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", 0x1000}, {&(0x7f0000004e00)="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", 0x1000}, {&(0x7f0000005e00)="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", 0x1000}, {&(0x7f00000018c0)="1a54e14a5a9c1646b2725ef3ac4e029fbee8bbcdee61ec786cb2234bcfa5", 0x1e}, {&(0x7f0000001900)="7901ca85c7bd61aef3346fc1d574d1a99b9a71238f3fa3", 0x17}, {&(0x7f0000001940)="07ac0e27796c1190c9e64989b8b5cfce954b8765544579e12ba458d31fb304ab4d300f7ada776befbef3b65387ca3dec6e968ae1603d8d59e28628d8d736cd20751805", 0x43}, {&(0x7f00000019c0)="d25ce177930c6812ba23f0b261d2ce928e2fd0e732e14570b86e7cbc52f8dc5c6eaee53d7c235cdfa5de966a36a44ff47a1a5c48e25bf080689730998828ffdc1dd3b7025dcd4aba6a0481b01d5927e16e76ea877e201d5caddd69996e54f195561f7e5641aadd0dc7ec6a8eeb4d88f12f95598059cb0cda781b744056a6799875b05c067da9556d3e5f0f114839f851a42ce51b5504821ae7ed8ac57fb9eb43a3de3c5d1a9cf582223ccc40f4bd3c629ab8e464", 0xb4}], 0x9, &(0x7f0000007200)=[@hopopts={{0x190, 0x29, 0x36, {0x3b, 0x2e, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x100}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x6, 0xd1, "60f294cb881124dd609ab4484b11eb68c1bfd8f3d0dbc8c434a43f7d170d501c158f09767a3c69cbaab102ebb2b1d0a84324182ffb518654fdecb776a93f13e9e423c3fee037c627874df62d4f9bd42e62ae566b07e784d6bd8aae06eff6c6ce024e594a8e1a54d469c87f8eef17d040701aadb0ee585a9b8dc51ed0be52eab516fd7d612a95409470963c22df85edc129a34e3ea2e8e24a6a0d62ff344986b1883fae1a359295430ed4326ac48a3dfe255afab1208ff723703f4a6dfa61a901f7a7fa1c9e4f3a78aeed430e0e7a0e5a8a"}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x0, 0x4c, "24e00b15a9ce7ae178c72ea2269601b6a5ae1e82a4b2b2aadfc0137a93c7aba3c544865cdd2b38da0254854ecabf9bc40c41966b46f9dfab4ffba0c1b7c40fb39165fb24e754ca8eb96bfdde"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x96, 0x8000, [0x6, 0x2, 0xffff]}}]}}}, @dstopts_2292={{0x188, 0x29, 0x4, {0x3b, 0x2d, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x2}, @generic={0x9, 0x14f, "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"}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x80, 0x0, [@private0]}}}, @rthdr={{0x98, 0x29, 0x39, {0xd3, 0x10, 0x1, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @loopback, @local, @remote, @private1]}}}, @dstopts={{0x40, 0x29, 0x37, {0x1, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x80, 0x3, "124107"}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7f}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xaa}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x46}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x21, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x4, [0xffffffff, 0x2, 0x20, 0x4, 0x4]}}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @generic={0xfc}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x4d0}}], 0x7, 0x48040) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 14:44:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f00000000c0)="2b84a296ae431a661433168faa426cff18bd9390984f31ccbc346f499688a0ee30def289dc53f8d5582b463641978b15a0092ffa763b5a0d4a92597df680dbbdd00d25f3698e6d3783fda343d6fa8f8edce95333016d9aa035cebc01", 0x5c, 0x2121, 0x1}, 0x10000) 14:44:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) openat(r3, &(0x7f00000000c0)='./file1/file0\x00', 0x8000, 0x1c2) 14:44:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:01 executing program 4: ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000200000ac0300000000000000000000000000003447b0d89483dda450af4947cb9bfc"], 0x577) dup2(r1, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r0, r3, 0x0, 0x100000001) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xee01}}, './file0\x00'}) r6 = openat(r5, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r6, r7, 0x0, 0x100000001) 14:44:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r0, @ANYBLOB="011d0027bd00fbdbdf25170000002800018014000280080003000100000008000300080000000d0001007564703a73797a3100000000b00004801400078008000300ffffffff08000300120000000a00010073797a30000000000900010073797a31000000003400078008000300080000000800040005000000080001001300000008000400060000000800040506000000080003000200000034000780080004000080000008000400f9ffffbf0800010019000000080001000c00000008000200020000000800020001feffff0900010073797a31000000000900010073797a30000000000ba3300e575eeed378836c4ef41fbd5d52e0e4d9164bd7ff1b0f28eeff010b5aca531f13b1dea0dec8569300"], 0xec}, 0x1, 0x0, 0x0, 0x24004000}, 0x4010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file0\x00') [ 604.501216] loop7: detected capacity change from 0 to 41948160 [ 604.515448] loop1: detected capacity change from 0 to 41948160 14:44:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) openat(r3, &(0x7f00000000c0)='./file1/file0\x00', 0x8000, 0x1c2) 14:44:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f00000000c0)="2b84a296ae431a661433168faa426cff18bd9390984f31ccbc346f499688a0ee30def289dc53f8d5582b463641978b15a0092ffa763b5a0d4a92597df680dbbdd00d25f3698e6d3783fda343d6fa8f8edce95333016d9aa035cebc01", 0x5c, 0x2121, 0x1}, 0x10000) [ 604.557518] FAT-fs (loop7): bogus number of FAT sectors [ 604.559074] FAT-fs (loop7): Can't find a valid FAT filesystem [ 604.559999] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further [ 604.570229] FAT-fs (loop1): invalid media value (0x00) [ 604.572001] FAT-fs (loop1): Can't find a valid FAT filesystem 14:44:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) sendmmsg$inet6(r1, &(0x7f0000008d80)=[{{&(0x7f0000001d00)={0xa, 0x4e24, 0x400, @local, 0x9}, 0x1c, &(0x7f0000007900)=[{&(0x7f0000006e00)="a0fe732e9f2f0b62c425eafb42a6fbcebb7c068c6102f5cf810bbded2deff2e7f639acc6d72395a517cdbb64e285de5555a4ad69dec0d29c5455de1412e2a27175d4c205ff76d2", 0x47}, {&(0x7f0000006e80)="e2597e19ff6d1de88599fff1044b5b4137e747c13370bfda63b86767de9d0a17fb5993271d947892e1e108be0514b1f4cf2279c132dffb64905b3c2629a98f2ef13ca2b2959d8ec7a1d89c47a3f2ae002b9af204151d78c43959afc28d2ecdffdf4b7f7daa396a1997cd95ae1ba95f3b444417c0ff32aa9e6ec92b1e8ecbdec14d1ec45882c73c0780a5d5f448494b32a07c36de2cbfa3c0f8fc533f8e2fe2733a829413d7b337b57dd1275b3d0080d7154dce82690f14b6", 0xb8}, {&(0x7f0000006f40)="e714b12c02e3855abfb586778b477212ab97e8b867e006a0e011adca127b7b6f683669dcac04c747593007207dd990b62b6505f582ce95ed4c14c443efdcb2df2621e467faf5119d285ee05ce6c21c342b811a3656f31fc098e30d0b9fb8ae8fe897be34ecfc6745885f4f7a5cc5128cc5f2e88a214600abc99a01a0ea6b467e25f475f628f0c22a84de18f804933b2afd0ba6b6be0c43903d21865827ccf183bada224a633f8a8f08db2da9e87eaa60a67e9aae897f21191adf3b950f93aeb18e4e80f7961461a09426e4d717a3acf02756b7253dcef16112c0c18c961ff85bbc8c69bacfef1033f36b32182488b8bf", 0xf0}, {&(0x7f0000007040)="37d56ece0fc0c2b4c5e35a670cf09cf98aeec316a71cb38e9bd2373f2a933d3632535dae317bec79ca568c4db185b42f58a69bef9c0dc407d9ec346c75ba40e8b782452e9e", 0x45}, {&(0x7f00000070c0)="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", 0xff}, {&(0x7f0000007700)="e987ab04ea225cf104d942750aefb4ee04923b0ebf92bac356a9cb58327e6fa5b4416826c84ab15d9131f90c51e68a2641270de32846ae2027f316d66a32b1048d9a83e7ee94c4ceb92183873f90d362b8d9c89b27608c84dc72769a4f62e08201327028352943c0e5d92a03ad5139b0d83ebf34165fb152b8d923409db6de278c50b47946392360e9900eac12f3f7cd202dab0328cea9f8ab8fdce4384f4139bd6fc0612d9929658ae31201eb6d25dda39ddcdec088a4f25a0aaec67d07765520f2761b20f99ea971f9e9f077bbcc75fb", 0xd1}, {&(0x7f0000007800)="e71647c53839082bf48f3c610b627d64a992924930d36ffe8b2775d0b58d8ab46f8559c572d333c774cfbfa044561fce6489d0500956c639fbe48c508aa8c09b4a22f7cbc014990429cfd20f551082d8084a817ddafec57ee7cd51a6e5ded4a65cfb9d0f0cc2ace6851b3c1774f2acc21280ec490fc300dbdd431ee5710255c3d0a51609fd57783b87b0c23e428998da7fd46a67cdcb95e054dc7f300313498ed7b0351afa3ca39a018c214e12247e4d7a578004887e958ade27c809413dd56c91102bfd8a40c87e039b1b1a6a564f160ddd142f21311afbd5de9e9583c4c182aaf86d65682fb00754d8292f71569905392022bd7db89a5a05", 0xf9}], 0x7, &(0x7f0000001d40)}}, {{&(0x7f00000071c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000008c00)=[{&(0x7f0000007980)="594bd753a5e31fd58fe8b089a75c9a559cd43617cae316fdfe2e5c8455ce", 0x1e}, {&(0x7f00000079c0)="39311e9fd71df2360a8805f428598f3918b90ccd9431f72c83fe6a391dd43d19b558b1a515dc14d7ed09439634c2547c0f301376ee0f07663879b6ed7bc3747a0f1bdd8ccd43a514076c1c073fe62d971be23fcd822b3c9fc6d17e97586d3997c1109824c85fc38233726c3a11d8890d", 0x70}, {&(0x7f0000007a40)="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", 0x1000}, {&(0x7f0000008a40)="9e1fd3056df22b9be663ca5c8f827cc3272d2d6401bafdc269373c1a8200006d198d1e5637be9102d091f1e3ac9990d95691b652160e2cc7b38df2c3de6f", 0x3e}, {&(0x7f0000008a80)="eedaf9886aa906981b0525a63d292f79b1e6c1621a38718dfc293bdf77e4150d69a1f90f1d535dbdf0a0813f3affbf97c60bed93be1e7c953b266abc27c62f421e61d23cd057d1a664998c3c8f3aac04a70ec2", 0x53}, {&(0x7f0000008b00)="eaa56526c8f72604f4dc5aab27f2e71cb3dfd40554a49b7e345c2b8ba0195a09fd3f3510aa296ca960263c154db22617c21fa2d74358bcd31d62ee03e0decb67aca76f19153f02e876083ac2e93665aa7e7f84156a022717f82271267561396d58cc79bf3f215e0f56a727f0f8355e41b4ae6f573c7733ea0afa1956e5cfe154c1af8a397484fa34712deb79dc2dc4fbf62a3d964ca2129b15aabe0b120dfb840b21e882ceeadd19a02b4262b7412155e6970f8f75479f1b780d84b3f7cfd2e934b870b4116ca8a6eb196989", 0xcc}], 0x6, &(0x7f0000008c80)=[@hopopts_2292={{0xc8, 0x29, 0x36, {0x29, 0x15, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x4, 0x83, "723c58696b9e6b328b2aa28c112d27180685d20477b8b98831158147c1729124561f6e27f18c45ff7e10ff2b87db3e3fa2d8bcaefe81b5cdfbe477dd493e7c710f05c2c56e9099dc3f0e7bcd3b824fe7757c7984881e774c54a60d15236a54c0d16cd56d6987ed7f93ffaf897b4417c87a6c16cb58ca598f61f827778e13e20e6ba9ef"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10000}}], 0xe0}}], 0x2, 0x10) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5e, 0x10001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="995c8dce48b90ff46a8fc71d3e82d37cb03a8936bc9676999698f326855c37e316546ef92ab12c91d6884236ccf237aca06d9dd4c2790ca61e100a1226888db6b2d2ba049e5d495922cbe549023822871e3cfbb341d291522f96524339e6aa0d8888911aeb4237cfbf8cee8d26c6fb16ab94afd2a0b934109e8bdd1d35fdbe90e0a5d653602375ef91beef9881ecf8547b9bc93e0cfadfc8d1d3758a6f8273dcd9bdd914b29c1f936e873950289c5b", 0xaf}, {&(0x7f00000000c0)="61b3028120328a9ce5e0650dd847eefc7f59039caf190ab1f3d4c40d1948bd65aed42c89cb83005058de79ab8ef2fd02f72f768dbe09ac5d46f296b48822b661169f5bc9e7fbd1685a73d34441a7cde7d7f3a10c4772928940836c2af3f1f3647d8a1b18f9c664ea3549a415874e689bdf5b6b41bd24470b10857d0219ab6e61995a14305c61e2e374dfd643da3326888adffc3e0e216b0bd414507374402d2e087c97c12426d635d79cc5687d46831b6d1ff0e5c38b3e1ed2efe988539b93bbed5e0949cade868f75ec049136", 0xcd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="25be6a4566af3564d7f12adf5612dad7fdccf5108391ac505845ad870239cbb327940b59ad3a99c75f2ff0b25a0a11c3062ac926fd0215776585cdb305756b8b9fafc819c011d1a4c8ec8c9df6eca16bfec341c1e461b196c0a98c0e85d9a125b944eac09c26b832283742ca46076a78206a55e99953da4e6fcdf2a04d5f75c101ff368cff799ad99a266153849e0f70cd5963ea9914cd01d6b645cd2b24461f", 0xa0}, {&(0x7f00000002c0)="4f9da71170733604218dd3f56b3005ac", 0x10}, {&(0x7f0000000300)="c3b02fb51dab704d897ce716cea1a140e8bc893b73f234319f874620", 0x1c}, {&(0x7f0000000340)="08bd55230d9dbbfd5035a6b68eb59e52151f99e52d800c5229b6667e5a243244584c206b6af002b4170f35dba066c8c641df3c3ed6ff7a6cd7f9514744cf74588d37c21b89c3e4e4f56f24301f97da5a86cacfd87681a93b430c5c06562a5d9de62043d5e7b781cd464d4892c5b7b8b423c8118e10197c85a62ea09b3e3aa537f50e9035a99162f0570f", 0x8a}], 0x4, &(0x7f0000000440)=[@rthdrdstopts={{0x40, 0x29, 0x37, {0x32, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x9, 0x2, "f41b"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hoplimit_2292={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x38000000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x48}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0xa0}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff8}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000580)="b375dc62f2808cd04cd3e516334acc177078b87f281475852a6357224be5d53de7f9d8aa50bff732b04616711a4518692f6d1b78ebe8f62ba6e74ec96068bd6b738ac66534b7c25a65ccd9cb8a5cc9486b97bd84dba89c84b96f645f8a5a681508", 0x61}, {&(0x7f0000000600)="a488a801ab0348b7cb607bb7934a07546e771fef47155b92efc82b28d0e84474fd4c866f74df68a3a4e0d68f172618552ca5b8b5fea46ba82efdcb47545e0684a1546d5ae6815f89e874cb2e0de34f", 0x4f}, {&(0x7f0000000680)="06b7a6ef97c3468f1845fb15f9e5c69ae4d3085affb54f26efbbaab4d5b6ef91503955bbf82ea1c9bfdb8044bca55c2d3f0a4f5fad2619cc4ff33a82cc98efb771f3e190d5a3a1ce437e67568d2e538fe64a7cd7a43b7f03bb7b811ecac5fc455ada401ac5866393bf8d1870ae457fa1af4e2050c4aba7e9f5460a405dc343658df809678ce49d3f8b38d6957d6a1693f9669edceb6f56335d289b7837535b517b738a1be9853cd8e6462f82655f261c91590df5e35694bbf9ef5c2983eedaac46fd25", 0xc3}, {&(0x7f0000000780)="b51c96", 0x3}, {&(0x7f00000007c0)="00a5a78497b9d4759668e4197e91a72a0d76b95699a6daded06a58bcef0c6ab88d", 0x21}, {&(0x7f0000000800)="84f5f3d5a4e61406f71d8e992e7adc2f8c30756f45446ddde4ef5f2c7a2afb8c8dd58f1d7140fe8a9c754b51405682adbb28a8f01280839573384e706b8d6a135a61c865d475b448f85f77bf7f61dd513ccf3ff8f0101770dc664dca05fdf255041bde1ed52bf133a2c46cf36f", 0x6d}, {&(0x7f0000000880)="3812597eccc01a77a8458711105900be359006bcb518dab3745581a40ccab3e427226fa972a5582f25b4d0e24bb383a18674429d848086f6ed9edb444ce6992de699c90f15e7c05994119d77db29d3e722c74670311dcf08f056bee8028d74", 0x5f}, {&(0x7f0000000900)="bd64182e3c69f9e1e934d3d3aed1dff6443c2abb49cd85c58f899aec8e9daf3ea0223ff6d0a284f21c6d8f422e7cb0ff73b4aa5ac722045ba3283c6889b9f23d6457352e417d1c008f41e9d20384313733bd2710a5e994773a6780e9a21b7bd5eaebaf60092ab36c5d8fc63ea3091c30081193b66059258b5e67c6983223c85806340d0372808f4dbe7d4421b64aab22509e81d985e29fe94a9d6c0bc0f90caa0b76e11cba0a789dda65d835885f33406d58341be60a3352fa5dc7", 0xbb}], 0x8, &(0x7f0000000a40)=[@hopopts={{0x88, 0x29, 0x36, {0x2f, 0xd, '\x00', [@pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x58, {0x0, 0x14, 0x20, 0x9, [0xfffffffffffffffe, 0x3, 0x8, 0x6, 0x3, 0x2, 0x1, 0x7, 0xfffffffffffff04f, 0x1]}}]}}}, @tclass={{0x14}}], 0xa0}}, {{&(0x7f0000000b00)={0xa, 0x4e23, 0x3ff, @empty, 0x6}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000b40)="952a2ecb1f6b53c1eb93a9ef3b1a5c39e633ad6833dd098863851b12003348adc9ea3a6d78291230c37f498256f0d4c1dc2d3b0b02993b0d286d39d4504b8153947988bb5a976a0680943cb0f60ed87beb7250668f43ec49e206b618bb2eaa1b22096a9d1de6edf82051427a219295e3efb669d2ff16c5c868984ecf9cc87cb7e0a6577fc3ef1abb5ae34487dc307fd9b7b0", 0x92}, {&(0x7f0000000c00)="c366ea321245b2c1f020749f9fdaf905b41a9f27bb33c12e6f722ee7fc4e0f702a3b9a6d8f6f107386da433159f18ee0486456edffae92d1e13c2e640c93c15d283fc23d96a5bfc81f9723d14924e518add337e06657465a6c7d2768ef3ee581e66df97bb8bfb00c86e251a6bee773e1a1a6f38dde6620ce5c307352efbf3f6897", 0x81}, {&(0x7f0000000cc0)="d3b67135ac4c7a09ef2303261bdf96fdfe27d6d0654b76ea33e31c56adfde6de945f40c7921b900baab3009a8c33279bc61c7775738a772436fd7ad8c727ad35fc453c23aab832420d77ab0ab87f55d39bf8f47c1363d95c9f256a2d5fcfc0fba5827aaedfbaa688d84be00d6696ae6a841324b98777dcc00a59c3dd53b6595e64ff748fedc4363a11d6e6a1e989fe1c55db9db8f5", 0x95}, {&(0x7f0000000d80)="1f2e27b883f83b5671665612cdf14bb3ca9c38590e97475b679c1a1be968f6fe3bd18f6845209adf4c33eeff291658156e3fe6bbbaef3fad8e8f2f0ac70bef056bd8197f56f83c2ed355cec8773c099a10129d1c1e61a7646f4e28b524c708a070323c684a1446690d56c9903ca7c55fcec4d66fd1d41eecc396195241a3e22b98852cca934961c621e9eae152740a8f1ce3e83e9da514201a5e489e98b2e38ae0b10f5aa780e4a622ca6a92010520a252011de52b881240dfeb815680e49e65ef76aa891341e3daeeaef927c5c02cc3960d9d93408f933f4528d86a83a096d4c3e34d7a4874", 0xe6}, {&(0x7f0000000e80)="5964703bdb0c5548c6b35a485a36ed9b14f6826769afa98a7766298d326c05d36d97cc6310202d50bd4c0da57b198d99ec88e8a8b0e0021c9d9c4e1ed6ffdfaa3638e297a1499c55bb957e83007b7d23d40f1f7f02cd096fb1c1aa21a42152f24150202b3bab8edf65ddce99f61ff76294843d3aa52406e91f83c858b8cf37d480c2ae9067f96192fe1385cda10246189f28abcd6a0cd1f28f22feae9312b591825f39", 0xa3}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000f40)="ff2cd207313238eafeab76a13a93d050c56399023bdbf11451db62f3a6c325c7eed4d555796c7a8840a3cf4a88f90e9ad28875a00f016fbb7dbaee0e2cfb767ddb887f4e9cc592dae641b6fc403d46ba740d667579327f2ec4958651ce086c2091357043ae1aa40a4b3b54f9062de2db2025543a49e9bbdae2f282a6a331ec4a06f9b995d402a72b2f845c7baaf026117f4857a7490ea67ceee9d724bbf51364fff3290f8cad200e318666863089fc0030bc38ae7e62f5a20f2e5147ab18c6fe2e7bcdc111c7e72a6072c987dba9597d4cbdb7f51fd195147afd533330fc3660505818fa7981d55f9c07c2af9e7232c61f952c31d6eb", 0xf6}], 0x7, &(0x7f00000010c0)=[@dstopts_2292={{0x130, 0x29, 0x4, {0x67, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xc3, 0xf1, "4b1a021713da74635c666903a8e14d00eec037cf6d63322e975dc172a4df9c00b412c24f31add84cff023f4b563c18c66f31dd0becb0d1fa2f6187baac833ee3ece3b808764d2d5f41017f6722e52ddc7b9963bd41a00b454f7422d4e30f4a9f0e73d86c2f7ae8818e11e07028e4748249984faa0ab3b810b792cd7298880a7b0afcfab3fbdbd274001d17f0b3a7581eecd03662a6b44a6626cc1ad5eb644fdac30212bdef12c2379fc8799adf29766a4dab152648c6a658b620e01e6327a3eb979a2cdf390f5411c35229dec88347c313f55da887cac401bef2a9c50252337d804fc9ab21e26c47dfb1f2229ec734bf31"}, @jumbo={0xc2, 0x4, 0x80000001}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x130}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x2, @private1, 0x100}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000001240)="0fc19e1e32faf07ab2727a6b23ba77f1b7a5b48fc7c9f88fc376a513be246c08fb2c45bd6e5db0131de209e42d0cfe5be6170e34b246510ab128", 0x3a}, {&(0x7f0000001280)="dde15ac9a952a46a6d3912ba0d86cd9017f21f6c095839e1fc4e0c3e7c573c0ccccf7e55e0eb002520cef8a6794beb9dd3846ed9c650367e0a6129740e51a3c4b29d4181b0c43f7d06a6a554ceef7072076ecff29232b6e32767f739fb7e1182bbfc40825b63b554a4cebb1dc94d83e5a43d9a0e17cafd17e38387821dfb8eb23c010284795b2812e887b81378e40ff0790f4c", 0x93}, {&(0x7f0000001340)="7eb00b0259a04562e9eedf446a49dffbbd60d0875aebcf7f8993c0a24c01750811a7d6d6d57591725f9464050d86c6a0", 0x30}], 0x3, &(0x7f00000013c0)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x18, 0x6, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xe5, 0x0, [0x7fffffff, 0x27, 0x100]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}}}], 0x50}}, {{&(0x7f0000001440)={0xa, 0x4e20, 0x1, @private0, 0x4}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001480)="a5e38f02bbd2bc6cbe6bfc312dfbe48b7b5a7c58220b961b4f1cdd300c7ec9a0a8ac73588007acbdb233ee8780af57d35053222bd5836e5e2c5ea33b4747b1991e639347eb7e1a92a0a58e4f57e2e0ba8a8ff2f2e4e0b504a5fb04feae81742d80df50573dc6a58921c7f8cbde5f59f71d18a5a3f0a95ba2652b5e758e3c037a9fb129c664749c0d9f32916efb141cd8e52b6388be6ee0b42ca7d386184e0043859f6ab224c9f0ec0da33e860fe62a8655c588722d89554ad995fb1c3d2e6cf592133595cb3b905702432fe9e9088e987c46c1cd6531f429a4ae7e44105bec04503fdd56b48c1878", 0xe8}, {&(0x7f0000001580)="2ac75f167f2d47988d78f21d61fbc074e344ad77ac4847ab8ad1958447e7cb0cccb48c10bf54c89e07f4737770fc8634f5c1f0728a9e3a7ee8601e38dcd9be7a8d442a60d385d6b871b4671ebbf1657a3f9232d87648e33104869e2dc10397cbdd4d02553767ae7b8567578873cc81a2dc5c965e38f7975bc1713ac1a005ca1cd2f755fabf181eb3d4c6178cf5bfa0d15af4536dab9be2cb43e5725920e2e332051be20bf2ea11b898955706cec3825af866350f9ae967e65fc941c94469814ba14236174ec76b44a74c32e1baea2586c10d9203251508018975b102b072ec7d83d451a75105838d45e1fe17c0d5b34f31438a4df082", 0xf6}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000001680)="862742e7e54adc96aa6d535c8c70e9bf5881981def558dd228a7045fe1b8ca76f1a25fbf92344f4bfdf23300e99d7dd0fbc5063aad93e4c7feba1433f92d8b8b4c567da9867a", 0x46}], 0x4}}, {{&(0x7f0000001740)={0xa, 0x4e24, 0xb79, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5863}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001780)="851a66e563407ef6d04047ac3460e3c7ca713bf1d1ae3e1efec2aecae385e49678cee1426d6beb2e9e7ab11715c8eb5e75af9ee7ee086366ddf1e4158b3b63f0872870ecb3ec33ef0c14378ac3851ecdb0ad18b21413a6eaf494fa84cc0252b1006877e6b78aa7e4dc7fac655dda863897baf19a76dd0835b5cb832eb3774a1a185854b21f9dee15801ac6ee47998daaea26dc540aaf96dfa6fa73fe14c1bcc81ec58211e984fb11bd2318f7946b58959a9a058e02e4132ba17e42580549288f", 0xc0}, {&(0x7f0000001840)="5e184ab1668bd491e1e9a0ae1c818af47b1e226b117d901513ab7d18d21eab5e668d9ff352a8092e7a9d1f393adc7dec55ea4e5ea2b4e67f9d387b388eede47a3c2f6e324321481119831c6aba20f1a1ac7d6609243fb1c09ff344a901b4f3764eca804792f6af1064bcd64393d78913001cb86540", 0x75}, {&(0x7f0000003e00)="1b99b33c7766e67c3ececa7bfa8e960e58a00b2f15acf80c406fd4677f887aa16bd089beda49ae92806e7ec04e974c272517fcbbf24b76294127cf68a10e70292706911dd0bb03e7c6198dc0e8865c7e45a562688414392ddbb7f967499f457a563fde35e5994c71ec6d6dae5d97162be807e0f7866f99e910d4085c15b892c11d99a0898ae5bbc1a0f025e642532b8afecf8d791c71b73009bde44920eae831302d16f3e6272f450666adfb581790f3b4a4b4e65e5846ed464cd77b8afd165c8a070e09f9925e15094440db31ca5cebde7ff046ae808f4339cf63be7e41147c120220993bb5e5f7db59104ad123fac6f49921cf354d0a7120d545004da2728065347cda9ffc8a3e28714d3dbea973d40a75b3fa074fd929499fa21e5349e3937ae4cbccb43012de6f81eecb37bfcf27d5cbb351894c85a0632fac9dbe1146170aaafb9233c12cb896ac13fe071bbf873eeff1ef93805aead5ce7cf39dd96b710a810853f0ad8525e1c8eae8735dd6d03edb5eabe593b2ff85001358a3f1929af7ea5a91f7eee77fa09b7cec389465f71ef720d92145d756377ef85b9c0ed7593d7519a89274c5694fa6acf9ca3ab0d778c9bac1de0c038350b5fd8da2538b8e0875607d0524db58d6ca47e939ad160df1f660a3a39398ed18ee586c7caf0db4f028a77f56d5f5ee5c8480ca4952d2f665b3b03d1ac6a96116fdc522c861390d7272b2f3eee0ac70febfc998a957d0ed1e846eb6b71de8e02876cfeff2a428110c86ad41e8ebc91658b7d2e6409b5bfc16974e85eca6d1be5bd68b120be9806f1a1a75b5057dc2d36ae4773e946d21abd4e0ee8f6abdd42dd54f1254f99c9eda20f12b68557afc98b89f4a778233e8c31215b01e00e8b9c694b62f6970eeff41a0c89a38f59425336d04c062eff019b8b2f4a64ddd6d1728a770041efaa8be8cfeaf15f194242d9d6fc53ee1e1f88c1cffa0dd9dbccba2a120480df59910b5071656fea05b2a7df0f0bd645b24b97f7396e86de7ec9f0deb2dde275ca1cc6e33a7927fea895e5539dd3ed49bbfa73a0b837ea2c4f10e05feac40cea1b4328303237ca696654a0bb0c8c3f91e3a5855eeb22758104b34cdf2bcd63b5395bfb45bf42c8d67481633f224695100ba4e8f0690fdcc5cc1782f03e5bc76502754176dfe3730893ad29ead186b215c3605b075093ce9aa030feee3a9afe5c5e106ee87df50bb8e8cf4fbfd9e228dd1fd6d70a950d4ec33b82fa445385bbe9ec065c763a7dde1654f12c62947828166294015d40d541923857a35896219a17e7335072362ad87d90e0a26aed5bb6e0b3aba30fd7cef9fa971ef0e026cecb9dbba4c6a979d07f4cd4a41f084690b3181536fe0f4e27402e4330d2903f00415074db753775ef07a64d5d31ead86a9cb5ff106c48d2ac86ba13060b48db7d69971aa960178819d263438b77755a4583a98db6509fcccde3d85a369cd5b65c5509c71c5e65d6412a45e35278da4bd04bf7500abcda55154cf30fbe0044be17dd5ceb0c803802e387c2332b7678b876686c0a2fa4a7d21af754b50e433b4abde8ee9be6f1322e7bb2fd78aaf80eda272478e1cb2f30c0c4d0673ab74d524746e127f75267e7c2ffe16d41e8245fdfd0a41fe391c62ddfaf662ce0b21d12100d3958c50aaaf2fee830a1fa1474e9f6ed95835eb95e0db04513df196e238fbfde80f68a7d99451efa858f5236e88c7a2b7633b0fa2107cac4e26f4b50408853b9974a26f52b181bc7cadf77959409707b16604f7666f056b043d57d1edfcc61d8ac8c608b093c23d40b900c55dfe2453f5b77b6937b300195e3be3ffda58989eb14dd3a8916c1f52cb7e98af205abe19ca207555f1397c46d1f990fd4212ba83e46161416fdf7537d13f588f5019e18ab5199476ebd387ffd0fc6e3138b513cc55073bf226fd6efac845da955b94fb78a4fcc941135dc54940cc7b0c58a13dc3dec5dd4ed00de8399ab44f8ade67fa8dc66fcdce052c0e79fc5bd84d4d852bb9745a6953518a60152a809da0a9cee98d2130cb92001fb86cd82d0d2f8f2bf74f539f393cda1dc02cc0dfc9e592e0d71e8ab90cd51782e525dbdc1024c8b4c022615524a1d605b85a8eb376077c2e5008bc009de28427bfd6d6a03272aee3a3b1a92fda3aff89d2b3f2de4c62f89bd2818c96028039ad10b2dce92befd4606a110cd172c8d3ce50080d2c8625f05fc2a4cf33a04389854f9454b0b2a6d9244bc22ed16d2ca968986dc035cf641cef99644e44536805fc0a3da27270b944ded1b82326c32b7763542426053525a98d596b06eee3a1fb22ca4c384de94362b7f9c0c8406e8f2870c2d8ee9e01a29afc5e418353c6891b765e3c09cab02f8e2a487763942095d1865b46f61f8d8fb4d90d914034fd639ecfab108a76d081d45e79c71c0aee3ba62207749bb0b8bcaf7dce6a97e2bceb2fe6290d32348b3ebbb75445300a2f335394b2e33cb0fa926ac5b2ca645f8f4103b4ffaebd5dbf97d89d2e239e49504792b41642e0f5417ac14e527d09de1b6f1bdb8e23f1e3752f9af399ba91f53ddb158b9cb90ad10d99779c03227548e115d8507a9e2f02e28a2d769a5c1872a2f2f50a41cc424c290ce7712cfc2933c9d39baed39dab1807bc61e20d242d144d03fbc7394af7a238ceb76931c6709f90fade787cb35f0904107e422b0bb9da97740e1a7595cad0fd0a9d21d0c3e13d955fc8a5b793d17e9b43b5557f43a3e495356890ad307c625a014970b4fe90f80a0b6959862c436550c644c7a563987c2624610cc97355640b2b15cfd61ec4e54c01996c6c474017bd105eec40ac3075308df91720c3c281be6aa5b5451ab5fdd8355f620eae3f14fd4818957f2625cdb3e0cb64c92a2e5afe6965c22b4f5369dc50674b20ee6fed25d1a5b89ea51c431af58cdb074f03bac9080f721224749eca555efab178951bf6d54e37bf64789aeab81b90ab0952a5095eb97d7e575cb655261ab4e0186c75bed8ef8a22d52c036ec95d6d62c67bf77bff5833649aba2f9586b10c79163423920d2f227a3d98e36764c92f818adfe52ff56f41e6fb3f591d20fa5eafc9457d77d72ee9e3ff954e6a3ec7611377c8a1e3b7334fb9cd87f64c9a3272ce50a3ec1b9edf1a29d8255423826fbd7eac31788afa539e32ab517b1e21472b5901c13fa86ee30f909f5e327474725b445ae641ba570cbd2ec400f6fe4b035854298e72b14c95ee2ca8afd593aabcbba905cdcda3b1212527bf5a233152af767454a0fedcd2c7df8a475a42a583736ec0bc9e28aad44e74233688d82f4adcb5e93a838ff984bf64b7422fa3d11eea10deed2890ae619a000223c407dbed6d1b3f6866113de2fce7a11ca1acfee8db30f6c10eaef07f2641072bb447738aa4ec9154a9f12715f3f2edf58ff70baa124ec584e741bc09a93244ef8679f840b443ceb08dc2705c6b099dff6de14c132b3c2af2166f895e485ae50d325f2205ed9bfebe90d05d449a4173e7e2d5fa48626bbdc6f3dbbad20810e19977b54f02fbeb71deb63688093c7faaeb86e8f02d3cbcc124d2be49468fb3d371ddf4913d1a2aee16d9828570ad8c00d2a8952c67dcb188d08be874fbbd4aecbda0bae0fc0442e8ec6a1e93e879c689c03c8148925f79eacab9ac2af2a29dfd4e2ca6443eefdfb600d45c3808c18f2053abb8652862fd79abbc42f99f39047e6c4007d93080f9bf1e0126d8c6f6192628f178e8a65236456dc3657aa3a42737f4867dfd6633fb1e66ae337f9638c4e7246fcf3dff66ac3b940e73f93687051661935a4d6aa5c3c65b9fde160b416897bc89703113d0604d205697202adaea60fab6c20866c70c549767d44778e86b301110a1287f7350617ab60bcfb677fedb2d16775cab55dc81f1e985e8e9f4824e797cdf1918327c7651c4e52bf74a227be945a409ea8beb8607a14996772f72b369c04733589e2da1b7b7bd3ab8bf665988c8f52f5edaab022bbca6875316e6221112c43d4fba82ef1964f519e787ab72da3c5ba28fbeb87aab09611a0e01333c5c80a01bb699343a9d418eb445c6f0532049aa046981b626071e6d8e8f8d66ac2e42d3b295ec29fe8ceba5d8f9ec1ed9814c23ca981dc78be66ca03742822e6e92372b0170d4f4b8bd8e5908ce0a5bfb6ffd9e191ab54fe7bf2308f7b89a3f4845056478377a83b0efeb4d3fb00b438b5cc4655e9e2f10c9b43293791c117b0601a6b4aae396becd624557546ebaf097e458832bcd6b04a40b6bdd21c3a865f46b2522226ef91b606932a68f921c3972d5f3751fce5c002d031335429700e822e8cb92b73426b5dd9c762aa7dfd2157fe5c8e24d21f39dec32871502d5f9334d3c5ec33e92ca9771f50777798f64f7809ac761c6383b2b60a650edfe55673197f8c32c88df4b7fdc4d6a53a8a9c2d5a41a5111dd35e1884a141fc6ff61d1c7c2fcb57611e01a0987b2f092694cd97a244de822d0b6d8d41569ab7e8d51c075de160394b52911079244929792dae0807c9a387b69f0508af48c1ac762ca5d2aaea62763c67b172efba3011da731bd19ac884dde95f93039a1b215c31436ca326c7dd4ac0bb1d5757d8c19ad371e4449708d7fa41bdedfb5257c96c5ed8d32a21506b39683917aa798b37e6414a9c8bfc788c6738cc731c076004849b1d0fab3f6fc452589f02ea921849a345f1c8161e2d8abd3f97f407b4c4571bea3904a02269087f161c0725517a33d56cb79d4d56164b4ba6e936e4b885a7bf0606e12b371fd7ae179f8b4b27d258b7ce54878e21bdd9dcc1614cad1867e9600cbd81c753e6461846a7c62823f01d15a7fbfc82b508bf1e5d4eb8b1c35435878e67f32fc8c361125728a39c8ee7a5ec56615fc32501a71a52374e18cb29ca6ada5940d1ddcfd3b543203248a28361bce0c28bbb14bf8502bcc47323d361a1190ac35976a47ee5c007482222fc68d57edbd0054a4b4b8a09e442879615bea2d51efba4cb2dca7b88014efd29773b3d59e93f8e82e1112a4ccb038e06166bcbb761daee81005ccec3eaa074be1af614e87fabc148610ba61a4c4b800f85e5418145171988862898d56b7903d0ddd929dc52c5e80e1e77f14b2bfcdc4166083815f1973dfc8418787d62868afcfb5bb000a827da78488657299afd5f9e2b5915acd13e6309acae66f54003dcaa86efda83edf9ded9c5b0646aea65d194fb5c617d32f79f21667ae4e30789e82fc123dbad2084b77b2965497d85dadb69a6e3f685d1acd47942b1446fa846ff3bed91cef4f566769b2372d0e1989138b6f9f47fd1a2fddef7ead016e610ce751b9ef27ac7adc85afbbb730112cb64d563898720ce53e7d7633bab74d56c856300ba5ee81c02bd03ac94d15232270647ac7238d7a3769f12297d439756b48c867dc0468d963a7dac8959952ab8238db41ed94c52562bec4ee8004e4666c559a2e7e8577014f3295ba0915e22da8349745628973578b525f0095e79a15974339755dcadee79508e233a65007fa149e592825d0fd04b1da7d319d80ce8afc8ade7f1a6650c5b9ea9547137375ba69d341b817eedfbb4cce29a0142ce2f8a86f18b331f2f31de24d034f537b1c68bdc4e7ea0b578d2d1b401affe9af113510d1125f33bff9bb4da693af6271c8e05d0e4f417a3c701dba2772dca81798b27895ec96ca7070a27cd9f8083f099fe7434d980387fd489f93fa0e823cf2c95583b6f01545b3f73772fa3bb0c64d2c5c70caaae3e2a74c9b275439ed17c68869552695efa2fd", 0x1000}, {&(0x7f0000004e00)="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", 0x1000}, {&(0x7f0000005e00)="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", 0x1000}, {&(0x7f00000018c0)="1a54e14a5a9c1646b2725ef3ac4e029fbee8bbcdee61ec786cb2234bcfa5", 0x1e}, {&(0x7f0000001900)="7901ca85c7bd61aef3346fc1d574d1a99b9a71238f3fa3", 0x17}, {&(0x7f0000001940)="07ac0e27796c1190c9e64989b8b5cfce954b8765544579e12ba458d31fb304ab4d300f7ada776befbef3b65387ca3dec6e968ae1603d8d59e28628d8d736cd20751805", 0x43}, {&(0x7f00000019c0)="d25ce177930c6812ba23f0b261d2ce928e2fd0e732e14570b86e7cbc52f8dc5c6eaee53d7c235cdfa5de966a36a44ff47a1a5c48e25bf080689730998828ffdc1dd3b7025dcd4aba6a0481b01d5927e16e76ea877e201d5caddd69996e54f195561f7e5641aadd0dc7ec6a8eeb4d88f12f95598059cb0cda781b744056a6799875b05c067da9556d3e5f0f114839f851a42ce51b5504821ae7ed8ac57fb9eb43a3de3c5d1a9cf582223ccc40f4bd3c629ab8e464", 0xb4}], 0x9, &(0x7f0000007200)=[@hopopts={{0x190, 0x29, 0x36, {0x3b, 0x2e, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x100}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x6, 0xd1, "60f294cb881124dd609ab4484b11eb68c1bfd8f3d0dbc8c434a43f7d170d501c158f09767a3c69cbaab102ebb2b1d0a84324182ffb518654fdecb776a93f13e9e423c3fee037c627874df62d4f9bd42e62ae566b07e784d6bd8aae06eff6c6ce024e594a8e1a54d469c87f8eef17d040701aadb0ee585a9b8dc51ed0be52eab516fd7d612a95409470963c22df85edc129a34e3ea2e8e24a6a0d62ff344986b1883fae1a359295430ed4326ac48a3dfe255afab1208ff723703f4a6dfa61a901f7a7fa1c9e4f3a78aeed430e0e7a0e5a8a"}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x0, 0x4c, "24e00b15a9ce7ae178c72ea2269601b6a5ae1e82a4b2b2aadfc0137a93c7aba3c544865cdd2b38da0254854ecabf9bc40c41966b46f9dfab4ffba0c1b7c40fb39165fb24e754ca8eb96bfdde"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x96, 0x8000, [0x6, 0x2, 0xffff]}}]}}}, @dstopts_2292={{0x188, 0x29, 0x4, {0x3b, 0x2d, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x2}, @generic={0x9, 0x14f, "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"}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x80, 0x0, [@private0]}}}, @rthdr={{0x98, 0x29, 0x39, {0xd3, 0x10, 0x1, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @loopback, @local, @remote, @private1]}}}, @dstopts={{0x40, 0x29, 0x37, {0x1, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x80, 0x3, "124107"}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7f}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xaa}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x46}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x21, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x4, [0xffffffff, 0x2, 0x20, 0x4, 0x4]}}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @generic={0xfc}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x4d0}}], 0x7, 0x48040) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 14:44:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f00000000c0)="2b84a296ae431a661433168faa426cff18bd9390984f31ccbc346f499688a0ee30def289dc53f8d5582b463641978b15a0092ffa763b5a0d4a92597df680dbbdd00d25f3698e6d3783fda343d6fa8f8edce95333016d9aa035cebc01", 0x5c, 0x2121, 0x1}, 0x10000) 14:44:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) openat(r3, &(0x7f00000000c0)='./file1/file0\x00', 0x8000, 0x1c2) 14:44:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r0, @ANYBLOB="011d0027bd00fbdbdf25170000002800018014000280080003000100000008000300080000000d0001007564703a73797a3100000000b00004801400078008000300ffffffff08000300120000000a00010073797a30000000000900010073797a31000000003400078008000300080000000800040005000000080001001300000008000400060000000800040506000000080003000200000034000780080004000080000008000400f9ffffbf0800010019000000080001000c00000008000200020000000800020001feffff0900010073797a31000000000900010073797a30000000000ba3300e575eeed378836c4ef41fbd5d52e0e4d9164bd7ff1b0f28eeff010b5aca531f13b1dea0dec8569300"], 0xec}, 0x1, 0x0, 0x0, 0x24004000}, 0x4010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file0\x00') 14:44:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 14:44:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 604.801539] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x76, 0x0, 0x5, "9a8d1869176714aa2523eb5b2cab6f03", "63f0e8694bbf0937dc96fe1d70aadcf466bd7ef87ce2fedb2a9a1fc0e4ceac772c93feeab36c1fb687562e67c7ce4c54ef72831d25b1e93f7214a7a2cab9f0b8d3508b6406790a378becdadfbb4e034c060df71f521f18cf8b759c7dd9ee8affa2"}, 0x76, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x5, 0x8, 0x0, 0x0, 0x5e, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x50008, 0x0, 0x2, 0x0, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x7ff, 0x80000) getpeername$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') 14:44:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 604.883577] loop1: detected capacity change from 0 to 41948160 [ 604.897761] FAT-fs (loop1): invalid media value (0x00) [ 604.898430] FAT-fs (loop1): Can't find a valid FAT filesystem 14:44:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 604.912114] loop7: detected capacity change from 0 to 41948160 14:44:02 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) [ 604.947900] FAT-fs (loop7): bogus number of FAT sectors [ 604.948661] FAT-fs (loop7): Can't find a valid FAT filesystem 14:44:14 executing program 4: ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000200000ac0300000000000000000000000000003447b0d89483dda450af4947cb9bfc"], 0x577) dup2(r1, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r0, r3, 0x0, 0x100000001) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xee01}}, './file0\x00'}) r6 = openat(r5, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r6, r7, 0x0, 0x100000001) 14:44:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) 14:44:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 617.571568] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) 14:44:14 executing program 5: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001540)={0x0, @broadcast, @broadcast}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000001500)={&(0x7f00000011c0)=[0x0], 0x1, 0x7}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f00000000c0)="60b9411353826d937c77d1ec30f01d3f2ea39ac475faedd5e3db8bbb742513cd50917419a098", 0x26}, {&(0x7f0000000280)="f36697189afb173921d654a3203e477bd2d4ffa496e0bcf06c3a1b3f809c7d527b642c6f73446376dcec121021de0f9662d087c6de684d3280ba1bce2eeaab5f8b559736da22616f5bf5e29ae1c3af3c79b0b8fba56809fd3390396ee4df1448512e5b76df6bbfec76da771bbc42508d58548ef33540b6ee6bd4beffce297a5b5a7893d28919721dcc427faa6160a1df3a6de289d6e367352bdb7e10de6d63c6c2d7b08513094390f19353370daa57330af13d5427b392e3062b279a695921542e5c8ed75a2acd49bcc7ab", 0xcb}, {&(0x7f0000000380)="6d42f75a4107a8e1fc8cd801e77782328aefab22b9481b21f56a7279d7d97c3c5c5dc710c022074c7af1ae6ab8294e1e640b13ebcd4a2ede6ca86dce781515e7c9da92defb3e2df16087975f95150d0e4268d959a8cdbb6d13d3a9bb3bf56fc79021a2dbca366930637b70a370dbc9082c9ac3139ad72a659a", 0x79}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="9a7301c60c35de4c2665b64c390cee2896ae63924e7a9676a8dec604a87c001764423397a2102a83641caef00fd9d2c62bb8d91506f2a0b626e3f1d0eb4096838fab0635260bc3f5ab069c763bd80edfd01aba9f132e21293a0308dc4265a744bfb6f89e975c6031d3a6db79", 0x6c}, {&(0x7f0000000480)="2de3f53aa7f9154248d212b1937633ee12cb5b75eb3e057fbe0657f4159da6ef37a9a399945644b38e0a8c05dbe834892adc9215bb9a46b2bd898a1bb272bb3c50706c0d66814b3ed7cedbe8e7ad9ec94285bb56941e7abba59cd80e0cd9dd30aa1f1902e0a69a99eb94ad7ac916653b41de39c514612c81e2cecc15bc0ebe63034407f38f0cba54a85f071535186bc99fec07267e88bfebf7b62b506dec63ff9a378ed998dea730f685483c0af0594a36a369836236e55a52661519e14428197d69dfa75f0616558ef94009c00030b7e15d8e88", 0xd4}, {&(0x7f0000000580)="5beee9a79e0c9e192b42e21b009d6c002e246507fc7e111d9cbe1b4aca739ab9972a276e93414a2744bb8d11e4541477c81f1d4a8052950eee24ba3c49c99b2f55f8363ee66f92445d686e26d309bdc81ff2dcd29974c0ff069116e3107c1e2c281bc4356883ebc6a1ecf19f6ac641ae50f54d7b1d6ee97f6594837a5e4abba9ffd0bbd507108116f8eb96b417e56b79a588ef589fb961aa569eec167444e84e7c96786cae61419997c631895c7f5d7d4e774d4046ed968bfabf600b18b3b11406cf990d71cd5e678a2eabfff3f4c9b69e57a024fac882024ac974ca6cd5d60b98907e1ca7", 0xe5}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="6ae277ab12706ff72c3df8e6be365b3f46c664912458b1d4213a3bcdde133ab734b1929bc72bea18a6c01e9ffce5656a26eba29f2ae324fd01211baadfcce312bd548f7cc0b40341d39dc626448ed536e99cf0e212ff4982955422ceb764d8c8a888a51faf9eb9cdf46d458c3bc1e34832a865f62d35172acf237a35adeadb6caa081411c8fb42a623d2f5f759f2e98dfa2176441cdd426a7cd0b30e5dd22d4e9873883e5279ebc1fd6e1c7c", 0xac}, {&(0x7f0000000840)="e26886d388be86b4", 0x8}, {&(0x7f0000000880)="c9ddfbc2a1d897e91a145d1e09de147d", 0x10}, {&(0x7f00000008c0)="3c67e2f8e35303c9f6b1b8a2bc8b01335d38b7b613c30d86a4160588531ed7dc380e675fe58bb82d42fec1a7aab2", 0x2e}], 0x8, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x1, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0xa1, [@multicast2]}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @empty]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x3, [0x1ff]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x4, "62d4"}, {0x6, 0x5, "a9a624"}, {0x2, 0x4, "0cf4"}, {0x7, 0x11, "5f85f6030000005dd6d48d0e60fc48"}, {0x2, 0x4, '\'*'}, {0x7, 0xc, "8f324d0c81746a43efcc"}, {0x5, 