44d/0x890 [ 1412.554450] alloc_super+0x8b8/0xa90 [ 1412.554877] ? fput+0x20/0x20 [ 1412.555231] sget_fc+0x110/0x860 [ 1412.555614] ? set_anon_super+0xc0/0xc0 [ 1412.556070] ? rpc_kill_sb+0x1b0/0x1b0 [ 1412.556512] get_tree_keyed+0x55/0x210 [ 1412.556955] vfs_get_tree+0x8e/0x300 [ 1412.557393] __do_sys_fsconfig+0x8f5/0xc50 [ 1412.557872] ? fscontext_read+0x3b0/0x3b0 [ 1412.558340] ? fput_many+0x2f/0x1a0 [ 1412.558761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.559360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.559946] do_syscall_64+0x33/0x40 [ 1412.560370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.560947] RIP: 0033:0x7f5f86ebeb19 [ 1412.561379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.563468] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1412.564333] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1412.565142] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1412.565963] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.566773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.567584] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:46:15 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1412.584622] FAULT_INJECTION: forcing a failure. [ 1412.584622] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.587527] CPU: 1 PID: 8816 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1412.589193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.591200] Call Trace: [ 1412.591845] dump_stack+0x107/0x167 [ 1412.592728] should_fail.cold+0x5/0xa [ 1412.593664] ? create_object.isra.0+0x3a/0xa30 [ 1412.594778] should_failslab+0x5/0x20 [ 1412.595688] kmem_cache_alloc+0x5b/0x310 [ 1412.596666] create_object.isra.0+0x3a/0xa30 [ 1412.597723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.598940] kmem_cache_alloc+0x159/0x310 [ 1412.599937] __kernfs_new_node+0xd4/0x860 [ 1412.600931] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1412.602083] ? map_id_range_down+0x1c4/0x340 [ 1412.603136] ? projid_m_show+0x220/0x220 [ 1412.604113] ? __lockdep_reset_lock+0x180/0x180 [ 1412.605239] kernfs_new_node+0x18d/0x250 [ 1412.606212] kernfs_create_dir_ns+0x49/0x160 [ 1412.607273] sysfs_create_dir_ns+0x127/0x290 [ 1412.608326] ? sysfs_create_mount_point+0xb0/0xb0 [ 1412.609477] ? rwlock_bug.part.0+0x90/0x90 [ 1412.610483] ? net_namespace+0xe/0x40 [ 1412.611386] ? device_namespace+0x95/0xd0 [ 1412.612375] kobject_add_internal+0x25e/0xa30 [ 1412.613452] kobject_add+0x150/0x1c0 [ 1412.614336] ? kset_create_and_add+0x1a0/0x1a0 [ 1412.615418] ? lockdep_init_map_type+0x2c7/0x780 [ 1412.616554] device_add+0x35a/0x1cb0 [ 1412.617448] ? lockdep_init_map_type+0x2c7/0x780 [ 1412.618566] ? devlink_add_symlinks+0x970/0x970 [ 1412.619682] netdev_register_kobject+0x17a/0x3b0 [ 1412.620810] register_netdevice+0xd73/0x1480 [ 1412.621864] ? netdev_change_features+0xb0/0xb0 [ 1412.622960] ? alloc_netdev_mqs+0xab1/0xe80 [ 1412.623977] __tun_chr_ioctl+0x20f9/0x3f40 [ 1412.624969] ? lock_downgrade+0x6d0/0x6d0 [ 1412.625950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.627074] ? tun_chr_poll+0x700/0x700 [ 1412.628003] ? wait_for_completion_io+0x270/0x270 [ 1412.629144] ? selinux_file_ioctl+0xb6/0x270 [ 1412.630186] ? tun_chr_compat_ioctl+0x30/0x30 [ 1412.631242] __x64_sys_ioctl+0x19a/0x210 [ 1412.632195] do_syscall_64+0x33/0x40 [ 1412.633063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.634294] RIP: 0033:0x7f1e7ddeeb19 [ 1412.635169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.639457] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1412.641230] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1412.642884] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1412.644550] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.646217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.647885] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1412.649463] loop3: detected capacity change from 0 to 135266304 [ 1426.365145] FAULT_INJECTION: forcing a failure. [ 1426.365145] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.368303] CPU: 1 PID: 8832 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1426.369756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.371480] Call Trace: [ 1426.372042] dump_stack+0x107/0x167 [ 1426.372803] should_fail.cold+0x5/0xa [ 1426.373621] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1426.374819] should_failslab+0x5/0x20 [ 1426.375617] kmem_cache_alloc+0x5b/0x310 [ 1426.376473] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1426.377643] idr_get_free+0x4b5/0x8f0 [ 1426.378455] idr_alloc_u32+0x184/0x300 [ 1426.379271] ? __fprop_inc_percpu_max+0x130/0x130 [ 1426.380280] ? lock_acquire+0x197/0x470 [ 1426.381108] ? __kernfs_new_node+0xff/0x860 [ 1426.382031] idr_alloc_cyclic+0x102/0x230 [ 1426.382901] ? idr_alloc+0x130/0x130 [ 1426.383672] ? rwlock_bug.part.0+0x90/0x90 [ 1426.384563] __kernfs_new_node+0x117/0x860 [ 1426.385457] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1426.386454] ? map_id_range_down+0x1c4/0x340 [ 1426.387373] ? projid_m_show+0x220/0x220 [ 1426.388223] ? __lockdep_reset_lock+0x180/0x180 [ 1426.389194] kernfs_new_node+0x18d/0x250 [ 1426.390065] kernfs_create_dir_ns+0x49/0x160 [ 1426.390989] sysfs_create_dir_ns+0x127/0x290 [ 1426.391907] ? sysfs_create_mount_point+0xb0/0xb0 [ 1426.392906] ? rwlock_bug.part.0+0x90/0x90 [ 1426.393797] ? net_namespace+0xe/0x40 [ 1426.394595] ? device_namespace+0x95/0xd0 [ 1426.395483] kobject_add_internal+0x25e/0xa30 [ 1426.396427] kobject_add+0x150/0x1c0 [ 1426.397207] ? kset_create_and_add+0x1a0/0x1a0 [ 1426.398171] ? lockdep_init_map_type+0x2c7/0x780 [ 1426.399175] device_add+0x35a/0x1cb0 [ 1426.399954] ? lockdep_init_map_type+0x2c7/0x780 [ 1426.400941] ? devlink_add_symlinks+0x970/0x970 [ 1426.401939] netdev_register_kobject+0x17a/0x3b0 [ 1426.402931] register_netdevice+0xd73/0x1480 [ 1426.403861] ? netdev_change_features+0xb0/0xb0 [ 1426.404827] ? alloc_netdev_mqs+0xab1/0xe80 [ 1426.405740] __tun_chr_ioctl+0x20f9/0x3f40 [ 1426.406622] ? lock_downgrade+0x6d0/0x6d0 [ 1426.407487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1426.408484] ? tun_chr_poll+0x700/0x700 [ 1426.409309] ? wait_for_completion_io+0x270/0x270 [ 1426.410339] ? selinux_file_ioctl+0xb6/0x270 [ 1426.411260] ? tun_chr_compat_ioctl+0x30/0x30 [ 1426.412201] __x64_sys_ioctl+0x19a/0x210 [ 1426.413052] do_syscall_64+0x33/0x40 [ 1426.413836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.414901] RIP: 0033:0x7f1e7ddeeb19 [ 1426.415685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.419507] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.421091] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1426.422580] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1426.424065] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.425552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.427039] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1426.456772] loop3: detected capacity change from 0 to 135266304 [ 1426.459835] FAULT_INJECTION: forcing a failure. [ 1426.459835] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.462452] CPU: 0 PID: 8846 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1426.463889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.465625] Call Trace: [ 1426.466182] dump_stack+0x107/0x167 [ 1426.466951] should_fail.cold+0x5/0xa [ 1426.467754] ? create_object.isra.0+0x3a/0xa30 [ 1426.468706] should_failslab+0x5/0x20 [ 1426.469509] kmem_cache_alloc+0x5b/0x310 [ 1426.470356] ? mark_held_locks+0x9e/0xe0 [ 1426.471207] create_object.isra.0+0x3a/0xa30 [ 1426.472125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.473191] kmem_cache_alloc_trace+0x151/0x320 [ 1426.474196] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1426.475233] __list_lru_init+0x44d/0x890 [ 1426.476089] alloc_super+0x8b8/0xa90 [ 1426.476867] ? fput+0x20/0x20 [ 1426.477529] sget_fc+0x110/0x860 [ 1426.478233] ? set_anon_super+0xc0/0xc0 [ 1426.479067] ? rpc_kill_sb+0x1b0/0x1b0 [ 1426.479879] get_tree_keyed+0x55/0x210 [ 1426.480691] vfs_get_tree+0x8e/0x300 [ 1426.481475] __do_sys_fsconfig+0x8f5/0xc50 [ 1426.482359] ? fscontext_read+0x3b0/0x3b0 [ 1426.483216] ? fput_many+0x2f/0x1a0 [ 1426.483997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.485088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.486171] do_syscall_64+0x33/0x40 [ 1426.486952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.488021] RIP: 0033:0x7f5f86ebeb19 [ 1426.488826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.493118] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1426.494722] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1426.496194] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1426.497691] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.499177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.500651] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1426.501325] FAULT_INJECTION: forcing a failure. [ 1426.501325] name failslab, interval 1, probability 0, space 0, times 0 03:46:29 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfffc, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:29 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:46:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:29 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 28) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:46:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) 03:46:29 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1100, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:29 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 26) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x68000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:29 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x80000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:29 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1300, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1426.505044] CPU: 1 PID: 8847 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1426.506497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.508247] Call Trace: [ 1426.508807] dump_stack+0x107/0x167 [ 1426.509591] should_fail.cold+0x5/0xa [ 1426.510395] ? xas_alloc+0x336/0x440 [ 1426.511179] should_failslab+0x5/0x20 [ 1426.511981] kmem_cache_alloc+0x5b/0x310 [ 1426.512839] xas_alloc+0x336/0x440 [ 1426.513604] xas_create+0x34a/0x10d0 [ 1426.514399] ? kernel_text_address+0xf2/0x120 [ 1426.515340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1426.516434] xas_store+0x8c/0x1c40 [ 1426.517203] __xa_store+0x164/0x2d0 [ 1426.517975] ? xa_delete_node+0x280/0x280 [ 1426.518856] ? trace_hardirqs_on+0x5b/0x180 [ 1426.519779] xa_store+0x31/0x50 [ 1426.520475] __io_uring_add_tctx_node+0x1cf/0x520 [ 1426.521493] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1426.522605] ? alloc_fd+0x2e7/0x670 [ 1426.523375] io_uring_setup+0x1fbb/0x2980 [ 1426.524253] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1426.525330] ? wait_for_completion_io+0x270/0x270 [ 1426.526359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.527471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.528548] do_syscall_64+0x33/0x40 [ 1426.529338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.530414] RIP: 0033:0x7f8bd0804b19 [ 1426.531188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.535078] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1426.536676] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1426.538185] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1426.539678] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1426.541174] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1426.542688] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:46:29 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:46:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x6c000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) 03:46:29 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 29) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:46:29 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 27) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1426.739043] FAULT_INJECTION: forcing a failure. [ 1426.739043] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.741827] CPU: 0 PID: 8866 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1426.743280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.745034] Call Trace: [ 1426.745604] dump_stack+0x107/0x167 [ 1426.746384] should_fail.cold+0x5/0xa [ 1426.747203] ? __lockdep_reset_lock+0x180/0x180 [ 1426.748171] ? create_object.isra.0+0x3a/0xa30 [ 1426.749141] should_failslab+0x5/0x20 [ 1426.749409] FAULT_INJECTION: forcing a failure. [ 1426.749409] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.749968] kmem_cache_alloc+0x5b/0x310 [ 1426.753166] create_object.isra.0+0x3a/0xa30 [ 1426.754115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.755201] kmem_cache_alloc+0x159/0x310 [ 1426.756093] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1426.757280] idr_get_free+0x4b5/0x8f0 [ 1426.758122] idr_alloc_u32+0x184/0x300 [ 1426.758949] ? __fprop_inc_percpu_max+0x130/0x130 [ 1426.759973] ? lock_acquire+0x197/0x470 [ 1426.760817] ? __kernfs_new_node+0xff/0x860 [ 1426.761752] idr_alloc_cyclic+0x102/0x230 [ 1426.762633] ? idr_alloc+0x130/0x130 [ 1426.763418] ? rwlock_bug.part.0+0x90/0x90 [ 1426.764324] __kernfs_new_node+0x117/0x860 [ 1426.765224] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1426.766245] ? map_id_range_down+0x1c4/0x340 [ 1426.767187] ? projid_m_show+0x220/0x220 [ 1426.768047] ? __lockdep_reset_lock+0x180/0x180 [ 1426.769039] kernfs_new_node+0x18d/0x250 [ 1426.769919] kernfs_create_dir_ns+0x49/0x160 [ 1426.770854] sysfs_create_dir_ns+0x127/0x290 [ 1426.771794] ? sysfs_create_mount_point+0xb0/0xb0 [ 1426.772812] ? rwlock_bug.part.0+0x90/0x90 [ 1426.773713] ? net_namespace+0xe/0x40 [ 1426.774521] ? device_namespace+0x95/0xd0 [ 1426.775404] kobject_add_internal+0x25e/0xa30 [ 1426.776368] kobject_add+0x150/0x1c0 [ 1426.777155] ? kset_create_and_add+0x1a0/0x1a0 [ 1426.778136] ? lockdep_init_map_type+0x2c7/0x780 [ 1426.779157] device_add+0x35a/0x1cb0 [ 1426.779946] ? lockdep_init_map_type+0x2c7/0x780 [ 1426.780950] ? devlink_add_symlinks+0x970/0x970 [ 1426.781961] netdev_register_kobject+0x17a/0x3b0 [ 1426.782970] register_netdevice+0xd73/0x1480 [ 1426.783914] ? netdev_change_features+0xb0/0xb0 [ 1426.784901] ? alloc_netdev_mqs+0xab1/0xe80 [ 1426.785830] __tun_chr_ioctl+0x20f9/0x3f40 [ 1426.786730] ? lock_downgrade+0x6d0/0x6d0 [ 1426.787604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1426.788620] ? tun_chr_poll+0x700/0x700 [ 1426.789472] ? wait_for_completion_io+0x270/0x270 [ 1426.790505] ? selinux_file_ioctl+0xb6/0x270 [ 1426.791444] ? tun_chr_compat_ioctl+0x30/0x30 [ 1426.792400] __x64_sys_ioctl+0x19a/0x210 [ 1426.793269] do_syscall_64+0x33/0x40 [ 1426.794066] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.795148] RIP: 0033:0x7f1e7ddeeb19 [ 1426.795937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.799830] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.801454] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1426.802960] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1426.804470] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.805976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.807487] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1426.809026] CPU: 1 PID: 8870 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1426.810481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.812233] Call Trace: [ 1426.812794] dump_stack+0x107/0x167 [ 1426.813566] should_fail.cold+0x5/0xa [ 1426.814370] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1426.815424] should_failslab+0x5/0x20 [ 1426.816221] kmem_cache_alloc_trace+0x55/0x320 [ 1426.817174] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.818248] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1426.819275] __list_lru_init+0x44d/0x890 [ 1426.820138] alloc_super+0x8b8/0xa90 [ 1426.820916] ? fput+0x20/0x20 [ 1426.821574] sget_fc+0x110/0x860 [ 1426.822281] ? set_anon_super+0xc0/0xc0 [ 1426.823114] ? rpc_kill_sb+0x1b0/0x1b0 [ 1426.823926] get_tree_keyed+0x55/0x210 [ 1426.824739] vfs_get_tree+0x8e/0x300 [ 1426.825528] __do_sys_fsconfig+0x8f5/0xc50 [ 1426.826413] ? fscontext_read+0x3b0/0x3b0 [ 1426.827274] ? fput_many+0x2f/0x1a0 [ 1426.828036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.829108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.830225] do_syscall_64+0x33/0x40 [ 1426.831127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.832323] RIP: 0033:0x7f5f86ebeb19 [ 1426.833161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.837410] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1426.839149] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1426.840761] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1426.842236] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.843666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.845185] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1426.873851] FAULT_INJECTION: forcing a failure. [ 1426.873851] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.876437] CPU: 0 PID: 8873 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1426.877869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.879627] Call Trace: [ 1426.880187] dump_stack+0x107/0x167 [ 1426.880959] should_fail.cold+0x5/0xa [ 1426.881770] ? create_object.isra.0+0x3a/0xa30 [ 1426.882735] should_failslab+0x5/0x20 [ 1426.883550] kmem_cache_alloc+0x5b/0x310 [ 1426.884421] ? mark_held_locks+0x9e/0xe0 [ 1426.885291] create_object.isra.0+0x3a/0xa30 [ 1426.886226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.887313] kmem_cache_alloc+0x159/0x310 [ 1426.888187] xas_alloc+0x336/0x440 [ 1426.888939] xas_create+0x34a/0x10d0 [ 1426.889744] ? kernel_text_address+0xf2/0x120 [ 1426.890686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1426.891786] xas_store+0x8c/0x1c40 [ 1426.892554] __xa_store+0x164/0x2d0 [ 1426.893331] ? xa_delete_node+0x280/0x280 [ 1426.894217] ? trace_hardirqs_on+0x5b/0x180 [ 1426.895137] xa_store+0x31/0x50 [ 1426.895834] __io_uring_add_tctx_node+0x1cf/0x520 [ 1426.896851] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1426.897953] ? alloc_fd+0x2e7/0x670 [ 1426.898730] io_uring_setup+0x1fbb/0x2980 [ 1426.899609] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1426.900664] ? wait_for_completion_io+0x270/0x270 [ 1426.901705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.902809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.903894] do_syscall_64+0x33/0x40 [ 1426.904672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.905758] RIP: 0033:0x7f8bd0804b19 [ 1426.906546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.910288] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1426.911864] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1426.913348] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1426.914799] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1426.916267] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1426.917752] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:46:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) 03:46:44 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1500, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:44 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:46:44 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x74000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 30) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:46:44 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 28) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1441.132794] FAULT_INJECTION: forcing a failure. [ 1441.132794] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.133709] FAULT_INJECTION: forcing a failure. [ 1441.133709] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.135613] CPU: 1 PID: 8893 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1441.139328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.141078] Call Trace: [ 1441.141672] dump_stack+0x107/0x167 [ 1441.142450] should_fail.cold+0x5/0xa [ 1441.143266] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1441.144475] should_failslab+0x5/0x20 [ 1441.145276] kmem_cache_alloc+0x5b/0x310 [ 1441.146185] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1441.147369] idr_get_free+0x4b5/0x8f0 [ 1441.148190] idr_alloc_u32+0x184/0x300 [ 1441.149020] ? __fprop_inc_percpu_max+0x130/0x130 [ 1441.150060] ? lock_acquire+0x197/0x470 [ 1441.150899] ? __kernfs_new_node+0xff/0x860 [ 1441.151838] idr_alloc_cyclic+0x102/0x230 [ 1441.152718] ? idr_alloc+0x130/0x130 [ 1441.153514] ? rwlock_bug.part.0+0x90/0x90 [ 1441.154423] __kernfs_new_node+0x117/0x860 [ 1441.155330] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1441.156338] ? map_id_range_down+0x1c4/0x340 [ 1441.157262] ? projid_m_show+0x220/0x220 [ 1441.158143] ? __lockdep_reset_lock+0x180/0x180 [ 1441.159125] kernfs_new_node+0x18d/0x250 [ 1441.159993] kernfs_create_dir_ns+0x49/0x160 [ 1441.160931] sysfs_create_dir_ns+0x127/0x290 [ 1441.161889] ? sysfs_create_mount_point+0xb0/0xb0 [ 1441.162899] ? rwlock_bug.part.0+0x90/0x90 [ 1441.163789] ? net_namespace+0xe/0x40 [ 1441.164601] ? device_namespace+0x95/0xd0 [ 1441.165485] kobject_add_internal+0x25e/0xa30 [ 1441.166446] kobject_add+0x150/0x1c0 [ 1441.167233] ? kset_create_and_add+0x1a0/0x1a0 [ 1441.168195] ? lockdep_init_map_type+0x2c7/0x780 [ 1441.169196] device_add+0x35a/0x1cb0 [ 1441.170004] ? lockdep_init_map_type+0x2c7/0x780 [ 1441.170997] ? devlink_add_symlinks+0x970/0x970 [ 1441.171986] netdev_register_kobject+0x17a/0x3b0 [ 1441.173001] register_netdevice+0xd73/0x1480 [ 1441.173934] ? netdev_change_features+0xb0/0xb0 [ 1441.174919] ? alloc_netdev_mqs+0xab1/0xe80 [ 1441.175840] __tun_chr_ioctl+0x20f9/0x3f40 [ 1441.176734] ? lock_downgrade+0x6d0/0x6d0 [ 1441.177608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1441.178632] ? tun_chr_poll+0x700/0x700 [ 1441.179469] ? wait_for_completion_io+0x270/0x270 [ 1441.180492] ? selinux_file_ioctl+0xb6/0x270 [ 1441.181413] ? tun_chr_compat_ioctl+0x30/0x30 [ 1441.182372] __x64_sys_ioctl+0x19a/0x210 [ 1441.183240] do_syscall_64+0x33/0x40 [ 1441.184017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.185103] RIP: 0033:0x7f1e7ddeeb19 [ 