0xf, "fcd82444fa6c30d1501f9b8d25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xe0}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="51c53028843aa1b1488ef29ae558f11e08e2182b34d0a414122fd6e65f275a4b6458d1ebc3bfee2f010dc9e35ffc94202c2145303f7228eee084f0f21b427ab6151aaafedc7e2a8a5439d13645782686b363453dc7086534a85059270d807e17baf005ee3dbcac4c55ee89e18e808fff33d3d5c3c479d1b8d602cea1813c2839f88374c4d974f1e473038be0228934fa4f0a42a0388b32f6ff4da58e7021b368", 0xa0}, {&(0x7f0000000b80)="5431822d0fb8f6affd382df5b30babd6e7551c34f6656bb8578f21baea5c108f7bd0a2d69739fa54a471b85ef279cbae5c6069854255e46e8b3b86cb25f3065a5b243c544c85cc8569913596001d0d106b84ffa7cc8520418e8a165f030e8255f074c9e48a7d2c08181402", 0x6b}, {&(0x7f0000000c00)="a43f1ce981a9be2dd30cfb7c4ddec5a6c769cc215ce16ef20ef277bef7117460c177dbc9d83d6887304a30c658dfe723f518f7e8e12fb4ef14e128aad1553dc49cbfc10364d149613071df9ea55eb13ee0a644fe6eb217c61f86be3b4d4480fdba7c19fc894f7cb5e86c86332701e6bbc734c1c93412be11ff5a9cc2f10c4c1de7241aedfad6730dd76d99da3ac9fe409ce5755beb3f63e2fdb01522854792ff5b56edd0cea849f3e5d7c6aabfb4b5185e77237b150c798eacaeafb9648819066e15e2327949fb0fdf65a927d86da1092feb93cf37c8d6017dea6a5300d9", 0xde}, {&(0x7f0000000d00)="3adb6718496a2f9ff2f50bb4c3802202205903b53ecef6077a79ac85905d9341cf6272", 0x23}], 0x4, &(0x7f0000000d80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000e00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e40)="aa03568989", 0x5}, {&(0x7f0000000e80)="a06604b72c2d666f5421455fd1ff650bc050feeadbda4bc20471a603f4c443fca5161ad754ca56388fc46794560cda14a383c5469c05e6e69598a8d8cfa540d9eab9518a7ecccc82c8482d0801f77434f222f34202f276de3da82266c8e6009917852aacde0eb31101c07c6185daac7dc01fe8b43c24bd95a09c0183054a94a97c1afe387dc665473abfe888ed213b9c4dcde37c5d4e30ebe29e819c7b32ee56245dbcfe9abf87325bd3bdab4cd0241e", 0xb0}], 0x2, &(0x7f0000000f80)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x800}, {@local, 0x1ff}, {@multicast2, 0x4}, {@broadcast, 0xfe56}]}, @ssrr={0x89, 0x17, 0xf7, [@empty, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x6, [0x5, 0x8, 0x400, 0x66ca, 0x8d4, 0x8000, 0xffff0001, 0x1000]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @lsrr={0x83, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010100]}, @rr={0x7, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}], 0xa8}}, {{&(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="af0bdfe2d7f91122f82ebb69c19520e92c986a946c3499c1fb59135990c12b0f5e6510c5d4bc2ee0d2996728e207473a05df1ce738a646ead7b6802da31d648a81b23a51e95e186f2380765b8305f0184d43904c8777151f3fed5c05df34aecde6912a1e2245b501c1001160f81eadfe", 0x70}, {&(0x7f0000001100)="d1c084f479761cce2384f3f9da922664f29f72673d0e2ceb719716345c6218c517000be250a9f8dbd281f6459311f8cf1ab3446d84eece3d55f0d42120e3f71bf506b5196ee14d94830ba35a107f1a0a6daf3b1ee646a80f3d228604a0a66290ede16feca1b9da7e618369858f7b", 0x6e}, {&(0x7f0000001180)="2575f63c1dd8475569e1de7c9ff61d820c20e0f5a382f96a623ff730d64b834eb27187c1d577297ca732e4dd92a24ee1d44dd84ecb1b94834fc22f", 0x3b}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="20459b8177bb98343d3fec2f461a4cea9252cf7dd41c6c7276b1c35503179aad9eee80a9bf3f6e4fdfbab158642f989f194afa0da51cf28e715b14760a422b0b0faa71f2fc98a8d60353b0fbaeb5d12a7dd0bc698d8c2bd8647c43275d1d4e6eeba7f5e14548c70df969318637601451a90dceadfb9a0e2e371b7cddcf3a930547dd2ea47fec7db11714ffbcb22faa7bb32c57e72b8c819bd6e6735f15c5aadfcb67", 0xa2}, {&(0x7f00000012c0)="b12e", 0x2}], 0x6, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuset.effective_cpus\x00', 0x0, 0x0) ftruncate(r2, 0x7c00000000000) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:14 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) 14:44:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 617.589882] loop1: detected capacity change from 0 to 41948160 [ 617.666374] loop7: detected capacity change from 0 to 41948160 [ 617.677099] FAT-fs (loop1): invalid media value (0x00) [ 617.678435] FAT-fs (loop1): Can't find a valid FAT filesystem 14:44:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) 14:44:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) [ 617.826705] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:14 executing program 5: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001540)={0x0, @broadcast, @broadcast}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000001500)={&(0x7f00000011c0)=[0x0], 0x1, 0x7}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f00000000c0)="60b9411353826d937c77d1ec30f01d3f2ea39ac475faedd5e3db8bbb742513cd50917419a098", 0x26}, {&(0x7f0000000280)="f36697189afb173921d654a3203e477bd2d4ffa496e0bcf06c3a1b3f809c7d527b642c6f73446376dcec121021de0f9662d087c6de684d3280ba1bce2eeaab5f8b559736da22616f5bf5e29ae1c3af3c79b0b8fba56809fd3390396ee4df1448512e5b76df6bbfec76da771bbc42508d58548ef33540b6ee6bd4beffce297a5b5a7893d28919721dcc427faa6160a1df3a6de289d6e367352bdb7e10de6d63c6c2d7b08513094390f19353370daa57330af13d5427b392e3062b279a695921542e5c8ed75a2acd49bcc7ab", 0xcb}, {&(0x7f0000000380)="6d42f75a4107a8e1fc8cd801e77782328aefab22b9481b21f56a7279d7d97c3c5c5dc710c022074c7af1ae6ab8294e1e640b13ebcd4a2ede6ca86dce781515e7c9da92defb3e2df16087975f95150d0e4268d959a8cdbb6d13d3a9bb3bf56fc79021a2dbca366930637b70a370dbc9082c9ac3139ad72a659a", 0x79}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="9a7301c60c35de4c2665b64c390cee2896ae63924e7a9676a8dec604a87c001764423397a2102a83641caef00fd9d2c62bb8d91506f2a0b626e3f1d0eb4096838fab0635260bc3f5ab069c763bd80edfd01aba9f132e21293a0308dc4265a744bfb6f89e975c6031d3a6db79", 0x6c}, {&(0x7f0000000480)="2de3f53aa7f9154248d212b1937633ee12cb5b75eb3e057fbe0657f4159da6ef37a9a399945644b38e0a8c05dbe834892adc9215bb9a46b2bd898a1bb272bb3c50706c0d66814b3ed7cedbe8e7ad9ec94285bb56941e7abba59cd80e0cd9dd30aa1f1902e0a69a99eb94ad7ac916653b41de39c514612c81e2cecc15bc0ebe63034407f38f0cba54a85f071535186bc99fec07267e88bfebf7b62b506dec63ff9a378ed998dea730f685483c0af0594a36a369836236e55a52661519e14428197d69dfa75f0616558ef94009c00030b7e15d8e88", 0xd4}, {&(0x7f0000000580)="5beee9a79e0c9e192b42e21b009d6c002e246507fc7e111d9cbe1b4aca739ab9972a276e93414a2744bb8d11e4541477c81f1d4a8052950eee24ba3c49c99b2f55f8363ee66f92445d686e26d309bdc81ff2dcd29974c0ff069116e3107c1e2c281bc4356883ebc6a1ecf19f6ac641ae50f54d7b1d6ee97f6594837a5e4abba9ffd0bbd507108116f8eb96b417e56b79a588ef589fb961aa569eec167444e84e7c96786cae61419997c631895c7f5d7d4e774d4046ed968bfabf600b18b3b11406cf990d71cd5e678a2eabfff3f4c9b69e57a024fac882024ac974ca6cd5d60b98907e1ca7", 0xe5}, {&(0x7f0000000680)="678c9e7dc22b30f2536e2610d054d7b3efaa9f0cba71967046b8096ae37a9cca39e47c20a22339064bf5ca3df369e47885c5b6e3e20dd24b4d558a1c54358aff45336d7fdc19ee302f3f09ed723cbe4b3ea8fec0a887643ffb2c3bcc3a902c67d51add945250bc3be57bdb280ed1b029c8ec13745bfa1481bdcaf97848d54dceded7abd18224aa3f55621fcc12aae9920b61a3ea3d0223a1df249c29f56f1abdad498abe22575ffdf1d2e36d687d436f29c3460b9f56eaeb38abe0e36e3d6051e1ff4286abca899cdd86227d479796cac473584645f6c60f3ad70168f2b8a8d2db6b2c6e7299fff0ebd5aa81f41e6c28a910e90194116e845c3a30ae30d3", 0xfe}, {&(0x7f0000000780)="6ae277ab12706ff72c3df8e6be365b3f46c664912458b1d4213a3bcdde133ab734b1929bc72bea18a6c01e9ffce5656a26eba29f2ae324fd01211baadfcce312bd548f7cc0b40341d39dc626448ed536e99cf0e212ff4982955422ceb764d8c8a888a51faf9eb9cdf46d458c3bc1e34832a865f62d35172acf237a35adeadb6caa081411c8fb42a623d2f5f759f2e98dfa2176441cdd426a7cd0b30e5dd22d4e9873883e5279ebc1fd6e1c7c", 0xac}, {&(0x7f0000000840)="e26886d388be86b4", 0x8}, {&(0x7f0000000880)="c9ddfbc2a1d897e91a145d1e09de147d", 0x10}, {&(0x7f00000008c0)="3c67e2f8e35303c9f6b1b8a2bc8b01335d38b7b613c30d86a4160588531ed7dc380e675fe58bb82d42fec1a7aab2", 0x2e}], 0x8, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x1, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0xa1, [@multicast2]}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @empty]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x3, [0x1ff]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x4, "62d4"}, {0x6, 0x5, "a9a624"}, {0x2, 0x4, "0cf4"}, {0x7, 0x11, "5f85f6030000005dd6d48d0e60fc48"}, {0x2, 0x4, '\'*'}, {0x7, 0xc, "8f324d0c81746a43efcc"}, {0x5, 0xf, "fcd82444fa6c30d1501f9b8d25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xe0}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="51c53028843aa1b1488ef29ae558f11e08e2182b34d0a414122fd6e65f275a4b6458d1ebc3bfee2f010dc9e35ffc94202c2145303f7228eee084f0f21b427ab6151aaafedc7e2a8a5439d13645782686b363453dc7086534a85059270d807e17baf005ee3dbcac4c55ee89e18e808fff33d3d5c3c479d1b8d602cea1813c2839f88374c4d974f1e473038be0228934fa4f0a42a0388b32f6ff4da58e7021b368", 0xa0}, {&(0x7f0000000b80)="5431822d0fb8f6affd382df5b30babd6e7551c34f6656bb8578f21baea5c108f7bd0a2d69739fa54a471b85ef279cbae5c6069854255e46e8b3b86cb25f3065a5b243c544c85cc8569913596001d0d106b84ffa7cc8520418e8a165f030e8255f074c9e48a7d2c08181402", 0x6b}, {&(0x7f0000000c00)="a43f1ce981a9be2dd30cfb7c4ddec5a6c769cc215ce16ef20ef277bef7117460c177dbc9d83d6887304a30c658dfe723f518f7e8e12fb4ef14e128aad1553dc49cbfc10364d149613071df9ea55eb13ee0a644fe6eb217c61f86be3b4d4480fdba7c19fc894f7cb5e86c86332701e6bbc734c1c93412be11ff5a9cc2f10c4c1de7241aedfad6730dd76d99da3ac9fe409ce5755beb3f63e2fdb01522854792ff5b56edd0cea849f3e5d7c6aabfb4b5185e77237b150c798eacaeafb9648819066e15e2327949fb0fdf65a927d86da1092feb93cf37c8d6017dea6a5300d9", 0xde}, {&(0x7f0000000d00)="3adb6718496a2f9ff2f50bb4c3802202205903b53ecef6077a79ac85905d9341cf6272", 0x23}], 0x4, &(0x7f0000000d80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000e00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e40)="aa03568989", 0x5}, {&(0x7f0000000e80)="a06604b72c2d666f5421455fd1ff650bc050feeadbda4bc20471a603f4c443fca5161ad754ca56388fc46794560cda14a383c5469c05e6e69598a8d8cfa540d9eab9518a7ecccc82c8482d0801f77434f222f34202f276de3da82266c8e6009917852aacde0eb31101c07c6185daac7dc01fe8b43c24bd95a09c0183054a94a97c1afe387dc665473abfe888ed213b9c4dcde37c5d4e30ebe29e819c7b32ee56245dbcfe9abf87325bd3bdab4cd0241e", 0xb0}], 0x2, &(0x7f0000000f80)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x800}, {@local, 0x1ff}, {@multicast2, 0x4}, {@broadcast, 0xfe56}]}, @ssrr={0x89, 0x17, 0xf7, [@empty, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x6, [0x5, 0x8, 0x400, 0x66ca, 0x8d4, 0x8000, 0xffff0001, 0x1000]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @lsrr={0x83, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010100]}, @rr={0x7, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}], 0xa8}}, {{&(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="af0bdfe2d7f91122f82ebb69c19520e92c986a946c3499c1fb59135990c12b0f5e6510c5d4bc2ee0d2996728e207473a05df1ce738a646ead7b6802da31d648a81b23a51e95e186f2380765b8305f0184d43904c8777151f3fed5c05df34aecde6912a1e2245b501c1001160f81eadfe", 0x70}, {&(0x7f0000001100)="d1c084f479761cce2384f3f9da922664f29f72673d0e2ceb719716345c6218c517000be250a9f8dbd281f6459311f8cf1ab3446d84eece3d55f0d42120e3f71bf506b5196ee14d94830ba35a107f1a0a6daf3b1ee646a80f3d228604a0a66290ede16feca1b9da7e618369858f7b", 0x6e}, {&(0x7f0000001180)="2575f63c1dd8475569e1de7c9ff61d820c20e0f5a382f96a623ff730d64b834eb27187c1d577297ca732e4dd92a24ee1d44dd84ecb1b94834fc22f", 0x3b}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="20459b8177bb98343d3fec2f461a4cea9252cf7dd41c6c7276b1c35503179aad9eee80a9bf3f6e4fdfbab158642f989f194afa0da51cf28e715b14760a422b0b0faa71f2fc98a8d60353b0fbaeb5d12a7dd0bc698d8c2bd8647c43275d1d4e6eeba7f5e14548c70df969318637601451a90dceadfb9a0e2e371b7cddcf3a930547dd2ea47fec7db11714ffbcb22faa7bb32c57e72b8c819bd6e6735f15c5aadfcb67", 0xa2}, {&(0x7f00000012c0)="b12e", 0x2}], 0x6, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuset.effective_cpus\x00', 0x0, 0x0) ftruncate(r2, 0x7c00000000000) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:14 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) 14:44:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) 14:44:29 executing program 4: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001540)={0x0, @broadcast, @broadcast}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000001500)={&(0x7f00000011c0)=[0x0], 0x1, 0x7}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c683c9b9e74e8b2cb1ca4f6487328e21cb10bb0b3db0c7a13ab79ea872030446f043295347d3ff26189ec29bd03fd5c8d118439132852eea4574b4b4a4f85dc17a3561b609e9674cbdb263ac81e62d0264168297b46631abdaad77f16c92937eaaf959647d6f78db64a64b9853579bd2b166e69766525231dbc0abda1dc9624a87be589d20399d079d07d8ee201f7fce8d4a0b54a9713921bde276a763db89ab59d6fb9a653035579dfb03ace6288f7802e64d11a7aa082510778c6aa16794b040f8e362d43410af9f708b1bcf8260f73943e6a0f367564a8033ac7077bd6b669e0a651b94384f284ec89e5bbea24cf232b7cf2633d0f75d3b08", 0xfa}, {&(0x7f00000000c0)="60b9411353826d937c77d1ec30f01d3f2ea39ac475faedd5e3db8bbb742513cd50917419a098", 0x26}, {&(0x7f0000000280)="f36697189afb173921d654a3203e477bd2d4ffa496e0bcf06c3a1b3f809c7d527b642c6f73446376dcec121021de0f9662d087c6de684d3280ba1bce2eeaab5f8b559736da22616f5bf5e29ae1c3af3c79b0b8fba56809fd3390396ee4df1448512e5b76df6bbfec76da771bbc42508d58548ef33540b6ee6bd4beffce297a5b5a7893d28919721dcc427faa6160a1df3a6de289d6e367352bdb7e10de6d63c6c2d7b08513094390f19353370daa57330af13d5427b392e3062b279a695921542e5c8ed75a2acd49bcc7ab", 0xcb}, {&(0x7f0000000380)="6d42f75a4107a8e1fc8cd801e77782328aefab22b9481b21f56a7279d7d97c3c5c5dc710c022074c7af1ae6ab8294e1e640b13ebcd4a2ede6ca86dce781515e7c9da92defb3e2df16087975f95150d0e4268d959a8cdbb6d13d3a9bb3bf56fc79021a2dbca366930637b70a370dbc9082c9ac3139ad72a659a", 0x79}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="9a7301c60c35de4c2665b64c390cee2896ae63924e7a9676a8dec604a87c001764423397a2102a83641caef00fd9d2c62bb8d91506f2a0b626e3f1d0eb4096838fab0635260bc3f5ab069c763bd80edfd01aba9f132e21293a0308dc4265a744bfb6f89e975c6031d3a6db79", 0x6c}, {&(0x7f0000000480)="2de3f53aa7f9154248d212b1937633ee12cb5b75eb3e057fbe0657f4159da6ef37a9a399945644b38e0a8c05dbe834892adc9215bb9a46b2bd898a1bb272bb3c50706c0d66814b3ed7cedbe8e7ad9ec94285bb56941e7abba59cd80e0cd9dd30aa1f1902e0a69a99eb94ad7ac916653b41de39c514612c81e2cecc15bc0ebe63034407f38f0cba54a85f071535186bc99fec07267e88bfebf7b62b506dec63ff9a378ed998dea730f685483c0af0594a36a369836236e55a52661519e14428197d69dfa75f0616558ef94009c00030b7e15d8e88", 0xd4}, {&(0x7f0000000580)="5beee9a79e0c9e192b42e21b009d6c002e246507fc7e111d9cbe1b4aca739ab9972a276e93414a2744bb8d11e4541477c81f1d4a8052950eee24ba3c49c99b2f55f8363ee66f92445d686e26d309bdc81ff2dcd29974c0ff069116e3107c1e2c281bc4356883ebc6a1ecf19f6ac641ae50f54d7b1d6ee97f6594837a5e4abba9ffd0bbd507108116f8eb96b417e56b79a588ef589fb961aa569eec167444e84e7c96786cae61419997c631895c7f5d7d4e774d4046ed968bfabf600b18b3b11406cf990d71cd5e678a2eabfff3f4c9b69e57a024fac882024ac974ca6cd5d60b98907e1ca7", 0xe5}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="6ae277ab12706ff72c3df8e6be365b3f46c664912458b1d4213a3bcdde133ab734b1929bc72bea18a6c01e9ffce5656a26eba29f2ae324fd01211baadfcce312bd548f7cc0b40341d39dc626448ed536e99cf0e212ff4982955422ceb764d8c8a888a51faf9eb9cdf46d458c3bc1e34832a865f62d35172acf237a35adeadb6caa081411c8fb42a623d2f5f759f2e98dfa2176441cdd426a7cd0b30e5dd22d4e9873883e5279ebc1fd6e1c7c", 0xac}, {&(0x7f0000000840)="e26886d388be86b4", 0x8}, {&(0x7f0000000880)="c9ddfbc2a1d897e91a145d1e09de147d", 0x10}, {&(0x7f00000008c0)="3c67e2f8e35303c9f6b1b8a2bc8b01335d38b7b613c30d86a4160588531ed7dc380e675fe58bb82d42fec1a7aab2", 0x2e}], 0x8, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x1, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0xa1, [@multicast2]}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @empty]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x3, [0x1ff]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x4, "62d4"}, {0x6, 0x5, "a9a624"}, {0x2, 0x4, "0cf4"}, {0x7, 0x11, "5f85f6030000005dd6d48d0e60fc48"}, {0x2, 0x4, '\'*'}, {0x7, 0xc, "8f324d0c81746a43efcc"}, {0x5, 0xf, "fcd82444fa6c30d1501f9b8d25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xe0}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="51c53028843aa1b1488ef29ae558f11e08e2182b34d0a414122fd6e65f275a4b6458d1ebc3bfee2f010dc9e35ffc94202c2145303f7228eee084f0f21b427ab6151aaafedc7e2a8a5439d13645782686b363453dc7086534a85059270d807e17baf005ee3dbcac4c55ee89e18e808fff33d3d5c3c479d1b8d602cea1813c2839f88374c4d974f1e473038be0228934fa4f0a42a0388b32f6ff4da58e7021b368", 0xa0}, {&(0x7f0000000b80)="5431822d0fb8f6affd382df5b30babd6e7551c34f6656bb8578f21baea5c108f7bd0a2d69739fa54a471b85ef279cbae5c6069854255e46e8b3b86cb25f3065a5b243c544c85cc8569913596001d0d106b84ffa7cc8520418e8a165f030e8255f074c9e48a7d2c08181402", 0x6b}, {&(0x7f0000000c00)="a43f1ce981a9be2dd30cfb7c4ddec5a6c769cc215ce16ef20ef277bef7117460c177dbc9d83d6887304a30c658dfe723f518f7e8e12fb4ef14e128aad1553dc49cbfc10364d149613071df9ea55eb13ee0a644fe6eb217c61f86be3b4d4480fdba7c19fc894f7cb5e86c86332701e6bbc734c1c93412be11ff5a9cc2f10c4c1de7241aedfad6730dd76d99da3ac9fe409ce5755beb3f63e2fdb01522854792ff5b56edd0cea849f3e5d7c6aabfb4b5185e77237b150c798eacaeafb9648819066e15e2327949fb0fdf65a927d86da1092feb93cf37c8d6017dea6a5300d9", 0xde}, {&(0x7f0000000d00)="3adb6718496a2f9ff2f50bb4c3802202205903b53ecef6077a79ac85905d9341cf6272", 0x23}], 0x4, &(0x7f0000000d80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000e00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e40)="aa03568989", 0x5}, {&(0x7f0000000e80)="a06604b72c2d666f5421455fd1ff650bc050feeadbda4bc20471a603f4c443fca5161ad754ca56388fc46794560cda14a383c5469c05e6e69598a8d8cfa540d9eab9518a7ecccc82c8482d0801f77434f222f34202f276de3da82266c8e6009917852aacde0eb31101c07c6185daac7dc01fe8b43c24bd95a09c0183054a94a97c1afe387dc665473abfe888ed213b9c4dcde37c5d4e30ebe29e819c7b32ee56245dbcfe9abf87325bd3bdab4cd0241e", 0xb0}], 0x2, &(0x7f0000000f80)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x800}, {@local, 0x1ff}, {@multicast2, 0x4}, {@broadcast, 0xfe56}]}, @ssrr={0x89, 0x17, 0xf7, [@empty, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x6, [0x5, 0x8, 0x400, 0x66ca, 0x8d4, 0x8000, 0xffff0001, 0x1000]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @lsrr={0x83, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010100]}, @rr={0x7, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}], 0xa8}}, {{&(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="af0bdfe2d7f91122f82ebb69c19520e92c986a946c3499c1fb59135990c12b0f5e6510c5d4bc2ee0d2996728e207473a05df1ce738a646ead7b6802da31d648a81b23a51e95e186f2380765b8305f0184d43904c8777151f3fed5c05df34aecde6912a1e2245b501c1001160f81eadfe", 0x70}, {&(0x7f0000001100)="d1c084f479761cce2384f3f9da922664f29f72673d0e2ceb719716345c6218c517000be250a9f8dbd281f6459311f8cf1ab3446d84eece3d55f0d42120e3f71bf506b5196ee14d94830ba35a107f1a0a6daf3b1ee646a80f3d228604a0a66290ede16feca1b9da7e618369858f7b", 0x6e}, {&(0x7f0000001180)="2575f63c1dd8475569e1de7c9ff61d820c20e0f5a382f96a623ff730d64b834eb27187c1d577297ca732e4dd92a24ee1d44dd84ecb1b94834fc22f", 0x3b}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="20459b8177bb98343d3fec2f461a4cea9252cf7dd41c6c7276b1c35503179aad9eee80a9bf3f6e4fdfbab158642f989f194afa0da51cf28e715b14760a422b0b0faa71f2fc98a8d60353b0fbaeb5d12a7dd0bc698d8c2bd8647c43275d1d4e6eeba7f5e14548c70df969318637601451a90dceadfb9a0e2e371b7cddcf3a930547dd2ea47fec7db11714ffbcb22faa7bb32c57e72b8c819bd6e6735f15c5aadfcb67", 0xa2}, {&(0x7f00000012c0)="b12e", 0x2}], 0x6, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuset.effective_cpus\x00', 0x0, 0x0) ftruncate(r2, 0x7c00000000000) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) 14:44:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) 14:44:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) 14:44:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:29 executing program 5: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001540)={0x0, @broadcast, @broadcast}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000001500)={&(0x7f00000011c0)=[0x0], 0x1, 0x7}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c683c9b9e74e8b2cb1ca4f6487328e21cb10bb0b3db0c7a13ab79ea872030446f043295347d3ff26189ec29bd03fd5c8d118439132852eea4574b4b4a4f85dc17a3561b609e9674cbdb263ac81e62d0264168297b46631abdaad77f16c92937eaaf959647d6f78db64a64b9853579bd2b166e69766525231dbc0abda1dc9624a87be589d20399d079d07d8ee201f7fce8d4a0b54a9713921bde276a763db89ab59d6fb9a653035579dfb03ace6288f7802e64d11a7aa082510778c6aa16794b040f8e362d43410af9f708b1bcf8260f73943e6a0f367564a8033ac7077bd6b669e0a651b94384f284ec89e5bbea24cf232b7cf2633d0f75d3b08", 0xfa}, {&(0x7f00000000c0)="60b9411353826d937c77d1ec30f01d3f2ea39ac475faedd5e3db8bbb742513cd50917419a098", 0x26}, {&(0x7f0000000280)="f36697189afb173921d654a3203e477bd2d4ffa496e0bcf06c3a1b3f809c7d527b642c6f73446376dcec121021de0f9662d087c6de684d3280ba1bce2eeaab5f8b559736da22616f5bf5e29ae1c3af3c79b0b8fba56809fd3390396ee4df1448512e5b76df6bbfec76da771bbc42508d58548ef33540b6ee6bd4beffce297a5b5a7893d28919721dcc427faa6160a1df3a6de289d6e367352bdb7e10de6d63c6c2d7b08513094390f19353370daa57330af13d5427b392e3062b279a695921542e5c8ed75a2acd49bcc7ab", 0xcb}, {&(0x7f0000000380)="6d42f75a4107a8e1fc8cd801e77782328aefab22b9481b21f56a7279d7d97c3c5c5dc710c022074c7af1ae6ab8294e1e640b13ebcd4a2ede6ca86dce781515e7c9da92defb3e2df16087975f95150d0e4268d959a8cdbb6d13d3a9bb3bf56fc79021a2dbca366930637b70a370dbc9082c9ac3139ad72a659a", 0x79}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="9a7301c60c35de4c2665b64c390cee2896ae63924e7a9676a8dec604a87c001764423397a2102a83641caef00fd9d2c62bb8d91506f2a0b626e3f1d0eb4096838fab0635260bc3f5ab069c763bd80edfd01aba9f132e21293a0308dc4265a744bfb6f89e975c6031d3a6db79", 0x6c}, {&(0x7f0000000480)="2de3f53aa7f9154248d212b1937633ee12cb5b75eb3e057fbe0657f4159da6ef37a9a399945644b38e0a8c05dbe834892adc9215bb9a46b2bd898a1bb272bb3c50706c0d66814b3ed7cedbe8e7ad9ec94285bb56941e7abba59cd80e0cd9dd30aa1f1902e0a69a99eb94ad7ac916653b41de39c514612c81e2cecc15bc0ebe63034407f38f0cba54a85f071535186bc99fec07267e88bfebf7b62b506dec63ff9a378ed998dea730f685483c0af0594a36a369836236e55a52661519e14428197d69dfa75f0616558ef94009c00030b7e15d8e88", 0xd4}, {&(0x7f0000000580)="5beee9a79e0c9e192b42e21b009d6c002e246507fc7e111d9cbe1b4aca739ab9972a276e93414a2744bb8d11e4541477c81f1d4a8052950eee24ba3c49c99b2f55f8363ee66f92445d686e26d309bdc81ff2dcd29974c0ff069116e3107c1e2c281bc4356883ebc6a1ecf19f6ac641ae50f54d7b1d6ee97f6594837a5e4abba9ffd0bbd507108116f8eb96b417e56b79a588ef589fb961aa569eec167444e84e7c96786cae61419997c631895c7f5d7d4e774d4046ed968bfabf600b18b3b11406cf990d71cd5e678a2eabfff3f4c9b69e57a024fac882024ac974ca6cd5d60b98907e1ca7", 0xe5}, {&(0x7f0000000680)="678c9e7dc22b30f2536e2610d054d7b3efaa9f0cba71967046b8096ae37a9cca39e47c20a22339064bf5ca3df369e47885c5b6e3e20dd24b4d558a1c54358aff45336d7fdc19ee302f3f09ed723cbe4b3ea8fec0a887643ffb2c3bcc3a902c67d51add945250bc3be57bdb280ed1b029c8ec13745bfa1481bdcaf97848d54dceded7abd18224aa3f55621fcc12aae9920b61a3ea3d0223a1df249c29f56f1abdad498abe22575ffdf1d2e36d687d436f29c3460b9f56eaeb38abe0e36e3d6051e1ff4286abca899cdd86227d479796cac473584645f6c60f3ad70168f2b8a8d2db6b2c6e7299fff0ebd5aa81f41e6c28a910e90194116e845c3a30ae30d3", 0xfe}, {&(0x7f0000000780)="6ae277ab12706ff72c3df8e6be365b3f46c664912458b1d4213a3bcdde133ab734b1929bc72bea18a6c01e9ffce5656a26eba29f2ae324fd01211baadfcce312bd548f7cc0b40341d39dc626448ed536e99cf0e212ff4982955422ceb764d8c8a888a51faf9eb9cdf46d458c3bc1e34832a865f62d35172acf237a35adeadb6caa081411c8fb42a623d2f5f759f2e98dfa2176441cdd426a7cd0b30e5dd22d4e9873883e5279ebc1fd6e1c7c", 0xac}, {&(0x7f0000000840)="e26886d388be86b4", 0x8}, {&(0x7f0000000880)="c9ddfbc2a1d897e91a145d1e09de147d", 0x10}, {&(0x7f00000008c0)="3c67e2f8e35303c9f6b1b8a2bc8b01335d38b7b613c30d86a4160588531ed7dc380e675fe58bb82d42fec1a7aab2", 0x2e}], 0x8, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x1, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0xa1, [@multicast2]}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @empty]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x3, [0x1ff]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x4, "62d4"}, {0x6, 0x5, "a9a624"}, {0x2, 0x4, "0cf4"}, {0x7, 0x11, "5f85f6030000005dd6d48d0e60fc48"}, {0x2, 0x4, '\'*'}, {0x7, 0xc, "8f324d0c81746a43efcc"}, {0x5, 0xf, "fcd82444fa6c30d1501f9b8d25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xe0}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="51c53028843aa1b1488ef29ae558f11e08e2182b34d0a414122fd6e65f275a4b6458d1ebc3bfee2f010dc9e35ffc94202c2145303f7228eee084f0f21b427ab6151aaafedc7e2a8a5439d13645782686b363453dc7086534a85059270d807e17baf005ee3dbcac4c55ee89e18e808fff33d3d5c3c479d1b8d602cea1813c2839f88374c4d974f1e473038be0228934fa4f0a42a0388b32f6ff4da58e7021b368", 0xa0}, {&(0x7f0000000b80)="5431822d0fb8f6affd382df5b30babd6e7551c34f6656bb8578f21baea5c108f7bd0a2d69739fa54a471b85ef279cbae5c6069854255e46e8b3b86cb25f3065a5b243c544c85cc8569913596001d0d106b84ffa7cc8520418e8a165f030e8255f074c9e48a7d2c08181402", 0x6b}, {&(0x7f0000000c00)="a43f1ce981a9be2dd30cfb7c4ddec5a6c769cc215ce16ef20ef277bef7117460c177dbc9d83d6887304a30c658dfe723f518f7e8e12fb4ef14e128aad1553dc49cbfc10364d149613071df9ea55eb13ee0a644fe6eb217c61f86be3b4d4480fdba7c19fc894f7cb5e86c86332701e6bbc734c1c93412be11ff5a9cc2f10c4c1de7241aedfad6730dd76d99da3ac9fe409ce5755beb3f63e2fdb01522854792ff5b56edd0cea849f3e5d7c6aabfb4b5185e77237b150c798eacaeafb9648819066e15e2327949fb0fdf65a927d86da1092feb93cf37c8d6017dea6a5300d9", 0xde}, {&(0x7f0000000d00)="3adb6718496a2f9ff2f50bb4c3802202205903b53ecef6077a79ac85905d9341cf6272", 0x23}], 0x4, &(0x7f0000000d80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000e00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e40)="aa03568989", 0x5}, {&(0x7f0000000e80)="a06604b72c2d666f5421455fd1ff650bc050feeadbda4bc20471a603f4c443fca5161ad754ca56388fc46794560cda14a383c5469c05e6e69598a8d8cfa540d9eab9518a7ecccc82c8482d0801f77434f222f34202f276de3da82266c8e6009917852aacde0eb31101c07c6185daac7dc01fe8b43c24bd95a09c0183054a94a97c1afe387dc665473abfe888ed213b9c4dcde37c5d4e30ebe29e819c7b32ee56245dbcfe9abf87325bd3bdab4cd0241e", 0xb0}], 0x2, &(0x7f0000000f80)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x800}, {@local, 0x1ff}, {@multicast2, 0x4}, {@broadcast, 0xfe56}]}, @ssrr={0x89, 0x17, 0xf7, [@empty, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x6, [0x5, 0x8, 0x400, 0x66ca, 0x8d4, 0x8000, 0xffff0001, 0x1000]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @lsrr={0x83, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010100]}, @rr={0x7, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}], 0xa8}}, {{&(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="af0bdfe2d7f91122f82ebb69c19520e92c986a946c3499c1fb59135990c12b0f5e6510c5d4bc2ee0d2996728e207473a05df1ce738a646ead7b6802da31d648a81b23a51e95e186f2380765b8305f0184d43904c8777151f3fed5c05df34aecde6912a1e2245b501c1001160f81eadfe", 0x70}, {&(0x7f0000001100)="d1c084f479761cce2384f3f9da922664f29f72673d0e2ceb719716345c6218c517000be250a9f8dbd281f6459311f8cf1ab3446d84eece3d55f0d42120e3f71bf506b5196ee14d94830ba35a107f1a0a6daf3b1ee646a80f3d228604a0a66290ede16feca1b9da7e618369858f7b", 0x6e}, {&(0x7f0000001180)="2575f63c1dd8475569e1de7c9ff61d820c20e0f5a382f96a623ff730d64b834eb27187c1d577297ca732e4dd92a24ee1d44dd84ecb1b94834fc22f", 0x3b}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="20459b8177bb98343d3fec2f461a4cea9252cf7dd41c6c7276b1c35503179aad9eee80a9bf3f6e4fdfbab158642f989f194afa0da51cf28e715b14760a422b0b0faa71f2fc98a8d60353b0fbaeb5d12a7dd0bc698d8c2bd8647c43275d1d4e6eeba7f5e14548c70df969318637601451a90dceadfb9a0e2e371b7cddcf3a930547dd2ea47fec7db11714ffbcb22faa7bb32c57e72b8c819bd6e6735f15c5aadfcb67", 0xa2}, {&(0x7f00000012c0)="b12e", 0x2}], 0x6, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuset.effective_cpus\x00', 0x0, 0x0) ftruncate(r2, 0x7c00000000000) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:29 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) 14:44:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) [ 632.058901] loop7: detected capacity change from 0 to 41948160 [ 632.066913] loop1: detected capacity change from 0 to 41948160 14:44:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) 14:44:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) [ 632.095064] FAT-fs (loop1): invalid media value (0x00) [ 632.095770] FAT-fs (loop1): Can't find a valid FAT filesystem [ 632.107923] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:29 executing program 5: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001540)={0x0, @broadcast, @broadcast}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000001500)={&(0x7f00000011c0)=[0x0], 0x1, 0x7}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f00000000c0)="60b9411353826d937c77d1ec30f01d3f2ea39ac475faedd5e3db8bbb742513cd50917419a098", 0x26}, {&(0x7f0000000280)="f36697189afb173921d654a3203e477bd2d4ffa496e0bcf06c3a1b3f809c7d527b642c6f73446376dcec121021de0f9662d087c6de684d3280ba1bce2eeaab5f8b559736da22616f5bf5e29ae1c3af3c79b0b8fba56809fd3390396ee4df1448512e5b76df6bbfec76da771bbc42508d58548ef33540b6ee6bd4beffce297a5b5a7893d28919721dcc427faa6160a1df3a6de289d6e367352bdb7e10de6d63c6c2d7b08513094390f19353370daa57330af13d5427b392e3062b279a695921542e5c8ed75a2acd49bcc7ab", 0xcb}, {&(0x7f0000000380)="6d42f75a4107a8e1fc8cd801e77782328aefab22b9481b21f56a7279d7d97c3c5c5dc710c022074c7af1ae6ab8294e1e640b13ebcd4a2ede6ca86dce781515e7c9da92defb3e2df16087975f95150d0e4268d959a8cdbb6d13d3a9bb3bf56fc79021a2dbca366930637b70a370dbc9082c9ac3139ad72a659a", 0x79}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="9a7301c60c35de4c2665b64c390cee2896ae63924e7a9676a8dec604a87c001764423397a2102a83641caef00fd9d2c62bb8d91506f2a0b626e3f1d0eb4096838fab0635260bc3f5ab069c763bd80edfd01aba9f132e21293a0308dc4265a744bfb6f89e975c6031d3a6db79", 0x6c}, {&(0x7f0000000480)="2de3f53aa7f9154248d212b1937633ee12cb5b75eb3e057fbe0657f4159da6ef37a9a399945644b38e0a8c05dbe834892adc9215bb9a46b2bd898a1bb272bb3c50706c0d66814b3ed7cedbe8e7ad9ec94285bb56941e7abba59cd80e0cd9dd30aa1f1902e0a69a99eb94ad7ac916653b41de39c514612c81e2cecc15bc0ebe63034407f38f0cba54a85f071535186bc99fec07267e88bfebf7b62b506dec63ff9a378ed998dea730f685483c0af0594a36a369836236e55a52661519e14428197d69dfa75f0616558ef94009c00030b7e15d8e88", 0xd4}, {&(0x7f0000000580)="5beee9a79e0c9e192b42e21b009d6c002e246507fc7e111d9cbe1b4aca739ab9972a276e93414a2744bb8d11e4541477c81f1d4a8052950eee24ba3c49c99b2f55f8363ee66f92445d686e26d309bdc81ff2dcd29974c0ff069116e3107c1e2c281bc4356883ebc6a1ecf19f6ac641ae50f54d7b1d6ee97f6594837a5e4abba9ffd0bbd507108116f8eb96b417e56b79a588ef589fb961aa569eec167444e84e7c96786cae61419997c631895c7f5d7d4e774d4046ed968bfabf600b18b3b11406cf990d71cd5e678a2eabfff3f4c9b69e57a024fac882024ac974ca6cd5d60b98907e1ca7", 0xe5}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="6ae277ab12706ff72c3df8e6be365b3f46c664912458b1d4213a3bcdde133ab734b1929bc72bea18a6c01e9ffce5656a26eba29f2ae324fd01211baadfcce312bd548f7cc0b40341d39dc626448ed536e99cf0e212ff4982955422ceb764d8c8a888a51faf9eb9cdf46d458c3bc1e34832a865f62d35172acf237a35adeadb6caa081411c8fb42a623d2f5f759f2e98dfa2176441cdd426a7cd0b30e5dd22d4e9873883e5279ebc1fd6e1c7c", 0xac}, {&(0x7f0000000840)="e26886d388be86b4", 0x8}, {&(0x7f0000000880)="c9ddfbc2a1d897e91a145d1e09de147d", 0x10}, {&(0x7f00000008c0)="3c67e2f8e35303c9f6b1b8a2bc8b01335d38b7b613c30d86a4160588531ed7dc380e675fe58bb82d42fec1a7aab2", 0x2e}], 0x8, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x1, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0xa1, [@multicast2]}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @empty]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x3, [0x1ff]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x4, "62d4"}, {0x6, 0x5, "a9a624"}, {0x2, 0x4, "0cf4"}, {0x7, 0x11, "5f85f6030000005dd6d48d0e60fc48"}, {0x2, 0x4, '\'*'}, {0x7, 0xc, "8f324d0c81746a43efcc"}, {0x5, 0xf, "fcd82444fa6c30d1501f9b8d25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xe0}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="51c53028843aa1b1488ef29ae558f11e08e2182b34d0a414122fd6e65f275a4b6458d1ebc3bfee2f010dc9e35ffc94202c2145303f7228eee084f0f21b427ab6151aaafedc7e2a8a5439d13645782686b363453dc7086534a85059270d807e17baf005ee3dbcac4c55ee89e18e808fff33d3d5c3c479d1b8d602cea1813c2839f88374c4d974f1e473038be0228934fa4f0a42a0388b32f6ff4da58e7021b368", 0xa0}, {&(0x7f0000000b80)="5431822d0fb8f6affd382df5b30babd6e7551c34f6656bb8578f21baea5c108f7bd0a2d69739fa54a471b85ef279cbae5c6069854255e46e8b3b86cb25f3065a5b243c544c85cc8569913596001d0d106b84ffa7cc8520418e8a165f030e8255f074c9e48a7d2c08181402", 0x6b}, {&(0x7f0000000c00)="a43f1ce981a9be2dd30cfb7c4ddec5a6c769cc215ce16ef20ef277bef7117460c177dbc9d83d6887304a30c658dfe723f518f7e8e12fb4ef14e128aad1553dc49cbfc10364d149613071df9ea55eb13ee0a644fe6eb217c61f86be3b4d4480fdba7c19fc894f7cb5e86c86332701e6bbc734c1c93412be11ff5a9cc2f10c4c1de7241aedfad6730dd76d99da3ac9fe409ce5755beb3f63e2fdb01522854792ff5b56edd0cea849f3e5d7c6aabfb4b5185e77237b150c798eacaeafb9648819066e15e2327949fb0fdf65a927d86da1092feb93cf37c8d6017dea6a5300d9", 0xde}, {&(0x7f0000000d00)="3adb6718496a2f9ff2f50bb4c3802202205903b53ecef6077a79ac85905d9341cf6272", 0x23}], 0x4, &(0x7f0000000d80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000e00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e40)="aa03568989", 0x5}, {&(0x7f0000000e80)="a06604b72c2d666f5421455fd1ff650bc050feeadbda4bc20471a603f4c443fca5161ad754ca56388fc46794560cda14a383c5469c05e6e69598a8d8cfa540d9eab9518a7ecccc82c8482d0801f77434f222f34202f276de3da82266c8e6009917852aacde0eb31101c07c6185daac7dc01fe8b43c24bd95a09c0183054a94a97c1afe387dc665473abfe888ed213b9c4dcde37c5d4e30ebe29e819c7b32ee56245dbcfe9abf87325bd3bdab4cd0241e", 0xb0}], 0x2, &(0x7f0000000f80)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x800}, {@local, 0x1ff}, {@multicast2, 0x4}, {@broadcast, 0xfe56}]}, @ssrr={0x89, 0x17, 0xf7, [@empty, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x6, [0x5, 0x8, 0x400, 0x66ca, 0x8d4, 0x8000, 0xffff0001, 0x1000]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @lsrr={0x83, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010100]}, @rr={0x7, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}], 0xa8}}, {{&(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="af0bdfe2d7f91122f82ebb69c19520e92c986a946c3499c1fb59135990c12b0f5e6510c5d4bc2ee0d2996728e207473a05df1ce738a646ead7b6802da31d648a81b23a51e95e186f2380765b8305f0184d43904c8777151f3fed5c05df34aecde6912a1e2245b501c1001160f81eadfe", 0x70}, {&(0x7f0000001100)="d1c084f479761cce2384f3f9da922664f29f72673d0e2ceb719716345c6218c517000be250a9f8dbd281f6459311f8cf1ab3446d84eece3d55f0d42120e3f71bf506b5196ee14d94830ba35a107f1a0a6daf3b1ee646a80f3d228604a0a66290ede16feca1b9da7e618369858f7b", 0x6e}, {&(0x7f0000001180)="2575f63c1dd8475569e1de7c9ff61d820c20e0f5a382f96a623ff730d64b834eb27187c1d577297ca732e4dd92a24ee1d44dd84ecb1b94834fc22f", 0x3b}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="20459b8177bb98343d3fec2f461a4cea9252cf7dd41c6c7276b1c35503179aad9eee80a9bf3f6e4fdfbab158642f989f194afa0da51cf28e715b14760a422b0b0faa71f2fc98a8d60353b0fbaeb5d12a7dd0bc698d8c2bd8647c43275d1d4e6eeba7f5e14548c70df969318637601451a90dceadfb9a0e2e371b7cddcf3a930547dd2ea47fec7db11714ffbcb22faa7bb32c57e72b8c819bd6e6735f15c5aadfcb67", 0xa2}, {&(0x7f00000012c0)="b12e", 0x2}], 0x6, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuset.effective_cpus\x00', 0x0, 0x0) ftruncate(r2, 0x7c00000000000) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:29 executing program 4: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001540)={0x0, @broadcast, @broadcast}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000001500)={&(0x7f00000011c0)=[0x0], 0x1, 0x7}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f00000000c0)="60b9411353826d937c77d1ec30f01d3f2ea39ac475faedd5e3db8bbb742513cd50917419a098", 0x26}, {&(0x7f0000000280)="f36697189afb173921d654a3203e477bd2d4ffa496e0bcf06c3a1b3f809c7d527b642c6f73446376dcec121021de0f9662d087c6de684d3280ba1bce2eeaab5f8b559736da22616f5bf5e29ae1c3af3c79b0b8fba56809fd3390396ee4df1448512e5b76df6bbfec76da771bbc42508d58548ef33540b6ee6bd4beffce297a5b5a7893d28919721dcc427faa6160a1df3a6de289d6e367352bdb7e10de6d63c6c2d7b08513094390f19353370daa57330af13d5427b392e3062b279a695921542e5c8ed75a2acd49bcc7ab", 0xcb}, {&(0x7f0000000380)="6d42f75a4107a8e1fc8cd801e77782328aefab22b9481b21f56a7279d7d97c3c5c5dc710c022074c7af1ae6ab8294e1e640b13ebcd4a2ede6ca86dce781515e7c9da92defb3e2df16087975f95150d0e4268d959a8cdbb6d13d3a9bb3bf56fc79021a2dbca366930637b70a370dbc9082c9ac3139ad72a659a", 0x79}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="9a7301c60c35de4c2665b64c390cee2896ae63924e7a9676a8dec604a87c001764423397a2102a83641caef00fd9d2c62bb8d91506f2a0b626e3f1d0eb4096838fab0635260bc3f5ab069c763bd80edfd01aba9f132e21293a0308dc4265a744bfb6f89e975c6031d3a6db79", 0x6c}, {&(0x7f0000000480)="2de3f53aa7f9154248d212b1937633ee12cb5b75eb3e057fbe0657f4159da6ef37a9a399945644b38e0a8c05dbe834892adc9215bb9a46b2bd898a1bb272bb3c50706c0d66814b3ed7cedbe8e7ad9ec94285bb56941e7abba59cd80e0cd9dd30aa1f1902e0a69a99eb94ad7ac916653b41de39c514612c81e2cecc15bc0ebe63034407f38f0cba54a85f071535186bc99fec07267e88bfebf7b62b506dec63ff9a378ed998dea730f685483c0af0594a36a369836236e55a52661519e14428197d69dfa75f0616558ef94009c00030b7e15d8e88", 0xd4}, {&(0x7f0000000580)="5beee9a79e0c9e192b42e21b009d6c002e246507fc7e111d9cbe1b4aca739ab9972a276e93414a2744bb8d11e4541477c81f1d4a8052950eee24ba3c49c99b2f55f8363ee66f92445d686e26d309bdc81ff2dcd29974c0ff069116e3107c1e2c281bc4356883ebc6a1ecf19f6ac641ae50f54d7b1d6ee97f6594837a5e4abba9ffd0bbd507108116f8eb96b417e56b79a588ef589fb961aa569eec167444e84e7c96786cae61419997c631895c7f5d7d4e774d4046ed968bfabf600b18b3b11406cf990d71cd5e678a2eabfff3f4c9b69e57a024fac882024ac974ca6cd5d60b98907e1ca7", 0xe5}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="6ae277ab12706ff72c3df8e6be365b3f46c664912458b1d4213a3bcdde133ab734b1929bc72bea18a6c01e9ffce5656a26eba29f2ae324fd01211baadfcce312bd548f7cc0b40341d39dc626448ed536e99cf0e212ff4982955422ceb764d8c8a888a51faf9eb9cdf46d458c3bc1e34832a865f62d35172acf237a35adeadb6caa081411c8fb42a623d2f5f759f2e98dfa2176441cdd426a7cd0b30e5dd22d4e9873883e5279ebc1fd6e1c7c", 0xac}, {&(0x7f0000000840)="e26886d388be86b4", 0x8}, {&(0x7f0000000880)="c9ddfbc2a1d897e91a145d1e09de147d", 0x10}, {&(0x7f00000008c0)="3c67e2f8e35303c9f6b1b8a2bc8b01335d38b7b613c30d86a4160588531ed7dc380e675fe58bb82d42fec1a7aab2", 