1441.185896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.189755] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.191376] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1441.192875] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1441.194383] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.195879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.197374] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1441.198922] CPU: 0 PID: 8892 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1441.200416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.202196] Call Trace: [ 1441.202760] dump_stack+0x107/0x167 [ 1441.203534] should_fail.cold+0x5/0xa [ 1441.204344] ? create_object.isra.0+0x3a/0xa30 [ 1441.205285] should_failslab+0x5/0x20 [ 1441.206102] kmem_cache_alloc+0x5b/0x310 [ 1441.206963] ? mark_held_locks+0x9e/0xe0 [ 1441.207508] loop3: detected capacity change from 0 to 135266304 [ 1441.207828] create_object.isra.0+0x3a/0xa30 [ 1441.210006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.211081] kmem_cache_alloc_trace+0x151/0x320 [ 1441.212074] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1441.213106] __list_lru_init+0x44d/0x890 [ 1441.213980] alloc_super+0x8b8/0xa90 [ 1441.214770] ? fput+0x20/0x20 [ 1441.215429] sget_fc+0x110/0x860 [ 1441.216145] ? set_anon_super+0xc0/0xc0 [ 1441.216999] ? rpc_kill_sb+0x1b0/0x1b0 [ 1441.217834] get_tree_keyed+0x55/0x210 [ 1441.218657] vfs_get_tree+0x8e/0x300 [ 1441.219450] __do_sys_fsconfig+0x8f5/0xc50 [ 1441.220345] ? fscontext_read+0x3b0/0x3b0 [ 1441.221221] ? fput_many+0x2f/0x1a0 [ 1441.222021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.223091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.224146] do_syscall_64+0x33/0x40 [ 1441.224926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.226007] RIP: 0033:0x7f5f86ebeb19 [ 1441.226786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.230643] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1441.232248] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1441.233746] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1441.235210] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.236679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.238178] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1441.261048] FAULT_INJECTION: forcing a failure. [ 1441.261048] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.263674] CPU: 0 PID: 8882 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1441.265105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.266870] Call Trace: [ 1441.267441] dump_stack+0x107/0x167 [ 1441.268219] should_fail.cold+0x5/0xa [ 1441.269026] ? create_object.isra.0+0x3a/0xa30 [ 1441.270014] should_failslab+0x5/0x20 [ 1441.270836] kmem_cache_alloc+0x5b/0x310 [ 1441.271714] ? mark_held_locks+0x9e/0xe0 [ 1441.272584] create_object.isra.0+0x3a/0xa30 [ 1441.273525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.274602] kmem_cache_alloc+0x159/0x310 [ 1441.275491] xas_alloc+0x336/0x440 [ 1441.276255] xas_create+0x34a/0x10d0 [ 1441.277052] ? kernel_text_address+0xf2/0x120 [ 1441.278004] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1441.279095] xas_store+0x8c/0x1c40 [ 1441.279862] __xa_store+0x164/0x2d0 [ 1441.280634] ? xa_delete_node+0x280/0x280 [ 1441.281507] ? trace_hardirqs_on+0x5b/0x180 [ 1441.282440] xa_store+0x31/0x50 [ 1441.283130] __io_uring_add_tctx_node+0x1cf/0x520 [ 1441.284154] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1441.285250] ? alloc_fd+0x2e7/0x670 [ 1441.286048] io_uring_setup+0x1fbb/0x2980 [ 1441.286934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1441.287999] ? wait_for_completion_io+0x270/0x270 [ 1441.288425] loop3: detected capacity change from 0 to 135266304 [ 1441.289031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.291419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.292507] do_syscall_64+0x33/0x40 [ 1441.293291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.294381] RIP: 0033:0x7f8bd0804b19 [ 1441.295156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.299040] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1441.300627] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1441.302133] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1441.303613] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1441.305148] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1441.306685] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:46:44 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:44 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:46:44 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2e00, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:46:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x7a000000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:46:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)={0x0, 0xfb, 0xc7, 0xb, 0x4, "a3786005b604c5e258b026f9457e35c2", "909f51a02b5b88db3e218e34d0ed7fcaacbe07131cfafe79f2c5efae2547c4b9fa696b2e10c80ffccc6c7630802f4fbfc9ab424dcabd559a27b815605daaf3f2d8d839e47c396ce7de2c4493817b3a338110d29d2864dc3b20912c4e8b6716181069df53b9bf990c4d45e79f29ab7209a5bf0fe59dfa10543b7bf19ce8808c0bc2004d80f144936e28e1e43bf8ec9accad20dd68cb684024728292d1ecdd1a11e2ef091028f0e4db836c5517d31767f4edc3"}, 0xc7, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:46:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 31) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:46:44 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 29) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1441.480986] loop3: detected capacity change from 0 to 135266304 03:46:44 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1441.546511] FAULT_INJECTION: forcing a failure. [ 1441.546511] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.549252] CPU: 0 PID: 8918 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1441.550811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.552745] Call Trace: [ 1441.553363] dump_stack+0x107/0x167 [ 1441.554230] should_fail.cold+0x5/0xa [ 1441.555121] ? create_object.isra.0+0x3a/0xa30 [ 1441.556195] should_failslab+0x5/0x20 [ 1441.557074] kmem_cache_alloc+0x5b/0x310 [ 1441.558030] ? mutex_lock_io_nested+0xf30/0xf30 [ 1441.559097] create_object.isra.0+0x3a/0xa30 [ 1441.560127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.561322] kmem_cache_alloc+0x159/0x310 [ 1441.562328] __kernfs_new_node+0xd4/0x860 [ 1441.563300] ? perf_trace_lock+0xac/0x490 [ 1441.564253] ? kernfs_add_one+0x124/0x4d0 [ 1441.565195] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1441.566315] ? __lockdep_reset_lock+0x180/0x180 [ 1441.567405] ? lock_acquire+0x197/0x470 [ 1441.568329] ? find_held_lock+0x2c/0x110 [ 1441.569300] ? sysfs_do_create_link_sd+0x82/0x140 [ 1441.570444] kernfs_new_node+0x18d/0x250 [ 1441.571406] kernfs_create_link+0xcb/0x230 [ 1441.572431] sysfs_do_create_link_sd+0x90/0x140 [ 1441.573548] sysfs_create_link+0x5f/0xc0 [ 1441.574509] device_add+0x5e1/0x1cb0 [ 1441.575341] ? lockdep_init_map_type+0x2c7/0x780 [ 1441.576459] ? devlink_add_symlinks+0x970/0x970 [ 1441.577549] netdev_register_kobject+0x17a/0x3b0 [ 1441.578661] register_netdevice+0xd73/0x1480 [ 1441.579697] ? netdev_change_features+0xb0/0xb0 [ 1441.580766] ? alloc_netdev_mqs+0xab1/0xe80 [ 1441.581774] __tun_chr_ioctl+0x20f9/0x3f40 [ 1441.582769] ? lock_downgrade+0x6d0/0x6d0 [ 1441.583723] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1441.584826] ? tun_chr_poll+0x700/0x700 [ 1441.585748] ? wait_for_completion_io+0x270/0x270 [ 1441.586871] ? selinux_file_ioctl+0xb6/0x270 [ 1441.587884] ? tun_chr_compat_ioctl+0x30/0x30 [ 1441.588919] __x64_sys_ioctl+0x19a/0x210 [ 1441.589859] do_syscall_64+0x33/0x40 [ 1441.590710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.591894] RIP: 0033:0x7f1e7ddeeb19 [ 1441.592730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.596971] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.598729] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1441.600359] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1441.602009] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.603651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.605258] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1441.669805] FAULT_INJECTION: forcing a failure. [ 1441.669805] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.672529] CPU: 1 PID: 8925 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1441.673979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.675713] Call Trace: [ 1441.676285] dump_stack+0x107/0x167 [ 1441.677080] should_fail.cold+0x5/0xa [ 1441.677919] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1441.679021] should_failslab+0x5/0x20 [ 1441.679848] kmem_cache_alloc_trace+0x55/0x320 [ 1441.680842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.681958] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1441.683029] __list_lru_init+0x44d/0x890 [ 1441.683891] alloc_super+0x8b8/0xa90 [ 1441.684670] ? fput+0x20/0x20 [ 1441.685351] sget_fc+0x110/0x860 [ 1441.686096] ? set_anon_super+0xc0/0xc0 [ 1441.686947] ? rpc_kill_sb+0x1b0/0x1b0 [ 1441.687785] get_tree_keyed+0x55/0x210 [ 1441.688631] vfs_get_tree+0x8e/0x300 [ 1441.689442] __do_sys_fsconfig+0x8f5/0xc50 [ 1441.690366] ? fscontext_read+0x3b0/0x3b0 [ 1441.691267] ? fput_many+0x2f/0x1a0 [ 1441.692068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.693217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.694352] do_syscall_64+0x33/0x40 [ 1441.695168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.696283] RIP: 0033:0x7f5f86ebeb19 [ 1441.697082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.701002] RSP: 002b:00007f5f84413188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1441.702644] RAX: ffffffffffffffda RBX: 00007f5f86fd2020 RCX: 00007f5f86ebeb19 [ 1441.704179] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1441.705724] RBP: 00007f5f844131d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.707252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.708741] R13: 00007ffc230e9a0f R14: 00007f5f84413300 R15: 0000000000022000 03:47:01 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:47:01 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 32) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:01 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 30) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:01 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2f00, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:01 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1458.695484] FAULT_INJECTION: forcing a failure. [ 1458.695484] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.698072] CPU: 0 PID: 8937 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1458.699532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.701287] Call Trace: [ 1458.701858] dump_stack+0x107/0x167 [ 1458.702630] should_fail.cold+0x5/0xa [ 1458.703439] ? __kernfs_new_node+0xd4/0x860 [ 1458.704354] should_failslab+0x5/0x20 [ 1458.705157] kmem_cache_alloc+0x5b/0x310 [ 1458.706026] __kernfs_new_node+0xd4/0x860 [ 1458.706911] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1458.707919] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1458.709027] ? kernfs_add_one+0x124/0x4d0 [ 1458.709934] kernfs_new_node+0x18d/0x250 03:47:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) 03:47:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:01 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x10000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1458.710802] __kernfs_create_file+0x51/0x350 [ 1458.712174] sysfs_add_file_mode_ns+0x221/0x560 [ 1458.713172] sysfs_create_file_ns+0x131/0x1d0 [ 1458.714519] ? sysfs_add_file_mode_ns+0x560/0x560 [ 1458.715845] ? is_acpi_device_node+0x6e/0x90 [ 1458.717250] device_create_file+0xea/0x1d0 [ 1458.718340] device_add+0x547/0x1cb0 [ 1458.719497] ? lockdep_init_map_type+0x2c7/0x780 [ 1458.720708] ? devlink_add_symlinks+0x970/0x970 [ 1458.722191] netdev_register_kobject+0x17a/0x3b0 [ 1458.723496] register_netdevice+0xd73/0x1480 [ 1458.724887] ? netdev_change_features+0xb0/0xb0 [ 1458.726089] ? alloc_netdev_mqs+0xab1/0xe80 [ 1458.727448] __tun_chr_ioctl+0x20f9/0x3f40 [ 1458.728533] ? lock_downgrade+0x6d0/0x6d0 [ 1458.729844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1458.731072] ? tun_chr_poll+0x700/0x700 [ 1458.732329] ? wait_for_completion_io+0x270/0x270 [ 1458.733569] ? selinux_file_ioctl+0xb6/0x270 [ 1458.734961] ? tun_chr_compat_ioctl+0x30/0x30 [ 1458.736127] __x64_sys_ioctl+0x19a/0x210 [ 1458.737393] do_syscall_64+0x33/0x40 [ 1458.738435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.739781] RIP: 0033:0x7f1e7ddeeb19 [ 1458.740642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.741467] FAULT_INJECTION: forcing a failure. [ 1458.741467] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.745391] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.745417] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1458.745430] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1458.745442] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.745454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.745466] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1458.758330] CPU: 1 PID: 8944 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1458.759772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.761523] Call Trace: [ 1458.762093] dump_stack+0x107/0x167 [ 1458.762865] should_fail.cold+0x5/0xa [ 1458.763672] ? create_object.isra.0+0x3a/0xa30 [ 1458.764636] should_failslab+0x5/0x20 [ 1458.765439] kmem_cache_alloc+0x5b/0x310 [ 1458.766304] ? mark_held_locks+0x9e/0xe0 [ 1458.766889] FAULT_INJECTION: forcing a failure. [ 1458.766889] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.767170] create_object.isra.0+0x3a/0xa30 [ 1458.767188] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1458.767214] kmem_cache_alloc+0x159/0x310 [ 1458.767243] xas_alloc+0x336/0x440 [ 1458.767270] xas_create+0x34a/0x10d0 [ 1458.773969] ? kernel_text_address+0xf2/0x120 [ 1458.774922] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1458.776029] xas_store+0x8c/0x1c40 [ 1458.776796] __xa_store+0x164/0x2d0 [ 1458.777571] ? xa_delete_node+0x280/0x280 [ 1458.778464] ? trace_hardirqs_on+0x5b/0x180 [ 1458.779385] xa_store+0x31/0x50 [ 1458.780088] __io_uring_add_tctx_node+0x1cf/0x520 [ 1458.781106] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1458.782219] ? alloc_fd+0x2e7/0x670 [ 1458.782999] io_uring_setup+0x1fbb/0x2980 [ 1458.783883] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1458.784951] ? wait_for_completion_io+0x270/0x270 [ 1458.786013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.787119] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.788212] do_syscall_64+0x33/0x40 [ 1458.789008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.790101] RIP: 0033:0x7f8bd0804b19 [ 1458.790888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.794800] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1458.796402] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1458.797918] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1458.799443] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1458.800950] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1458.802488] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1458.804079] CPU: 0 PID: 8948 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1458.805574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.807353] Call Trace: [ 1458.808042] dump_stack+0x107/0x167 [ 1458.809026] should_fail.cold+0x5/0xa [ 1458.810043] ? create_object.isra.0+0x3a/0xa30 [ 1458.811265] should_failslab+0x5/0x20 [ 1458.812259] kmem_cache_alloc+0x5b/0x310 [ 1458.813342] ? mark_held_locks+0x9e/0xe0 [ 1458.814423] create_object.isra.0+0x3a/0xa30 [ 1458.815580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1458.816866] kmem_cache_alloc_trace+0x151/0x320 [ 1458.817914] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1458.818983] __list_lru_init+0x44d/0x890 [ 1458.819864] alloc_super+0x8b8/0xa90 [ 1458.820844] ? fput+0x20/0x20 [ 1458.821648] sget_fc+0x110/0x860 [ 1458.822414] ? set_anon_super+0xc0/0xc0 [ 1458.823318] ? rpc_kill_sb+0x1b0/0x1b0 [ 1458.824213] get_tree_keyed+0x55/0x210 [ 1458.825052] vfs_get_tree+0x8e/0x300 [ 1458.825867] __do_sys_fsconfig+0x8f5/0xc50 [ 1458.826776] ? fscontext_read+0x3b0/0x3b0 [ 1458.827645] ? fput_many+0x2f/0x1a0 [ 1458.828426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.829537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.830643] do_syscall_64+0x33/0x40 [ 1458.831437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.832515] RIP: 0033:0x7f5f86ebeb19 [ 1458.833298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.837193] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1458.838820] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1458.840333] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1458.841844] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.843379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.844903] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1458.856747] loop3: detected capacity change from 0 to 135266304 03:47:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) 03:47:01 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3f00, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1458.898451] loop3: detected capacity change from 0 to 135266304 [ 1458.979525] FAULT_INJECTION: forcing a failure. [ 1458.979525] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.982247] CPU: 0 PID: 8960 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1458.983703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.985461] Call Trace: [ 1458.986056] dump_stack+0x107/0x167 [ 1458.986843] should_fail.cold+0x5/0xa [ 1458.987669] ? xas_alloc+0x336/0x440 [ 1458.988469] should_failslab+0x5/0x20 [ 1458.989285] kmem_cache_alloc+0x5b/0x310 [ 1458.990357] xas_alloc+0x336/0x440 [ 1458.991124] xas_create+0x34a/0x10d0 [ 1458.992078] ? kernel_text_address+0xf2/0x120 [ 1458.993109] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1458.994466] xas_store+0x8c/0x1c40 [ 1458.995311] __xa_store+0x164/0x2d0 [ 1458.996245] ? xa_delete_node+0x280/0x280 [ 1458.997149] ? trace_hardirqs_on+0x5b/0x180 [ 1458.998296] xa_store+0x31/0x50 [ 1458.999029] __io_uring_add_tctx_node+0x1cf/0x520 [ 1459.000259] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1459.001469] ? alloc_fd+0x2e7/0x670 [ 1459.002433] io_uring_setup+0x1fbb/0x2980 [ 1459.003513] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1459.004685] ? wait_for_completion_io+0x270/0x270 [ 1459.005955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.007066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.008402] do_syscall_64+0x33/0x40 [ 1459.009198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.010304] RIP: 0033:0x7f8bd0804b19 [ 1459.011094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.014958] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1459.016544] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1459.018013] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1459.019476] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1459.020935] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1459.022410] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:47:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x938799bb, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:01 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 33) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:01 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:47:01 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe"}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:47:01 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x11000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1459.089795] loop3: detected capacity change from 0 to 135266304 [ 1459.093545] FAULT_INJECTION: forcing a failure. [ 1459.093545] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.096445] CPU: 0 PID: 8971 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1459.097922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.099665] Call Trace: [ 1459.100227] dump_stack+0x107/0x167 [ 1459.100992] should_fail.cold+0x5/0xa [ 1459.101796] ? create_object.isra.0+0x3a/0xa30 [ 1459.102760] should_failslab+0x5/0x20 [ 1459.103556] kmem_cache_alloc+0x5b/0x310 [ 1459.104414] create_object.isra.0+0x3a/0xa30 [ 1459.105337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.106420] kmem_cache_alloc+0x159/0x310 [ 1459.107290] __kernfs_new_node+0xd4/0x860 [ 1459.108174] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1459.109313] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1459.110319] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1459.111463] ? map_id_range_down+0x11b/0x340 [ 1459.112391] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 1459.113410] kernfs_new_node+0x18d/0x250 [ 1459.114277] __kernfs_create_file+0x51/0x350 [ 1459.115201] sysfs_add_file_mode_ns+0x221/0x560 [ 1459.116193] sysfs_create_file_ns+0x131/0x1d0 [ 1459.117132] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1459.118268] ? sysfs_add_file_mode_ns+0x560/0x560 [ 1459.119303] device_create_file+0xea/0x1d0 [ 1459.120172] device_add+0x547/0x1cb0 [ 1459.120952] ? lockdep_init_map_type+0x2c7/0x780 [ 1459.121969] ? devlink_add_symlinks+0x970/0x970 [ 1459.122966] netdev_register_kobject+0x17a/0x3b0 [ 1459.123962] register_netdevice+0xd73/0x1480 [ 1459.124904] ? netdev_change_features+0xb0/0xb0 [ 1459.125890] ? alloc_netdev_mqs+0xab1/0xe80 [ 1459.126804] __tun_chr_ioctl+0x20f9/0x3f40 [ 1459.127702] ? lock_downgrade+0x6d0/0x6d0 [ 1459.128579] ? tun_chr_poll+0x700/0x700 [ 1459.129423] ? clockevents_program_event+0x131/0x360 [ 1459.130518] ? selinux_file_ioctl+0xb6/0x270 [ 1459.131450] ? tun_chr_compat_ioctl+0x30/0x30 [ 1459.132402] __x64_sys_ioctl+0x19a/0x210 [ 1459.133264] do_syscall_64+0x33/0x40 [ 1459.134064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.135142] RIP: 0033:0x7f1e7ddeeb19 [ 1459.135925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.139803] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.141417] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1459.142929] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1459.144435] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.145929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.147419] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1459.190376] loop3: detected capacity change from 0 to 135266304 03:47:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 34) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:15 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x4000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x97ffffff, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:47:15 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 31) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) 03:47:15 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x12000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:15 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe"}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1472.703616] FAULT_INJECTION: forcing a failure. [ 1472.703616] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.706384] CPU: 0 PID: 8995 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1472.707640] loop3: detected capacity change from 0 to 135266304 [ 1472.707840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.707854] Call Trace: [ 1472.711534] dump_stack+0x107/0x167 [ 1472.712304] should_fail.cold+0x5/0xa [ 1472.713114] ? create_object.isra.0+0x3a/0xa30 [ 1472.714092] should_failslab+0x5/0x20 [ 1472.714896] kmem_cache_alloc+0x5b/0x310 [ 1472.715753] ? mark_held_locks+0x9e/0xe0 [ 1472.716621] create_object.isra.0+0x3a/0xa30 [ 1472.716641] FAULT_INJECTION: forcing a failure. [ 1472.716641] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.719975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.721089] kmem_cache_alloc+0x159/0x310 [ 1472.722011] xas_alloc+0x336/0x440 [ 1472.722792] xas_create+0x34a/0x10d0 [ 1472.723615] ? kernel_text_address+0xf2/0x120 [ 1472.724595] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1472.725739] xas_store+0x8c/0x1c40 [ 1472.726542] __xa_store+0x164/0x2d0 [ 1472.727339] ? xa_delete_node+0x280/0x280 [ 1472.728252] ? trace_hardirqs_on+0x5b/0x180 [ 1472.729204] xa_store+0x31/0x50 [ 1472.729933] __io_uring_add_tctx_node+0x1cf/0x520 [ 1472.730984] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1472.732124] ? alloc_fd+0x2e7/0x670 [ 1472.732926] io_uring_setup+0x1fbb/0x2980 [ 1472.733847] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1472.734949] ? wait_for_completion_io+0x270/0x270 [ 1472.736024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1472.737170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1472.738307] do_syscall_64+0x33/0x40 [ 1472.739120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.740235] RIP: 0033:0x7f8bd0804b19 [ 1472.741046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.745077] RSP: 002b:00007f8bcdd7a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1472.746742] RAX: ffffffffffffffda RBX: 00007f8bd0917f60 RCX: 00007f8bd0804b19 [ 1472.748296] RDX: 0000000020ffd000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1472.749866] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1472.751381] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1472.752918] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1472.754456] CPU: 1 PID: 9001 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1472.755980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.757839] Call Trace: [ 1472.758431] dump_stack+0x107/0x167 [ 1472.759269] should_fail.cold+0x5/0xa [ 1472.760140] ? __kernfs_new_node+0xd4/0x860 [ 1472.761120] should_failslab+0x5/0x20 [ 1472.761990] kmem_cache_alloc+0x5b/0x310 [ 1472.762914] __kernfs_new_node+0xd4/0x860 [ 1472.763842] ? perf_trace_lock+0xac/0x490 [ 1472.764806] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1472.765906] ? __lockdep_reset_lock+0x180/0x180 [ 1472.767042] ? lock_acquire+0x197/0x470 [ 1472.767944] ? find_held_lock+0x2c/0x110 [ 1472.768880] ? sysfs_do_create_link_sd+0x82/0x140 [ 1472.769985] kernfs_new_node+0x18d/0x250 [ 1472.770933] kernfs_create_link+0xcb/0x230 [ 1472.771905] sysfs_do_create_link_sd+0x90/0x140 [ 1472.772986] sysfs_create_link+0x5f/0xc0 [ 1472.773932] device_add+0x703/0x1cb0 [ 1472.774799] ? lockdep_init_map_type+0x2c7/0x780 [ 1472.775909] ? devlink_add_symlinks+0x970/0x970 [ 1472.777003] netdev_register_kobject+0x17a/0x3b0 [ 1472.778133] register_netdevice+0xd73/0x1480 [ 1472.778838] FAULT_INJECTION: forcing a failure. [ 1472.778838] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.779081] ? netdev_change_features+0xb0/0xb0 [ 1472.782466] ? alloc_netdev_mqs+0xab1/0xe80 [ 1472.783487] __tun_chr_ioctl+0x20f9/0x3f40 [ 1472.784497] ? lock_downgrade+0x6d0/0x6d0 [ 1472.785497] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1472.786654] ? tun_chr_poll+0x700/0x700 [ 1472.787603] ? wait_for_completion_io+0x270/0x270 [ 1472.788759] ? selinux_file_ioctl+0xb6/0x270 [ 1472.789817] ? tun_chr_compat_ioctl+0x30/0x30 [ 1472.790899] __x64_sys_ioctl+0x19a/0x210 [ 1472.791877] do_syscall_64+0x33/0x40 [ 1472.792699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.793896] RIP: 0033:0x7f1e7ddeeb19 [ 1472.794788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.799359] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.801219] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1472.802879] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1472.804551] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.806208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.808004] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1472.809852] CPU: 0 PID: 9002 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1472.811371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.813151] Call Trace: [ 1472.813722] dump_stack+0x107/0x167 [ 1472.814517] should_fail.cold+0x5/0xa [ 1472.815348] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1472.816442] should_failslab+0x5/0x20 [ 1472.817262] kmem_cache_alloc_trace+0x55/0x320 [ 1472.818254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.819355] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1472.820396] __list_lru_init+0x44d/0x890 [ 1472.821260] alloc_super+0x8b8/0xa90 [ 1472.822050] ? fput+0x20/0x20 [ 1472.822714] sget_fc+0x110/0x860 [ 1472.823435] ? set_anon_super+0xc0/0xc0 [ 1472.824280] ? rpc_kill_sb+0x1b0/0x1b0 [ 1472.825075] get_tree_keyed+0x55/0x210 [ 1472.825904] vfs_get_tree+0x8e/0x300 [ 1472.826678] __do_sys_fsconfig+0x8f5/0xc50 [ 1472.827552] ? fscontext_read+0x3b0/0x3b0 [ 1472.828419] ? fput_many+0x2f/0x1a0 [ 1472.829196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1472.830313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1472.831377] do_syscall_64+0x33/0x40 [ 1472.832167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.833225] RIP: 0033:0x7f5f86ebeb19 [ 1472.834013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.837869] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1472.839447] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1472.840945] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1472.842459] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.843955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.845452] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:47:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) [ 1472.886084] loop3: detected capacity change from 0 to 135266304 03:47:15 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe"}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:47:15 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfcff, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 35) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:15 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2e000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xbb998793, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1473.029480] FAULT_INJECTION: forcing a failure. [ 1473.029480] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.032423] CPU: 1 PID: 9017 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1473.033892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.035646] Call Trace: [ 1473.036225] dump_stack+0x107/0x167 [ 1473.036999] should_fail.cold+0x5/0xa [ 1473.037818] ? create_object.isra.0+0x3a/0xa30 [ 1473.038781] should_failslab+0x5/0x20 [ 1473.039581] kmem_cache_alloc+0x5b/0x310 [ 1473.040433] ? mutex_lock_io_nested+0xf30/0xf30 [ 1473.041413] create_object.isra.0+0x3a/0xa30 [ 1473.042349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1473.043426] kmem_cache_alloc+0x159/0x310 [ 1473.044309] __kernfs_new_node+0xd4/0x860 [ 1473.044549] FAULT_INJECTION: forcing a failure. [ 1473.044549] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.045165] ? perf_trace_lock+0xac/0x490 [ 1473.045184] ? kernfs_add_one+0x124/0x4d0 [ 1473.045203] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1473.045222] ? __lockdep_reset_lock+0x180/0x180 [ 1473.045251] ? lock_acquire+0x197/0x470 [ 1473.045277] ? find_held_lock+0x2c/0x110 [ 1473.045303] ? sysfs_do_create_link_sd+0x82/0x140 [ 1473.054042] kernfs_new_node+0x18d/0x250 [ 1473.054907] kernfs_create_link+0xcb/0x230 [ 1473.055810] sysfs_do_create_link_sd+0x90/0x140 [ 1473.056800] sysfs_create_link+0x5f/0xc0 [ 1473.057671] device_add+0x5e1/0x1cb0 [ 1473.058477] ? lockdep_init_map_type+0x2c7/0x780 [ 1473.059482] ? devlink_add_symlinks+0x970/0x970 [ 1473.060479] netdev_register_kobject+0x17a/0x3b0 [ 1473.061484] register_netdevice+0xd73/0x1480 [ 1473.062434] ? netdev_change_features+0xb0/0xb0 [ 1473.063415] ? alloc_netdev_mqs+0xab1/0xe80 [ 1473.064343] __tun_chr_ioctl+0x20f9/0x3f40 [ 1473.065238] ? lock_downgrade+0x6d0/0x6d0 [ 1473.066119] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.067138] ? tun_chr_poll+0x700/0x700 [ 1473.067971] ? wait_for_completion_io+0x270/0x270 [ 1473.069004] ? selinux_file_ioctl+0xb6/0x270 [ 1473.069940] ? tun_chr_compat_ioctl+0x30/0x30 [ 1473.070890] __x64_sys_ioctl+0x19a/0x210 [ 1473.071743] do_syscall_64+0x33/0x40 [ 1473.072531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.073598] RIP: 0033:0x7f1e7ddeeb19 [ 1473.074396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.078290] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1473.079901] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1473.081406] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1473.082925] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.084434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.085946] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1473.087580] CPU: 0 PID: 9020 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1473.088992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.090589] Call Trace: [ 1473.091110] dump_stack+0x107/0x167 [ 1473.091853] should_fail.cold+0x5/0xa [ 1473.092595] ? vm_area_dup+0x78/0x290 [ 1473.093384] should_failslab+0x5/0x20 [ 1473.094124] kmem_cache_alloc+0x5b/0x310 [ 1473.094907] vm_area_dup+0x78/0x290 [ 1473.095608] ? lock_release+0x680/0x680 [ 1473.096374] ? mark_lock+0xf5/0x2df0 [ 1473.097095] ? lock_chain_count+0x20/0x20 [ 1473.097949] ? mark_lock+0xf5/0x2df0 [ 1473.098672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1473.099724] ? lock_chain_count+0x20/0x20 [ 1473.100517] ? mark_lock+0xf5/0x2df0 [ 1473.101272] ? vm_area_alloc+0x110/0x110 [ 1473.102125] ? __lock_acquire+0x1657/0x5b00 [ 1473.102967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1473.103976] ? vmacache_find+0x55/0x2a0 [ 1473.104736] __split_vma+0xa8/0x4e0 [ 1473.105435] __do_munmap+0x365/0x1260 [ 1473.106175] ? arch_get_unmapped_area+0x450/0x450 [ 1473.107097] ? lock_release+0x680/0x680 [ 1473.107481] loop3: detected capacity change from 0 to 135266304 [ 1473.107861] mmap_region+0x7cc/0x1500 [ 1473.110027] do_mmap+0x868/0x1370 [ 1473.110705] vm_mmap_pgoff+0x198/0x1f0 [ 1473.111455] ? randomize_page+0xb0/0xb0 [ 1473.112276] ksys_mmap_pgoff+0x41c/0x560 [ 1473.113115] ? find_mergeable_anon_vma+0x250/0x250 [ 1473.114050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.115043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.116026] do_syscall_64+0x33/0x40 [ 1473.116731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.117708] RIP: 0033:0x7f8bd0804b62 [ 1473.118421] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1473.121941] RSP: 002b:00007f8bcdd7a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1473.123421] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bd0804b62 [ 1473.124742] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 1473.126088] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000 [ 1473.127426] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1473.128764] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:47:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) 03:47:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:47:29 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x0, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:47:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xc0ed0000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:29 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xff03, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:29 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2f000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:29 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 36) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:29 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 32) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1486.256502] loop3: detected capacity change from 0 to 135266304 [ 1486.267571] FAULT_INJECTION: forcing a failure. [ 1486.267571] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.269012] CPU: 0 PID: 9051 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1486.269795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.270762] Call Trace: [ 1486.271073] dump_stack+0x107/0x167 [ 1486.271494] should_fail.cold+0x5/0xa [ 1486.271935] ? create_object.isra.0+0x3a/0xa30 [ 1486.272458] should_failslab+0x5/0x20 [ 1486.272905] kmem_cache_alloc+0x5b/0x310 [ 1486.273383] create_object.isra.0+0x3a/0xa30 [ 1486.273891] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.274377] FAULT_INJECTION: forcing a failure. [ 1486.274377] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.274484] kmem_cache_alloc_trace+0x151/0x320 [ 1486.274509] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1486.277980] __list_lru_init+0x44d/0x890 [ 1486.278449] alloc_super+0x8b8/0xa90 [ 1486.278884] ? fput+0x20/0x20 [ 1486.279241] sget_fc+0x110/0x860 [ 1486.279638] ? set_anon_super+0xc0/0xc0 [ 1486.280089] ? rpc_kill_sb+0x1b0/0x1b0 [ 1486.280538] get_tree_keyed+0x55/0x210 [ 1486.280976] vfs_get_tree+0x8e/0x300 [ 1486.281413] __do_sys_fsconfig+0x8f5/0xc50 [ 1486.281892] ? fscontext_read+0x3b0/0x3b0 [ 1486.282393] ? fput_many+0x2f/0x1a0 [ 1486.282820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.283440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.284043] do_syscall_64+0x33/0x40 [ 1486.284486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.285088] RIP: 0033:0x7f5f86ebeb19 [ 1486.285531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.287701] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1486.288604] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1486.289439] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1486.290292] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.291137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.291973] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 [ 1486.292842] CPU: 1 PID: 9052 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1486.294406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.296249] Call Trace: [ 1486.296282] FAULT_INJECTION: forcing a failure. [ 1486.296282] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.296837] dump_stack+0x107/0x167 [ 1486.298943] should_fail.cold+0x5/0xa [ 1486.299797] ? __kernfs_new_node+0xd4/0x860 [ 1486.300757] should_failslab+0x5/0x20 [ 1486.301607] kmem_cache_alloc+0x5b/0x310 [ 1486.302541] __kernfs_new_node+0xd4/0x860 [ 1486.303462] ? kernfs_activate+0x2c/0x1d0 [ 1486.304388] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1486.305441] ? perf_trace_lock+0xac/0x490 [ 1486.306395] ? __lockdep_reset_lock+0x180/0x180 [ 1486.307437] ? find_held_lock+0x2c/0x110 [ 1486.308346] kernfs_new_node+0x18d/0x250 [ 1486.309260] __kernfs_create_file+0x51/0x350 [ 1486.310265] sysfs_add_file_mode_ns+0x221/0x560 [ 1486.311320] internal_create_group+0x324/0xb30 [ 1486.312340] ? sysfs_remove_group+0x170/0x170 [ 1486.313335] ? kernfs_add_one+0x124/0x4d0 [ 1486.314279] ? kernfs_create_link+0x1b7/0x230 [ 1486.315294] internal_create_groups.part.0+0x90/0x140 [ 1486.316463] sysfs_create_groups+0x25/0x50 [ 1486.317423] device_add+0x7a9/0x1cb0 [ 1486.318281] ? lockdep_init_map_type+0x2c7/0x780 [ 1486.319332] ? devlink_add_symlinks+0x970/0x970 [ 1486.320392] netdev_register_kobject+0x17a/0x3b0 [ 1486.321511] register_netdevice+0xd73/0x1480 [ 1486.322630] ? netdev_change_features+0xb0/0xb0 [ 1486.323672] ? alloc_netdev_mqs+0xab1/0xe80 [ 1486.324632] __tun_chr_ioctl+0x20f9/0x3f40 [ 1486.325576] ? lock_downgrade+0x6d0/0x6d0 [ 1486.326529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1486.327594] ? tun_chr_poll+0x700/0x700 [ 1486.328476] ? wait_for_completion_io+0x270/0x270 [ 1486.329557] ? selinux_file_ioctl+0xb6/0x270 [ 1486.330554] ? tun_chr_compat_ioctl+0x30/0x30 [ 1486.331566] __x64_sys_ioctl+0x19a/0x210 [ 1486.332477] do_syscall_64+0x33/0x40 [ 1486.333306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.334454] RIP: 0033:0x7f1e7ddeeb19 [ 1486.335292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.339923] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.341955] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1486.343544] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1486.345104] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.346694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.348285] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1486.349890] CPU: 0 PID: 9047 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1486.350758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.351755] Call Trace: [ 1486.352082] dump_stack+0x107/0x167 [ 1486.352527] should_fail.cold+0x5/0xa [ 1486.352978] ? create_object.isra.0+0x3a/0xa30 [ 1486.353521] should_failslab+0x5/0x20 [ 1486.353979] kmem_cache_alloc+0x5b/0x310 [ 1486.354472] create_object.isra.0+0x3a/0xa30 [ 1486.354989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.355591] kmem_cache_alloc+0x159/0x310 [ 1486.356089] vm_area_dup+0x78/0x290 [ 1486.356518] ? mark_lock+0xf5/0x2df0 [ 1486.356959] ? mark_lock+0xf5/0x2df0 [ 1486.357398] ? lock_chain_count+0x20/0x20 [ 1486.357878] ? __lockdep_reset_lock+0x180/0x180 [ 1486.358432] ? lock_chain_count+0x20/0x20 [ 1486.358924] ? mark_lock+0xf5/0x2df0 [ 1486.359360] ? find_held_lock+0x2c/0x110 [ 1486.359843] ? mark_lock+0xf5/0x2df0 [ 1486.360279] ? vm_area_alloc+0x110/0x110 [ 1486.360752] ? mark_lock+0xf5/0x2df0 [ 1486.361188] ? lock_chain_count+0x20/0x20 [ 1486.361679] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1486.362308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.362909] ? vmacache_find+0x55/0x2a0 [ 1486.363359] __split_vma+0xa8/0x4e0 [ 1486.363774] __do_munmap+0x365/0x1260 [ 1486.364208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.364802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1486.365414] mmap_region+0x7cc/0x1500 [ 1486.365851] do_mmap+0x868/0x1370 [ 1486.366257] vm_mmap_pgoff+0x198/0x1f0 [ 1486.366698] ? randomize_page+0xb0/0xb0 [ 1486.367154] ksys_mmap_pgoff+0x41c/0x560 [ 1486.367621] ? find_mergeable_anon_vma+0x250/0x250 [ 1486.368178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.368780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.369359] do_syscall_64+0x33/0x40 [ 1486.369780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.370378] RIP: 0033:0x7f8bd0804b62 [ 1486.370807] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1486.372911] RSP: 002b:00007f8bcdd7a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1486.373774] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bd0804b62 [ 1486.374585] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 1486.375391] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000 [ 1486.376200] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1486.377027] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1486.413183] loop3: detected capacity change from 0 to 135266304 03:47:29 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x0, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:47:29 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3f000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:29 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfffc, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xef2f0000, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:47:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) 03:47:29 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x40000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1486.498745] loop3: detected capacity change from 0 to 135266304 03:47:29 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 37) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1486.530822] FAULT_INJECTION: forcing a failure. [ 1486.530822] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.533711] CPU: 1 PID: 9074 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1486.535209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.536976] Call Trace: [ 1486.537560] dump_stack+0x107/0x167 [ 1486.538359] should_fail.cold+0x5/0xa [ 1486.539174] ? create_object.isra.0+0x3a/0xa30 [ 1486.540169] should_failslab+0x5/0x20 [ 1486.540993] kmem_cache_alloc+0x5b/0x310 [ 1486.541939] create_object.isra.0+0x3a/0xa30 [ 1486.543111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.544467] __kmalloc_track_caller+0x177/0x370 [ 1486.545728] ? kstrdup_const+0x53/0x80 [ 1486.546743] kstrdup+0x36/0x70 [ 1486.547441] kstrdup_const+0x53/0x80 [ 1486.548252] __kernfs_new_node+0x9d/0x860 [ 1486.549137] ? perf_trace_lock+0xac/0x490 [ 1486.550031] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1486.551050] ? __lockdep_reset_lock+0x180/0x180 [ 1486.552045] ? lock_acquire+0x197/0x470 [ 1486.552908] ? find_held_lock+0x2c/0x110 [ 1486.553826] ? sysfs_do_create_link_sd+0x82/0x140 [ 1486.554892] kernfs_new_node+0x18d/0x250 [ 1486.555790] kernfs_create_link+0xcb/0x230 [ 1486.556715] sysfs_do_create_link_sd+0x90/0x140 [ 1486.557735] sysfs_create_link+0x5f/0xc0 [ 1486.558635] device_add+0x703/0x1cb0 [ 1486.559440] ? lockdep_init_map_type+0x2c7/0x780 [ 1486.560455] ? devlink_add_symlinks+0x970/0x970 [ 1486.561479] netdev_register_kobject+0x17a/0x3b0 [ 1486.562516] register_netdevice+0xd73/0x1480 [ 1486.563480] ? netdev_change_features+0xb0/0xb0 [ 1486.564482] ? alloc_netdev_mqs+0xab1/0xe80 [ 1486.565434] __tun_chr_ioctl+0x20f9/0x3f40 [ 1486.566371] ? lock_downgrade+0x6d0/0x6d0 [ 1486.567270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1486.568405] ? tun_chr_poll+0x700/0x700 [ 1486.569266] ? wait_for_completion_io+0x270/0x270 [ 1486.570344] ? selinux_file_ioctl+0xb6/0x270 [ 1486.571298] ? tun_chr_compat_ioctl+0x30/0x30 [ 1486.572266] __x64_sys_ioctl+0x19a/0x210 [ 1486.573150] do_syscall_64+0x33/0x40 [ 1486.573963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.575078] RIP: 0033:0x7f1e7ddeeb19 [ 1486.575878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.579867] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.581512] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1486.583045] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1486.584600] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.586146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.587691] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:47:29 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x80000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:29 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2321202e2f66696c65302020667363727970743a20d91886667363727970743a20667363727970743a2020667363727970703a0a6885342b7effaf08001e54f9a3124d8f8180d811ff50591c79d263aa25a302ac12e4c4dede7e87b50b1bb2c3707db672c8ac9991cbcd5d6b84641b9564dbf3f655fa779093082179e4f840a8963f917b0cde2c40000000000000000c335b9fb486e156e65a34cf245148b4afbe23371c6df505ba6e73b534e39a1ecdd7299b59be13385ad305000000d74576eae9437bf598b7c13d68ff070000000000007886d57a63417079cb735d5f19f8eac11b10920838c0999df4233a722a72b6b57428f0be30414a369e2438051379252701ac4b8e7242c84e257241d6fad28aaec60be58a7b5891b53cc207879f4d067a9bfae2af95fc4500f0e99d57498a669e94283e7523744e3df3c657198408a28f74dcdf19ee81e5c3afdfaa25547256937efba9f6cae1ea2107fc34c1a93131c71c2e7d8cfec2d61306516cb8ed89"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x0, 0x89, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1486.606395] loop3: detected capacity change from 0 to 135266304 03:47:29 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1486.698707] FAULT_INJECTION: forcing a failure. [ 1486.698707] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.701453] CPU: 1 PID: 9087 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1486.702936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.704708] Call Trace: [ 1486.705295] dump_stack+0x107/0x167 [ 1486.706094] should_fail.cold+0x5/0xa [ 1486.706929] ? vm_area_alloc+0x1c/0x110 [ 1486.707793] should_failslab+0x5/0x20 [ 1486.708600] kmem_cache_alloc+0x5b/0x310 [ 1486.709492] vm_area_alloc+0x1c/0x110 [ 1486.710334] mmap_region+0x982/0x1500 [ 1486.711290] do_mmap+0x868/0x1370 [ 1486.712155] vm_mmap_pgoff+0x198/0x1f0 [ 1486.713173] ? randomize_page+0xb0/0xb0 [ 1486.714248] ksys_mmap_pgoff+0x41c/0x560 [ 1486.715291] ? find_mergeable_anon_vma+0x250/0x250 [ 1486.716593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.717974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.719325] do_syscall_64+0x33/0x40 [ 1486.720308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.721658] RIP: 0033:0x7f8bd0804b62 [ 1486.722643] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1486.727380] RSP: 002b:00007f8bcdd7a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1486.729373] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bd0804b62 [ 1486.731222] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 1486.733061] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000 [ 1486.734895] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1486.736739] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:47:45 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 33) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1502.604715] FAULT_INJECTION: forcing a failure. [ 1502.604715] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.607637] CPU: 1 PID: 9097 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1502.609188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.611070] Call Trace: [ 1502.611670] dump_stack+0x107/0x167 [ 1502.612499] should_fail.cold+0x5/0xa [ 1502.613357] ? __kernfs_new_node+0xd4/0x860 [ 1502.614318] should_failslab+0x5/0x20 [ 1502.615178] kmem_cache_alloc+0x5b/0x310 [ 1502.616106] __kernfs_new_node+0xd4/0x860 [ 1502.617037] ? perf_trace_lock+0xac/0x490 [ 1502.617970] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1502.619048] ? __lockdep_reset_lock+0x180/0x180 [ 1502.620101] ? lock_acquire+0x197/0x470 [ 1502.620993] ? find_held_lock+0x2c/0x110 [ 1502.621915] ? sysfs_do_create_link_sd+0x82/0x140 [ 1502.623022] kernfs_new_node+0x18d/0x250 [ 1502.623945] kernfs_create_link+0xcb/0x230 [ 1502.624904] sysfs_do_create_link_sd+0x90/0x140 [ 1502.625955] sysfs_create_link+0x5f/0xc0 [ 1502.626899] device_add+0x703/0x1cb0 [ 1502.627751] ? lockdep_init_map_type+0x2c7/0x780 [ 1502.628848] ? devlink_add_symlinks+0x970/0x970 [ 1502.629922] netdev_register_kobject+0x17a/0x3b0 [ 1502.631035] register_netdevice+0xd73/0x1480 [ 1502.632036] ? netdev_change_features+0xb0/0xb0 [ 1502.633087] ? alloc_netdev_mqs+0xab1/0xe80 [ 1502.634077] __tun_chr_ioctl+0x20f9/0x3f40 [ 1502.635038] ? lock_downgrade+0x6d0/0x6d0 03:47:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0, &(0x7f0000000540), 0x8000, &(0x7f00000005c0)) 03:47:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:47:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 38) [ 1502.636204] ? __mutex_unlock_slowpath+0xe1/0x600 request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:45 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x0, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:47:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) 03:47:45 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x1000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:45 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x8cffffff, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1502.637523] ? tun_chr_poll+0x700/0x700 [ 1502.638474] ? wait_for_completion_io+0x270/0x270 [ 1502.639570] ? selinux_file_ioctl+0xb6/0x270 [ 1502.640563] ? tun_chr_compat_ioctl+0x30/0x30 [ 1502.641584] __x64_sys_ioctl+0x19a/0x210 [ 1502.642523] do_syscall_64+0x33/0x40 [ 1502.643365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1502.644518] RIP: 0033:0x7f1e7ddeeb19 [ 1502.645359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.649534] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.651265] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1502.652880] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1502.654509] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1502.656112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1502.657718] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 [ 1502.694376] FAULT_INJECTION: forcing a failure. [ 1502.694376] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.697371] CPU: 1 PID: 9105 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1502.698958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.700765] Call Trace: [ 1502.701386] dump_stack+0x107/0x167 [ 1502.702220] should_fail.cold+0x5/0xa [ 1502.703046] ? create_object.isra.0+0x3a/0xa30 [ 1502.704035] should_failslab+0x5/0x20 [ 1502.704916] kmem_cache_alloc+0x5b/0x310 [ 1502.705821] create_object.isra.0+0x3a/0xa30 [ 1502.706807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1502.707976] kmem_cache_alloc+0x159/0x310 [ 1502.708921] vm_area_alloc+0x1c/0x110 [ 1502.709792] mmap_region+0x982/0x1500 [ 1502.710629] do_mmap+0x868/0x1370 [ 1502.711446] vm_mmap_pgoff+0x198/0x1f0 [ 1502.712338] ? randomize_page+0xb0/0xb0 [ 1502.713215] ksys_mmap_pgoff+0x41c/0x560 [ 1502.714142] ? find_mergeable_anon_vma+0x250/0x250 [ 1502.715285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1502.716503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1502.717617] do_syscall_64+0x33/0x40 [ 1502.718486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1502.719656] RIP: 0033:0x7f8bd0804b62 [ 1502.720443] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1502.724619] RSP: 002b:00007f8bcdd7a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1502.726374] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bd0804b62 [ 1502.727955] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 1502.729549] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000 [ 1502.731180] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1502.732754] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 03:47:45 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x2000000, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) [ 1502.738559] loop3: detected capacity change from 0 to 135266304 [ 1502.759770] FAULT_INJECTION: forcing a failure. [ 1502.759770] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.762569] CPU: 0 PID: 9112 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 1502.763801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.765296] Call Trace: [ 1502.765762] dump_stack+0x107/0x167 [ 1502.766437] should_fail.cold+0x5/0xa [ 1502.767101] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1502.768004] should_failslab+0x5/0x20 [ 1502.768697] kmem_cache_alloc_trace+0x55/0x320 [ 1502.769526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1502.770453] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1502.771358] __list_lru_init+0x44d/0x890 [ 1502.772061] alloc_super+0x8b8/0xa90 [ 1502.772732] ? fput+0x20/0x20 [ 1502.773311] sget_fc+0x110/0x860 [ 1502.773909] ? set_anon_super+0xc0/0xc0 [ 1502.774644] ? rpc_kill_sb+0x1b0/0x1b0 [ 1502.775352] get_tree_keyed+0x55/0x210 [ 1502.776049] vfs_get_tree+0x8e/0x300 [ 1502.776722] __do_sys_fsconfig+0x8f5/0xc50 [ 1502.777501] ? fscontext_read+0x3b0/0x3b0 [ 1502.778293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1502.779244] do_syscall_64+0x33/0x40 [ 1502.779948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1502.780868] RIP: 0033:0x7f5f86ebeb19 [ 1502.781528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.784714] RSP: 002b:00007f5f84434188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1502.786146] RAX: ffffffffffffffda RBX: 00007f5f86fd1f60 RCX: 00007f5f86ebeb19 [ 1502.787449] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1502.788699] RBP: 00007f5f844341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1502.789951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1502.791217] R13: 00007ffc230e9a0f R14: 00007f5f84434300 R15: 0000000000022000 03:47:45 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) (fail_nth: 39) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-%\x00', r1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xffffffffffffffa3, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000005000018001700faca6f48a7bfb9393a230699fe0600cc0357b829b55ec0f29a3fca41539856f2deb0966b0fa35f2eea94c4b3c95d71eafe8add6b52dd02f0d54a6bbf2ff19362cb0af9363fa25ce140434b6b3355e5371de4b88a882fb04ba3e623f7cce12f194045e90bcf5030382fbc337f22114119f3ab0e2f3a37f62eccd912b7ede7d4af218bc0fc7efe9ba1acf659429d875ffc530e5dd49c4057ca6c33bfed43b2d369c6bfc465a8e9522f9c25d585908e45d0106d876624289e9b565651e2cdc5a3bd28909eec8c0a3ec0256ef1192c621083a0e7fb748f60fddbbf6ee671988ca52cbf3a0591d29f", @ANYRES32, @ANYBLOB="00000000a5d400002e19f6cc2f66696c6304d02c97420a68960743067aefd385b47dcfcf866324b44063cdd5d9803308cd06000000f9bd296d35f900000000000000000000000000000000000000530e36ee9ce7b16f48ee08009491a173a74b560632"]) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r9, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 