0x2e}], 0x8, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x1, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0xa1, [@multicast2]}, @lsrr={0x83, 0xb, 0xa2, [@loopback, @empty]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x3, [0x1ff]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x4, "62d4"}, {0x6, 0x5, "a9a624"}, {0x2, 0x4, "0cf4"}, {0x7, 0x11, "5f85f6030000005dd6d48d0e60fc48"}, {0x2, 0x4, '\'*'}, {0x7, 0xc, "8f324d0c81746a43efcc"}, {0x5, 0xf, "fcd82444fa6c30d1501f9b8d25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xe0}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="51c53028843aa1b1488ef29ae558f11e08e2182b34d0a414122fd6e65f275a4b6458d1ebc3bfee2f010dc9e35ffc94202c2145303f7228eee084f0f21b427ab6151aaafedc7e2a8a5439d13645782686b363453dc7086534a85059270d807e17baf005ee3dbcac4c55ee89e18e808fff33d3d5c3c479d1b8d602cea1813c2839f88374c4d974f1e473038be0228934fa4f0a42a0388b32f6ff4da58e7021b368", 0xa0}, {&(0x7f0000000b80)="5431822d0fb8f6affd382df5b30babd6e7551c34f6656bb8578f21baea5c108f7bd0a2d69739fa54a471b85ef279cbae5c6069854255e46e8b3b86cb25f3065a5b243c544c85cc8569913596001d0d106b84ffa7cc8520418e8a165f030e8255f074c9e48a7d2c08181402", 0x6b}, {&(0x7f0000000c00)="a43f1ce981a9be2dd30cfb7c4ddec5a6c769cc215ce16ef20ef277bef7117460c177dbc9d83d6887304a30c658dfe723f518f7e8e12fb4ef14e128aad1553dc49cbfc10364d149613071df9ea55eb13ee0a644fe6eb217c61f86be3b4d4480fdba7c19fc894f7cb5e86c86332701e6bbc734c1c93412be11ff5a9cc2f10c4c1de7241aedfad6730dd76d99da3ac9fe409ce5755beb3f63e2fdb01522854792ff5b56edd0cea849f3e5d7c6aabfb4b5185e77237b150c798eacaeafb9648819066e15e2327949fb0fdf65a927d86da1092feb93cf37c8d6017dea6a5300d9", 0xde}, {&(0x7f0000000d00)="3adb6718496a2f9ff2f50bb4c3802202205903b53ecef6077a79ac85905d9341cf6272", 0x23}], 0x4, &(0x7f0000000d80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000e00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e40)="aa03568989", 0x5}, {&(0x7f0000000e80)="a06604b72c2d666f5421455fd1ff650bc050feeadbda4bc20471a603f4c443fca5161ad754ca56388fc46794560cda14a383c5469c05e6e69598a8d8cfa540d9eab9518a7ecccc82c8482d0801f77434f222f34202f276de3da82266c8e6009917852aacde0eb31101c07c6185daac7dc01fe8b43c24bd95a09c0183054a94a97c1afe387dc665473abfe888ed213b9c4dcde37c5d4e30ebe29e819c7b32ee56245dbcfe9abf87325bd3bdab4cd0241e", 0xb0}], 0x2, &(0x7f0000000f80)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x800}, {@local, 0x1ff}, {@multicast2, 0x4}, {@broadcast, 0xfe56}]}, @ssrr={0x89, 0x17, 0xf7, [@empty, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x24, 0x0, 0x6, [0x5, 0x8, 0x400, 0x66ca, 0x8d4, 0x8000, 0xffff0001, 0x1000]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @lsrr={0x83, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010100]}, @rr={0x7, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}], 0xa8}}, {{&(0x7f0000001040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)="af0bdfe2d7f91122f82ebb69c19520e92c986a946c3499c1fb59135990c12b0f5e6510c5d4bc2ee0d2996728e207473a05df1ce738a646ead7b6802da31d648a81b23a51e95e186f2380765b8305f0184d43904c8777151f3fed5c05df34aecde6912a1e2245b501c1001160f81eadfe", 0x70}, {&(0x7f0000001100)="d1c084f479761cce2384f3f9da922664f29f72673d0e2ceb719716345c6218c517000be250a9f8dbd281f6459311f8cf1ab3446d84eece3d55f0d42120e3f71bf506b5196ee14d94830ba35a107f1a0a6daf3b1ee646a80f3d228604a0a66290ede16feca1b9da7e618369858f7b", 0x6e}, {&(0x7f0000001180)="2575f63c1dd8475569e1de7c9ff61d820c20e0f5a382f96a623ff730d64b834eb27187c1d577297ca732e4dd92a24ee1d44dd84ecb1b94834fc22f", 0x3b}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="20459b8177bb98343d3fec2f461a4cea9252cf7dd41c6c7276b1c35503179aad9eee80a9bf3f6e4fdfbab158642f989f194afa0da51cf28e715b14760a422b0b0faa71f2fc98a8d60353b0fbaeb5d12a7dd0bc698d8c2bd8647c43275d1d4e6eeba7f5e14548c70df969318637601451a90dceadfb9a0e2e371b7cddcf3a930547dd2ea47fec7db11714ffbcb22faa7bb32c57e72b8c819bd6e6735f15c5aadfcb67", 0xa2}, {&(0x7f00000012c0)="b12e", 0x2}], 0x6, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuset.effective_cpus\x00', 0x0, 0x0) ftruncate(r2, 0x7c00000000000) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:29 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) 14:44:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) 14:44:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) [ 632.303763] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) 14:44:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) [ 632.341929] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further [ 632.390167] loop1: detected capacity change from 0 to 41948160 [ 632.405215] FAT-fs (loop1): invalid media value (0x00) [ 632.406042] FAT-fs (loop1): Can't find a valid FAT filesystem 14:44:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) 14:44:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 14:44:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x21, 0x0, 0x0) 14:44:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) 14:44:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) 14:44:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) [ 647.192897] loop1: detected capacity change from 0 to 41948160 [ 647.212408] FAT-fs (loop1): invalid media value (0x00) [ 647.213889] FAT-fs (loop1): Can't find a valid FAT filesystem 14:44:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) [ 647.253848] loop7: detected capacity change from 0 to 41948160 [ 647.264328] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:44:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 14:44:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x21, 0x0, 0x0) 14:44:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) [ 647.565762] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 14:44:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:44:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:44:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x9000000) 14:44:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) 14:44:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 14:44:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) [ 661.536781] loop1: detected capacity change from 0 to 41948160 [ 661.550375] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further [ 661.560964] loop7: detected capacity change from 0 to 41948160 [ 661.570669] FAT-fs (loop1): invalid media value (0x00) [ 661.571554] FAT-fs (loop1): Can't find a valid FAT filesystem 14:44:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) 14:44:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) 14:44:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) 14:44:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 14:44:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:44:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 14:44:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:44:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:45:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:45:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) [ 678.265135] loop7: detected capacity change from 0 to 41948160 14:45:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) 14:45:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) 14:45:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) 14:45:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:45:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) [ 678.346942] loop1: detected capacity change from 0 to 41948160 14:45:15 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) 14:45:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) 14:45:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 678.376153] FAT-fs (loop1): invalid media value (0x00) [ 678.377227] FAT-fs (loop1): Can't find a valid FAT filesystem 14:45:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) [ 678.448867] loop7: detected capacity change from 0 to 41948160 14:45:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:45:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)) 14:45:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) 14:45:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4000, 0x8) [ 678.517907] loop1: detected capacity change from 0 to 41948160 14:45:15 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) [ 678.561917] FAT-fs (loop1): invalid media value (0x00) [ 678.564950] FAT-fs (loop1): Can't find a valid FAT filesystem 14:45:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) 14:45:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) 14:45:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) 14:45:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:45:28 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) 14:45:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) [ 691.688845] loop1: detected capacity change from 0 to 41948160 14:45:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:45:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) 14:45:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) [ 691.734818] FAT-fs (loop1): invalid media value (0x00) [ 691.736059] FAT-fs (loop1): Can't find a valid FAT filesystem 14:45:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:45:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 691.776109] loop7: detected capacity change from 0 to 41948160 14:45:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:45:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:45:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) 14:45:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x21, 0x0, 0x0) 14:45:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:45:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 707.703716] loop7: detected capacity change from 0 to 41948160 [ 707.731128] loop1: detected capacity change from 0 to 41948160 14:45:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:45:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) ftruncate(r1, 0x1000004) 14:45:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 707.780073] FAT-fs (loop1): invalid media value (0x00) [ 707.781406] FAT-fs (loop1): Can't find a valid FAT filesystem 14:45:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 14:45:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:45:45 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 707.978372] loop7: detected capacity change from 0 to 41948160 14:45:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 14:45:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) ftruncate(r1, 0x1000004) 14:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:45:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 14:45:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:45:58 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 721.167803] loop7: detected capacity change from 0 to 41948160 14:45:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:45:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) [ 721.216414] loop1: detected capacity change from 0 to 41948160 [ 721.240618] FAT-fs (loop1): invalid media value (0x00) [ 721.241535] FAT-fs (loop1): Can't find a valid FAT filesystem [ 721.259731] loop7: detected capacity change from 0 to 41948160 14:45:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:45:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) ftruncate(r1, 0x1000004) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:45:58 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:45:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 721.374538] loop3: detected capacity change from 0 to 41948160 14:45:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:45:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) 14:46:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) ftruncate(r1, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:46:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) ftruncate(0xffffffffffffffff, 0x1000004) 14:46:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) 14:46:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:46:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:46:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 14:46:19 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:19 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) [ 742.009227] loop7: detected capacity change from 0 to 41948160 [ 742.027812] loop1: detected capacity change from 0 to 41948160 [ 742.035150] FAT-fs (loop1): invalid media value (0x00) [ 742.036513] FAT-fs (loop1): Can't find a valid FAT filesystem 14:46:19 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:46:19 executing program 2: syz_io_uring_setup(0x7bb2, 0x0, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:32 executing program 2: syz_io_uring_setup(0x7bb2, 0x0, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:32 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:46:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) write$P9_RREADDIR(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x21, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x357e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 14:46:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:46:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:46:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x30, r0, 0x10000000) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) 14:46:32 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:46:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 755.483874] loop7: detected capacity change from 0 to 41948160 14:46:32 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) [ 755.529078] loop1: detected capacity change from 0 to 41948160 [ 755.536470] FAT-fs (loop1): invalid media value (0x00) [ 755.537832] FAT-fs (loop1): Can't find a valid FAT filesystem 14:46:32 executing program 2: syz_io_uring_setup(0x7bb2, 0x0, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:32 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:46:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:32 executing program 6: r0 = open(0x0, 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:46:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) ftruncate(0xffffffffffffffff, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 755.683111] loop1: detected capacity change from 0 to 41948160 14:46:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 755.688330] FAT-fs (loop1): invalid media value (0x00) [ 755.689047] FAT-fs (loop1): Can't find a valid FAT filesystem 14:46:32 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) 14:46:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:46:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) ftruncate(0xffffffffffffffff, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 755.754671] loop3: detected capacity change from 0 to 41948160 14:46:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:46:32 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 755.819401] loop1: detected capacity change from 0 to 41948160 [ 755.829373] loop7: detected capacity change from 0 to 41948160 [ 755.842729] FAT-fs (loop1): invalid media value (0x00) [ 755.844008] FAT-fs (loop1): Can't find a valid FAT filesystem 14:46:47 executing program 6: r0 = open(0x0, 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:46:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:46:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) ftruncate(0xffffffffffffffff, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:46:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:46:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:46:47 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, 0x0, 0x0) 14:46:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:46:47 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 770.532031] loop7: detected capacity change from 0 to 41948160 [ 770.581243] loop1: detected capacity change from 0 to 41948160 [ 770.590809] loop3: detected capacity change from 0 to 41948160 [ 770.624486] FAT-fs (loop1): invalid media value (0x00) [ 770.625782] FAT-fs (loop1): Can't find a valid FAT filesystem [ 785.411980] loop1: detected capacity change from 0 to 41948160 [ 785.418868] FAT-fs (loop1): invalid media value (0x00) [ 785.420169] FAT-fs (loop1): Can't find a valid FAT filesystem 14:47:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:47:02 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:47:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:02 executing program 6: r0 = open(0x0, 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:47:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, 0x0, 0x0) 14:47:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 785.476081] loop7: detected capacity change from 0 to 41948160 14:47:02 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) [ 785.491220] loop3: detected capacity change from 0 to 41948160 14:47:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, 0x0, 0x0) 14:47:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:02 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:47:02 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:47:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280), 0x0) 14:47:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:47:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 1) 14:47:02 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:47:02 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:47:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:02 executing program 4: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 785.785245] loop1: detected capacity change from 0 to 41948160 [ 785.823534] FAT-fs (loop1): invalid media value (0x00) [ 785.824779] FAT-fs (loop1): Can't find a valid FAT filesystem 14:47:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280), 0x0) 14:47:02 executing program 4: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 785.874745] FAULT_INJECTION: forcing a failure. [ 785.874745] name failslab, interval 1, probability 0, space 0, times 1 [ 785.877221] CPU: 1 PID: 6784 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 785.878653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 785.880400] Call Trace: [ 785.880953] dump_stack+0x107/0x167 [ 785.881723] should_fail.cold+0x5/0xa [ 785.882537] ? getname_flags.part.0+0x50/0x4f0 [ 785.883479] should_failslab+0x5/0x20 [ 785.884280] kmem_cache_alloc+0x5b/0x310 [ 785.885138] getname_flags.part.0+0x50/0x4f0 [ 785.886057] getname+0x8e/0xd0 [ 785.886740] do_sys_openat2+0xf9/0x4d0 [ 785.887563] ? build_open_flags+0x6f0/0x6f0 [ 785.888477] ? __mutex_unlock_slowpath+0xe1/0x600 [ 785.889496] ? wait_for_completion_io+0x270/0x270 [ 785.890519] __x64_sys_openat+0x13f/0x1f0 [ 785.891402] ? __ia32_sys_open+0x1c0/0x1c0 [ 785.892291] ? ksys_write+0x1a9/0x260 [ 785.893098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 785.894204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 785.895302] do_syscall_64+0x33/0x40 [ 785.896094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 785.897168] RIP: 0033:0x7f6bae9f4b19 [ 785.897949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 785.901833] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.903429] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 785.904936] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 785.906450] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.907964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.909471] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 785.916363] loop7: detected capacity change from 0 to 41948160 14:47:03 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:47:03 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:47:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:03 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280), 0x0) 14:47:03 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) 14:47:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) 14:47:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:47:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 2) 14:47:17 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:47:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:17 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:47:17 executing program 4: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 800.651935] loop1: detected capacity change from 0 to 41948160 [ 800.658128] FAULT_INJECTION: forcing a failure. [ 800.658128] name failslab, interval 1, probability 0, space 0, times 0 [ 800.659578] CPU: 1 PID: 6820 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 800.660423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 800.661426] Call Trace: [ 800.661752] dump_stack+0x107/0x167 [ 800.662195] should_fail.cold+0x5/0xa [ 800.662674] ? create_object.isra.0+0x3a/0xa30 [ 800.663230] should_failslab+0x5/0x20 [ 800.663697] kmem_cache_alloc+0x5b/0x310 [ 800.664207] create_object.isra.0+0x3a/0xa30 [ 800.664738] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 800.665354] kmem_cache_alloc+0x159/0x310 [ 800.665573] FAT-fs (loop1): invalid media value (0x00) [ 800.665868] getname_flags.part.0+0x50/0x4f0 [ 800.666974] FAT-fs (loop1): Can't find a valid FAT filesystem [ 800.667456] getname+0x8e/0xd0 [ 800.667468] do_sys_openat2+0xf9/0x4d0 [ 800.667481] ? build_open_flags+0x6f0/0x6f0 [ 800.667499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 800.670617] ? wait_for_completion_io+0x270/0x270 [ 800.671209] __x64_sys_openat+0x13f/0x1f0 [ 800.671713] ? __ia32_sys_open+0x1c0/0x1c0 [ 800.672233] ? ksys_write+0x1a9/0x260 [ 800.672701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 800.673333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 800.673955] do_syscall_64+0x33/0x40 [ 800.674402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 800.675019] RIP: 0033:0x7f6bae9f4b19 [ 800.675464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.677683] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 800.678593] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 800.679451] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 800.680315] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.681169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.682025] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 800.695056] loop7: detected capacity change from 0 to 41948160 14:47:17 executing program 6: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901002e"], 0x43) 14:47:17 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:47:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) 14:47:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 800.822638] loop1: detected capacity change from 0 to 41948160 14:47:17 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, 0x0, 0x43) [ 800.840146] FAT-fs (loop1): invalid media value (0x00) [ 800.840938] FAT-fs (loop1): Can't find a valid FAT filesystem 14:47:18 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:18 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:47:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 813.758178] FAULT_INJECTION: forcing a failure. [ 813.758178] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 813.759875] CPU: 0 PID: 6854 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 813.760821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.761962] Call Trace: [ 813.762327] dump_stack+0x107/0x167 [ 813.762827] should_fail.cold+0x5/0xa [ 813.763348] strncpy_from_user+0x34/0x470 [ 813.763921] getname_flags.part.0+0x95/0x4f0 [ 813.764535] getname+0x8e/0xd0 [ 813.764978] do_sys_openat2+0xf9/0x4d0 [ 813.765513] ? build_open_flags+0x6f0/0x6f0 [ 813.766102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 813.766760] ? wait_for_completion_io+0x270/0x270 [ 813.767424] __x64_sys_openat+0x13f/0x1f0 [ 813.767990] ? __ia32_sys_open+0x1c0/0x1c0 [ 813.768575] ? ksys_write+0x1a9/0x260 [ 813.769097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 813.769810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 813.770502] do_syscall_64+0x33/0x40 [ 813.771000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 813.771686] RIP: 0033:0x7f6bae9f4b19 [ 813.772196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.774653] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 813.775672] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 813.776645] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 813.777622] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 813.778612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.779582] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 14:47:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 3) 14:47:30 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:30 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, 0x0, 0x43) 14:47:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:47:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:47:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:47:30 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) 14:47:30 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, 0x0, 0x43) [ 813.806568] loop7: detected capacity change from 0 to 41948160 [ 813.813041] FAULT_INJECTION: forcing a failure. [ 813.813041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.815853] CPU: 1 PID: 6865 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 813.817451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.819366] Call Trace: [ 813.819978] dump_stack+0x107/0x167 [ 813.820821] should_fail.cold+0x5/0xa [ 813.821702] _copy_from_user+0x2e/0x1b0 [ 813.822624] io_uring_setup+0x9b/0x2980 [ 813.823547] ? __mutex_unlock_slowpath+0xe1/0x600 [ 813.824669] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 813.825825] ? wait_for_completion_io+0x270/0x270 [ 813.826932] ? rcu_read_lock_any_held+0x75/0xa0 [ 813.828006] ? vfs_write+0x354/0xb10 [ 813.828877] ? fput_many+0x2f/0x1a0 [ 813.829706] ? ksys_write+0x1a9/0x260 [ 813.830572] ? __ia32_sys_read+0xb0/0xb0 [ 813.831508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 813.832718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 813.833905] do_syscall_64+0x33/0x40 [ 813.834758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 813.835928] RIP: 0033:0x7f5deeaf2b19 [ 813.836793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.841016] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 813.842738] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 813.844367] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 813.845979] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 813.847592] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 813.849215] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 813.867929] loop5: detected capacity change from 0 to 41948160 [ 813.885951] loop1: detected capacity change from 0 to 41948160 [ 813.893855] FAT-fs (loop1): invalid media value (0x00) [ 813.894636] FAT-fs (loop1): Can't find a valid FAT filesystem 14:47:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 4) 14:47:46 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 1) 14:47:46 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 2) 14:47:46 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[], 0x43) 14:47:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:47:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:47:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 829.618662] FAULT_INJECTION: forcing a failure. [ 829.618662] name failslab, interval 1, probability 0, space 0, times 0 [ 829.621116] CPU: 0 PID: 6878 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 829.622614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 829.624440] Call Trace: [ 829.625018] dump_stack+0x107/0x167 [ 829.625815] should_fail.cold+0x5/0xa [ 829.626648] ? __alloc_file+0x21/0x320 [ 829.627501] should_failslab+0x5/0x20 [ 829.628346] kmem_cache_alloc+0x5b/0x310 [ 829.629232] __alloc_file+0x21/0x320 [ 829.630043] alloc_empty_file+0x6d/0x170 [ 829.630930] path_openat+0xe6/0x2770 [ 829.631745] ? __lock_acquire+0x1657/0x5b00 [ 829.632703] ? path_lookupat+0x860/0x860 [ 829.633587] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 829.634731] ? SOFTIRQ_verbose+0x10/0x10 [ 829.635613] ? find_held_lock+0x2c/0x110 [ 829.636517] do_filp_open+0x190/0x3e0 [ 829.637346] ? may_open_dev+0xf0/0xf0 [ 829.638176] ? alloc_fd+0x2e7/0x670 [ 829.638966] ? lock_downgrade+0x6d0/0x6d0 [ 829.639863] ? do_raw_spin_lock+0x121/0x260 [ 829.640812] ? rwlock_bug.part.0+0x90/0x90 [ 829.641737] ? _raw_spin_unlock+0x1a/0x30 [ 829.642633] ? alloc_fd+0x2e7/0x670 [ 829.643437] do_sys_openat2+0x171/0x4d0 [ 829.644312] ? build_open_flags+0x6f0/0x6f0 [ 829.645244] ? __mutex_unlock_slowpath+0xe1/0x600 [ 829.646292] ? wait_for_completion_io+0x270/0x270 [ 829.647346] __x64_sys_openat+0x13f/0x1f0 [ 829.648253] ? __ia32_sys_open+0x1c0/0x1c0 [ 829.649163] ? ksys_write+0x1a9/0x260 [ 829.649994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 829.651135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.652264] do_syscall_64+0x33/0x40 [ 829.653073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 829.654223] RIP: 0033:0x7f6bae9f4b19 [ 829.655027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.659019] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 829.660687] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 829.662258] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 829.663841] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 829.665404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.666950] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 829.686327] FAULT_INJECTION: forcing a failure. [ 829.686327] name failslab, interval 1, probability 0, space 0, times 0 [ 829.688809] CPU: 1 PID: 6890 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 829.689971] FAULT_INJECTION: forcing a failure. [ 829.689971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.690299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 829.690305] Call Trace: [ 829.690326] dump_stack+0x107/0x167 [ 829.690348] should_fail.cold+0x5/0xa [ 829.690370] ? io_uring_setup+0x258/0x2980 [ 829.697884] should_failslab+0x5/0x20 [ 829.698715] kmem_cache_alloc_trace+0x55/0x320 [ 829.699710] io_uring_setup+0x258/0x2980 [ 829.700607] ? __mutex_unlock_slowpath+0xe1/0x600 [ 829.701653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 829.702746] ? wait_for_completion_io+0x270/0x270 [ 829.703812] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 829.704956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.706073] do_syscall_64+0x33/0x40 [ 829.706878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 829.707988] RIP: 0033:0x7f5deeaf2b19 [ 829.708801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.712797] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 829.714632] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 829.716550] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 829.718460] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 829.720395] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 829.722175] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 829.723849] CPU: 0 PID: 6892 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 829.725313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 829.727081] Call Trace: [ 829.727645] dump_stack+0x107/0x167 [ 829.728423] should_fail.cold+0x5/0xa [ 829.729232] _copy_from_user+0x2e/0x1b0 [ 829.730078] iovec_from_user+0x141/0x400 [ 829.730936] ? lock_acquire+0x197/0x470 [ 829.731777] __import_iovec+0x67/0x590 [ 829.732602] ? lock_release+0x680/0x680 [ 829.733436] ? SOFTIRQ_verbose+0x10/0x10 [ 829.734311] import_iovec+0x83/0xb0 [ 829.735089] vfs_readv+0xbb/0x160 [ 829.735831] ? vfs_iter_read+0xa0/0xa0 [ 829.736661] ? __fdget_pos+0xf1/0x190 [ 829.737463] ? lock_downgrade+0x6d0/0x6d0 [ 829.738331] ? mutex_lock_io_nested+0xf30/0xf30 [ 829.739306] ? ksys_write+0x12d/0x260 [ 829.740112] ? __fget_files+0x2f8/0x520 [ 829.740972] do_readv+0x139/0x300 [ 829.741705] ? vfs_readv+0x160/0x160 [ 829.742497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 829.743596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.744685] do_syscall_64+0x33/0x40 [ 829.745465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 829.746539] RIP: 0033:0x7f659f34eb19 [ 829.747317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.751211] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 829.752818] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 829.754298] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 829.755801] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 829.757304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.758815] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 14:47:46 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 829.775149] loop7: detected capacity change from 0 to 41948160 14:47:46 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[], 0x43) [ 829.829886] loop1: detected capacity change from 0 to 41948160 14:47:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 5) [ 829.860039] FAT-fs (loop1): invalid media value (0x00) [ 829.861306] FAT-fs (loop1): Can't find a valid FAT filesystem 14:47:47 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 2) [ 829.869343] FAULT_INJECTION: forcing a failure. [ 829.869343] name failslab, interval 1, probability 0, space 0, times 0 [ 829.871899] CPU: 1 PID: 6902 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 829.873352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 829.875101] Call Trace: [ 829.875657] dump_stack+0x107/0x167 [ 829.876435] should_fail.cold+0x5/0xa [ 829.877243] ? create_object.isra.0+0x3a/0xa30 [ 829.878199] should_failslab+0x5/0x20 [ 829.878993] kmem_cache_alloc+0x5b/0x310 [ 829.879852] create_object.isra.0+0x3a/0xa30 [ 829.880787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 829.881858] kmem_cache_alloc+0x159/0x310 [ 829.882738] __alloc_file+0x21/0x320 [ 829.883521] alloc_empty_file+0x6d/0x170 [ 829.884390] path_openat+0xe6/0x2770 [ 829.885171] ? __lock_acquire+0x1657/0x5b00 [ 829.886079] ? path_lookupat+0x860/0x860 [ 829.886939] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 829.888042] ? SOFTIRQ_verbose+0x10/0x10 [ 829.888903] ? find_held_lock+0x2c/0x110 [ 829.889764] do_filp_open+0x190/0x3e0 [ 829.890555] ? may_open_dev+0xf0/0xf0 [ 829.891357] ? alloc_fd+0x2e7/0x670 [ 829.892118] ? lock_downgrade+0x6d0/0x6d0 [ 829.892984] ? do_raw_spin_lock+0x121/0x260 [ 829.893877] ? rwlock_bug.part.0+0x90/0x90 [ 829.894762] ? _raw_spin_unlock+0x1a/0x30 [ 829.895619] ? alloc_fd+0x2e7/0x670 [ 829.896397] do_sys_openat2+0x171/0x4d0 [ 829.897226] ? build_open_flags+0x6f0/0x6f0 [ 829.898142] ? __mutex_unlock_slowpath+0xe1/0x600 [ 829.899150] ? wait_for_completion_io+0x270/0x270 [ 829.900161] __x64_sys_openat+0x13f/0x1f0 [ 829.901045] ? __ia32_sys_open+0x1c0/0x1c0 [ 829.901922] ? ksys_write+0x1a9/0x260 [ 829.902727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 829.903834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.904936] do_syscall_64+0x33/0x40 [ 829.905717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 829.906801] RIP: 0033:0x7f6bae9f4b19 [ 829.907585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.911472] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 829.913082] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 829.914583] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 829.916084] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 829.917584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.919287] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 14:47:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:47:47 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 3) 14:47:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 6) [ 830.046907] FAULT_INJECTION: forcing a failure. [ 830.046907] name failslab, interval 1, probability 0, space 0, times 0 [ 830.049384] CPU: 0 PID: 6910 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 830.050838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.051586] FAULT_INJECTION: forcing a failure. [ 830.051586] name failslab, interval 1, probability 0, space 0, times 0 [ 830.052591] Call Trace: [ 830.052617] dump_stack+0x107/0x167 [ 830.052640] should_fail.cold+0x5/0xa [ 830.052662] ? create_object.isra.0+0x3a/0xa30 [ 830.052683] should_failslab+0x5/0x20 [ 830.052702] kmem_cache_alloc+0x5b/0x310 [ 830.059889] create_object.isra.0+0x3a/0xa30 [ 830.060825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 830.061895] kmem_cache_alloc_trace+0x151/0x320 [ 830.062890] io_uring_setup+0x258/0x2980 [ 830.063752] ? __mutex_unlock_slowpath+0xe1/0x600 [ 830.064788] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 830.065861] ? wait_for_completion_io+0x270/0x270 [ 830.066901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.068004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.069108] do_syscall_64+0x33/0x40 [ 830.069933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.071010] RIP: 0033:0x7f5deeaf2b19 [ 830.071787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.076355] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 830.078278] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 830.080074] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 830.081883] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 830.083672] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 830.085461] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 830.087269] CPU: 1 PID: 6911 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 830.088712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.090431] Call Trace: [ 830.090979] dump_stack+0x107/0x167 [ 830.091738] should_fail.cold+0x5/0xa [ 830.092539] ? kvmalloc_node+0x119/0x170 [ 830.093402] should_failslab+0x5/0x20 [ 830.094196] __kmalloc_node+0x76/0x420 [ 830.095015] kvmalloc_node+0x119/0x170 [ 830.095834] seq_read_iter+0x81c/0x12b0 [ 830.096667] ? __might_fault+0xd3/0x180 [ 830.097507] do_iter_readv_writev+0x57c/0x750 [ 830.098697] ? new_sync_write+0x660/0x660 [ 830.099559] ? fsnotify_perm.part.0+0x22d/0x620 [ 830.100535] ? security_file_permission+0xb1/0xe0 [ 830.101532] do_iter_read+0x301/0x760 [ 830.102334] ? import_iovec+0x83/0xb0 [ 830.103398] vfs_readv+0xe5/0x160 [ 830.104243] ? vfs_iter_read+0xa0/0xa0 [ 830.105055] ? __fdget_pos+0xf1/0x190 [ 830.105847] ? lock_downgrade+0x6d0/0x6d0 [ 830.106711] ? ksys_write+0x12d/0x260 [ 830.107502] ? __fget_files+0x2f8/0x520 [ 830.108357] do_readv+0x139/0x300 [ 830.109090] ? vfs_readv+0x160/0x160 [ 830.109883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.110313] FAULT_INJECTION: forcing a failure. [ 830.110313] name failslab, interval 1, probability 0, space 0, times 0 [ 830.110976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.111000] do_syscall_64+0x33/0x40 [ 830.111028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.116638] RIP: 0033:0x7f659f34eb19 [ 830.117409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.121199] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 830.122772] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 830.124538] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 830.126409] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.128299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.130159] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 830.131931] CPU: 0 PID: 6914 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 830.133665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.135756] Call Trace: [ 830.136430] dump_stack+0x107/0x167 [ 830.137349] should_fail.cold+0x5/0xa [ 830.138302] ? security_file_alloc+0x34/0x170 [ 830.139424] should_failslab+0x5/0x20 [ 830.140389] kmem_cache_alloc+0x5b/0x310 [ 830.141417] security_file_alloc+0x34/0x170 [ 830.142493] __alloc_file+0xb7/0x320 [ 830.143418] alloc_empty_file+0x6d/0x170 [ 830.144455] path_openat+0xe6/0x2770 [ 830.145389] ? __lock_acquire+0x1657/0x5b00 [ 830.146483] ? path_lookupat+0x860/0x860 [ 830.147506] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 830.148827] ? SOFTIRQ_verbose+0x10/0x10 [ 830.149843] ? find_held_lock+0x2c/0x110 [ 830.150875] do_filp_open+0x190/0x3e0 [ 830.151824] ? may_open_dev+0xf0/0xf0 [ 830.152793] ? alloc_fd+0x2e7/0x670 [ 830.153742] ? lock_downgrade+0x6d0/0x6d0 [ 830.154805] ? do_raw_spin_lock+0x121/0x260 [ 830.155868] ? rwlock_bug.part.0+0x90/0x90 [ 830.156926] ? _raw_spin_unlock+0x1a/0x30 [ 830.157946] ? alloc_fd+0x2e7/0x670 [ 830.158857] do_sys_openat2+0x171/0x4d0 [ 830.159844] ? build_open_flags+0x6f0/0x6f0 [ 830.160916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 830.162111] ? wait_for_completion_io+0x270/0x270 [ 830.163309] __x64_sys_openat+0x13f/0x1f0 [ 830.164349] ? __ia32_sys_open+0x1c0/0x1c0 [ 830.165387] ? ksys_write+0x1a9/0x260 [ 830.166340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.167615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.168914] do_syscall_64+0x33/0x40 [ 830.169839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.171088] RIP: 0033:0x7f6bae9f4b19 [ 830.172002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.176536] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 830.178432] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 830.180202] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 830.181979] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.183725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.185482] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 14:48:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 7) 14:48:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 3) [ 845.860353] FAULT_INJECTION: forcing a failure. [ 845.860353] name failslab, interval 1, probability 0, space 0, times 0 [ 845.862239] CPU: 0 PID: 6923 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 845.863309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.864633] Call Trace: [ 845.865052] dump_stack+0x107/0x167 [ 845.865629] should_fail.cold+0x5/0xa [ 845.866241] ? create_object.isra.0+0x3a/0xa30 [ 845.866966] should_failslab+0x5/0x20 [ 845.867576] kmem_cache_alloc+0x5b/0x310 [ 845.868231] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 845.869111] create_object.isra.0+0x3a/0xa30 [ 845.869806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 845.870619] kmem_cache_alloc+0x159/0x310 [ 845.871279] security_file_alloc+0x34/0x170 [ 845.871960] __alloc_file+0xb7/0x320 [ 845.872550] alloc_empty_file+0x6d/0x170 [ 845.873185] path_openat+0xe6/0x2770 [ 845.873771] ? __lock_acquire+0x1657/0x5b00 [ 845.874464] ? path_lookupat+0x860/0x860 [ 845.875110] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 845.875946] ? SOFTIRQ_verbose+0x10/0x10 [ 845.876588] ? find_held_lock+0x2c/0x110 [ 845.877225] do_filp_open+0x190/0x3e0 [ 845.877820] ? may_open_dev+0xf0/0xf0 [ 845.878416] ? alloc_fd+0x2e7/0x670 [ 845.878976] ? lock_downgrade+0x6d0/0x6d0 [ 845.879634] ? do_raw_spin_lock+0x121/0x260 [ 845.880299] ? rwlock_bug.part.0+0x90/0x90 [ 845.880957] ? _raw_spin_unlock+0x1a/0x30 [ 845.881611] ? alloc_fd+0x2e7/0x670 [ 845.882195] do_sys_openat2+0x171/0x4d0 [ 845.882818] ? build_open_flags+0x6f0/0x6f0 [ 845.883487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 845.884226] ? wait_for_completion_io+0x270/0x270 [ 845.884994] __x64_sys_openat+0x13f/0x1f0 [ 845.885641] ? __ia32_sys_open+0x1c0/0x1c0 [ 845.886280] ? ksys_write+0x1a9/0x260 [ 845.886883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.887696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.888481] do_syscall_64+0x33/0x40 [ 845.889064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.889858] RIP: 0033:0x7f6bae9f4b19 [ 845.890430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.893305] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 845.894484] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 845.895587] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 845.896716] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.897810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.898911] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 845.902000] FAULT_INJECTION: forcing a failure. [ 845.902000] name fail_page_alloc, interval 1, probability 0, space 0, times 1 14:48:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:48:03 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:48:03 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[], 0x43) 14:48:03 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 4) [ 845.903883] CPU: 0 PID: 6932 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 845.905442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.906747] Call Trace: [ 845.907149] dump_stack+0x107/0x167 [ 845.907696] should_fail.cold+0x5/0xa [ 845.908287] __alloc_pages_nodemask+0x182/0x600 [ 845.908997] ? lock_release+0x680/0x680 [ 845.909585] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 845.910498] ? lock_downgrade+0x6d0/0x6d0 [ 845.911145] alloc_pages_current+0x187/0x280 [ 845.911797] kmalloc_order+0x35/0x160 [ 845.912399] kmalloc_order_trace+0x14/0xa0 [ 845.913068] io_uring_setup+0x33c/0x2980 [ 845.913687] ? __mutex_unlock_slowpath+0xe1/0x600 [ 845.914410] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 845.915184] ? wait_for_completion_io+0x270/0x270 [ 845.915944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.916764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.917549] do_syscall_64+0x33/0x40 [ 845.918110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.918911] RIP: 0033:0x7f5deeaf2b19 [ 845.919477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.922295] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 845.923423] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 845.924492] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 845.925589] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 845.926667] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 845.927769] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 845.934504] FAULT_INJECTION: forcing a failure. [ 845.934504] name failslab, interval 1, probability 0, space 0, times 0 [ 845.936810] CPU: 0 PID: 6930 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 845.937855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.939081] Call Trace: [ 845.939486] dump_stack+0x107/0x167 [ 845.940026] should_fail.cold+0x5/0xa [ 845.940621] ? create_object.isra.0+0x3a/0xa30 [ 845.941321] should_failslab+0x5/0x20 [ 845.941895] kmem_cache_alloc+0x5b/0x310 [ 845.942507] create_object.isra.0+0x3a/0xa30 [ 845.943177] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 845.943937] __kmalloc_node+0x1ae/0x420 [ 845.944551] kvmalloc_node+0x119/0x170 [ 845.945149] seq_read_iter+0x81c/0x12b0 [ 845.945763] ? __might_fault+0xd3/0x180 [ 845.946392] do_iter_readv_writev+0x57c/0x750 [ 845.947087] ? new_sync_write+0x660/0x660 [ 845.947721] ? fsnotify_perm.part.0+0x22d/0x620 [ 845.948458] ? security_file_permission+0xb1/0xe0 [ 845.949199] do_iter_read+0x301/0x760 [ 845.949782] ? import_iovec+0x83/0xb0 [ 845.950374] vfs_readv+0xe5/0x160 [ 845.950902] ? vfs_iter_read+0xa0/0xa0 [ 845.951506] ? __fdget_pos+0xf1/0x190 [ 845.952093] ? lock_downgrade+0x6d0/0x6d0 [ 845.952729] ? ksys_write+0x12d/0x260 [ 845.953316] ? __fget_files+0x2f8/0x520 [ 845.953920] do_readv+0x139/0x300 [ 845.954465] ? vfs_readv+0x160/0x160 [ 845.955030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.955855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.956647] do_syscall_64+0x33/0x40 [ 845.957198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.957976] RIP: 0033:0x7f659f34eb19 [ 845.958520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.961231] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 14:48:03 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 5) [ 845.962331] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 845.963525] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 845.964612] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.965724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.966749] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 845.995792] loop1: detected capacity change from 0 to 41948160 14:48:03 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 4) [ 846.026935] loop7: detected capacity change from 0 to 41948160 14:48:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 846.053694] FAULT_INJECTION: forcing a failure. [ 846.053694] name failslab, interval 1, probability 0, space 0, times 0 [ 846.053966] FAULT_INJECTION: forcing a failure. [ 846.053966] name failslab, interval 1, probability 0, space 0, times 0 [ 846.055602] CPU: 0 PID: 6944 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 846.059005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 846.060235] Call Trace: [ 846.060637] dump_stack+0x107/0x167 [ 846.061183] should_fail.cold+0x5/0xa [ 846.061748] ? cgroup_show_path+0xc4/0x5f0 [ 846.062373] should_failslab+0x5/0x20 [ 846.062938] kmem_cache_alloc_trace+0x55/0x320 [ 846.063623] cgroup_show_path+0xc4/0x5f0 [ 846.064224] ? cgroup_file_open+0x360/0x360 [ 846.064882] kernfs_sop_show_path+0x122/0x190 [ 846.065548] ? kernfs_test_super+0x140/0x140 [ 846.066199] show_mountinfo+0x23b/0xb80 [ 846.066786] ? rwlock_bug.part.0+0x90/0x90 [ 846.067407] ? mounts_release+0x100/0x100 [ 846.068016] ? do_raw_spin_unlock+0x4f/0x220 [ 846.068676] ? _raw_spin_unlock+0x1a/0x30 [ 846.069293] seq_read_iter+0xbf0/0x12b0 [ 846.069899] do_iter_readv_writev+0x57c/0x750 [ 846.070566] ? new_sync_write+0x660/0x660 [ 846.071171] ? fsnotify_perm.part.0+0x22d/0x620 [ 846.071852] ? security_file_permission+0xb1/0xe0 [ 846.072587] do_iter_read+0x301/0x760 [ 846.073164] ? import_iovec+0x83/0xb0 [ 846.073735] vfs_readv+0xe5/0x160 [ 846.074241] ? vfs_iter_read+0xa0/0xa0 [ 846.074807] ? __fdget_pos+0xf1/0x190 [ 846.075353] ? lock_downgrade+0x6d0/0x6d0 [ 846.075939] ? ksys_write+0x12d/0x260 [ 846.076493] ? __fget_files+0x2f8/0x520 [ 846.077073] do_readv+0x139/0x300 [ 846.077566] ? vfs_readv+0x160/0x160 [ 846.078111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 846.078860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 846.079589] do_syscall_64+0x33/0x40 [ 846.080112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 846.080853] RIP: 0033:0x7f659f34eb19 [ 846.081383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 846.083980] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 846.085066] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 846.086067] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 846.087057] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 846.088056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.089074] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 846.090693] CPU: 1 PID: 6945 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 846.092147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 846.093906] Call Trace: [ 846.094466] dump_stack+0x107/0x167 [ 846.095239] should_fail.cold+0x5/0xa [ 846.096047] ? create_object.isra.0+0x3a/0xa30 [ 846.097032] should_failslab+0x5/0x20 [ 846.097843] kmem_cache_alloc+0x5b/0x310 [ 846.098724] create_object.isra.0+0x3a/0xa30 [ 846.099653] ? kasan_unpoison_shadow+0x33/0x50 [ 846.100627] kmalloc_order+0xfe/0x160 [ 846.101430] kmalloc_order_trace+0x14/0xa0 [ 846.102324] io_uring_setup+0x33c/0x2980 [ 846.102847] FAT-fs (loop1): invalid media value (0x00) [ 846.103185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 846.103210] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 846.103955] FAT-fs (loop1): Can't find a valid FAT filesystem [ 846.104947] ? wait_for_completion_io+0x270/0x270 [ 846.104994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 846.109024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 846.110130] do_syscall_64+0x33/0x40 [ 846.110924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 846.112013] RIP: 0033:0x7f5deeaf2b19 [ 846.112808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 846.116709] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 846.118310] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 846.119818] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 846.121335] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 14:48:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 8) [ 846.122851] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 846.124523] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:48:03 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x43) 14:48:03 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 846.168083] FAULT_INJECTION: forcing a failure. [ 846.168083] name failslab, interval 1, probability 0, space 0, times 0 [ 846.170858] CPU: 1 PID: 6949 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 846.172303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 846.174069] Call Trace: [ 846.174632] dump_stack+0x107/0x167 [ 846.175409] should_fail.cold+0x5/0xa [ 846.176211] ? __d_alloc+0x2a/0x990 [ 846.176991] should_failslab+0x5/0x20 [ 846.177797] kmem_cache_alloc+0x5b/0x310 [ 846.178660] __d_alloc+0x2a/0x990 [ 846.179391] ? mark_lock+0xf5/0x2df0 [ 846.180176] d_alloc+0x46/0x240 [ 846.180887] d_alloc_parallel+0xe9/0x1a30 [ 846.181768] ? __d_lookup+0x396/0x760 [ 846.182572] ? lock_downgrade+0x6d0/0x6d0 [ 846.183442] ? find_held_lock+0x2c/0x110 [ 846.184301] ? __d_lookup_rcu+0x6d0/0x6d0 [ 846.185195] ? __d_lookup+0x3bf/0x760 [ 846.186003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 846.187120] lookup_open.isra.0+0x962/0x1270 [ 846.188053] ? vfs_tmpfile+0x350/0x350 [ 846.188920] path_openat+0x972/0x2770 [ 846.189744] ? path_lookupat+0x860/0x860 [ 846.190613] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 846.191718] ? SOFTIRQ_verbose+0x10/0x10 [ 846.192579] ? find_held_lock+0x2c/0x110 [ 846.193449] do_filp_open+0x190/0x3e0 14:48:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 846.194255] ? may_open_dev+0xf0/0xf0 [ 846.195262] ? do_raw_spin_lock+0x121/0x260 [ 846.196173] ? rwlock_bug.part.0+0x90/0x90 [ 846.197092] ? _raw_spin_unlock+0x1a/0x30 [ 846.197962] ? alloc_fd+0x2e7/0x670 [ 846.198744] do_sys_openat2+0x171/0x4d0 [ 846.199603] ? build_open_flags+0x6f0/0x6f0 [ 846.200523] ? __mutex_unlock_slowpath+0xe1/0x600 [ 846.201544] ? wait_for_completion_io+0x270/0x270 [ 846.202569] __x64_sys_openat+0x13f/0x1f0 [ 846.203441] ? __ia32_sys_open+0x1c0/0x1c0 [ 846.204327] ? ksys_write+0x1a9/0x260 [ 846.205153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 846.206261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 846.207357] do_syscall_64+0x33/0x40 [ 846.208144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 846.209236] RIP: 0033:0x7f6bae9f4b19 [ 846.210022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 846.213914] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 846.215510] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 846.217024] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 846.218522] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 846.220017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.221527] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 846.235841] loop1: detected capacity change from 0 to 41948160 [ 846.260658] FAT-fs (loop1): invalid media value (0x00) [ 846.261347] FAT-fs (loop1): Can't find a valid FAT filesystem [ 846.303822] loop7: detected capacity change from 0 to 41948160 14:48:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 6) 14:48:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 5) 14:48:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:48:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x43) 14:48:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 9) [ 858.357013] FAULT_INJECTION: forcing a failure. [ 858.357013] name failslab, interval 1, probability 0, space 0, times 0 [ 858.359996] CPU: 1 PID: 6969 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 858.361718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.363825] Call Trace: [ 858.364511] dump_stack+0x107/0x167 [ 858.365455] should_fail.cold+0x5/0xa [ 858.365662] FAULT_INJECTION: forcing a failure. [ 858.365662] name failslab, interval 1, probability 0, space 0, times 0 [ 858.366429] ? io_uring_setup+0x40b/0x2980 [ 858.366453] should_failslab+0x5/0x20 [ 858.369768] kmem_cache_alloc_trace+0x55/0x320 [ 858.370943] io_uring_setup+0x40b/0x2980 [ 858.371980] ? __mutex_unlock_slowpath+0xe1/0x600 [ 858.373226] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 858.374525] ? wait_for_completion_io+0x270/0x270 [ 858.375778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.377143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.378481] do_syscall_64+0x33/0x40 [ 858.379432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.380748] RIP: 0033:0x7f5deeaf2b19 [ 858.381692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.386421] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 858.388366] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 858.390194] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 858.392002] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 858.393822] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 858.395640] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 858.397565] CPU: 0 PID: 6968 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 858.398365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.399316] Call Trace: [ 858.399624] dump_stack+0x107/0x167 [ 858.400045] should_fail.cold+0x5/0xa [ 858.400484] ? create_object.isra.0+0x3a/0xa30 [ 858.401016] should_failslab+0x5/0x20 [ 858.401456] kmem_cache_alloc+0x5b/0x310 [ 858.401924] create_object.isra.0+0x3a/0xa30 [ 858.402424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.403008] kmem_cache_alloc+0x159/0x310 [ 858.403484] __d_alloc+0x2a/0x990 [ 858.403882] ? mark_lock+0xf5/0x2df0 [ 858.404309] d_alloc+0x46/0x240 [ 858.404699] d_alloc_parallel+0xe9/0x1a30 [ 858.405178] ? __d_lookup+0x396/0x760 [ 858.405616] ? lock_downgrade+0x6d0/0x6d0 [ 858.406093] ? find_held_lock+0x2c/0x110 [ 858.406562] ? __d_lookup_rcu+0x6d0/0x6d0 [ 858.407042] ? __d_lookup+0x3bf/0x760 [ 858.407482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.408091] lookup_open.isra.0+0x962/0x1270 [ 858.408611] ? vfs_tmpfile+0x350/0x350 [ 858.409078] path_openat+0x972/0x2770 [ 858.409534] ? path_lookupat+0x860/0x860 [ 858.410014] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 858.410613] ? SOFTIRQ_verbose+0x10/0x10 [ 858.411075] ? find_held_lock+0x2c/0x110 [ 858.411549] do_filp_open+0x190/0x3e0 [ 858.411986] ? may_open_dev+0xf0/0xf0 [ 858.412427] ? do_raw_spin_lock+0x121/0x260 [ 858.412935] ? rwlock_bug.part.0+0x90/0x90 [ 858.413423] ? _raw_spin_unlock+0x1a/0x30 [ 858.413898] ? alloc_fd+0x2e7/0x670 [ 858.414321] do_sys_openat2+0x171/0x4d0 [ 858.414780] ? build_open_flags+0x6f0/0x6f0 [ 858.415274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 858.415834] ? wait_for_completion_io+0x270/0x270 [ 858.416390] __x64_sys_openat+0x13f/0x1f0 [ 858.416879] ? __ia32_sys_open+0x1c0/0x1c0 [ 858.417357] ? ksys_write+0x1a9/0x260 [ 858.417801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.418402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.419002] do_syscall_64+0x33/0x40 [ 858.419434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.420027] RIP: 0033:0x7f6bae9f4b19 [ 858.420455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.422563] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 858.423438] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 858.424529] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 858.425344] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.426161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.426976] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 858.429214] FAULT_INJECTION: forcing a failure. [ 858.429214] name failslab, interval 1, probability 0, space 0, times 0 [ 858.431685] CPU: 1 PID: 6976 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 858.433152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:48:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 858.434914] Call Trace: [ 858.435632] dump_stack+0x107/0x167 [ 858.436419] should_fail.cold+0x5/0xa [ 858.437248] ? create_object.isra.0+0x3a/0xa30 [ 858.438217] should_failslab+0x5/0x20 [ 858.439023] kmem_cache_alloc+0x5b/0x310 [ 858.439888] create_object.isra.0+0x3a/0xa30 [ 858.440831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.441908] kmem_cache_alloc_trace+0x151/0x320 [ 858.442923] cgroup_show_path+0xc4/0x5f0 [ 858.443783] ? cgroup_file_open+0x360/0x360 [ 858.444701] kernfs_sop_show_path+0x122/0x190 [ 858.445645] ? kernfs_test_super+0x140/0x140 [ 858.446573] show_mountinfo+0x23b/0xb80 [ 858.447406] ? rwlock_bug.part.0+0x90/0x90 [ 858.448305] ? mounts_release+0x100/0x100 [ 858.449186] ? do_raw_spin_unlock+0x4f/0x220 [ 858.450111] ? _raw_spin_unlock+0x1a/0x30 [ 858.450987] seq_read_iter+0xbf0/0x12b0 [ 858.451855] do_iter_readv_writev+0x57c/0x750 [ 858.452817] ? new_sync_write+0x660/0x660 [ 858.453690] ? fsnotify_perm.part.0+0x22d/0x620 [ 858.454675] ? security_file_permission+0xb1/0xe0 [ 858.455700] do_iter_read+0x301/0x760 [ 858.456523] ? import_iovec+0x83/0xb0 [ 858.457332] vfs_readv+0xe5/0x160 [ 858.458064] ? vfs_iter_read+0xa0/0xa0 [ 858.458884] ? __fdget_pos+0xf1/0x190 [ 858.459687] ? lock_downgrade+0x6d0/0x6d0 [ 858.460581] ? ksys_write+0x12d/0x260 [ 858.461390] ? __fget_files+0x2f8/0x520 [ 858.462255] do_readv+0x139/0x300 [ 858.462994] ? vfs_readv+0x160/0x160 [ 858.463786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.464898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.465988] do_syscall_64+0x33/0x40 [ 858.466777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.467852] RIP: 0033:0x7f659f34eb19 [ 858.468656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.472533] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 858.474135] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 858.475647] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 858.477157] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.478663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.480165] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 14:48:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 10) 14:48:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 7) 14:48:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 858.495651] loop1: detected capacity change from 0 to 41948160 [ 858.516099] FAULT_INJECTION: forcing a failure. [ 858.516099] name failslab, interval 1, probability 0, space 0, times 0 [ 858.517494] CPU: 0 PID: 6987 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 858.518285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.519251] Call Trace: [ 858.519563] dump_stack+0x107/0x167 [ 858.519985] should_fail.cold+0x5/0xa [ 858.520427] ? create_object.isra.0+0x3a/0xa30 [ 858.520960] should_failslab+0x5/0x20 [ 858.521395] kmem_cache_alloc+0x5b/0x310 [ 858.521872] create_object.isra.0+0x3a/0xa30 [ 858.522369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.522955] kmem_cache_alloc_trace+0x151/0x320 [ 858.523493] io_uring_setup+0x40b/0x2980 [ 858.523966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 858.524523] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 858.525105] ? wait_for_completion_io+0x270/0x270 [ 858.525674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.526279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.526870] do_syscall_64+0x33/0x40 [ 858.527295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.527883] RIP: 0033:0x7f5deeaf2b19 [ 858.528305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.530408] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 858.531278] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 858.532095] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 858.532919] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 858.533734] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 858.534552] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 858.552711] loop7: detected capacity change from 0 to 41948160 [ 858.554406] FAULT_INJECTION: forcing a failure. [ 858.554406] name failslab, interval 1, probability 0, space 0, times 0 [ 858.555789] CPU: 0 PID: 6991 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 858.556582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.557538] Call Trace: 14:48:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 858.557845] dump_stack+0x107/0x167 [ 858.558452] should_fail.cold+0x5/0xa [ 858.558892] ? ext4_alloc_inode+0x1a/0x670 [ 858.559377] should_failslab+0x5/0x20 [ 858.559818] kmem_cache_alloc+0x5b/0x310 [ 858.560283] ? lock_acquire+0x197/0x470 [ 858.560751] ? ext4_init_journal_params+0x350/0x350 [ 858.561324] ext4_alloc_inode+0x1a/0x670 [ 858.561790] ? ext4_init_journal_params+0x350/0x350 [ 858.562362] alloc_inode+0x63/0x240 [ 858.562780] new_inode+0x23/0x250 [ 858.563184] __ext4_new_inode+0x32c/0x5370 [ 858.563683] ? trace_hardirqs_on+0x5b/0x180 [ 858.564187] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 858.564745] ? do_raw_spin_lock+0x121/0x260 [ 858.565246] ? dquot_initialize_needed+0x290/0x290 [ 858.565806] ? do_raw_spin_unlock+0x4f/0x220 [ 858.566315] ? d_splice_alias+0x4d0/0xc60 [ 858.566796] ext4_create+0x2ce/0x4d0 [ 858.567228] ? ext4_mknod+0x4e0/0x4e0 [ 858.567672] ? ext4_mknod+0x4e0/0x4e0 [ 858.568111] lookup_open.isra.0+0xea8/0x1270 [ 858.568623] ? vfs_tmpfile+0x350/0x350 [ 858.569091] path_openat+0x972/0x2770 [ 858.569534] ? path_lookupat+0x860/0x860 [ 858.569999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 858.570595] ? SOFTIRQ_verbose+0x10/0x10 [ 858.571061] ? find_held_lock+0x2c/0x110 [ 858.571530] do_filp_open+0x190/0x3e0 [ 858.571967] ? may_open_dev+0xf0/0xf0 [ 858.572409] ? do_raw_spin_lock+0x121/0x260 [ 858.572913] ? rwlock_bug.part.0+0x90/0x90 [ 858.573403] ? _raw_spin_unlock+0x1a/0x30 [ 858.573877] ? alloc_fd+0x2e7/0x670 [ 858.574301] do_sys_openat2+0x171/0x4d0 [ 858.574755] ? build_open_flags+0x6f0/0x6f0 [ 858.575251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 858.575804] ? wait_for_completion_io+0x270/0x270 [ 858.576361] __x64_sys_openat+0x13f/0x1f0 [ 858.576846] ? __ia32_sys_open+0x1c0/0x1c0 [ 858.577322] ? ksys_write+0x1a9/0x260 [ 858.577761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.578357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.578952] do_syscall_64+0x33/0x40 [ 858.579380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.579969] RIP: 0033:0x7f6bae9f4b19 [ 858.580393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.582501] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 858.583375] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 858.584184] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 858.585003] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.585816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 858.586630] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 14:48:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x43) [ 858.597664] FAT-fs (loop1): invalid media value (0x00) [ 858.598309] FAT-fs (loop1): Can't find a valid FAT filesystem 14:48:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 6) [ 858.637810] FAULT_INJECTION: forcing a failure. [ 858.637810] name failslab, interval 1, probability 0, space 0, times 0 [ 858.639162] CPU: 0 PID: 6999 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 858.639951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.640912] Call Trace: [ 858.641217] dump_stack+0x107/0x167 [ 858.641637] should_fail.cold+0x5/0xa [ 858.642075] ? cgroup_show_path+0xc4/0x5f0 [ 858.642558] should_failslab+0x5/0x20 [ 858.643001] kmem_cache_alloc_trace+0x55/0x320 [ 858.643526] cgroup_show_path+0xc4/0x5f0 [ 858.643993] ? cgroup_file_open+0x360/0x360 [ 858.644497] kernfs_sop_show_path+0x122/0x190 [ 858.645014] ? kernfs_test_super+0x140/0x140 [ 858.645518] show_mountinfo+0x23b/0xb80 [ 858.645978] ? rwlock_bug.part.0+0x90/0x90 [ 858.646463] ? mounts_release+0x100/0x100 [ 858.646939] ? do_raw_spin_unlock+0x4f/0x220 [ 858.647446] ? _raw_spin_unlock+0x1a/0x30 [ 858.647931] seq_read_iter+0xbf0/0x12b0 [ 858.648400] do_iter_readv_writev+0x57c/0x750 [ 858.648930] ? new_sync_write+0x660/0x660 [ 858.649405] ? fsnotify_perm.part.0+0x22d/0x620 [ 858.649947] ? security_file_permission+0xb1/0xe0 [ 858.650508] do_iter_read+0x301/0x760 [ 858.650951] ? import_iovec+0x83/0xb0 [ 858.651386] vfs_readv+0xe5/0x160 [ 858.651787] ? vfs_iter_read+0xa0/0xa0 [ 858.652239] ? __fdget_pos+0xf1/0x190 [ 858.652680] ? lock_downgrade+0x6d0/0x6d0 [ 858.653160] ? ksys_write+0x12d/0x260 [ 858.653599] ? __fget_files+0x2f8/0x520 [ 858.654071] do_readv+0x139/0x300 [ 858.654472] ? vfs_readv+0x160/0x160 [ 858.654905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.655510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.656103] do_syscall_64+0x33/0x40 [ 858.656540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.657126] RIP: 0033:0x7f659f34eb19 14:48:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 8) [ 858.657553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.659855] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 858.660738] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 858.661552] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 858.662369] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.663183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.663997] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 14:48:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f"], 0x43) 14:48:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 858.724701] FAULT_INJECTION: forcing a failure. [ 858.724701] name failslab, interval 1, probability 0, space 0, times 0 [ 858.726091] CPU: 0 PID: 7005 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 858.726882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.727829] Call Trace: [ 858.728140] dump_stack+0x107/0x167 [ 858.728565] should_fail.cold+0x5/0xa [ 858.729005] ? create_object.isra.0+0x3a/0xa30 [ 858.729526] should_failslab+0x5/0x20 [ 858.729961] kmem_cache_alloc+0x5b/0x310 [ 858.730434] create_object.isra.0+0x3a/0xa30 [ 858.730942] kmemleak_alloc_percpu+0xa0/0x100 [ 858.731464] pcpu_alloc+0x4e2/0x1240 [ 858.731902] ? io_tctx_exit_cb+0xf0/0xf0 [ 858.732372] percpu_ref_init+0x31/0x3d0 [ 858.732840] io_uring_setup+0x47a/0x2980 [ 858.733301] ? __mutex_unlock_slowpath+0xe1/0x600 [ 858.733859] ? __do_sys_io_uring_enter+0x1890/0x1890 14:48:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 858.734435] ? wait_for_completion_io+0x270/0x270 [ 858.735185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.735785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.736377] do_syscall_64+0x33/0x40 [ 858.736817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.737399] RIP: 0033:0x7f5deeaf2b19 [ 858.737822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.739905] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 858.740776] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 858.741589] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 858.742398] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 858.743215] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 858.744032] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 858.748172] loop1: detected capacity change from 0 to 41948160 [ 858.751514] FAT-fs (loop1): invalid media value (0x00) [ 858.752141] FAT-fs (loop1): Can't find a valid FAT filesystem 14:48:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 7) [ 858.851340] loop7: detected capacity change from 0 to 41948160 [ 858.903983] FAULT_INJECTION: forcing a failure. [ 858.903983] name failslab, interval 1, probability 0, space 0, times 0 [ 858.905355] CPU: 0 PID: 7018 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 858.906144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.907109] Call Trace: [ 858.907417] dump_stack+0x107/0x167 [ 858.907839] should_fail.cold+0x5/0xa [ 858.908278] ? create_object.isra.0+0x3a/0xa30 [ 858.908807] should_failslab+0x5/0x20 [ 858.909244] kmem_cache_alloc+0x5b/0x310 [ 858.909712] create_object.isra.0+0x3a/0xa30 [ 858.910220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.910806] kmem_cache_alloc_trace+0x151/0x320 [ 858.911346] cgroup_show_path+0xc4/0x5f0 [ 858.911815] ? cgroup_file_open+0x360/0x360 [ 858.912313] kernfs_sop_show_path+0x122/0x190 [ 858.912833] ? kernfs_test_super+0x140/0x140 [ 858.913346] show_mountinfo+0x23b/0xb80 [ 858.913804] ? rwlock_bug.part.0+0x90/0x90 [ 858.914294] ? mounts_release+0x100/0x100 [ 858.914769] ? do_raw_spin_unlock+0x4f/0x220 [ 858.915275] ? _raw_spin_unlock+0x1a/0x30 [ 858.915750] seq_read_iter+0xbf0/0x12b0 [ 858.916221] do_iter_readv_writev+0x57c/0x750 [ 858.916742] ? new_sync_write+0x660/0x660 [ 858.917215] ? fsnotify_perm.part.0+0x22d/0x620 [ 858.917761] ? security_file_permission+0xb1/0xe0 [ 858.918326] do_iter_read+0x301/0x760 [ 858.918768] ? import_iovec+0x83/0xb0 [ 858.919207] vfs_readv+0xe5/0x160 [ 858.919604] ? vfs_iter_read+0xa0/0xa0 [ 858.920053] ? __fdget_pos+0xf1/0x190 [ 858.920487] ? lock_downgrade+0x6d0/0x6d0 [ 858.920979] ? ksys_write+0x12d/0x260 [ 858.921417] ? __fget_files+0x2f8/0x520 [ 858.921886] do_readv+0x139/0x300 [ 858.922290] ? vfs_readv+0x160/0x160 [ 858.922718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.923316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.923908] do_syscall_64+0x33/0x40 [ 858.924330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.924923] RIP: 0033:0x7f659f34eb19 [ 858.925352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.927447] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 858.928317] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 858.929140] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 858.929962] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.930773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.931592] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 14:48:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 11) 14:48:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:48:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 8) 14:48:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:48:29 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f"], 0x43) 14:48:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:29 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 9) [ 872.367220] loop7: detected capacity change from 0 to 41948160 [ 872.384813] loop1: detected capacity change from 0 to 41948160 [ 872.404551] FAULT_INJECTION: forcing a failure. [ 872.404551] name failslab, interval 1, probability 0, space 0, times 0 [ 872.408504] CPU: 1 PID: 7042 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 872.409969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.411739] Call Trace: [ 872.412304] dump_stack+0x107/0x167 [ 872.413117] should_fail.cold+0x5/0xa [ 872.413959] ? create_object.isra.0+0x3a/0xa30 [ 872.414925] should_failslab+0x5/0x20 [ 872.415738] kmem_cache_alloc+0x5b/0x310 [ 872.416605] create_object.isra.0+0x3a/0xa30 [ 872.417560] kmemleak_alloc_percpu+0xa0/0x100 [ 872.418521] pcpu_alloc+0x4e2/0x1240 [ 872.419337] ? io_tctx_exit_cb+0xf0/0xf0 [ 872.420213] percpu_ref_init+0x31/0x3d0 [ 872.421083] io_uring_setup+0x47a/0x2980 [ 872.421970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 872.423015] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 872.424104] ? wait_for_completion_io+0x270/0x270 [ 872.425169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.426298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.427401] do_syscall_64+0x33/0x40 [ 872.428205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.429298] RIP: 0033:0x7f5deeaf2b19 [ 872.430080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.433977] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 872.435581] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 