1502.843450] loop3: detected capacity change from 0 to 135266304 [ 1502.849582] FAULT_INJECTION: forcing a failure. [ 1502.849582] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.851665] CPU: 0 PID: 9120 Comm: syz-executor.0 Not tainted 5.10.257 #1 [ 1502.852841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.854405] Call Trace: [ 1502.854861] dump_stack+0x107/0x167 [ 1502.855489] should_fail.cold+0x5/0xa [ 1502.856142] ? create_object.isra.0+0x3a/0xa30 [ 1502.856909] should_failslab+0x5/0x20 [ 1502.857554] kmem_cache_alloc+0x5b/0x310 [ 1502.858270] ? __lockdep_reset_lock+0x180/0x180 [ 1502.859072] create_object.isra.0+0x3a/0xa30 [ 1502.859815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1502.860690] kmem_cache_alloc+0x159/0x310 [ 1502.861411] __kernfs_new_node+0xd4/0x860 [ 1502.862122] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1502.862927] ? perf_trace_lock+0xac/0x490 [ 1502.863635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1502.864476] ? __lockdep_reset_lock+0x180/0x180 [ 1502.865272] ? wait_for_completion_io+0x270/0x270 [ 1502.866110] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1502.866999] kernfs_new_node+0x18d/0x250 [ 1502.867672] __kernfs_create_file+0x51/0x350 [ 1502.868414] sysfs_add_file_mode_ns+0x221/0x560 [ 1502.869191] internal_create_group+0x324/0xb30 [ 1502.869961] ? sysfs_remove_group+0x170/0x170 [ 1502.870729] ? kernfs_add_one+0x124/0x4d0 [ 1502.871402] ? kernfs_create_link+0x1b7/0x230 [ 1502.872148] internal_create_groups.part.0+0x90/0x140 [ 1502.873024] sysfs_create_groups+0x25/0x50 [ 1502.873741] device_add+0x7a9/0x1cb0 [ 1502.874364] ? lockdep_init_map_type+0x2c7/0x780 [ 1502.875132] ? devlink_add_symlinks+0x970/0x970 [ 1502.875925] netdev_register_kobject+0x17a/0x3b0 [ 1502.876710] register_netdevice+0xd73/0x1480 [ 1502.877453] ? netdev_change_features+0xb0/0xb0 [ 1502.878233] ? alloc_netdev_mqs+0xab1/0xe80 [ 1502.878934] __tun_chr_ioctl+0x20f9/0x3f40 [ 1502.879655] ? lock_downgrade+0x6d0/0x6d0 [ 1502.880353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1502.881143] ? tun_chr_poll+0x700/0x700 [ 1502.881799] ? wait_for_completion_io+0x270/0x270 [ 1502.882625] ? selinux_file_ioctl+0xb6/0x270 [ 1502.883338] ? tun_chr_compat_ioctl+0x30/0x30 [ 1502.884083] __x64_sys_ioctl+0x19a/0x210 [ 1502.884774] do_syscall_64+0x33/0x40 [ 1502.885395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1502.886271] RIP: 0033:0x7f1e7ddeeb19 [ 1502.886876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.889964] RSP: 002b:00007f1e7b364188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.891213] RAX: ffffffffffffffda RBX: 00007f1e7df01f60 RCX: 00007f1e7ddeeb19 [ 1502.892387] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1502.893564] RBP: 00007f1e7b3641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1502.894710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1502.895885] R13: 00007fffc47573af R14: 00007f1e7b364300 R15: 0000000000022000 03:47:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xedb8, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) 03:47:45 executing program 6: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xfcffffff, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r2, 0x7bf5, 0xa1ac, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @private1, 0x8000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 03:47:45 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa5) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1}, 0x8) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "0926e9e63f23ae4329d18c2f868d7c7e8efb1767e0be4c0fb9ab7439ef73810b8b10837d6d658c9156d4e69a0d1d97d8df40a147a538e1959b929f97298c69fe", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8000, 0x0, 0xfffffffffffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x804c0, 0x1, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffff0001) syz_io_uring_setup(0x5b5b, &(0x7f0000000400)={0x0, 0x82d9, 0x4, 0x3, 0x348}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1503.024531] FAULT_INJECTION: forcing a failure. [ 1503.024531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1503.027331] CPU: 1 PID: 9130 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1503.028769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.030525] Call Trace: [ 1503.031101] dump_stack+0x107/0x167 [ 1503.031881] should_fail.cold+0x5/0xa [ 1503.032688] __alloc_pages_nodemask+0x182/0x600 [ 1503.033674] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1503.034952] ? walk_mem_res+0x170/0x170 [ 1503.035798] alloc_pages_current+0x187/0x280 [ 1503.036726] pte_alloc_one+0x16/0x1a0 [ 1503.037533] __pte_alloc+0x1d/0x330 [ 1503.038310] remap_pfn_range_internal+0x9a3/0xf60 [ 1503.039312] ? lookup_memtype+0x5b/0x200 [ 1503.040182] ? apply_to_existing_page_range+0x40/0x40 [ 1503.041280] remap_pfn_range+0xcd/0x160 [ 1503.042127] ? remap_pfn_range_notrack+0x70/0x70 [ 1503.043111] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1503.044190] io_uring_mmap+0x398/0x530 [ 1503.045015] mmap_file+0x5e/0xe0 [ 1503.045729] mmap_region+0xc4d/0x1500 [ 1503.046560] do_mmap+0x868/0x1370 [ 1503.047295] vm_mmap_pgoff+0x198/0x1f0 [ 1503.048115] ? randomize_page+0xb0/0xb0 [ 1503.048958] ksys_mmap_pgoff+0x41c/0x560 [ 1503.049823] ? find_mergeable_anon_vma+0x250/0x250 [ 1503.050881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.052001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.053094] do_syscall_64+0x33/0x40 [ 1503.053870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1503.054943] RIP: 0033:0x7f8bd0804b62 [ 1503.055716] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1503.059580] RSP: 002b:00007f8bcdd7a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1503.061178] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bd0804b62 [ 1503.062684] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 1503.064180] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000 [ 1503.065686] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1503.067214] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1503.107917] ------------[ cut here ]------------ [ 1503.109326] WARNING: CPU: 1 PID: 9130 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1503.111403] Modules linked in: [ 1503.112302] CPU: 1 PID: 9130 Comm: syz-executor.2 Not tainted 5.10.257 #1 [ 1503.113870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.115791] RIP: 0010:get_pat_info+0x216/0x270 [ 1503.116957] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 25 ae 5a 00 e9 [ 1503.121051] RSP: 0018:ffff888046c8f890 EFLAGS: 00010212 [ 1503.124618] RAX: 000000000001367d RBX: ffff888043d4b700 RCX: ffffc900009e8000 [ 1503.128880] RDX: 0000000000040000 RSI: ffffffff81125456 RDI: 0000000000000007 [ 1503.130650] RBP: ffff888046c8f948 R08: 0000000000000000 R09: ffff888046c8f818 [ 1503.132705] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1503.134617] R13: 1ffff11008d91f12 R14: 0000000000000000 R15: ffff888043d4b750 [ 1503.136463] FS: 00007f8bcdd7a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1503.138622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1503.139985] CR2: 00005645b078ffa0 CR3: 000000003be92000 CR4: 0000000000350ee0 [ 1503.141982] Call Trace: [ 1503.142828] ? pgprot_writethrough+0xc0/0xc0 [ 1503.144046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.145521] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1503.146990] ? trace_hardirqs_on+0x5b/0x180 [ 1503.148292] untrack_pfn+0xdc/0x240 [ 1503.149394] ? track_pfn_insert+0x150/0x150 [ 1503.150554] ? uprobe_munmap+0x95/0x560 [ 1503.151674] ? unmap_single_vma+0xdb/0x300 [ 1503.152844] unmap_single_vma+0x1bc/0x300 [ 1503.153977] zap_page_range_single+0x2ce/0x450 [ 1503.155314] ? unmap_single_vma+0x300/0x300 [ 1503.156429] ? remap_pfn_range_internal+0xc56/0xf60 [ 1503.157780] ? lookup_memtype+0x5b/0x200 [ 1503.158966] ? apply_to_existing_page_range+0x40/0x40 [ 1503.160408] remap_pfn_range+0x139/0x160 [ 1503.161510] ? remap_pfn_range_notrack+0x70/0x70 [ 1503.162875] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1503.164356] io_uring_mmap+0x398/0x530 [ 1503.165463] mmap_file+0x5e/0xe0 [ 1503.166453] mmap_region+0xc4d/0x1500 [ 1503.167560] do_mmap+0x868/0x1370 [ 1503.168597] vm_mmap_pgoff+0x198/0x1f0 [ 1503.169727] ? randomize_page+0xb0/0xb0 [ 1503.170899] ksys_mmap_pgoff+0x41c/0x560 [ 1503.172053] ? find_mergeable_anon_vma+0x250/0x250 [ 1503.173387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.174699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.176303] do_syscall_64+0x33/0x40 [ 1503.177354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1503.178723] RIP: 0033:0x7f8bd0804b62 [ 1503.179853] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1503.184081] RSP: 002b:00007f8bcdd7a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1503.186241] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bd0804b62 [ 1503.187989] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 1503.189790] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000 [ 1503.191502] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1503.193460] R13: 0000000020ffd000 R14: 0000000020000200 R15: 0000000020ffc000 [ 1503.195149] irq event stamp: 2635 [ 1503.196077] hardirqs last enabled at (2661): [] console_unlock+0x92d/0xb40 [ 1503.198286] hardirqs last disabled at (2700): [] sysvec_apic_timer_interrupt+0xb/0xa0 [ 1503.200596] softirqs last enabled at (1076): [] asm_call_irq_on_stack+0x12/0x20 [ 1503.202760] softirqs last disabled at (1057): [] asm_call_irq_on_stack+0x12/0x20 [ 1503.204774] ---[ end trace 7e009c040b022d23 ]--- VM DIAGNOSIS: 03:47:46 Registers: info registers vcpu 0 RAX=1ffff11002a70f9a RBX=dffffc0000000000 RCX=ffffffff814d570b RDX=0000000000000001 RSI=ffffffff814d5695 RDI=ffffc90000693099 RBP=ffff888015387cd0 RSP=ffff888015387c08 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000101 R11=0000000000000001 R12=ffff888015387cd0 R13=ffffed1002a70f9c R14=0000000000000101 R15=ffffc90000693098 RIP=ffffffff814d56ca RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe6e8f3e900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe6e8391550 CR3=000000000dbc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=7beaf3cdc715339b00000000005dc328 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=7e12e6673130f2fb00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822e8e3c RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff888046c8f250 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3f495 R14=fffffbfff0f3f44a R15=dffffc0000000000 RIP=ffffffff822e8e90 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8bcdd7a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005645b078ffa0 CR3=000000003be92000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007f8bd08eb7c800007f8bd08eb7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000