872.437149] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 872.438650] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 872.440335] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 872.441866] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 872.447513] FAULT_INJECTION: forcing a failure. [ 872.447513] name failslab, interval 1, probability 0, space 0, times 0 [ 872.449909] CPU: 1 PID: 7040 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 872.451361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.453139] Call Trace: [ 872.453701] dump_stack+0x107/0x167 [ 872.454485] should_fail.cold+0x5/0xa [ 872.455298] ? cgroup_show_path+0xc4/0x5f0 [ 872.456197] should_failslab+0x5/0x20 [ 872.457065] kmem_cache_alloc_trace+0x55/0x320 [ 872.458041] cgroup_show_path+0xc4/0x5f0 [ 872.458903] ? cgroup_file_open+0x360/0x360 [ 872.459819] kernfs_sop_show_path+0x122/0x190 [ 872.460793] ? kernfs_test_super+0x140/0x140 [ 872.461731] show_mountinfo+0x23b/0xb80 [ 872.462584] ? rwlock_bug.part.0+0x90/0x90 [ 872.463480] ? mounts_release+0x100/0x100 [ 872.464374] ? do_raw_spin_unlock+0x4f/0x220 [ 872.465318] ? _raw_spin_unlock+0x1a/0x30 [ 872.466204] seq_read_iter+0xbf0/0x12b0 [ 872.467073] do_iter_readv_writev+0x57c/0x750 [ 872.468027] ? new_sync_write+0x660/0x660 [ 872.468917] ? fsnotify_perm.part.0+0x22d/0x620 [ 872.469913] ? security_file_permission+0xb1/0xe0 [ 872.470948] do_iter_read+0x301/0x760 [ 872.471766] ? import_iovec+0x83/0xb0 [ 872.472589] vfs_readv+0xe5/0x160 [ 872.473346] ? vfs_iter_read+0xa0/0xa0 [ 872.474178] ? __fdget_pos+0xf1/0x190 [ 872.474988] ? lock_downgrade+0x6d0/0x6d0 [ 872.475871] ? ksys_write+0x12d/0x260 [ 872.476708] ? __fget_files+0x2f8/0x520 [ 872.477585] do_readv+0x139/0x300 [ 872.478322] ? vfs_readv+0x160/0x160 [ 872.479119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.480271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.481417] do_syscall_64+0x33/0x40 [ 872.482229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.483350] RIP: 0033:0x7f659f34eb19 [ 872.484163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.488258] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 872.489935] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 872.491497] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 872.493064] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.494621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.496170] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 872.503406] FAULT_INJECTION: forcing a failure. [ 872.503406] name failslab, interval 1, probability 0, space 0, times 0 [ 872.504978] CPU: 0 PID: 7041 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 872.505885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.506978] Call Trace: [ 872.507335] dump_stack+0x107/0x167 [ 872.507816] should_fail.cold+0x5/0xa [ 872.508322] ? create_object.isra.0+0x3a/0xa30 [ 872.508935] should_failslab+0x5/0x20 [ 872.509435] kmem_cache_alloc+0x5b/0x310 [ 872.509968] create_object.isra.0+0x3a/0xa30 [ 872.510542] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 872.511208] kmem_cache_alloc+0x159/0x310 [ 872.511749] ? lock_acquire+0x197/0x470 [ 872.512277] ? ext4_init_journal_params+0x350/0x350 [ 872.512937] ext4_alloc_inode+0x1a/0x670 [ 872.513465] ? ext4_init_journal_params+0x350/0x350 [ 872.514118] alloc_inode+0x63/0x240 [ 872.514590] new_inode+0x23/0x250 [ 872.515045] __ext4_new_inode+0x32c/0x5370 [ 872.515600] ? trace_hardirqs_on+0x5b/0x180 [ 872.516178] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 872.516812] ? do_raw_spin_lock+0x121/0x260 [ 872.517378] ? dquot_initialize_needed+0x290/0x290 [ 872.518018] ? do_raw_spin_unlock+0x4f/0x220 [ 872.518590] ? d_splice_alias+0x4d0/0xc60 [ 872.519135] ext4_create+0x2ce/0x4d0 [ 872.519629] ? ext4_mknod+0x4e0/0x4e0 [ 872.520135] ? ext4_mknod+0x4e0/0x4e0 [ 872.520643] lookup_open.isra.0+0xea8/0x1270 [ 872.521229] ? vfs_tmpfile+0x350/0x350 [ 872.521759] path_openat+0x972/0x2770 [ 872.522268] ? path_lookupat+0x860/0x860 [ 872.522799] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.523483] ? SOFTIRQ_verbose+0x10/0x10 [ 872.524013] ? find_held_lock+0x2c/0x110 [ 872.524556] do_filp_open+0x190/0x3e0 [ 872.525063] ? may_open_dev+0xf0/0xf0 [ 872.525565] ? do_raw_spin_lock+0x121/0x260 [ 872.526128] ? rwlock_bug.part.0+0x90/0x90 [ 872.526687] ? _raw_spin_unlock+0x1a/0x30 [ 872.527232] ? alloc_fd+0x2e7/0x670 [ 872.527715] do_sys_openat2+0x171/0x4d0 [ 872.528239] ? build_open_flags+0x6f0/0x6f0 [ 872.528813] ? __mutex_unlock_slowpath+0xe1/0x600 [ 872.529449] ? wait_for_completion_io+0x270/0x270 [ 872.530085] __x64_sys_openat+0x13f/0x1f0 [ 872.530626] ? __ia32_sys_open+0x1c0/0x1c0 [ 872.531180] ? ksys_write+0x1a9/0x260 [ 872.531680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.532362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.533043] do_syscall_64+0x33/0x40 [ 872.533524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.534193] RIP: 0033:0x7f6bae9f4b19 [ 872.534672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.537070] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 872.538059] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 872.538969] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 872.539894] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.540828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.541751] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 872.543182] FAT-fs (loop1): invalid media value (0x00) [ 872.544509] FAT-fs (loop1): Can't find a valid FAT filesystem 14:48:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 9) 14:48:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:48:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 10) 14:48:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 12) 14:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:48:43 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f"], 0x43) 14:48:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 886.037349] loop1: detected capacity change from 0 to 41948160 [ 886.041761] FAT-fs (loop1): invalid media value (0x00) [ 886.042636] FAT-fs (loop1): Can't find a valid FAT filesystem [ 886.057981] FAULT_INJECTION: forcing a failure. [ 886.057981] name failslab, interval 1, probability 0, space 0, times 0 [ 886.060952] CPU: 1 PID: 7058 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 886.062695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.064831] Call Trace: [ 886.065508] dump_stack+0x107/0x167 [ 886.066443] should_fail.cold+0x5/0xa [ 886.067417] ? create_object.isra.0+0x3a/0xa30 [ 886.068576] should_failslab+0x5/0x20 [ 886.069559] kmem_cache_alloc+0x5b/0x310 [ 886.070605] create_object.isra.0+0x3a/0xa30 [ 886.071719] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 886.073032] kmem_cache_alloc_trace+0x151/0x320 [ 886.074233] cgroup_show_path+0xc4/0x5f0 [ 886.075266] ? cgroup_file_open+0x360/0x360 [ 886.076372] kernfs_sop_show_path+0x122/0x190 [ 886.077527] ? kernfs_test_super+0x140/0x140 [ 886.078646] show_mountinfo+0x23b/0xb80 [ 886.079657] ? rwlock_bug.part.0+0x90/0x90 [ 886.080741] ? mounts_release+0x100/0x100 [ 886.081790] ? do_raw_spin_unlock+0x4f/0x220 [ 886.082741] ? _raw_spin_unlock+0x1a/0x30 [ 886.083643] seq_read_iter+0xbf0/0x12b0 [ 886.084523] do_iter_readv_writev+0x57c/0x750 [ 886.085511] ? new_sync_write+0x660/0x660 [ 886.086406] ? fsnotify_perm.part.0+0x22d/0x620 [ 886.087415] ? security_file_permission+0xb1/0xe0 [ 886.088468] do_iter_read+0x301/0x760 [ 886.089312] ? import_iovec+0x83/0xb0 [ 886.090138] vfs_readv+0xe5/0x160 14:48:43 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f000000000000960600"], 0x43) [ 886.091031] ? vfs_iter_read+0xa0/0xa0 [ 886.092084] ? __fdget_pos+0xf1/0x190 [ 886.092900] ? lock_downgrade+0x6d0/0x6d0 [ 886.093780] ? ksys_write+0x12d/0x260 [ 886.094593] ? __fget_files+0x2f8/0x520 [ 886.095462] do_readv+0x139/0x300 [ 886.096199] ? vfs_readv+0x160/0x160 [ 886.096996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.098112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.099201] do_syscall_64+0x33/0x40 [ 886.099996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.101082] RIP: 0033:0x7f659f34eb19 [ 886.101868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.105752] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 886.107378] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 886.109037] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 886.110540] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.112040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.113559] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 886.127092] FAULT_INJECTION: forcing a failure. [ 886.127092] name failslab, interval 1, probability 0, space 0, times 0 [ 886.130838] FAULT_INJECTION: forcing a failure. [ 886.130838] name failslab, interval 1, probability 0, space 0, times 0 [ 886.130853] CPU: 0 PID: 7066 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 886.130860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.130864] Call Trace: [ 886.130881] dump_stack+0x107/0x167 [ 886.130896] should_fail.cold+0x5/0xa [ 886.130910] ? percpu_ref_init+0xd8/0x3d0 [ 886.130923] should_failslab+0x5/0x20 [ 886.130936] kmem_cache_alloc_trace+0x55/0x320 [ 886.130950] ? io_tctx_exit_cb+0xf0/0xf0 [ 886.130962] percpu_ref_init+0xd8/0x3d0 [ 886.130978] io_uring_setup+0x47a/0x2980 [ 886.130991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 886.131006] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 886.131017] ? wait_for_completion_io+0x270/0x270 [ 886.131046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.131059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.131074] do_syscall_64+0x33/0x40 [ 886.131087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.131095] RIP: 0033:0x7f5deeaf2b19 [ 886.131106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.131113] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 886.149161] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 886.150162] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 886.151165] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 886.152163] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 886.153173] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 886.154174] CPU: 1 PID: 7067 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 886.155766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.157579] Call Trace: [ 886.158134] dump_stack+0x107/0x167 [ 886.158896] should_fail.cold+0x5/0xa [ 886.159679] ? security_inode_alloc+0x34/0x160 [ 886.160616] should_failslab+0x5/0x20 [ 886.161410] kmem_cache_alloc+0x5b/0x310 [ 886.162257] security_inode_alloc+0x34/0x160 [ 886.163166] inode_init_always+0xa4e/0xd10 [ 886.164036] alloc_inode+0x84/0x240 [ 886.164797] new_inode+0x23/0x250 [ 886.165544] __ext4_new_inode+0x32c/0x5370 [ 886.166430] ? trace_hardirqs_on+0x5b/0x180 [ 886.167458] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 886.168535] ? do_raw_spin_lock+0x121/0x260 [ 886.169450] ? dquot_initialize_needed+0x290/0x290 14:48:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 886.170510] ? do_raw_spin_unlock+0x4f/0x220 [ 886.171629] ? d_splice_alias+0x4d0/0xc60 [ 886.172513] ext4_create+0x2ce/0x4d0 [ 886.173330] ? ext4_mknod+0x4e0/0x4e0 [ 886.174141] ? ext4_mknod+0x4e0/0x4e0 [ 886.174956] lookup_open.isra.0+0xea8/0x1270 [ 886.175872] ? vfs_tmpfile+0x350/0x350 [ 886.176707] path_openat+0x972/0x2770 [ 886.177544] ? path_lookupat+0x860/0x860 [ 886.178410] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 886.179475] ? SOFTIRQ_verbose+0x10/0x10 14:48:43 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f000000000000960600"], 0x43) [ 886.180314] ? find_held_lock+0x2c/0x110 [ 886.181311] do_filp_open+0x190/0x3e0 [ 886.182122] ? may_open_dev+0xf0/0xf0 [ 886.182949] ? do_raw_spin_lock+0x121/0x260 [ 886.183852] ? rwlock_bug.part.0+0x90/0x90 [ 886.184787] ? _raw_spin_unlock+0x1a/0x30 [ 886.185672] ? alloc_fd+0x2e7/0x670 [ 886.186430] do_sys_openat2+0x171/0x4d0 [ 886.187293] ? build_open_flags+0x6f0/0x6f0 [ 886.188174] ? __mutex_unlock_slowpath+0xe1/0x600 [ 886.189207] ? wait_for_completion_io+0x270/0x270 [ 886.190272] __x64_sys_openat+0x13f/0x1f0 [ 886.191164] ? __ia32_sys_open+0x1c0/0x1c0 [ 886.192117] ? ksys_write+0x1a9/0x260 [ 886.192930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.194053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.195134] do_syscall_64+0x33/0x40 [ 886.195919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.197014] RIP: 0033:0x7f6bae9f4b19 [ 886.197803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.201657] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.203237] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 886.204746] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 886.206237] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.207723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.209185] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 886.212798] loop7: detected capacity change from 0 to 41948160 [ 886.263947] loop1: detected capacity change from 0 to 41948160 14:48:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, 0x0, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:48:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 13) 14:48:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 11) 14:48:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 10) [ 886.316348] FAULT_INJECTION: forcing a failure. [ 886.316348] name failslab, interval 1, probability 0, space 0, times 0 [ 886.318921] CPU: 1 PID: 7080 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 886.320430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.322170] Call Trace: [ 886.322751] dump_stack+0x107/0x167 [ 886.323551] should_fail.cold+0x5/0xa [ 886.324385] ? create_object.isra.0+0x3a/0xa30 [ 886.325391] should_failslab+0x5/0x20 [ 886.326228] kmem_cache_alloc+0x5b/0x310 [ 886.327135] create_object.isra.0+0x3a/0xa30 [ 886.328093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 886.329222] kmem_cache_alloc_trace+0x151/0x320 [ 886.330241] ? io_tctx_exit_cb+0xf0/0xf0 [ 886.331123] percpu_ref_init+0xd8/0x3d0 [ 886.331996] io_uring_setup+0x47a/0x2980 [ 886.332891] ? __mutex_unlock_slowpath+0xe1/0x600 [ 886.333945] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 886.335048] ? wait_for_completion_io+0x270/0x270 [ 886.336104] ? perf_trace_preemptirq_template+0x26d/0x400 [ 886.337307] ? perf_trace_preemptirq_template+0x26d/0x400 [ 886.338530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.339675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.340842] do_syscall_64+0x33/0x40 [ 886.341853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.343259] RIP: 0033:0x7f5deeaf2b19 [ 886.344279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.348917] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 886.350612] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 886.352187] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 886.353885] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 886.355434] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 886.356988] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 886.360154] FAT-fs (loop1): invalid media value (0x00) [ 886.360878] FAT-fs (loop1): Can't find a valid FAT filesystem 14:48:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) [ 886.409349] FAULT_INJECTION: forcing a failure. [ 886.409349] name failslab, interval 1, probability 0, space 0, times 0 [ 886.410817] CPU: 0 PID: 7089 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 886.411611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.412580] Call Trace: [ 886.412899] dump_stack+0x107/0x167 [ 886.413323] should_fail.cold+0x5/0xa [ 886.413765] ? create_object.isra.0+0x3a/0xa30 [ 886.414295] should_failslab+0x5/0x20 [ 886.414746] kmem_cache_alloc+0x5b/0x310 [ 886.415219] create_object.isra.0+0x3a/0xa30 [ 886.415741] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 886.416329] kmem_cache_alloc+0x159/0x310 [ 886.416818] security_inode_alloc+0x34/0x160 [ 886.417329] inode_init_always+0xa4e/0xd10 [ 886.417818] alloc_inode+0x84/0x240 [ 886.418237] new_inode+0x23/0x250 [ 886.418641] __ext4_new_inode+0x32c/0x5370 [ 886.419136] ? trace_hardirqs_on+0x5b/0x180 [ 886.419646] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 886.420205] ? do_raw_spin_lock+0x121/0x260 [ 886.420708] ? dquot_initialize_needed+0x290/0x290 [ 886.421280] ? do_raw_spin_unlock+0x4f/0x220 [ 886.421788] ? d_splice_alias+0x4d0/0xc60 [ 886.422270] ext4_create+0x2ce/0x4d0 [ 886.422706] ? ext4_mknod+0x4e0/0x4e0 [ 886.423149] ? ext4_mknod+0x4e0/0x4e0 [ 886.423610] lookup_open.isra.0+0xea8/0x1270 [ 886.424123] ? vfs_tmpfile+0x350/0x350 [ 886.424606] path_openat+0x972/0x2770 [ 886.425064] ? path_lookupat+0x860/0x860 [ 886.425546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 886.426150] ? SOFTIRQ_verbose+0x10/0x10 [ 886.426622] ? find_held_lock+0x2c/0x110 [ 886.427099] do_filp_open+0x190/0x3e0 [ 886.427550] ? may_open_dev+0xf0/0xf0 [ 886.427996] ? do_raw_spin_lock+0x121/0x260 [ 886.428505] ? rwlock_bug.part.0+0x90/0x90 [ 886.429015] ? _raw_spin_unlock+0x1a/0x30 [ 886.429490] ? alloc_fd+0x2e7/0x670 [ 886.429918] do_sys_openat2+0x171/0x4d0 [ 886.430379] ? build_open_flags+0x6f0/0x6f0 [ 886.430875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 886.431430] ? wait_for_completion_io+0x270/0x270 [ 886.431989] __x64_sys_openat+0x13f/0x1f0 [ 886.432468] ? __ia32_sys_open+0x1c0/0x1c0 [ 886.432959] ? ksys_write+0x1a9/0x260 [ 886.433400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.434006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.434603] do_syscall_64+0x33/0x40 [ 886.435033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.435622] RIP: 0033:0x7f6bae9f4b19 [ 886.436049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.438179] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.439065] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 886.439900] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 886.440729] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.441583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.442398] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 886.453021] FAULT_INJECTION: forcing a failure. [ 886.453021] name failslab, interval 1, probability 0, space 0, times 0 [ 886.454342] CPU: 0 PID: 7087 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 886.455143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.456108] Call Trace: [ 886.456414] dump_stack+0x107/0x167 [ 886.456847] should_fail.cold+0x5/0xa [ 886.457290] ? cgroup_show_path+0xc4/0x5f0 [ 886.457792] should_failslab+0x5/0x20 [ 886.458236] kmem_cache_alloc_trace+0x55/0x320 [ 886.458770] cgroup_show_path+0xc4/0x5f0 [ 886.459243] ? cgroup_file_open+0x360/0x360 [ 886.459745] kernfs_sop_show_path+0x122/0x190 [ 886.460267] ? kernfs_test_super+0x140/0x140 [ 886.460788] show_mountinfo+0x23b/0xb80 [ 886.461248] ? rwlock_bug.part.0+0x90/0x90 [ 886.461738] ? mounts_release+0x100/0x100 [ 886.462222] ? do_raw_spin_unlock+0x4f/0x220 [ 886.462731] ? _raw_spin_unlock+0x1a/0x30 [ 886.463218] seq_read_iter+0xbf0/0x12b0 [ 886.463692] do_iter_readv_writev+0x57c/0x750 [ 886.464221] ? new_sync_write+0x660/0x660 [ 886.464701] ? fsnotify_perm.part.0+0x22d/0x620 [ 886.465252] ? security_file_permission+0xb1/0xe0 [ 886.465817] do_iter_read+0x301/0x760 [ 886.466267] ? import_iovec+0x83/0xb0 [ 886.466715] vfs_readv+0xe5/0x160 [ 886.467120] ? vfs_iter_read+0xa0/0xa0 [ 886.467572] ? __fdget_pos+0xf1/0x190 [ 886.468017] ? lock_downgrade+0x6d0/0x6d0 [ 886.468565] ? ksys_write+0x12d/0x260 [ 886.469127] ? __fget_files+0x2f8/0x520 [ 886.469727] do_readv+0x139/0x300 [ 886.470230] ? vfs_readv+0x160/0x160 [ 886.470769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.471511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.472247] do_syscall_64+0x33/0x40 [ 886.472801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.473525] RIP: 0033:0x7f659f34eb19 [ 886.474054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.476318] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 886.477315] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 886.478153] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 886.478998] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.479825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.480654] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 886.485976] FAULT_INJECTION: forcing a failure. [ 886.485976] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 886.489390] CPU: 1 PID: 7090 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 886.491237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.493515] Call Trace: [ 886.494234] dump_stack+0x107/0x167 [ 886.495226] should_fail.cold+0x5/0xa [ 886.496279] __alloc_pages_nodemask+0x182/0x600 [ 886.497575] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 886.499225] ? cap_capable+0x1cd/0x230 [ 886.500299] alloc_pages_current+0x187/0x280 [ 886.501521] __get_free_pages+0xc/0xa0 [ 886.502581] io_uring_setup+0xe27/0x2980 [ 886.503710] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 886.505107] ? wait_for_completion_io+0x270/0x270 [ 886.506465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.507898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.509317] do_syscall_64+0x33/0x40 [ 886.510326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.511721] RIP: 0033:0x7f5deeaf2b19 [ 886.512731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.517735] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 886.519800] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 886.521527] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 886.523041] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 886.524583] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 886.526132] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:48:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, 0x0, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:48:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 14) 14:48:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:48:57 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 14:48:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 11) 14:48:57 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f000000000000960600"], 0x43) [ 900.041962] FAULT_INJECTION: forcing a failure. [ 900.041962] name failslab, interval 1, probability 0, space 0, times 0 [ 900.044473] CPU: 1 PID: 7109 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 900.045948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.047132] FAULT_INJECTION: forcing a failure. [ 900.047132] name failslab, interval 1, probability 0, space 0, times 0 [ 900.047726] Call Trace: [ 900.047752] dump_stack+0x107/0x167 [ 900.047779] should_fail.cold+0x5/0xa [ 900.052282] ? jbd2__journal_start+0x190/0x7e0 [ 900.053276] should_failslab+0x5/0x20 [ 900.054093] kmem_cache_alloc+0x5b/0x310 [ 900.054969] jbd2__journal_start+0x190/0x7e0 [ 900.055923] __ext4_journal_start_sb+0x214/0x390 [ 900.056954] __ext4_new_inode+0x2e0b/0x5370 [ 900.057914] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 900.058946] ? do_raw_spin_lock+0x121/0x260 [ 900.059886] ? dquot_initialize_needed+0x290/0x290 [ 900.060947] ? do_raw_spin_unlock+0x4f/0x220 [ 900.061898] ? d_splice_alias+0x4d0/0xc60 [ 900.062798] ext4_create+0x2ce/0x4d0 [ 900.063614] ? ext4_mknod+0x4e0/0x4e0 [ 900.064450] ? ext4_mknod+0x4e0/0x4e0 [ 900.065291] lookup_open.isra.0+0xea8/0x1270 [ 900.066253] ? vfs_tmpfile+0x350/0x350 [ 900.067133] path_openat+0x972/0x2770 [ 900.067971] ? path_lookupat+0x860/0x860 [ 900.068852] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 900.069987] ? SOFTIRQ_verbose+0x10/0x10 [ 900.070856] ? find_held_lock+0x2c/0x110 [ 900.071746] do_filp_open+0x190/0x3e0 [ 900.072574] ? may_open_dev+0xf0/0xf0 [ 900.073416] ? do_raw_spin_lock+0x121/0x260 [ 900.074346] ? rwlock_bug.part.0+0x90/0x90 [ 900.075275] ? _raw_spin_unlock+0x1a/0x30 [ 900.076172] ? alloc_fd+0x2e7/0x670 [ 900.077033] do_sys_openat2+0x171/0x4d0 [ 900.077896] ? build_open_flags+0x6f0/0x6f0 [ 900.078820] ? __mutex_unlock_slowpath+0xe1/0x600 [ 900.079860] ? wait_for_completion_io+0x270/0x270 [ 900.080919] __x64_sys_openat+0x13f/0x1f0 [ 900.081813] ? __ia32_sys_open+0x1c0/0x1c0 [ 900.082720] ? ksys_write+0x1a9/0x260 [ 900.083552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.084676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.085809] do_syscall_64+0x33/0x40 [ 900.086604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.087697] RIP: 0033:0x7f6bae9f4b19 [ 900.088503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.092499] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 900.094160] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 900.095700] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 900.097248] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.098782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.100296] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 900.101882] CPU: 0 PID: 7111 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 900.103386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.103635] EXT4-fs error (device sda) in __ext4_new_inode:1092: Out of memory [ 900.105204] Call Trace: [ 900.105233] dump_stack+0x107/0x167 [ 900.105257] should_fail.cold+0x5/0xa [ 900.105281] ? create_object.isra.0+0x3a/0xa30 [ 900.105300] should_failslab+0x5/0x20 [ 900.105320] kmem_cache_alloc+0x5b/0x310 [ 900.105348] create_object.isra.0+0x3a/0xa30 [ 900.105366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 900.105394] kmem_cache_alloc_trace+0x151/0x320 [ 900.105425] cgroup_show_path+0xc4/0x5f0 [ 900.115528] ? cgroup_file_open+0x360/0x360 [ 900.116468] kernfs_sop_show_path+0x122/0x190 [ 900.117455] ? kernfs_test_super+0x140/0x140 [ 900.118406] show_mountinfo+0x23b/0xb80 [ 900.119262] ? rwlock_bug.part.0+0x90/0x90 [ 900.120125] ? mounts_release+0x100/0x100 [ 900.121002] ? do_raw_spin_unlock+0x4f/0x220 [ 900.121902] ? _raw_spin_unlock+0x1a/0x30 [ 900.122756] seq_read_iter+0xbf0/0x12b0 [ 900.123617] do_iter_readv_writev+0x57c/0x750 [ 900.124594] ? new_sync_write+0x660/0x660 [ 900.125500] ? fsnotify_perm.part.0+0x22d/0x620 [ 900.126494] ? security_file_permission+0xb1/0xe0 [ 900.127549] do_iter_read+0x301/0x760 [ 900.128390] ? import_iovec+0x83/0xb0 [ 900.129223] vfs_readv+0xe5/0x160 [ 900.129977] ? vfs_iter_read+0xa0/0xa0 [ 900.130821] ? __fdget_pos+0xf1/0x190 [ 900.131645] ? lock_downgrade+0x6d0/0x6d0 [ 900.132551] ? ksys_write+0x12d/0x260 [ 900.133394] ? __fget_files+0x2f8/0x520 [ 900.134280] do_readv+0x139/0x300 [ 900.135033] ? vfs_readv+0x160/0x160 [ 900.135841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.136968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.138087] do_syscall_64+0x33/0x40 [ 900.138892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.139993] RIP: 0033:0x7f659f34eb19 [ 900.140793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.144717] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 900.146318] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 900.147833] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 900.149333] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.150836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.152321] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 900.155001] loop7: detected capacity change from 0 to 41948160 [ 900.160900] FAULT_INJECTION: forcing a failure. [ 900.160900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 900.163856] CPU: 1 PID: 7114 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 900.165320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.167091] Call Trace: [ 900.167660] dump_stack+0x107/0x167 [ 900.168431] should_fail.cold+0x5/0xa [ 900.169252] __alloc_pages_nodemask+0x182/0x600 [ 900.170255] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 900.171544] ? cap_capable+0x1cd/0x230 [ 900.172391] alloc_pages_current+0x187/0x280 [ 900.173348] __get_free_pages+0xc/0xa0 [ 900.174188] io_uring_setup+0xf9a/0x2980 [ 900.175070] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 900.176154] ? wait_for_completion_io+0x270/0x270 [ 900.177239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.178368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.179480] do_syscall_64+0x33/0x40 [ 900.180268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.181385] RIP: 0033:0x7f5deeaf2b19 [ 900.182185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.186138] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 900.187792] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 900.189347] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 900.190892] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 900.192373] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 900.193916] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:48:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 12) 14:48:57 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f0000000000009606000000000000"], 0x43) [ 900.230615] loop1: detected capacity change from 0 to 41948160 [ 900.240367] FAT-fs (loop1): invalid media value (0x00) [ 900.241594] FAT-fs (loop1): Can't find a valid FAT filesystem 14:48:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:48:57 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) [ 900.325425] FAULT_INJECTION: forcing a failure. [ 900.325425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.328153] CPU: 1 PID: 7120 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 900.329630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.331401] Call Trace: [ 900.331981] dump_stack+0x107/0x167 [ 900.332771] should_fail.cold+0x5/0xa [ 900.333589] _copy_to_iter+0x264/0x12d0 [ 900.334456] ? __up_read+0x19f/0x7a0 [ 900.335246] ? _copy_from_iter_nocache+0xd60/0xd60 [ 900.336291] ? __virt_addr_valid+0x170/0x5d0 [ 900.337227] ? __check_object_size+0x319/0x440 [ 900.338217] seq_read_iter+0xdcb/0x12b0 [ 900.339102] do_iter_readv_writev+0x57c/0x750 [ 900.340072] ? new_sync_write+0x660/0x660 [ 900.340974] ? fsnotify_perm.part.0+0x22d/0x620 [ 900.341984] ? security_file_permission+0xb1/0xe0 [ 900.343036] do_iter_read+0x301/0x760 [ 900.343863] ? import_iovec+0x83/0xb0 [ 900.344675] vfs_readv+0xe5/0x160 [ 900.345413] ? vfs_iter_read+0xa0/0xa0 [ 900.346251] ? __fdget_pos+0xf1/0x190 [ 900.347075] ? lock_downgrade+0x6d0/0x6d0 [ 900.347963] ? ksys_write+0x12d/0x260 [ 900.348789] ? __fget_files+0x2f8/0x520 [ 900.349676] do_readv+0x139/0x300 [ 900.350422] ? vfs_readv+0x160/0x160 [ 900.351221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.352349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.353469] do_syscall_64+0x33/0x40 [ 900.354279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.355385] RIP: 0033:0x7f659f34eb19 [ 900.355778] FAULT_INJECTION: forcing a failure. [ 900.355778] name failslab, interval 1, probability 0, space 0, times 0 [ 900.356190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.362714] RSP: 002b:00007f659c8c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 900.364352] RAX: ffffffffffffffda RBX: 00007f659f461f60 RCX: 00007f659f34eb19 [ 900.365891] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 900.367417] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.368940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.370464] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 [ 900.372028] CPU: 0 PID: 7124 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 900.373644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.375638] Call Trace: [ 900.376258] dump_stack+0x107/0x167 [ 900.377109] should_fail.cold+0x5/0xa [ 900.377992] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 900.379290] should_failslab+0x5/0x20 [ 900.380190] kmem_cache_alloc_trace+0x55/0x320 [ 900.381408] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 900.382793] io_uring_setup+0x14f6/0x2980 [ 900.383793] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 900.384999] ? wait_for_completion_io+0x270/0x270 [ 900.386148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.387362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.388557] do_syscall_64+0x33/0x40 [ 900.389570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.390782] RIP: 0033:0x7f5deeaf2b19 [ 900.391646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.395931] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 900.397720] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 900.399380] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 900.401055] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 900.402883] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 900.404605] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:48:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, 0x0, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:48:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 15) 14:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 900.481337] loop1: detected capacity change from 0 to 41948160 14:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 900.495590] FAULT_INJECTION: forcing a failure. [ 900.495590] name failslab, interval 1, probability 0, space 0, times 0 [ 900.498112] CPU: 1 PID: 7131 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 900.499561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.501368] Call Trace: [ 900.501927] dump_stack+0x107/0x167 [ 900.502684] should_fail.cold+0x5/0xa 14:48:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 900.503482] ? create_object.isra.0+0x3a/0xa30 [ 900.504610] should_failslab+0x5/0x20 [ 900.505443] kmem_cache_alloc+0x5b/0x310 [ 900.506316] create_object.isra.0+0x3a/0xa30 [ 900.507243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 900.508326] kmem_cache_alloc+0x159/0x310 [ 900.509222] jbd2__journal_start+0x190/0x7e0 [ 900.510180] __ext4_journal_start_sb+0x214/0x390 [ 900.511199] __ext4_new_inode+0x2e0b/0x5370 [ 900.512139] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 900.513175] ? do_raw_spin_lock+0x121/0x260 [ 900.514108] ? dquot_initialize_needed+0x290/0x290 [ 900.515143] ? do_raw_spin_unlock+0x4f/0x220 [ 900.516088] ? d_splice_alias+0x4d0/0xc60 [ 900.516988] ext4_create+0x2ce/0x4d0 [ 900.517787] ? ext4_mknod+0x4e0/0x4e0 [ 900.518617] ? ext4_mknod+0x4e0/0x4e0 [ 900.519445] lookup_open.isra.0+0xea8/0x1270 [ 900.520394] ? vfs_tmpfile+0x350/0x350 [ 900.521304] path_openat+0x972/0x2770 [ 900.522139] ? path_lookupat+0x860/0x860 [ 900.523018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 900.524133] ? SOFTIRQ_verbose+0x10/0x10 [ 900.525020] ? find_held_lock+0x2c/0x110 [ 900.525902] do_filp_open+0x190/0x3e0 [ 900.526724] ? may_open_dev+0xf0/0xf0 [ 900.527549] ? do_raw_spin_lock+0x121/0x260 [ 900.528481] ? rwlock_bug.part.0+0x90/0x90 [ 900.529416] ? _raw_spin_unlock+0x1a/0x30 [ 900.530297] ? alloc_fd+0x2e7/0x670 [ 900.531096] do_sys_openat2+0x171/0x4d0 [ 900.531954] ? build_open_flags+0x6f0/0x6f0 [ 900.532878] ? __mutex_unlock_slowpath+0xe1/0x600 [ 900.533933] ? wait_for_completion_io+0x270/0x270 [ 900.534983] __x64_sys_openat+0x13f/0x1f0 [ 900.535874] ? __ia32_sys_open+0x1c0/0x1c0 [ 900.536758] ? ksys_write+0x1a9/0x260 [ 900.537573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.538666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.539777] do_syscall_64+0x33/0x40 [ 900.540556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.541669] RIP: 0033:0x7f6bae9f4b19 [ 900.542448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.546368] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 900.548003] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 900.549513] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 900.551008] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.552498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.554022] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 900.627734] loop7: detected capacity change from 0 to 41948160 14:49:13 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) [ 916.510621] FAULT_INJECTION: forcing a failure. [ 916.510621] name failslab, interval 1, probability 0, space 0, times 0 [ 916.512156] CPU: 0 PID: 7150 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 916.513067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.514116] Call Trace: [ 916.514460] dump_stack+0x107/0x167 [ 916.514925] should_fail.cold+0x5/0xa [ 916.515434] ? create_object.isra.0+0x3a/0xa30 [ 916.516039] should_failslab+0x5/0x20 [ 916.516525] kmem_cache_alloc+0x5b/0x310 [ 916.517063] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 916.517872] create_object.isra.0+0x3a/0xa30 [ 916.518454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 916.519145] kmem_cache_alloc_trace+0x151/0x320 [ 916.519802] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 916.520505] io_uring_setup+0x14f6/0x2980 [ 916.521105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 916.521776] ? wait_for_completion_io+0x270/0x270 [ 916.522518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.523219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.523943] do_syscall_64+0x33/0x40 [ 916.524476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.525209] RIP: 0033:0x7f5deeaf2b19 [ 916.525646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.527813] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 916.528706] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 916.529558] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 916.530391] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 916.531232] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 916.532066] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:49:13 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f0000000000009606000000000000"], 0x43) 14:49:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 16) 14:49:13 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) (fail_nth: 13) 14:49:13 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:49:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:49:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 916.544242] loop1: detected capacity change from 0 to 41948160 [ 916.553287] FAULT_INJECTION: forcing a failure. [ 916.553287] name failslab, interval 1, probability 0, space 0, times 0 [ 916.554931] CPU: 1 PID: 7160 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 916.555721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.556681] Call Trace: [ 916.556997] dump_stack+0x107/0x167 [ 916.557430] should_fail.cold+0x5/0xa [ 916.557868] should_failslab+0x5/0x20 [ 916.558306] __kmalloc_track_caller+0x79/0x370 [ 916.558825] ? sidtab_sid2str_get+0x17e/0x720 [ 916.559340] kmemdup+0x23/0x50 [ 916.559708] sidtab_sid2str_get+0x17e/0x720 [ 916.560208] sidtab_entry_to_string+0x33/0x110 [ 916.560732] security_sid_to_context_core+0x33c/0x5d0 [ 916.561334] selinux_inode_init_security+0x4ab/0x690 [ 916.561911] ? selinux_dentry_init_security+0x280/0x280 [ 916.562527] ? get_cached_acl_rcu+0x120/0x120 [ 916.563040] ? find_held_lock+0x2c/0x110 [ 916.563523] security_inode_init_security+0x151/0x360 [ 916.564158] ? ext4_init_acl+0x310/0x310 [ 916.564781] ? inode_free_by_rcu+0x20/0x20 [ 916.565288] ? chksum_update+0x4c/0xb0 [ 916.565738] __ext4_new_inode+0x386e/0x5370 [ 916.566246] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 916.566795] ? do_raw_spin_lock+0x121/0x260 [ 916.567291] ? dquot_initialize_needed+0x290/0x290 [ 916.567856] ? do_raw_spin_unlock+0x4f/0x220 [ 916.568366] ? d_splice_alias+0x4d0/0xc60 [ 916.568850] ext4_create+0x2ce/0x4d0 [ 916.569293] ? ext4_mknod+0x4e0/0x4e0 [ 916.569736] ? ext4_mknod+0x4e0/0x4e0 [ 916.570171] lookup_open.isra.0+0xea8/0x1270 [ 916.570676] ? vfs_tmpfile+0x350/0x350 [ 916.571142] path_openat+0x972/0x2770 [ 916.571592] ? path_lookupat+0x860/0x860 [ 916.572059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 916.572654] ? SOFTIRQ_verbose+0x10/0x10 [ 916.573130] ? find_held_lock+0x2c/0x110 [ 916.573607] do_filp_open+0x190/0x3e0 [ 916.574041] ? may_open_dev+0xf0/0xf0 [ 916.574486] ? do_raw_spin_lock+0x121/0x260 [ 916.574978] ? rwlock_bug.part.0+0x90/0x90 [ 916.575472] ? _raw_spin_unlock+0x1a/0x30 [ 916.575942] ? alloc_fd+0x2e7/0x670 [ 916.576368] do_sys_openat2+0x171/0x4d0 [ 916.576825] ? build_open_flags+0x6f0/0x6f0 [ 916.577325] ? __mutex_unlock_slowpath+0xe1/0x600 [ 916.577878] ? wait_for_completion_io+0x270/0x270 [ 916.578434] __x64_sys_openat+0x13f/0x1f0 [ 916.578914] ? __ia32_sys_open+0x1c0/0x1c0 [ 916.579393] ? ksys_write+0x1a9/0x260 [ 916.579834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.580436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.581029] do_syscall_64+0x33/0x40 [ 916.581465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.582053] RIP: 0033:0x7f6bae9f4b19 [ 916.582481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.584366] FAULT_INJECTION: forcing a failure. [ 916.584366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.584569] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.586741] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 916.587554] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 916.588367] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.589186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.590005] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 916.590845] CPU: 0 PID: 7152 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 916.591599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.592500] Call Trace: [ 916.592795] dump_stack+0x107/0x167 [ 916.593176] loop7: detected capacity change from 0 to 41948160 [ 916.593232] should_fail.cold+0x5/0xa [ 916.593251] _copy_to_user+0x2e/0x180 [ 916.594767] simple_read_from_buffer+0xcc/0x160 [ 916.595322] proc_fail_nth_read+0x198/0x230 [ 916.595833] ? proc_sessionid_read+0x230/0x230 [ 916.596584] ? security_file_permission+0xb1/0xe0 [ 916.597171] ? proc_sessionid_read+0x230/0x230 [ 916.597666] vfs_read+0x228/0x620 [ 916.598046] ksys_read+0x12d/0x260 [ 916.598428] ? vfs_write+0xb10/0xb10 [ 916.598863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.599460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.600069] do_syscall_64+0x33/0x40 [ 916.600512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.601121] RIP: 0033:0x7f659f30169c [ 916.601555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 916.603551] RSP: 002b:00007f659c8c4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 916.604446] RAX: ffffffffffffffda RBX: 0000000000000715 RCX: 00007f659f30169c [ 916.605293] RDX: 000000000000000f RSI: 00007f659c8c41e0 RDI: 0000000000000004 [ 916.606136] RBP: 00007f659c8c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.606976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.607811] R13: 00007ffd802857cf R14: 00007f659c8c4300 R15: 0000000000022000 14:49:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 17) 14:49:13 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f0000000000009606000000000000"], 0x43) 14:49:13 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 14:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:49:13 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) [ 916.696824] FAULT_INJECTION: forcing a failure. [ 916.696824] name failslab, interval 1, probability 0, space 0, times 0 [ 916.698205] CPU: 0 PID: 7171 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 916.698958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.699929] Call Trace: [ 916.700226] dump_stack+0x107/0x167 [ 916.700624] should_fail.cold+0x5/0xa [ 916.701072] ? create_object.isra.0+0x3a/0xa30 [ 916.701570] should_failslab+0x5/0x20 [ 916.701987] kmem_cache_alloc+0x5b/0x310 [ 916.702433] ? sidtab_sid2str_get+0x65/0x720 [ 916.702951] create_object.isra.0+0x3a/0xa30 [ 916.703472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 916.704025] __kmalloc_track_caller+0x177/0x370 [ 916.704571] ? sidtab_sid2str_get+0x17e/0x720 [ 916.705114] kmemdup+0x23/0x50 [ 916.705487] sidtab_sid2str_get+0x17e/0x720 [ 916.705994] sidtab_entry_to_string+0x33/0x110 [ 916.706532] security_sid_to_context_core+0x33c/0x5d0 [ 916.707143] selinux_inode_init_security+0x4ab/0x690 [ 916.707740] ? selinux_dentry_init_security+0x280/0x280 [ 916.708320] ? get_cached_acl_rcu+0x120/0x120 [ 916.708849] ? find_held_lock+0x2c/0x110 [ 916.709343] security_inode_init_security+0x151/0x360 [ 916.709915] ? ext4_init_acl+0x310/0x310 [ 916.710355] ? inode_free_by_rcu+0x20/0x20 [ 916.710824] ? chksum_update+0x4c/0xb0 [ 916.711287] __ext4_new_inode+0x386e/0x5370 [ 916.711802] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 916.712370] ? do_raw_spin_lock+0x121/0x260 [ 916.712884] ? dquot_initialize_needed+0x290/0x290 [ 916.713463] ? do_raw_spin_unlock+0x4f/0x220 [ 916.713977] ? d_splice_alias+0x4d0/0xc60 [ 916.714468] ext4_create+0x2ce/0x4d0 [ 916.714908] ? ext4_mknod+0x4e0/0x4e0 [ 916.715360] ? ext4_mknod+0x4e0/0x4e0 [ 916.715806] lookup_open.isra.0+0xea8/0x1270 [ 916.716323] ? vfs_tmpfile+0x350/0x350 [ 916.716805] path_openat+0x972/0x2770 [ 916.717266] ? path_lookupat+0x860/0x860 [ 916.717745] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 916.718357] ? SOFTIRQ_verbose+0x10/0x10 [ 916.718831] ? find_held_lock+0x2c/0x110 [ 916.719312] do_filp_open+0x190/0x3e0 [ 916.719757] ? may_open_dev+0xf0/0xf0 [ 916.720211] ? do_raw_spin_lock+0x121/0x260 [ 916.720720] ? rwlock_bug.part.0+0x90/0x90 [ 916.721235] ? _raw_spin_unlock+0x1a/0x30 [ 916.721720] ? alloc_fd+0x2e7/0x670 [ 916.722153] do_sys_openat2+0x171/0x4d0 [ 916.722623] ? build_open_flags+0x6f0/0x6f0 [ 916.723126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 916.723693] ? wait_for_completion_io+0x270/0x270 [ 916.724263] __x64_sys_openat+0x13f/0x1f0 [ 916.724750] ? __ia32_sys_open+0x1c0/0x1c0 [ 916.725249] ? ksys_write+0x1a9/0x260 [ 916.725702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.726316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.726926] do_syscall_64+0x33/0x40 [ 916.727363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.727967] RIP: 0033:0x7f6bae9f4b19 [ 916.728401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.730565] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.731454] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 916.732289] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 916.733129] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.733968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.734802] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 916.738406] FAULT_INJECTION: forcing a failure. [ 916.738406] name failslab, interval 1, probability 0, space 0, times 0 [ 916.739760] CPU: 0 PID: 7175 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 916.740563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.741548] Call Trace: [ 916.741859] dump_stack+0x107/0x167 [ 916.742288] should_fail.cold+0x5/0xa [ 916.742738] ? create_object.isra.0+0x3a/0xa30 [ 916.743270] should_failslab+0x5/0x20 [ 916.743714] kmem_cache_alloc+0x5b/0x310 [ 916.744193] create_object.isra.0+0x3a/0xa30 [ 916.744708] kmemleak_alloc_percpu+0xa0/0x100 [ 916.745248] pcpu_alloc+0x4e2/0x1240 [ 916.745693] ? io_async_queue_proc+0x80/0x80 [ 916.746212] percpu_ref_init+0x31/0x3d0 [ 916.746694] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 916.747330] io_uring_setup+0x14f6/0x2980 [ 916.747823] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 916.748417] ? wait_for_completion_io+0x270/0x270 [ 916.748991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.749607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.750213] do_syscall_64+0x33/0x40 [ 916.750649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.751248] RIP: 0033:0x7f5deeaf2b19 [ 916.751686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.753860] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 916.754750] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 916.755584] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 916.756418] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 916.757263] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 916.758100] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:49:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:49:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:49:13 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:49:13 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x39}], 0x1) 14:49:13 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 14:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 916.824902] loop7: detected capacity change from 0 to 41948160 [ 916.832242] FAULT_INJECTION: forcing a failure. [ 916.832242] name failslab, interval 1, probability 0, space 0, times 0 [ 916.833590] CPU: 1 PID: 7188 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 916.834369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.835323] Call Trace: [ 916.835635] dump_stack+0x107/0x167 [ 916.836050] should_fail.cold+0x5/0xa [ 916.836494] ? create_object.isra.0+0x3a/0xa30 [ 916.837016] should_failslab+0x5/0x20 [ 916.837459] kmem_cache_alloc+0x5b/0x310 [ 916.837932] create_object.isra.0+0x3a/0xa30 [ 916.838437] kmemleak_alloc_percpu+0xa0/0x100 [ 916.838951] pcpu_alloc+0x4e2/0x1240 [ 916.839385] ? io_async_queue_proc+0x80/0x80 [ 916.839887] percpu_ref_init+0x31/0x3d0 [ 916.840342] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 916.840958] io_uring_setup+0x14f6/0x2980 [ 916.841444] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 916.842018] ? wait_for_completion_io+0x270/0x270 [ 916.842579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.843176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.843764] do_syscall_64+0x33/0x40 [ 916.844188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.844773] RIP: 0033:0x7f5deeaf2b19 [ 916.845216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.847329] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 916.848204] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 916.849027] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 916.849850] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 916.850672] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 916.851489] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 929.153485] FAULT_INJECTION: forcing a failure. [ 929.153485] name failslab, interval 1, probability 0, space 0, times 0 [ 929.155080] CPU: 0 PID: 7198 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 929.156009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.157123] Call Trace: [ 929.157542] dump_stack+0x107/0x167 [ 929.158222] should_fail.cold+0x5/0xa [ 929.158742] ? percpu_ref_init+0xd8/0x3d0 [ 929.159306] should_failslab+0x5/0x20 [ 929.159828] kmem_cache_alloc_trace+0x55/0x320 [ 929.160447] ? io_async_queue_proc+0x80/0x80 [ 929.161031] percpu_ref_init+0xd8/0x3d0 [ 929.161576] io_rsrc_node_switch_start.part.0+0x6a/0x250 14:49:26 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) 14:49:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 18) 14:49:26 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) 14:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 929.162298] io_uring_setup+0x14f6/0x2980 [ 929.163064] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 929.163753] ? wait_for_completion_io+0x270/0x270 [ 929.164407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.165108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.165804] do_syscall_64+0x33/0x40 [ 929.166309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.166995] RIP: 0033:0x7f5deeaf2b19 [ 929.167506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.169993] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 929.171003] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 929.171965] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 929.172921] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 929.173895] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 929.174863] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:49:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:49:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x9f}], 0x1) 14:49:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:49:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) [ 929.184240] FAULT_INJECTION: forcing a failure. [ 929.184240] name failslab, interval 1, probability 0, space 0, times 0 [ 929.186756] CPU: 1 PID: 7202 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 929.188224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.189993] Call Trace: [ 929.190560] dump_stack+0x107/0x167 [ 929.191338] should_fail.cold+0x5/0xa [ 929.191833] loop7: detected capacity change from 0 to 41948160 [ 929.192157] ? ext4_inode_attach_jinode+0x118/0x260 [ 929.193986] should_failslab+0x5/0x20 [ 929.194796] kmem_cache_alloc+0x5b/0x310 [ 929.195656] ? SOFTIRQ_verbose+0x10/0x10 [ 929.196519] ext4_inode_attach_jinode+0x118/0x260 [ 929.197567] ext4_file_open+0x302/0xa50 [ 929.198413] ? ext4_file_write_iter+0x1530/0x1530 [ 929.199433] ? selinux_inode_create+0x30/0x30 [ 929.200377] ? lock_downgrade+0x6d0/0x6d0 [ 929.201296] ? do_raw_spin_lock+0xcc/0x260 [ 929.202238] ? fsnotify_perm.part.0+0x22d/0x620 [ 929.203236] do_dentry_open+0x4b7/0x1090 [ 929.204103] ? ext4_file_write_iter+0x1530/0x1530 [ 929.205175] ? may_open+0x1e4/0x400 [ 929.205960] path_openat+0x19ba/0x2770 [ 929.206820] ? path_lookupat+0x860/0x860 [ 929.207691] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 929.208797] ? SOFTIRQ_verbose+0x10/0x10 [ 929.209706] ? find_held_lock+0x2c/0x110 [ 929.210620] do_filp_open+0x190/0x3e0 [ 929.211424] ? may_open_dev+0xf0/0xf0 [ 929.212233] ? do_raw_spin_lock+0x121/0x260 [ 929.213134] ? rwlock_bug.part.0+0x90/0x90 [ 929.214051] ? _raw_spin_unlock+0x1a/0x30 [ 929.214923] ? alloc_fd+0x2e7/0x670 [ 929.215703] do_sys_openat2+0x171/0x4d0 [ 929.216576] ? build_open_flags+0x6f0/0x6f0 [ 929.217539] ? __mutex_unlock_slowpath+0xe1/0x600 [ 929.218563] ? wait_for_completion_io+0x270/0x270 [ 929.219583] __x64_sys_openat+0x13f/0x1f0 [ 929.220501] ? __ia32_sys_open+0x1c0/0x1c0 [ 929.221444] ? ksys_write+0x1a9/0x260 [ 929.222266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.223371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.224472] do_syscall_64+0x33/0x40 [ 929.225277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.226359] RIP: 0033:0x7f6bae9f4b19 [ 929.227156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.231052] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 929.232664] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 929.234172] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 929.235682] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 929.237205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.238742] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 929.273930] loop1: detected capacity change from 0 to 41948160 14:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:49:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:49:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 19) 14:49:26 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) 14:49:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:49:26 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) [ 929.368299] FAULT_INJECTION: forcing a failure. [ 929.368299] name failslab, interval 1, probability 0, space 0, times 0 [ 929.370712] CPU: 1 PID: 7218 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 929.372157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.373930] Call Trace: [ 929.374499] dump_stack+0x107/0x167 [ 929.375292] should_fail.cold+0x5/0xa [ 929.376101] ? create_object.isra.0+0x3a/0xa30 [ 929.377069] should_failslab+0x5/0x20 [ 929.377886] kmem_cache_alloc+0x5b/0x310 [ 929.378737] create_object.isra.0+0x3a/0xa30 [ 929.379667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 929.380733] kmem_cache_alloc_trace+0x151/0x320 [ 929.381742] ? io_async_queue_proc+0x80/0x80 [ 929.382685] percpu_ref_init+0xd8/0x3d0 [ 929.383538] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 929.384687] io_uring_setup+0x14f6/0x2980 [ 929.385577] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 929.386653] ? wait_for_completion_io+0x270/0x270 [ 929.387692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.388804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.389025] FAULT_INJECTION: forcing a failure. [ 929.389025] name failslab, interval 1, probability 0, space 0, times 0 [ 929.389902] do_syscall_64+0x33/0x40 [ 929.389924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.389942] RIP: 0033:0x7f5deeaf2b19 [ 929.393983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.397871] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 929.399477] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 929.400985] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 929.402517] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 929.404030] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 929.405537] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 929.407064] CPU: 0 PID: 7221 Comm: syz-executor.3 Not tainted 5.10.259 #1 14:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 929.407950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.409181] Call Trace: [ 929.409523] dump_stack+0x107/0x167 [ 929.409982] should_fail.cold+0x5/0xa [ 929.410466] ? create_object.isra.0+0x3a/0xa30 [ 929.411041] should_failslab+0x5/0x20 [ 929.411520] kmem_cache_alloc+0x5b/0x310 [ 929.412035] create_object.isra.0+0x3a/0xa30 [ 929.412585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 929.413240] kmem_cache_alloc+0x159/0x310 [ 929.413763] ext4_inode_attach_jinode+0x118/0x260 [ 929.414372] ext4_file_open+0x302/0xa50 [ 929.414874] ? ext4_file_write_iter+0x1530/0x1530 [ 929.415494] ? selinux_inode_create+0x30/0x30 [ 929.416067] ? lock_downgrade+0x6d0/0x6d0 [ 929.416585] ? do_raw_spin_lock+0xcc/0x260 [ 929.417121] ? fsnotify_perm.part.0+0x22d/0x620 [ 929.417721] do_dentry_open+0x4b7/0x1090 [ 929.418230] ? ext4_file_write_iter+0x1530/0x1530 [ 929.418838] ? may_open+0x1e4/0x400 [ 929.419297] path_openat+0x19ba/0x2770 [ 929.419793] ? path_lookupat+0x860/0x860 [ 929.420302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 929.420962] ? SOFTIRQ_verbose+0x10/0x10 [ 929.421486] ? find_held_lock+0x2c/0x110 [ 929.422005] do_filp_open+0x190/0x3e0 [ 929.422482] ? may_open_dev+0xf0/0xf0 [ 929.422968] ? do_raw_spin_lock+0x121/0x260 [ 929.423516] ? rwlock_bug.part.0+0x90/0x90 [ 929.424053] ? _raw_spin_unlock+0x1a/0x30 [ 929.424573] ? alloc_fd+0x2e7/0x670 [ 929.425042] do_sys_openat2+0x171/0x4d0 [ 929.425554] ? build_open_flags+0x6f0/0x6f0 [ 929.426088] ? __mutex_unlock_slowpath+0xe1/0x600 [ 929.426689] ? wait_for_completion_io+0x270/0x270 [ 929.427292] __x64_sys_openat+0x13f/0x1f0 [ 929.427815] ? __ia32_sys_open+0x1c0/0x1c0 [ 929.428343] ? ksys_write+0x1a9/0x260 [ 929.428832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.429507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.430169] do_syscall_64+0x33/0x40 [ 929.430652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.431299] RIP: 0033:0x7f6bae9f4b19 [ 929.431784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.434099] RSP: 002b:00007f6babf6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 929.435044] RAX: ffffffffffffffda RBX: 00007f6baeb07f60 RCX: 00007f6bae9f4b19 [ 929.435932] RDX: 0000000000105142 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 929.436821] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 929.437720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.438607] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 929.452738] loop7: detected capacity change from 0 to 41948160 14:49:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) (fail_nth: 20) 14:49:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 942.000810] loop7: detected capacity change from 0 to 41948160 [ 942.007969] FAULT_INJECTION: forcing a failure. [ 942.007969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.009484] CPU: 1 PID: 7242 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 942.010340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.011391] Call Trace: [ 942.011734] dump_stack+0x107/0x167 [ 942.012197] should_fail.cold+0x5/0xa [ 942.012686] _copy_to_user+0x2e/0x180 [ 942.013172] simple_read_from_buffer+0xcc/0x160 [ 942.013771] proc_fail_nth_read+0x198/0x230 [ 942.014319] ? proc_sessionid_read+0x230/0x230 [ 942.014890] ? security_file_permission+0xb1/0xe0 [ 942.015504] ? proc_sessionid_read+0x230/0x230 [ 942.016073] vfs_read+0x228/0x620 [ 942.016511] ksys_read+0x12d/0x260 [ 942.016967] ? vfs_write+0xb10/0xb10 [ 942.017453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 942.018112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 942.018759] do_syscall_64+0x33/0x40 [ 942.019223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 942.019865] RIP: 0033:0x7f6bae9a769c [ 942.020332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 942.022634] RSP: 002b:00007f6babf6a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.023584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6bae9a769c [ 942.024478] RDX: 000000000000000f RSI: 00007f6babf6a1e0 RDI: 0000000000000003 [ 942.025374] RBP: 00007f6babf6a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.026271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 942.027164] R13: 00007ffec869cf2f R14: 00007f6babf6a300 R15: 0000000000022000 [ 942.044823] FAULT_INJECTION: forcing a failure. [ 942.044823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.047703] CPU: 0 PID: 7251 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 942.049351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.051369] Call Trace: [ 942.052014] dump_stack+0x107/0x167 [ 942.052915] should_fail.cold+0x5/0xa [ 942.053859] _copy_to_user+0x2e/0x180 [ 942.054789] io_uring_setup+0x11b5/0x2980 [ 942.055801] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 942.056934] ? wait_for_completion_io+0x270/0x270 [ 942.057997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 942.059107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 942.060217] do_syscall_64+0x33/0x40 [ 942.060998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 942.062100] RIP: 0033:0x7f5deeaf2b19 [ 942.062883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.066786] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 942.068412] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 942.069937] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 942.071467] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 942.072995] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 942.074530] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:49:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xe1}], 0x1) 14:49:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:49:39 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f0000000000009606000000000000"], 0x43) 14:49:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:49:39 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) 14:49:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 942.088081] loop1: detected capacity change from 0 to 41948160 14:49:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x14b}], 0x1) 14:49:39 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f0000000000009606000000000000"], 0x43) 14:49:52 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) 14:49:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:49:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:49:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 14:49:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:49:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:49:52 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f0000000000009606000000000000"], 0x43) 14:49:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x1a3}], 0x1) [ 955.829113] FAULT_INJECTION: forcing a failure. [ 955.829113] name failslab, interval 1, probability 0, space 0, times 0 [ 955.831043] CPU: 1 PID: 7274 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 955.832156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.833466] Call Trace: [ 955.833898] dump_stack+0x107/0x167 [ 955.834468] should_fail.cold+0x5/0xa [ 955.835071] ? __d_alloc+0x2a/0x990 [ 955.835641] should_failslab+0x5/0x20 [ 955.836238] kmem_cache_alloc+0x5b/0x310 [ 955.836871] __d_alloc+0x2a/0x990 [ 955.837413] ? find_held_lock+0x2c/0x110 [ 955.838096] d_alloc_pseudo+0x19/0x70 [ 955.838701] alloc_file_pseudo+0xce/0x250 [ 955.839352] ? trace_hardirqs_on+0x5b/0x180 [ 955.840028] ? alloc_file+0x5a0/0x5a0 [ 955.840653] anon_inode_getfile+0xc8/0x1f0 [ 955.841349] io_uring_setup+0x138b/0x2980 [ 955.842041] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 955.842854] ? wait_for_completion_io+0x270/0x270 [ 955.843670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 955.844533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 955.845406] do_syscall_64+0x33/0x40 [ 955.846174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 955.847004] RIP: 0033:0x7f5deeaf2b19 [ 955.847605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.850630] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 955.851895] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 955.853060] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 955.854242] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 955.855428] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 955.856612] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 955.865302] loop7: detected capacity change from 0 to 41948160 14:49:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:49:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:49:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) 14:49:53 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f000000000000960600000000000009"], 0x43) [ 955.887906] loop1: detected capacity change from 0 to 41948160 14:49:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:49:53 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) 14:49:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x1fa}], 0x1) [ 955.977691] FAULT_INJECTION: forcing a failure. [ 955.977691] name failslab, interval 1, probability 0, space 0, times 0 [ 955.979083] CPU: 0 PID: 7295 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 955.979898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.980844] Call Trace: [ 955.981163] dump_stack+0x107/0x167 [ 955.981610] should_fail.cold+0x5/0xa [ 955.982080] ? create_object.isra.0+0x3a/0xa30 [ 955.982610] should_failslab+0x5/0x20 [ 955.983072] kmem_cache_alloc+0x5b/0x310 [ 955.983561] create_object.isra.0+0x3a/0xa30 [ 955.984087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 955.984698] kmem_cache_alloc+0x159/0x310 [ 955.985192] __d_alloc+0x2a/0x990 [ 955.985610] ? find_held_lock+0x2c/0x110 [ 955.986104] d_alloc_pseudo+0x19/0x70 [ 955.986557] alloc_file_pseudo+0xce/0x250 [ 955.987047] ? trace_hardirqs_on+0x5b/0x180 [ 955.987558] ? alloc_file+0x5a0/0x5a0 [ 955.988019] anon_inode_getfile+0xc8/0x1f0 [ 955.988532] io_uring_setup+0x138b/0x2980 [ 955.989033] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 955.989640] ? wait_for_completion_io+0x270/0x270 [ 955.990239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 955.990870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 955.991499] do_syscall_64+0x33/0x40 [ 955.991944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 955.992559] RIP: 0033:0x7f5deeaf2b19 [ 955.993000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.995119] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 955.996034] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 955.996879] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 955.997739] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 955.998607] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 955.999461] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:49:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:49:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:49:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x3) [ 956.021429] loop7: detected capacity change from 0 to 41948160 14:49:53 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f000000000000960600000000000009"], 0x43) 14:50:09 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f000000000000960600000000000009"], 0x43) 14:50:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 972.690357] FAULT_INJECTION: forcing a failure. [ 972.690357] name failslab, interval 1, probability 0, space 0, times 0 [ 972.692911] CPU: 1 PID: 7318 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 972.694490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 972.696334] Call Trace: [ 972.696929] dump_stack+0x107/0x167 [ 972.697746] should_fail.cold+0x5/0xa [ 972.698610] ? __alloc_file+0x21/0x320 [ 972.699481] should_failslab+0x5/0x20 [ 972.700330] kmem_cache_alloc+0x5b/0x310 [ 972.701236] __alloc_file+0x21/0x320 [ 972.702083] alloc_empty_file+0x6d/0x170 [ 972.702972] alloc_file+0x5e/0x5a0 [ 972.703770] alloc_file_pseudo+0x16a/0x250 [ 972.704708] ? alloc_file+0x5a0/0x5a0 [ 972.705615] anon_inode_getfile+0xc8/0x1f0 [ 972.706639] io_uring_setup+0x138b/0x2980 [ 972.707571] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 972.708697] ? wait_for_completion_io+0x270/0x270 [ 972.709794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 972.711044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 972.712227] do_syscall_64+0x33/0x40 [ 972.713054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 972.714201] RIP: 0033:0x7f5deeaf2b19 [ 972.715048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 972.719112] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 972.720777] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 972.722354] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 972.723921] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 972.725479] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 972.727060] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:50:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x23e}], 0x1) 14:50:09 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) 14:50:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:50:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x24, r0, {0xb}}, './file0/file0\x00'}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r1, 0x1000004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x2) copy_file_range(r1, 0x0, r3, 0x0, 0x200f5f4, 0x0) 14:50:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:50:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) 14:50:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x2bc}], 0x1) 14:50:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x5) [ 972.770400] loop7: detected capacity change from 0 to 41948160 14:50:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:50:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 972.922880] loop7: detected capacity change from 0 to 41948160 14:50:10 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) [ 972.996310] FAULT_INJECTION: forcing a failure. [ 972.996310] name failslab, interval 1, probability 0, space 0, times 0 [ 972.998761] CPU: 0 PID: 7345 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 973.000217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 973.001976] Call Trace: [ 973.002552] dump_stack+0x107/0x167 [ 973.003335] should_fail.cold+0x5/0xa [ 973.004145] ? create_object.isra.0+0x3a/0xa30 [ 973.005109] should_failslab+0x5/0x20 [ 973.005917] kmem_cache_alloc+0x5b/0x310 [ 973.006791] create_object.isra.0+0x3a/0xa30 [ 973.007718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 973.008811] kmem_cache_alloc+0x159/0x310 [ 973.009696] __alloc_file+0x21/0x320 [ 973.010497] alloc_empty_file+0x6d/0x170 [ 973.011361] alloc_file+0x5e/0x5a0 [ 973.012118] alloc_file_pseudo+0x16a/0x250 [ 973.013020] ? alloc_file+0x5a0/0x5a0 [ 973.013844] anon_inode_getfile+0xc8/0x1f0 [ 973.014752] io_uring_setup+0x138b/0x2980 [ 973.015641] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 973.016714] ? wait_for_completion_io+0x270/0x270 [ 973.017757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 973.018880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 973.019985] do_syscall_64+0x33/0x40 [ 973.020772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 973.021861] RIP: 0033:0x7f5deeaf2b19 [ 973.022655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 973.026568] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 973.028189] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 973.029685] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 973.031205] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 973.032723] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 973.034256] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:50:24 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) 14:50:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x6) 14:50:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:50:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) 14:50:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:50:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x30d}], 0x1) 14:50:24 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 1) 14:50:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 987.251243] FAULT_INJECTION: forcing a failure. [ 987.251243] name failslab, interval 1, probability 0, space 0, times 0 [ 987.253666] CPU: 0 PID: 7359 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 987.255123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.256865] Call Trace: [ 987.257430] dump_stack+0x107/0x167 [ 987.258202] should_fail.cold+0x5/0xa [ 987.259018] ? create_object.isra.0+0x3a/0xa30 [ 987.259988] should_failslab+0x5/0x20 [ 987.260795] kmem_cache_alloc+0x5b/0x310 [ 987.261657] create_object.isra.0+0x3a/0xa30 [ 987.262591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 987.263670] kmem_cache_alloc+0x159/0x310 [ 987.264550] __alloc_file+0x21/0x320 [ 987.265344] alloc_empty_file+0x6d/0x170 [ 987.266208] alloc_file+0x5e/0x5a0 [ 987.266983] alloc_file_pseudo+0x16a/0x250 [ 987.267876] ? alloc_file+0x5a0/0x5a0 [ 987.268706] anon_inode_getfile+0xc8/0x1f0 [ 987.269612] io_uring_setup+0x138b/0x2980 [ 987.270508] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 987.271578] ? wait_for_completion_io+0x270/0x270 [ 987.272621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.273728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.274831] do_syscall_64+0x33/0x40 [ 987.275625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.276703] RIP: 0033:0x7f5deeaf2b19 [ 987.277487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.281384] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 987.283012] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 987.284549] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 987.286055] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 987.287572] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 987.289076] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:50:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x35b}], 0x1) [ 987.343123] FAULT_INJECTION: forcing a failure. [ 987.343123] name failslab, interval 1, probability 0, space 0, times 0 [ 987.344747] CPU: 1 PID: 7369 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 987.345524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.346490] Call Trace: [ 987.346796] dump_stack+0x107/0x167 [ 987.347213] should_fail.cold+0x5/0xa [ 987.347650] ? jbd2__journal_start+0x190/0x7e0 [ 987.348178] should_failslab+0x5/0x20 [ 987.348622] kmem_cache_alloc+0x5b/0x310 [ 987.349090] jbd2__journal_start+0x190/0x7e0 [ 987.349605] __ext4_journal_start_sb+0x214/0x390 [ 987.350144] ext4_dirty_inode+0xbc/0x130 [ 987.350612] ? ext4_setattr+0x22f0/0x22f0 [ 987.351089] __mark_inode_dirty+0x492/0xd30 [ 987.351578] ? current_time+0xac/0x120 [ 987.352020] generic_update_time+0x21c/0x370 [ 987.352513] ? igrab+0xc0/0xc0 [ 987.352887] file_update_time+0x43a/0x520 [ 987.353356] ? evict_inodes+0x470/0x470 [ 987.353809] ? down_write_killable+0x180/0x180 [ 987.354338] file_modified+0x7d/0xa0 [ 987.354760] ext4_buffered_write_iter+0xf9/0x4a0 [ 987.355300] ? __lock_acquire+0xbb1/0x5b00 [ 987.355780] ext4_file_write_iter+0x3ab/0x1530 [ 987.356300] ? __lock_acquire+0x1657/0x5b00 [ 987.356795] ? ext4_file_read_iter+0x4c0/0x4c0 [ 987.357313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 987.357905] ? SOFTIRQ_verbose+0x10/0x10 [ 987.358397] new_sync_write+0x42c/0x660 [ 987.358857] ? new_sync_read+0x6f0/0x6f0 [ 987.359336] ? ksys_write+0x12d/0x260 [ 987.359769] ? lock_release+0x680/0x680 [ 987.360232] ? avc_policy_seqno+0x9/0x70 [ 987.360707] ? selinux_file_permission+0x92/0x520 [ 987.361276] vfs_write+0x7c0/0xb10 [ 987.361690] ksys_write+0x12d/0x260 [ 987.362106] ? __ia32_sys_read+0xb0/0xb0 [ 987.362589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.363193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.363802] do_syscall_64+0x33/0x40 [ 987.364231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.364829] RIP: 0033:0x7f72c6759b19 [ 987.365260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.367398] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.368275] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 987.369104] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 987.369929] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.370762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.371588] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 987.372731] loop7: detected capacity change from 0 to 41948160 14:50:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:50:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x7) 14:50:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:50:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:50:24 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) 14:50:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x3a5}], 0x1) 14:50:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 987.492317] FAULT_INJECTION: forcing a failure. [ 987.492317] name failslab, interval 1, probability 0, space 0, times 0 [ 987.493705] CPU: 1 PID: 7384 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 987.494522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.495491] Call Trace: [ 987.495801] dump_stack+0x107/0x167 [ 987.496221] should_fail.cold+0x5/0xa [ 987.496667] ? create_object.isra.0+0x3a/0xa30 [ 987.497194] should_failslab+0x5/0x20 [ 987.497638] kmem_cache_alloc+0x5b/0x310 [ 987.498105] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 987.498749] create_object.isra.0+0x3a/0xa30 [ 987.499257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 987.499844] kmem_cache_alloc+0x159/0x310 [ 987.500325] security_file_alloc+0x34/0x170 [ 987.500829] __alloc_file+0xb7/0x320 [ 987.501259] alloc_empty_file+0x6d/0x170 [ 987.501728] alloc_file+0x5e/0x5a0 [ 987.502139] alloc_file_pseudo+0x16a/0x250 [ 987.502637] ? alloc_file+0x5a0/0x5a0 [ 987.503086] anon_inode_getfile+0xc8/0x1f0 [ 987.503579] io_uring_setup+0x138b/0x2980 [ 987.504062] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 987.504647] ? wait_for_completion_io+0x270/0x270 [ 987.505220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.505829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.506434] do_syscall_64+0x33/0x40 [ 987.506868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.507458] RIP: 0033:0x7f5deeaf2b19 [ 987.507887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.510023] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 987.510914] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 987.511740] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 987.512209] FAULT_INJECTION: forcing a failure. [ 987.512209] name failslab, interval 1, probability 0, space 0, times 0 [ 987.512561] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 987.512569] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 987.512576] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 987.519788] CPU: 0 PID: 7387 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 987.521255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:50:24 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 2) [ 987.523038] Call Trace: [ 987.523979] dump_stack+0x107/0x167 [ 987.524970] should_fail.cold+0x5/0xa [ 987.525994] ? jbd2__journal_start+0x190/0x7e0 [ 987.527245] should_failslab+0x5/0x20 [ 987.528267] kmem_cache_alloc+0x5b/0x310 [ 987.529382] jbd2__journal_start+0x190/0x7e0 [ 987.530612] __ext4_journal_start_sb+0x214/0x390 [ 987.531909] ext4_da_write_begin+0x51f/0xd40 [ 987.533132] ? ext4_write_begin+0x10f0/0x10f0 [ 987.534365] ? copyout_mc+0x140/0x140 [ 987.535410] generic_perform_write+0x20a/0x4f0 [ 987.536655] ? page_cache_prev_miss+0x310/0x310 [ 987.537858] ? down_write_killable+0x180/0x180 [ 987.539122] ext4_buffered_write_iter+0x232/0x4a0 [ 987.540408] ? __lock_acquire+0xbb1/0x5b00 [ 987.541523] ext4_file_write_iter+0x3ab/0x1530 [ 987.542701] ? __lock_acquire+0x1657/0x5b00 [ 987.543818] ? ext4_file_read_iter+0x4c0/0x4c0 [ 987.545025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 987.546165] ? SOFTIRQ_verbose+0x10/0x10 [ 987.547259] new_sync_write+0x42c/0x660 [ 987.548253] ? new_sync_read+0x6f0/0x6f0 [ 987.549124] ? ksys_write+0x12d/0x260 [ 987.549963] ? lock_release+0x680/0x680 [ 987.550872] ? avc_policy_seqno+0x9/0x70 [ 987.551730] ? selinux_file_permission+0x92/0x520 [ 987.552762] vfs_write+0x7c0/0xb10 [ 987.553512] ksys_write+0x12d/0x260 [ 987.554275] ? __ia32_sys_read+0xb0/0xb0 [ 987.555155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.556251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.557348] do_syscall_64+0x33/0x40 [ 987.558135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.559218] RIP: 0033:0x7f72c6759b19 [ 987.559995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.563887] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.565508] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 987.567034] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 987.568536] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.570039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.571542] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:50:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x3f7}], 0x1) [ 987.603612] FAT-fs (loop1): bogus number of reserved sectors [ 987.604357] FAT-fs (loop1): Can't find a valid FAT filesystem 14:50:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x8) 14:50:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:50:24 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 14:50:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:50:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 987.644572] FAULT_INJECTION: forcing a failure. [ 987.644572] name failslab, interval 1, probability 0, space 0, times 0 [ 987.647069] CPU: 0 PID: 7397 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 987.648553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.650348] Call Trace: [ 987.650918] dump_stack+0x107/0x167 [ 987.651706] should_fail.cold+0x5/0xa [ 987.652531] ? io_uring_alloc_task_context+0x99/0x6a0 [ 987.653649] should_failslab+0x5/0x20 [ 987.654484] kmem_cache_alloc_trace+0x55/0x320 [ 987.655476] io_uring_alloc_task_context+0x99/0x6a0 [ 987.656552] ? io_import_iovec+0x1120/0x1120 [ 987.657498] ? lock_downgrade+0x6d0/0x6d0 [ 987.658402] ? do_raw_spin_lock+0x121/0x260 [ 987.659328] ? rwlock_bug.part.0+0x90/0x90 [ 987.660246] __io_uring_add_tctx_node+0x2c6/0x520 [ 987.661281] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 987.662413] ? alloc_fd+0x2e7/0x670 [ 987.663209] io_uring_setup+0x1fbb/0x2980 [ 987.664099] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 987.665194] ? wait_for_completion_io+0x270/0x270 [ 987.666251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.667391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.668500] do_syscall_64+0x33/0x40 [ 987.669302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.670417] RIP: 0033:0x7f5deeaf2b19 [ 987.671206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.675172] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 987.676807] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 987.678328] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 987.679841] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 987.681352] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 987.682871] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 987.765146] loop7: detected capacity change from 0 to 41948160 14:50:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:50:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:50:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:50:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:50:39 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 3) 14:50:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x458}], 0x1) 14:50:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xc) 14:50:39 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) [ 1002.497166] FAULT_INJECTION: forcing a failure. [ 1002.497166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1002.500078] CPU: 1 PID: 7416 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1002.501674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1002.503618] Call Trace: [ 1002.504219] dump_stack+0x107/0x167 [ 1002.505075] should_fail.cold+0x5/0xa [ 1002.505976] __alloc_pages_nodemask+0x182/0x600 [ 1002.507070] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1002.508469] ? find_get_entry+0x2c8/0x740 [ 1002.509434] alloc_pages_current+0x187/0x280 [ 1002.510457] __page_cache_alloc+0x2d2/0x360 [ 1002.511440] pagecache_get_page+0x2c7/0xc80 [ 1002.512407] ? lock_acquire+0x197/0x470 [ 1002.513331] grab_cache_page_write_begin+0x64/0xa0 [ 1002.514423] ext4_da_write_begin+0x2f3/0xd40 [ 1002.515449] ? do_raw_spin_lock+0x121/0x260 [ 1002.515707] FAULT_INJECTION: forcing a failure. [ 1002.515707] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.516411] ? ext4_write_begin+0x10f0/0x10f0 [ 1002.516434] ? copyout_mc+0x140/0x140 [ 1002.519810] ? __mark_inode_dirty+0xa19/0xd30 [ 1002.520805] generic_perform_write+0x20a/0x4f0 [ 1002.522007] ? page_cache_prev_miss+0x310/0x310 [ 1002.523061] ? down_write_killable+0x180/0x180 [ 1002.524267] ext4_buffered_write_iter+0x232/0x4a0 [ 1002.525330] ? __lock_acquire+0xbb1/0x5b00 [ 1002.526417] ext4_file_write_iter+0x3ab/0x1530 [ 1002.527446] ? __lock_acquire+0x1657/0x5b00 [ 1002.528418] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1002.529426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1002.530610] ? SOFTIRQ_verbose+0x10/0x10 [ 1002.531543] new_sync_write+0x42c/0x660 [ 1002.532443] ? new_sync_read+0x6f0/0x6f0 [ 1002.533342] ? ksys_write+0x12d/0x260 [ 1002.534230] ? lock_release+0x680/0x680 [ 1002.535146] ? avc_policy_seqno+0x9/0x70 [ 1002.536058] ? selinux_file_permission+0x92/0x520 [ 1002.537144] vfs_write+0x7c0/0xb10 [ 1002.537951] ksys_write+0x12d/0x260 [ 1002.538779] ? __ia32_sys_read+0xb0/0xb0 [ 1002.539693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1002.540851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1002.542012] do_syscall_64+0x33/0x40 [ 1002.542834] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1002.543991] RIP: 0033:0x7f72c6759b19 [ 1002.544843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1002.548946] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.550636] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1002.552221] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1002.553811] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.555406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.557000] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1002.558600] CPU: 0 PID: 7421 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1002.559453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1002.560468] Call Trace: [ 1002.560801] dump_stack+0x107/0x167 [ 1002.561253] should_fail.cold+0x5/0xa [ 1002.561724] ? create_object.isra.0+0x3a/0xa30 [ 1002.562286] should_failslab+0x5/0x20 [ 1002.562769] kmem_cache_alloc+0x5b/0x310 [ 1002.563274] create_object.isra.0+0x3a/0xa30 [ 1002.563815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1002.564447] kmem_cache_alloc_trace+0x151/0x320 [ 1002.565028] io_uring_alloc_task_context+0x99/0x6a0 [ 1002.565642] ? io_import_iovec+0x1120/0x1120 [ 1002.566195] ? lock_downgrade+0x6d0/0x6d0 [ 1002.566715] ? do_raw_spin_lock+0x121/0x260 [ 1002.567245] ? rwlock_bug.part.0+0x90/0x90 [ 1002.567770] __io_uring_add_tctx_node+0x2c6/0x520 [ 1002.568369] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1002.569017] ? alloc_fd+0x2e7/0x670 [ 1002.569472] io_uring_setup+0x1fbb/0x2980 [ 1002.569992] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1002.570626] ? wait_for_completion_io+0x270/0x270 [ 1002.571246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1002.571896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1002.572533] do_syscall_64+0x33/0x40 [ 1002.573000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1002.573638] RIP: 0033:0x7f5deeaf2b19 [ 1002.574093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1002.576349] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1002.577284] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1002.578155] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1002.579043] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1002.579912] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1002.580784] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:50:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x10) [ 1002.590670] FAT-fs (loop1): bogus number of reserved sectors [ 1002.591392] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1002.593135] loop7: detected capacity change from 0 to 41948160 [ 1015.037283] FAULT_INJECTION: forcing a failure. [ 1015.037283] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.040295] CPU: 0 PID: 7444 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1015.042045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:50:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:50:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x49d}], 0x1) 14:50:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:50:52 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) 14:50:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:50:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:50:52 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 4) 14:50:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x12) [ 1015.044183] Call Trace: [ 1015.045079] dump_stack+0x107/0x167 [ 1015.046022] should_fail.cold+0x5/0xa [ 1015.047019] ? create_object.isra.0+0x3a/0xa30 [ 1015.048189] should_failslab+0x5/0x20 [ 1015.049168] kmem_cache_alloc+0x5b/0x310 [ 1015.050216] create_object.isra.0+0x3a/0xa30 [ 1015.051359] kmemleak_alloc_percpu+0xa0/0x100 [ 1015.052513] pcpu_alloc+0x4e2/0x1240 [ 1015.053489] __percpu_counter_init+0x10d/0x2d0 [ 1015.054669] io_uring_alloc_task_context+0xcc/0x6a0 [ 1015.055942] ? io_import_iovec+0x1120/0x1120 [ 1015.057065] ? lock_downgrade+0x6d0/0x6d0 [ 1015.058120] ? do_raw_spin_lock+0x121/0x260 [ 1015.059229] ? rwlock_bug.part.0+0x90/0x90 [ 1015.060320] __io_uring_add_tctx_node+0x2c6/0x520 [ 1015.061553] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1015.062888] ? alloc_fd+0x2e7/0x670 [ 1015.063835] io_uring_setup+0x1fbb/0x2980 [ 1015.064907] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1015.066200] ? wait_for_completion_io+0x270/0x270 [ 1015.067472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.068816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.070143] do_syscall_64+0x33/0x40 [ 1015.071101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.072412] RIP: 0033:0x7f5deeaf2b19 [ 1015.073368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.078044] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1015.080007] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1015.081833] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1015.083664] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1015.085483] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1015.087312] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:50:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x18) [ 1015.103910] loop7: detected capacity change from 0 to 41948160 [ 1015.103961] FAULT_INJECTION: forcing a failure. [ 1015.103961] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.107209] CPU: 0 PID: 7459 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1015.108650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.110396] Call Trace: [ 1015.110970] dump_stack+0x107/0x167 [ 1015.111742] should_fail.cold+0x5/0xa [ 1015.112549] ? jbd2__journal_start+0x190/0x7e0 [ 1015.113511] should_failslab+0x5/0x20 [ 1015.114313] kmem_cache_alloc+0x5b/0x310 [ 1015.115186] jbd2__journal_start+0x190/0x7e0 [ 1015.116124] __ext4_journal_start_sb+0x214/0x390 [ 1015.117131] ext4_da_write_begin+0x51f/0xd40 [ 1015.118066] ? do_raw_spin_lock+0x121/0x260 [ 1015.118992] ? ext4_write_begin+0x10f0/0x10f0 [ 1015.119936] ? copyout_mc+0x140/0x140 [ 1015.120742] ? __mark_inode_dirty+0xa19/0xd30 [ 1015.121689] generic_perform_write+0x20a/0x4f0 [ 1015.122666] ? page_cache_prev_miss+0x310/0x310 [ 1015.123665] ? down_write_killable+0x180/0x180 [ 1015.124646] ext4_buffered_write_iter+0x232/0x4a0 [ 1015.125666] ? __lock_acquire+0xbb1/0x5b00 [ 1015.126560] ext4_file_write_iter+0x3ab/0x1530 [ 1015.127538] ? __lock_acquire+0x1657/0x5b00 [ 1015.128461] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1015.129430] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1015.130534] ? SOFTIRQ_verbose+0x10/0x10 [ 1015.131413] new_sync_write+0x42c/0x660 [ 1015.132259] ? new_sync_read+0x6f0/0x6f0 [ 1015.133109] ? ksys_write+0x12d/0x260 [ 1015.133914] ? lock_release+0x680/0x680 [ 1015.134751] ? avc_policy_seqno+0x9/0x70 14:50:52 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 14:50:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x4f5}], 0x1) [ 1015.135613] ? selinux_file_permission+0x92/0x520 [ 1015.136843] vfs_write+0x7c0/0xb10 [ 1015.137605] ksys_write+0x12d/0x260 [ 1015.138379] ? __ia32_sys_read+0xb0/0xb0 [ 1015.139260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.140383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.141471] do_syscall_64+0x33/0x40 [ 1015.142256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.143333] RIP: 0033:0x7f72c6759b19 [ 1015.144109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.147964] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.149557] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1015.151058] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1015.152562] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1015.154049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.155550] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:50:52 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 5) [ 1015.210512] FAT-fs (loop1): bogus number of reserved sectors [ 1015.211290] FAT-fs (loop1): Can't find a valid FAT filesystem 14:50:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:50:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x24) [ 1015.238193] FAULT_INJECTION: forcing a failure. [ 1015.238193] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.240593] CPU: 0 PID: 7473 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1015.242036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.243802] Call Trace: [ 1015.244365] dump_stack+0x107/0x167 [ 1015.245142] should_fail.cold+0x5/0xa [ 1015.245952] ? create_object.isra.0+0x3a/0xa30 [ 1015.246919] should_failslab+0x5/0x20 [ 1015.247725] kmem_cache_alloc+0x5b/0x310 [ 1015.248595] create_object.isra.0+0x3a/0xa30 [ 1015.249529] kmemleak_alloc_percpu+0xa0/0x100 [ 1015.250482] pcpu_alloc+0x4e2/0x1240 [ 1015.251296] __percpu_counter_init+0x10d/0x2d0 [ 1015.252263] io_uring_alloc_task_context+0xcc/0x6a0 [ 1015.253317] ? io_import_iovec+0x1120/0x1120 [ 1015.254254] ? lock_downgrade+0x6d0/0x6d0 [ 1015.255137] ? do_raw_spin_lock+0x121/0x260 [ 1015.256049] ? rwlock_bug.part.0+0x90/0x90 [ 1015.256954] __io_uring_add_tctx_node+0x2c6/0x520 [ 1015.258026] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1015.259154] ? alloc_fd+0x2e7/0x670 [ 1015.259941] io_uring_setup+0x1fbb/0x2980 [ 1015.260831] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1015.261906] ? wait_for_completion_io+0x270/0x270 [ 1015.262966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.264080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.265181] do_syscall_64+0x33/0x40 [ 1015.265975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.267078] RIP: 0033:0x7f5deeaf2b19 [ 1015.267869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.271788] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1015.273404] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1015.274927] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1015.276450] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1015.277960] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1015.279484] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1015.286263] FAULT_INJECTION: forcing a failure. [ 1015.286263] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.288891] CPU: 0 PID: 7472 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1015.290368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.292167] Call Trace: [ 1015.292733] dump_stack+0x107/0x167 [ 1015.293511] should_fail.cold+0x5/0xa [ 1015.294322] ? create_object.isra.0+0x3a/0xa30 [ 1015.295309] should_failslab+0x5/0x20 [ 1015.296115] kmem_cache_alloc+0x5b/0x310 [ 1015.296978] ? lru_cache_add+0x45c/0x800 [ 1015.297845] create_object.isra.0+0x3a/0xa30 [ 1015.298773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.299862] kmem_cache_alloc+0x159/0x310 [ 1015.300751] jbd2__journal_start+0x190/0x7e0 [ 1015.301691] __ext4_journal_start_sb+0x214/0x390 [ 1015.302698] ext4_da_write_begin+0x51f/0xd40 [ 1015.303634] ? do_raw_spin_lock+0x121/0x260 [ 1015.304546] ? ext4_write_begin+0x10f0/0x10f0 [ 1015.305489] ? copyout_mc+0x140/0x140 [ 1015.306299] ? __mark_inode_dirty+0xa19/0xd30 [ 1015.307271] generic_perform_write+0x20a/0x4f0 [ 1015.308241] ? page_cache_prev_miss+0x310/0x310 [ 1015.309226] ? down_write_killable+0x180/0x180 [ 1015.310213] ext4_buffered_write_iter+0x232/0x4a0 [ 1015.311244] ? __lock_acquire+0xbb1/0x5b00 [ 1015.312153] ext4_file_write_iter+0x3ab/0x1530 [ 1015.313130] ? __lock_acquire+0x1657/0x5b00 [ 1015.314067] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1015.315055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1015.316160] ? SOFTIRQ_verbose+0x10/0x10 [ 1015.317021] new_sync_write+0x42c/0x660 [ 1015.317873] ? new_sync_read+0x6f0/0x6f0 [ 1015.318725] ? ksys_write+0x12d/0x260 [ 1015.319555] ? lock_release+0x680/0x680 [ 1015.320394] ? avc_policy_seqno+0x9/0x70 [ 1015.321250] ? selinux_file_permission+0x92/0x520 [ 1015.322291] vfs_write+0x7c0/0xb10 [ 1015.323068] ksys_write+0x12d/0x260 [ 1015.323835] ? __ia32_sys_read+0xb0/0xb0 [ 1015.324699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.325813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.326917] do_syscall_64+0x33/0x40 [ 1015.327718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.328801] RIP: 0033:0x7f72c6759b19 [ 1015.329594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.333488] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.335116] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1015.336629] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1015.338141] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1015.339663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.341176] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:50:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x556}], 0x1) 14:50:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x30) 14:51:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:51:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:51:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1030.321769] FAULT_INJECTION: forcing a failure. [ 1030.321769] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.322730] FAT-fs (loop1): bogus number of reserved sectors [ 1030.323653] CPU: 1 PID: 7500 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1030.325279] FAT-fs (loop1): Can't find a valid FAT filesystem 14:51:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xf0) 14:51:07 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 6) 14:51:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x5bb}], 0x1) 14:51:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:07 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) [ 1030.326154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.326159] Call Trace: [ 1030.326179] dump_stack+0x107/0x167 [ 1030.326198] should_fail.cold+0x5/0xa [ 1030.326221] ? create_object.isra.0+0x3a/0xa30 [ 1030.331135] should_failslab+0x5/0x20 [ 1030.331661] kmem_cache_alloc+0x5b/0x310 [ 1030.332221] create_object.isra.0+0x3a/0xa30 [ 1030.332812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1030.333510] kmem_cache_alloc+0x159/0x310 [ 1030.334082] alloc_buffer_head+0x20/0x110 [ 1030.334652] alloc_page_buffers+0x14d/0x700 [ 1030.335253] create_empty_buffers+0x2c/0x640 [ 1030.335855] ? start_this_handle+0xfe0/0x1390 [ 1030.336461] ? start_this_handle+0xd57/0x1390 [ 1030.337076] create_page_buffers+0x1bb/0x230 [ 1030.337682] __block_write_begin_int+0x1d1/0x19c0 [ 1030.338347] ? ext4_da_release_space+0x480/0x480 [ 1030.338994] ? kmem_cache_alloc+0x2a6/0x310 [ 1030.339588] ? remove_inode_buffers+0x300/0x300 [ 1030.340225] ? jbd2__journal_start+0xf3/0x7e0 [ 1030.340839] ext4_da_write_begin+0x37d/0xd40 [ 1030.341455] ? ext4_write_begin+0x10f0/0x10f0 [ 1030.342064] ? copyout_mc+0x140/0x140 [ 1030.342586] ? __mark_inode_dirty+0xa19/0xd30 [ 1030.343214] generic_perform_write+0x20a/0x4f0 [ 1030.343847] ? page_cache_prev_miss+0x310/0x310 [ 1030.344484] ? down_write_killable+0x180/0x180 [ 1030.345121] ext4_buffered_write_iter+0x232/0x4a0 [ 1030.345779] ext4_file_write_iter+0x3ab/0x1530 [ 1030.346403] ? __lock_acquire+0x1657/0x5b00 [ 1030.346991] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1030.347623] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1030.348326] ? SOFTIRQ_verbose+0x10/0x10 [ 1030.348870] ? __traceiter_irq_enable+0xc0/0xc0 [ 1030.349501] new_sync_write+0x42c/0x660 [ 1030.350038] ? new_sync_read+0x6f0/0x6f0 [ 1030.350588] ? ksys_write+0x12d/0x260 [ 1030.351107] ? lock_release+0x680/0x680 [ 1030.351657] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1030.352402] vfs_write+0x7c0/0xb10 [ 1030.352892] ksys_write+0x12d/0x260 [ 1030.353381] ? __ia32_sys_read+0xb0/0xb0 [ 1030.353940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1030.354655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.355369] do_syscall_64+0x33/0x40 [ 1030.355874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1030.356581] RIP: 0033:0x7f72c6759b19 [ 1030.357083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.357506] loop7: detected capacity change from 0 to 41948160 [ 1030.359583] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1030.359598] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1030.359605] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1030.359613] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.359620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.359636] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1030.369132] FAULT_INJECTION: forcing a failure. [ 1030.369132] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.370883] CPU: 1 PID: 7504 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1030.371838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.372976] Call Trace: [ 1030.373340] dump_stack+0x107/0x167 [ 1030.373843] should_fail.cold+0x5/0xa [ 1030.374367] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1030.375085] should_failslab+0x5/0x20 [ 1030.375614] kmem_cache_alloc_trace+0x55/0x320 [ 1030.376248] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1030.376942] ? io_import_iovec+0x1120/0x1120 [ 1030.377546] ? lock_downgrade+0x6d0/0x6d0 [ 1030.378113] ? do_raw_spin_lock+0x121/0x260 [ 1030.378702] ? rwlock_bug.part.0+0x90/0x90 [ 1030.379292] __io_uring_add_tctx_node+0x2c6/0x520 [ 1030.379955] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1030.380671] ? alloc_fd+0x2e7/0x670 [ 1030.381176] io_uring_setup+0x1fbb/0x2980 [ 1030.381759] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1030.382462] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1030.383247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1030.383970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.384691] do_syscall_64+0x33/0x40 [ 1030.385206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1030.385912] RIP: 0033:0x7f5deeaf2b19 [ 1030.386424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.388964] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1030.390017] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1030.391000] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1030.391987] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1030.392976] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1030.393955] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:51:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x112) 14:51:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x619}], 0x1) 14:51:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:51:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x300) 14:51:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:51:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(0xffffffffffffffff, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 1030.524301] FAT-fs (loop1): bogus number of reserved sectors [ 1030.525100] FAT-fs (loop1): Can't find a valid FAT filesystem 14:51:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x667}], 0x1) 14:51:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x321) 14:51:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) [ 1030.592690] loop7: detected capacity change from 0 to 41948160 14:51:07 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) 14:51:07 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 7) [ 1030.676100] FAULT_INJECTION: forcing a failure. [ 1030.676100] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.677545] CPU: 1 PID: 7533 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1030.678359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.679353] Call Trace: [ 1030.679675] dump_stack+0x107/0x167 [ 1030.680113] should_fail.cold+0x5/0xa [ 1030.680575] ? create_object.isra.0+0x3a/0xa30 [ 1030.681096] should_failslab+0x5/0x20 [ 1030.681537] kmem_cache_alloc+0x5b/0x310 [ 1030.682006] create_object.isra.0+0x3a/0xa30 [ 1030.682527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1030.683141] kmem_cache_alloc_trace+0x151/0x320 [ 1030.683711] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1030.684321] ? io_import_iovec+0x1120/0x1120 [ 1030.684853] ? lock_downgrade+0x6d0/0x6d0 [ 1030.685347] ? do_raw_spin_lock+0x121/0x260 [ 1030.685872] ? rwlock_bug.part.0+0x90/0x90 [ 1030.686383] __io_uring_add_tctx_node+0x2c6/0x520 [ 1030.686974] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1030.687583] ? alloc_fd+0x2e7/0x670 [ 1030.688034] io_uring_setup+0x1fbb/0x2980 [ 1030.688542] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1030.689145] ? wait_for_completion_io+0x270/0x270 [ 1030.689744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1030.690368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.690990] do_syscall_64+0x33/0x40 [ 1030.691450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1030.692075] RIP: 0033:0x7f5deeaf2b19 [ 1030.692528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.694697] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1030.695559] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1030.696403] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1030.697239] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1030.698042] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1030.698887] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1030.719334] FAULT_INJECTION: forcing a failure. [ 1030.719334] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.722138] CPU: 0 PID: 7534 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1030.723605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.725374] Call Trace: [ 1030.725941] dump_stack+0x107/0x167 [ 1030.726739] should_fail.cold+0x5/0xa [ 1030.727562] ? ext4_find_extent+0xa77/0xd70 [ 1030.728486] should_failslab+0x5/0x20 [ 1030.729296] __kmalloc+0x72/0x390 [ 1030.730051] ext4_find_extent+0xa77/0xd70 [ 1030.730943] ext4_ext_map_blocks+0x1c8/0x5870 [ 1030.731926] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1030.733042] ? SOFTIRQ_verbose+0x10/0x10 [ 1030.733910] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1030.735029] ? SOFTIRQ_verbose+0x10/0x10 [ 1030.735907] ? ext4_ext_release+0x10/0x10 [ 1030.736804] ? lock_acquire+0x197/0x470 [ 1030.737647] ? ext4_da_get_block_prep+0x5b2/0x1100 [ 1030.738691] ? lock_release+0x680/0x680 [ 1030.739552] ? ext4_es_lookup_extent+0x485/0xa80 [ 1030.740557] ? lock_downgrade+0x6d0/0x6d0 [ 1030.741453] ? down_read+0x10f/0x430 [ 1030.742242] ? down_write+0x160/0x160 [ 1030.743055] ext4_map_query_blocks.constprop.0+0x7e/0x2d0 [ 1030.744234] ext4_da_get_block_prep+0x9a1/0x1100 [ 1030.745246] ? ext4_da_release_space+0x480/0x480 [ 1030.746254] ? lock_downgrade+0x6d0/0x6d0 [ 1030.747155] ? create_empty_buffers+0x4a3/0x640 [ 1030.748142] ? do_raw_spin_unlock+0x4f/0x220 [ 1030.749079] ? create_page_buffers+0x139/0x230 [ 1030.750053] __block_write_begin_int+0x3d1/0x19c0 [ 1030.751075] ? ext4_da_release_space+0x480/0x480 [ 1030.752103] ? remove_inode_buffers+0x300/0x300 [ 1030.753090] ? jbd2__journal_start+0xf3/0x7e0 [ 1030.754058] ext4_da_write_begin+0x37d/0xd40 [ 1030.755004] ? ext4_write_begin+0x10f0/0x10f0 [ 1030.755965] ? copyout_mc+0x140/0x140 [ 1030.756778] ? __mark_inode_dirty+0xa19/0xd30 [ 1030.757736] generic_perform_write+0x20a/0x4f0 [ 1030.758714] ? page_cache_prev_miss+0x310/0x310 [ 1030.759699] ? down_write_killable+0x180/0x180 [ 1030.760685] ext4_buffered_write_iter+0x232/0x4a0 [ 1030.761706] ? __lock_acquire+0xbb1/0x5b00 [ 1030.762608] ext4_file_write_iter+0x3ab/0x1530 [ 1030.763594] ? __lock_acquire+0x1657/0x5b00 [ 1030.764518] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1030.765491] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1030.766599] ? SOFTIRQ_verbose+0x10/0x10 [ 1030.767482] new_sync_write+0x42c/0x660 [ 1030.768330] ? new_sync_read+0x6f0/0x6f0 [ 1030.769186] ? ksys_write+0x12d/0x260 [ 1030.770003] ? lock_release+0x680/0x680 [ 1030.770846] ? avc_policy_seqno+0x9/0x70 [ 1030.771711] ? selinux_file_permission+0x92/0x520 [ 1030.772752] vfs_write+0x7c0/0xb10 [ 1030.773509] ksys_write+0x12d/0x260 [ 1030.774275] ? __ia32_sys_read+0xb0/0xb0 [ 1030.775151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1030.776267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.777368] do_syscall_64+0x33/0x40 [ 1030.778162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1030.779263] RIP: 0033:0x7f72c6759b19 [ 1030.780055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.783969] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1030.785584] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1030.787105] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1030.788630] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.790150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.791671] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:51:21 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 8) 14:51:21 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) 14:51:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xc}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x6b3}], 0x1) 14:51:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:51:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:51:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(0xffffffffffffffff, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:51:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x408) [ 1044.611357] FAT-fs (loop1): bogus number of reserved sectors [ 1044.612750] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1044.624673] FAULT_INJECTION: forcing a failure. [ 1044.624673] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.627084] CPU: 1 PID: 7552 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1044.628558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1044.630307] Call Trace: [ 1044.630870] dump_stack+0x107/0x167 [ 1044.631650] should_fail.cold+0x5/0xa [ 1044.632456] ? create_object.isra.0+0x3a/0xa30 [ 1044.633406] should_failslab+0x5/0x20 [ 1044.634201] kmem_cache_alloc+0x5b/0x310 [ 1044.635059] create_object.isra.0+0x3a/0xa30 [ 1044.635981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1044.637054] __kmalloc+0x16e/0x390 [ 1044.637801] ext4_find_extent+0xa77/0xd70 [ 1044.638675] ext4_ext_map_blocks+0x1c8/0x5870 [ 1044.639645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1044.640733] ? SOFTIRQ_verbose+0x10/0x10 [ 1044.641580] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1044.642691] ? SOFTIRQ_verbose+0x10/0x10 [ 1044.643552] ? ext4_ext_release+0x10/0x10 [ 1044.644428] ? lock_acquire+0x197/0x470 [ 1044.645264] ? ext4_da_get_block_prep+0x5b2/0x1100 [ 1044.646291] ? lock_release+0x680/0x680 [ 1044.647137] ? ext4_es_lookup_extent+0x485/0xa80 [ 1044.648142] ? lock_downgrade+0x6d0/0x6d0 [ 1044.649024] ? down_read+0x10f/0x430 [ 1044.649800] ? down_write+0x160/0x160 [ 1044.650162] FAULT_INJECTION: forcing a failure. [ 1044.650162] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.650608] ext4_map_query_blocks.constprop.0+0x7e/0x2d0 [ 1044.654133] ext4_da_get_block_prep+0x9a1/0x1100 [ 1044.655129] ? ext4_da_release_space+0x480/0x480 [ 1044.656148] ? lock_downgrade+0x6d0/0x6d0 [ 1044.657015] ? create_empty_buffers+0x4a3/0x640 [ 1044.657986] ? do_raw_spin_unlock+0x4f/0x220 [ 1044.658895] ? create_page_buffers+0x139/0x230 [ 1044.659883] __block_write_begin_int+0x3d1/0x19c0 [ 1044.660919] ? ext4_da_release_space+0x480/0x480 [ 1044.661927] ? remove_inode_buffers+0x300/0x300 [ 1044.662908] ? jbd2__journal_start+0xf3/0x7e0 [ 1044.663880] ext4_da_write_begin+0x37d/0xd40 [ 1044.664814] ? ext4_write_begin+0x10f0/0x10f0 [ 1044.665760] ? copyout_mc+0x140/0x140 [ 1044.666563] ? __mark_inode_dirty+0xa19/0xd30 [ 1044.667521] generic_perform_write+0x20a/0x4f0 [ 1044.668492] ? page_cache_prev_miss+0x310/0x310 [ 1044.669474] ? down_write_killable+0x180/0x180 [ 1044.670448] ext4_buffered_write_iter+0x232/0x4a0 [ 1044.671475] ? __lock_acquire+0xbb1/0x5b00 [ 1044.672362] ext4_file_write_iter+0x3ab/0x1530 [ 1044.673312] ? __lock_acquire+0x1657/0x5b00 [ 1044.674241] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1044.675219] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1044.676311] ? SOFTIRQ_verbose+0x10/0x10 [ 1044.677170] new_sync_write+0x42c/0x660 [ 1044.678015] ? new_sync_read+0x6f0/0x6f0 [ 1044.678857] ? ksys_write+0x12d/0x260 [ 1044.679684] ? lock_release+0x680/0x680 [ 1044.680545] ? avc_policy_seqno+0x9/0x70 [ 1044.681424] ? selinux_file_permission+0x92/0x520 [ 1044.682455] vfs_write+0x7c0/0xb10 [ 1044.683198] ksys_write+0x12d/0x260 [ 1044.683968] ? __ia32_sys_read+0xb0/0xb0 [ 1044.684856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1044.685967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1044.687078] do_syscall_64+0x33/0x40 [ 1044.687861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1044.688949] RIP: 0033:0x7f72c6759b19 [ 1044.689729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1044.693706] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1044.695302] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1044.696794] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1044.698303] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.699801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.701299] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1044.702842] CPU: 0 PID: 7557 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1044.704338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1044.706125] Call Trace: [ 1044.706703] dump_stack+0x107/0x167 [ 1044.707508] should_fail.cold+0x5/0xa [ 1044.708332] ? io_wq_create+0xeb/0xc00 [ 1044.709169] should_failslab+0x5/0x20 [ 1044.709986] __kmalloc+0x72/0x390 [ 1044.710738] io_wq_create+0xeb/0xc00 [ 1044.711561] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1044.712653] ? io_import_iovec+0x1120/0x1120 [ 1044.713604] ? io_apoll_task_func+0x2d0/0x2d0 [ 1044.714564] ? __io_req_find_next+0x300/0x300 [ 1044.715531] ? do_raw_spin_lock+0x121/0x260 [ 1044.716464] ? rwlock_bug.part.0+0x90/0x90 [ 1044.717389] __io_uring_add_tctx_node+0x2c6/0x520 [ 1044.718432] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1044.719575] ? alloc_fd+0x2e7/0x670 [ 1044.720373] io_uring_setup+0x1fbb/0x2980 [ 1044.721278] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1044.722368] ? wait_for_completion_io+0x270/0x270 [ 1044.723439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1044.724577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1044.725691] do_syscall_64+0x33/0x40 [ 1044.726494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1044.727602] RIP: 0033:0x7f5deeaf2b19 [ 1044.728370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1044.732238] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1044.733882] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1044.735426] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1044.736961] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1044.738499] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1044.740044] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1044.746526] loop7: detected capacity change from 0 to 41948160 14:51:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x480) 14:51:39 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) 14:51:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x500) 14:51:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(0xffffffffffffffff, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:51:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x10}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x715}], 0x1) 14:51:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:51:39 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 9) 14:51:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1062.200357] FAULT_INJECTION: forcing a failure. [ 1062.200357] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.203144] CPU: 1 PID: 7570 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1062.204577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.206333] Call Trace: [ 1062.206892] dump_stack+0x107/0x167 [ 1062.207665] should_fail.cold+0x5/0xa [ 1062.208481] ? __es_insert_extent+0xed1/0x1370 [ 1062.209439] should_failslab+0x5/0x20 [ 1062.210246] kmem_cache_alloc+0x5b/0x310 [ 1062.211104] __es_insert_extent+0xed1/0x1370 [ 1062.211845] FAULT_INJECTION: forcing a failure. [ 1062.211845] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.212042] ? do_raw_read_unlock+0x70/0x70 [ 1062.214356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.215482] ext4_es_insert_extent+0x45d/0xf10 [ 1062.216474] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1062.217391] ? ext4_es_find_extent_range+0x1cb/0x460 [ 1062.218469] ? lock_downgrade+0x6d0/0x6d0 [ 1062.219351] ? __ext4_handle_dirty_super+0x100/0x100 [ 1062.220430] ? __es_find_extent_range+0x1d3/0x490 [ 1062.221463] ? do_raw_read_unlock+0x3b/0x70 [ 1062.222394] ext4_ext_map_blocks+0x1567/0x5870 [ 1062.223392] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.224505] ? SOFTIRQ_verbose+0x10/0x10 [ 1062.225368] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.226493] ? SOFTIRQ_verbose+0x10/0x10 [ 1062.227350] ? ext4_ext_release+0x10/0x10 [ 1062.228245] ? lock_acquire+0x197/0x470 [ 1062.229088] ? ext4_da_get_block_prep+0x5b2/0x1100 [ 1062.230126] ? lock_release+0x680/0x680 [ 1062.230974] ? ext4_es_lookup_extent+0x485/0xa80 [ 1062.231978] ? lock_downgrade+0x6d0/0x6d0 [ 1062.232871] ? down_read+0x10f/0x430 [ 1062.233652] ? down_write+0x160/0x160 [ 1062.234471] ext4_map_query_blocks.constprop.0+0x7e/0x2d0 [ 1062.235626] ext4_da_get_block_prep+0x9a1/0x1100 [ 1062.236640] ? ext4_da_release_space+0x480/0x480 [ 1062.237636] ? lock_downgrade+0x6d0/0x6d0 [ 1062.238527] ? create_empty_buffers+0x4a3/0x640 [ 1062.239506] ? do_raw_spin_unlock+0x4f/0x220 [ 1062.240445] ? create_page_buffers+0x139/0x230 [ 1062.241416] __block_write_begin_int+0x3d1/0x19c0 [ 1062.242430] ? ext4_da_release_space+0x480/0x480 [ 1062.243441] ? remove_inode_buffers+0x300/0x300 [ 1062.244428] ? jbd2__journal_start+0xf3/0x7e0 [ 1062.245390] ext4_da_write_begin+0x37d/0xd40 [ 1062.246324] ? ext4_write_begin+0x10f0/0x10f0 [ 1062.247267] ? copyout_mc+0x140/0x140 [ 1062.248082] ? __mark_inode_dirty+0xa19/0xd30 [ 1062.249027] generic_perform_write+0x20a/0x4f0 [ 1062.250005] ? page_cache_prev_miss+0x310/0x310 [ 1062.250993] ? down_write_killable+0x180/0x180 [ 1062.251986] ext4_buffered_write_iter+0x232/0x4a0 [ 1062.253000] ? __lock_acquire+0xbb1/0x5b00 [ 1062.253882] ext4_file_write_iter+0x3ab/0x1530 [ 1062.254841] ? __lock_acquire+0x1657/0x5b00 [ 1062.255781] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1062.256747] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.257857] ? SOFTIRQ_verbose+0x10/0x10 [ 1062.258725] new_sync_write+0x42c/0x660 [ 1062.259563] ? new_sync_read+0x6f0/0x6f0 [ 1062.260414] ? ksys_write+0x12d/0x260 [ 1062.261225] ? lock_release+0x680/0x680 [ 1062.262065] ? avc_policy_seqno+0x9/0x70 [ 1062.262921] ? selinux_file_permission+0x92/0x520 [ 1062.263961] vfs_write+0x7c0/0xb10 [ 1062.264706] ksys_write+0x12d/0x260 [ 1062.265464] ? __ia32_sys_read+0xb0/0xb0 [ 1062.266314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.267421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.268525] do_syscall_64+0x33/0x40 [ 1062.269307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1062.270402] RIP: 0033:0x7f72c6759b19 [ 1062.271192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.275102] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1062.276726] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1062.278248] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1062.279745] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.281270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.282781] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1062.284345] CPU: 0 PID: 7572 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1062.285464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.286753] Call Trace: [ 1062.287181] dump_stack+0x107/0x167 [ 1062.287769] should_fail.cold+0x5/0xa [ 1062.288630] ? create_object.isra.0+0x3a/0xa30 [ 1062.289466] should_failslab+0x5/0x20 [ 1062.290175] kmem_cache_alloc+0x5b/0x310 [ 1062.290936] create_object.isra.0+0x3a/0xa30 [ 1062.291757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1062.292703] __kmalloc+0x16e/0x390 [ 1062.293373] io_wq_create+0xeb/0xc00 [ 1062.294068] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1062.295000] ? io_import_iovec+0x1120/0x1120 [ 1062.295829] ? io_apoll_task_func+0x2d0/0x2d0 [ 1062.296654] ? __io_req_find_next+0x300/0x300 [ 1062.297475] ? do_raw_spin_lock+0x121/0x260 [ 1062.298269] ? rwlock_bug.part.0+0x90/0x90 [ 1062.299039] __io_uring_add_tctx_node+0x2c6/0x520 [ 1062.299962] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1062.300961] ? alloc_fd+0x2e7/0x670 [ 1062.301670] io_uring_setup+0x1fbb/0x2980 [ 1062.302474] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1062.303454] ? wait_for_completion_io+0x270/0x270 [ 1062.304425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.305431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.306419] do_syscall_64+0x33/0x40 [ 1062.307134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1062.308114] RIP: 0033:0x7f5deeaf2b19 [ 1062.308828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.312325] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1062.313768] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1062.315111] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1062.316457] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1062.317798] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1062.319144] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1062.345322] loop7: detected capacity change from 0 to 41948160 [ 1062.391094] loop1: detected capacity change from 0 to 41948160 [ 1062.400341] FAT-fs (loop1): bogus number of reserved sectors [ 1062.401722] FAT-fs (loop1): Can't find a valid FAT filesystem 14:51:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x555) 14:51:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x200012b9}], 0x1) 14:51:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:51:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:51:39 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) 14:51:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:39 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 10) 14:51:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 1062.587855] FAULT_INJECTION: forcing a failure. [ 1062.587855] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.588698] loop1: detected capacity change from 0 to 41948160 [ 1062.590391] CPU: 1 PID: 7600 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1062.593046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.594770] Call Trace: [ 1062.595325] dump_stack+0x107/0x167 [ 1062.596103] should_fail.cold+0x5/0xa [ 1062.596912] ? io_wq_create+0x6ef/0xc00 [ 1062.597742] should_failslab+0x5/0x20 [ 1062.598541] kmem_cache_alloc_node_trace+0x59/0x340 [ 1062.599615] io_wq_create+0x6ef/0xc00 [ 1062.600428] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1062.601501] ? io_import_iovec+0x1120/0x1120 [ 1062.602424] ? io_apoll_task_func+0x2d0/0x2d0 [ 1062.603353] ? __io_req_find_next+0x300/0x300 [ 1062.604296] ? do_raw_spin_lock+0x121/0x260 14:51:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x600) [ 1062.605205] ? rwlock_bug.part.0+0x90/0x90 [ 1062.606243] __io_uring_add_tctx_node+0x2c6/0x520 [ 1062.607258] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1062.608366] ? alloc_fd+0x2e7/0x670 [ 1062.609138] io_uring_setup+0x1fbb/0x2980 [ 1062.610017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1062.611076] ? wait_for_completion_io+0x270/0x270 [ 1062.612125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.613216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.614288] do_syscall_64+0x33/0x40 [ 1062.615060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1062.616134] RIP: 0033:0x7f5deeaf2b19 [ 1062.616915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.620758] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1062.622338] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1062.623821] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1062.625299] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1062.626787] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1062.628273] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1062.632033] FAT-fs (loop1): bogus number of reserved sectors [ 1062.633636] FAT-fs (loop1): Can't find a valid FAT filesystem 14:51:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0x7ffff000}], 0x1) 14:51:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x700) 14:51:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:51:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) ftruncate(0xffffffffffffffff, 0x1000004) 14:51:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x18}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1062.772760] loop7: detected capacity change from 0 to 41948160 [ 1062.788780] loop1: detected capacity change from 0 to 41948160 [ 1062.795126] FAULT_INJECTION: forcing a failure. [ 1062.795126] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.797772] CPU: 0 PID: 7618 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1062.799329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.801216] Call Trace: [ 1062.801810] dump_stack+0x107/0x167 [ 1062.802635] should_fail.cold+0x5/0xa [ 1062.803475] ? create_object.isra.0+0x3a/0xa30 [ 1062.804489] should_failslab+0x5/0x20 [ 1062.805321] kmem_cache_alloc+0x5b/0x310 [ 1062.806219] create_object.isra.0+0x3a/0xa30 [ 1062.807177] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1062.808311] kmem_cache_alloc+0x159/0x310 [ 1062.809243] __es_insert_extent+0xed1/0x1370 [ 1062.810221] ? do_raw_read_unlock+0x70/0x70 [ 1062.811207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.812374] ext4_es_insert_extent+0x45d/0xf10 [ 1062.813395] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1062.814340] ? ext4_es_find_extent_range+0x1cb/0x460 [ 1062.815447] ? lock_downgrade+0x6d0/0x6d0 [ 1062.816377] ? __ext4_handle_dirty_super+0x100/0x100 [ 1062.817481] ? __es_find_extent_range+0x1d3/0x490 [ 1062.818538] ? do_raw_read_unlock+0x3b/0x70 [ 1062.819487] ext4_ext_map_blocks+0x1567/0x5870 [ 1062.820534] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.821734] ? SOFTIRQ_verbose+0x10/0x10 [ 1062.822627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.823774] ? SOFTIRQ_verbose+0x10/0x10 [ 1062.824673] ? ext4_ext_release+0x10/0x10 [ 1062.825591] ? lock_acquire+0x197/0x470 [ 1062.826467] ? ext4_da_get_block_prep+0x5b2/0x1100 [ 1062.827540] ? lock_release+0x680/0x680 [ 1062.828445] ? ext4_es_lookup_extent+0x485/0xa80 [ 1062.829482] ? lock_downgrade+0x6d0/0x6d0 [ 1062.830426] ? down_read+0x10f/0x430 [ 1062.831261] ? down_write+0x160/0x160 [ 1062.832126] ext4_map_query_blocks.constprop.0+0x7e/0x2d0 [ 1062.833346] ext4_da_get_block_prep+0x9a1/0x1100 [ 1062.834386] ? ext4_da_release_space+0x480/0x480 [ 1062.835419] ? lock_downgrade+0x6d0/0x6d0 [ 1062.836361] ? create_empty_buffers+0x4a3/0x640 [ 1062.837423] ? do_raw_spin_unlock+0x4f/0x220 [ 1062.837579] FAULT_INJECTION: forcing a failure. [ 1062.837579] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.838430] ? create_page_buffers+0x139/0x230 [ 1062.838461] __block_write_begin_int+0x3d1/0x19c0 [ 1062.838491] ? ext4_da_release_space+0x480/0x480 [ 1062.844020] ? remove_inode_buffers+0x300/0x300 [ 1062.845065] ? jbd2__journal_start+0xf3/0x7e0 [ 1062.846097] ext4_da_write_begin+0x37d/0xd40 [ 1062.847103] ? ext4_write_begin+0x10f0/0x10f0 [ 1062.848122] ? copyout_mc+0x140/0x140 [ 1062.848986] ? __mark_inode_dirty+0xa19/0xd30 [ 1062.850010] generic_perform_write+0x20a/0x4f0 [ 1062.851059] ? page_cache_prev_miss+0x310/0x310 [ 1062.852124] ? down_write_killable+0x180/0x180 [ 1062.853173] ext4_buffered_write_iter+0x232/0x4a0 [ 1062.854273] ? __lock_acquire+0xbb1/0x5b00 [ 1062.855241] ext4_file_write_iter+0x3ab/0x1530 [ 1062.856287] ? __lock_acquire+0x1657/0x5b00 [ 1062.857278] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1062.858327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.859515] ? SOFTIRQ_verbose+0x10/0x10 [ 1062.860463] new_sync_write+0x42c/0x660 [ 1062.861367] ? new_sync_read+0x6f0/0x6f0 [ 1062.862284] ? ksys_write+0x12d/0x260 [ 1062.863156] ? lock_release+0x680/0x680 [ 1062.864069] ? avc_policy_seqno+0x9/0x70 [ 1062.864988] ? selinux_file_permission+0x92/0x520 [ 1062.866105] vfs_write+0x7c0/0xb10 [ 1062.866922] ksys_write+0x12d/0x260 [ 1062.867756] ? __ia32_sys_read+0xb0/0xb0 [ 1062.868692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.869891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.871073] do_syscall_64+0x33/0x40 [ 1062.871937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1062.873117] RIP: 0033:0x7f72c6759b19 [ 1062.873973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.878200] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1062.879957] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1062.881584] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1062.883215] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.884859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1062.886492] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1062.888176] CPU: 1 PID: 7620 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1062.889648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.891406] Call Trace: [ 1062.891988] dump_stack+0x107/0x167 [ 1062.892760] should_fail.cold+0x5/0xa [ 1062.893574] ? create_object.isra.0+0x3a/0xa30 [ 1062.894532] should_failslab+0x5/0x20 [ 1062.895332] kmem_cache_alloc+0x5b/0x310 [ 1062.896206] ? io_wq_create+0x114/0xc00 [ 1062.897051] create_object.isra.0+0x3a/0xa30 14:51:39 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) [ 1062.897975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1062.899315] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1062.900399] io_wq_create+0x6ef/0xc00 [ 1062.901214] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1062.902290] ? io_import_iovec+0x1120/0x1120 [ 1062.903225] ? io_apoll_task_func+0x2d0/0x2d0 [ 1062.904195] ? __io_req_find_next+0x300/0x300 [ 1062.905142] ? do_raw_spin_lock+0x121/0x260 [ 1062.906056] ? rwlock_bug.part.0+0x90/0x90 [ 1062.906961] __io_uring_add_tctx_node+0x2c6/0x520 [ 1062.907989] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1062.909096] ? alloc_fd+0x2e7/0x670 [ 1062.909876] io_uring_setup+0x1fbb/0x2980 [ 1062.910766] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1062.911848] ? wait_for_completion_io+0x270/0x270 [ 1062.912886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.913991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.915088] do_syscall_64+0x33/0x40 [ 1062.915889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1062.916981] RIP: 0033:0x7f5deeaf2b19 [ 1062.917767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.921669] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1062.923268] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1062.924795] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1062.926301] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1062.927821] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1062.929318] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1062.933502] FAT-fs (loop1): bogus number of reserved sectors [ 1062.934964] FAT-fs (loop1): Can't find a valid FAT filesystem 14:51:40 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x2) 14:51:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:51:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x804) 14:51:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x5) 14:51:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:51:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xc00) 14:51:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:51:53 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) [ 1076.053719] loop1: detected capacity change from 0 to 41948160 14:51:53 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 11) 14:51:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x1e}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 1) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1076.077164] FAULT_INJECTION: forcing a failure. [ 1076.077164] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.080548] CPU: 0 PID: 7652 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1076.082315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.084449] Call Trace: [ 1076.085121] dump_stack+0x107/0x167 [ 1076.086058] should_fail.cold+0x5/0xa [ 1076.087037] ? __do_sys_memfd_create+0xfb/0x450 [ 1076.088231] should_failslab+0x5/0x20 [ 1076.089208] __kmalloc+0x72/0x390 [ 1076.090103] __do_sys_memfd_create+0xfb/0x450 [ 1076.091253] ? memfd_file_seals_ptr+0x170/0x170 [ 1076.092455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1076.093789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1076.095108] do_syscall_64+0x33/0x40 [ 1076.096066] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1076.097374] RIP: 0033:0x7f844779eb19 [ 1076.098321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.103014] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1076.104958] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1076.106713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1076.108473] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1076.110230] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1076.111791] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1076.119961] FAULT_INJECTION: forcing a failure. [ 1076.119961] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.121671] CPU: 1 PID: 7650 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1076.122514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.122679] FAULT_INJECTION: forcing a failure. [ 1076.122679] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.123545] Call Trace: [ 1076.123590] dump_stack+0x107/0x167 [ 1076.126906] should_fail.cold+0x5/0xa [ 1076.127377] ? __es_insert_extent+0xed1/0x1370 [ 1076.127939] should_failslab+0x5/0x20 [ 1076.128417] kmem_cache_alloc+0x5b/0x310 [ 1076.128921] __es_insert_extent+0xed1/0x1370 [ 1076.129481] ext4_es_insert_delayed_block+0x30d/0x6d0 [ 1076.130123] ? ext4_is_pending+0x210/0x210 [ 1076.130650] ? do_raw_spin_lock+0x121/0x260 [ 1076.131209] ? ext4_has_free_clusters+0x294/0x570 [ 1076.131804] ? percpu_counter_add_batch+0x8b/0x140 [ 1076.132423] ? do_raw_spin_unlock+0x4f/0x220 [ 1076.132982] ? _raw_spin_unlock+0x1a/0x30 [ 1076.133505] ? ext4_da_reserve_space+0xf8/0x3c0 [ 1076.134085] ext4_da_get_block_prep+0xa91/0x1100 [ 1076.134675] ? ext4_da_release_space+0x480/0x480 [ 1076.135259] ? lock_downgrade+0x6d0/0x6d0 [ 1076.135798] ? create_empty_buffers+0x4a3/0x640 [ 1076.136409] ? do_raw_spin_unlock+0x4f/0x220 [ 1076.136950] ? create_page_buffers+0x139/0x230 [ 1076.137515] __block_write_begin_int+0x3d1/0x19c0 [ 1076.138114] ? ext4_da_release_space+0x480/0x480 [ 1076.138704] ? remove_inode_buffers+0x300/0x300 [ 1076.139277] ? jbd2__journal_start+0xf3/0x7e0 [ 1076.139921] ext4_da_write_begin+0x37d/0xd40 [ 1076.140610] ? ext4_write_begin+0x10f0/0x10f0 [ 1076.141160] ? copyout_mc+0x140/0x140 [ 1076.141679] ? __mark_inode_dirty+0xa19/0xd30 [ 1076.142375] generic_perform_write+0x20a/0x4f0 [ 1076.142964] ? page_cache_prev_miss+0x310/0x310 [ 1076.143535] ? down_write_killable+0x180/0x180 [ 1076.144118] ext4_buffered_write_iter+0x232/0x4a0 [ 1076.144706] ? __lock_acquire+0xbb1/0x5b00 [ 1076.145231] ext4_file_write_iter+0x3ab/0x1530 [ 1076.145791] ? __lock_acquire+0x1657/0x5b00 [ 1076.146341] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1076.146915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1076.147722] ? SOFTIRQ_verbose+0x10/0x10 [ 1076.148269] new_sync_write+0x42c/0x660 [ 1076.148764] ? new_sync_read+0x6f0/0x6f0 [ 1076.149358] ? ksys_write+0x12d/0x260 [ 1076.149924] ? lock_release+0x680/0x680 [ 1076.150415] ? avc_policy_seqno+0x9/0x70 [ 1076.150992] ? selinux_file_permission+0x92/0x520 [ 1076.151696] vfs_write+0x7c0/0xb10 [ 1076.152153] ksys_write+0x12d/0x260 [ 1076.152633] ? __ia32_sys_read+0xb0/0xb0 [ 1076.153257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1076.153928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1076.154708] do_syscall_64+0x33/0x40 [ 1076.155189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1076.155891] RIP: 0033:0x7f72c6759b19 [ 1076.156453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.158887] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1076.159922] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1076.160854] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1076.161722] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.162593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.163475] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1076.164460] CPU: 0 PID: 7644 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1076.165334] loop7: detected capacity change from 0 to 41948160 [ 1076.166104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.166112] Call Trace: [ 1076.166136] dump_stack+0x107/0x167 [ 1076.166161] should_fail.cold+0x5/0xa [ 1076.166186] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1076.166205] should_failslab+0x5/0x20 [ 1076.166226] kmem_cache_alloc_trace+0x55/0x320 [ 1076.166255] __io_uring_add_tctx_node+0x15c/0x520 [ 1076.166278] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1076.166297] ? alloc_fd+0x2e7/0x670 [ 1076.166332] io_uring_setup+0x1fbb/0x2980 [ 1076.166363] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1076.166382] ? wait_for_completion_io+0x270/0x270 14:51:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x6) 14:51:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x1200) [ 1076.166430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1076.166453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1076.166478] do_syscall_64+0x33/0x40 [ 1076.166500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1076.166514] RIP: 0033:0x7f5deeaf2b19 [ 1076.166534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.166545] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1076.166567] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1076.166579] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1076.166592] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1076.166604] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1076.166616] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1076.264674] FAT-fs (loop1): bogus number of reserved sectors [ 1076.266013] FAT-fs (loop1): Can't find a valid FAT filesystem 14:51:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x24}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:51:53 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 14:51:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 2) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:51:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:51:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x8) [ 1076.416727] FAULT_INJECTION: forcing a failure. [ 1076.416727] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.419181] CPU: 0 PID: 7667 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1076.420653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.422427] Call Trace: [ 1076.422996] dump_stack+0x107/0x167 [ 1076.423795] should_fail.cold+0x5/0xa [ 1076.424629] ? create_object.isra.0+0x3a/0xa30 [ 1076.425609] should_failslab+0x5/0x20 [ 1076.426429] kmem_cache_alloc+0x5b/0x310 [ 1076.427309] create_object.isra.0+0x3a/0xa30 [ 1076.428236] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1076.429324] kmem_cache_alloc_trace+0x151/0x320 [ 1076.430327] __io_uring_add_tctx_node+0x15c/0x520 [ 1076.431366] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1076.432464] ? alloc_fd+0x2e7/0x670 [ 1076.433255] io_uring_setup+0x1fbb/0x2980 [ 1076.434132] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1076.435211] ? wait_for_completion_io+0x270/0x270 [ 1076.436258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1076.437385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1076.438493] do_syscall_64+0x33/0x40 [ 1076.439279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1076.440384] RIP: 0033:0x7f5deeaf2b19 [ 1076.441181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.445128] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1076.446770] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1076.448311] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1076.449851] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1076.451388] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1076.452936] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:51:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1076.467897] FAULT_INJECTION: forcing a failure. [ 1076.467897] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.470309] CPU: 0 PID: 7669 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1076.471775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.473486] Call Trace: [ 1076.474061] dump_stack+0x107/0x167 [ 1076.474866] should_fail.cold+0x5/0xa [ 1076.475689] ? create_object.isra.0+0x3a/0xa30 [ 1076.476674] should_failslab+0x5/0x20 [ 1076.477492] kmem_cache_alloc+0x5b/0x310 [ 1076.478376] create_object.isra.0+0x3a/0xa30 [ 1076.479336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1076.480460] __kmalloc+0x16e/0x390 [ 1076.481245] __do_sys_memfd_create+0xfb/0x450 [ 1076.482225] ? ksys_write+0x1a9/0x260 [ 1076.483060] ? memfd_file_seals_ptr+0x170/0x170 [ 1076.484095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1076.485243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1076.486375] do_syscall_64+0x33/0x40 [ 1076.487196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1076.488328] RIP: 0033:0x7f844779eb19 [ 1076.489144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.493170] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1076.494827] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1076.496401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1076.497960] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1076.499520] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1076.501087] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1076.566914] loop7: detected capacity change from 0 to 41948160 14:52:11 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 12) 14:52:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:52:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:11 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) 14:52:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x1201) 14:52:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 3) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:52:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x9) 14:52:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2a}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1094.708412] FAULT_INJECTION: forcing a failure. [ 1094.708412] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.710874] CPU: 1 PID: 7682 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1094.712345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.714135] Call Trace: [ 1094.714705] dump_stack+0x107/0x167 [ 1094.715497] should_fail.cold+0x5/0xa [ 1094.716329] ? create_object.isra.0+0x3a/0xa30 [ 1094.717310] should_failslab+0x5/0x20 [ 1094.718124] kmem_cache_alloc+0x5b/0x310 [ 1094.719008] create_object.isra.0+0x3a/0xa30 [ 1094.719948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1094.721057] kmem_cache_alloc+0x159/0x310 [ 1094.721956] __es_insert_extent+0xed1/0x1370 [ 1094.722925] ext4_es_insert_delayed_block+0x30d/0x6d0 [ 1094.724035] ? ext4_is_pending+0x210/0x210 [ 1094.724945] ? do_raw_spin_lock+0x121/0x260 [ 1094.725845] ? ext4_has_free_clusters+0x294/0x570 [ 1094.726878] ? percpu_counter_add_batch+0x8b/0x140 [ 1094.727932] ? do_raw_spin_unlock+0x4f/0x220 [ 1094.728888] ? _raw_spin_unlock+0x1a/0x30 [ 1094.729777] ? ext4_da_reserve_space+0xf8/0x3c0 [ 1094.730776] ext4_da_get_block_prep+0xa91/0x1100 [ 1094.731798] ? ext4_da_release_space+0x480/0x480 [ 1094.732823] ? lock_downgrade+0x6d0/0x6d0 [ 1094.733725] ? create_empty_buffers+0x4a3/0x640 [ 1094.734727] ? do_raw_spin_unlock+0x4f/0x220 [ 1094.735674] ? create_page_buffers+0x139/0x230 [ 1094.736670] __block_write_begin_int+0x3d1/0x19c0 [ 1094.737709] ? ext4_da_release_space+0x480/0x480 [ 1094.738740] ? remove_inode_buffers+0x300/0x300 [ 1094.739734] ? jbd2__journal_start+0xf3/0x7e0 [ 1094.740734] ext4_da_write_begin+0x37d/0xd40 [ 1094.741697] ? ext4_write_begin+0x10f0/0x10f0 [ 1094.742654] ? copyout_mc+0x140/0x140 [ 1094.743470] ? __mark_inode_dirty+0xa19/0xd30 [ 1094.744446] generic_perform_write+0x20a/0x4f0 [ 1094.745442] ? page_cache_prev_miss+0x310/0x310 [ 1094.746439] ? down_write_killable+0x180/0x180 [ 1094.747445] ext4_buffered_write_iter+0x232/0x4a0 [ 1094.748491] ? __lock_acquire+0xbb1/0x5b00 [ 1094.749396] ext4_file_write_iter+0x3ab/0x1530 [ 1094.750384] ? __lock_acquire+0x1657/0x5b00 [ 1094.751312] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1094.752299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1094.753424] ? SOFTIRQ_verbose+0x10/0x10 [ 1094.754313] new_sync_write+0x42c/0x660 [ 1094.755163] ? new_sync_read+0x6f0/0x6f0 [ 1094.756036] ? ksys_write+0x12d/0x260 [ 1094.756863] ? lock_release+0x680/0x680 [ 1094.757723] ? avc_policy_seqno+0x9/0x70 [ 1094.758580] ? selinux_file_permission+0x92/0x520 [ 1094.759630] vfs_write+0x7c0/0xb10 [ 1094.760409] ksys_write+0x12d/0x260 [ 1094.761197] ? __ia32_sys_read+0xb0/0xb0 [ 1094.762077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1094.763211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.764335] do_syscall_64+0x33/0x40 [ 1094.765140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1094.766239] RIP: 0033:0x7f72c6759b19 [ 1094.767026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.770916] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1094.772539] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1094.774036] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1094.775540] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.777186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.778720] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1094.792499] FAULT_INJECTION: forcing a failure. [ 1094.792499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.795146] CPU: 0 PID: 7697 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1094.795544] FAULT_INJECTION: forcing a failure. [ 1094.795544] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.796639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.796648] Call Trace: [ 1094.796677] dump_stack+0x107/0x167 [ 1094.796710] should_fail.cold+0x5/0xa [ 1094.796740] _copy_from_user+0x2e/0x1b0 [ 1094.803971] __do_sys_memfd_create+0x16d/0x450 [ 1094.804972] ? memfd_file_seals_ptr+0x170/0x170 [ 1094.805966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1094.807084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.808183] do_syscall_64+0x33/0x40 [ 1094.809014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1094.810101] RIP: 0033:0x7f844779eb19 [ 1094.810890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.814802] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1094.816436] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1094.817941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1094.819448] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1094.820984] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1094.822484] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1094.824017] CPU: 1 PID: 7696 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1094.825521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.827262] Call Trace: [ 1094.827822] dump_stack+0x107/0x167 [ 1094.828602] should_fail.cold+0x5/0xa [ 1094.829386] ? xas_alloc+0x336/0x440 [ 1094.830152] should_failslab+0x5/0x20 [ 1094.830940] kmem_cache_alloc+0x5b/0x310 [ 1094.831791] ? stack_trace_consume_entry+0x160/0x160 [ 1094.832839] xas_alloc+0x336/0x440 [ 1094.833603] xas_create+0x34a/0x10d0 [ 1094.834414] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1094.835552] xas_store+0x8c/0x1c40 [ 1094.836341] __xa_store+0x164/0x2d0 [ 1094.837125] ? xa_delete_node+0x280/0x280 [ 1094.838022] ? trace_hardirqs_on+0x5b/0x180 [ 1094.838958] xa_store+0x31/0x50 [ 1094.839674] __io_uring_add_tctx_node+0x1cf/0x520 [ 1094.840709] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1094.841826] ? alloc_fd+0x2e7/0x670 [ 1094.842611] io_uring_setup+0x1fbb/0x2980 [ 1094.843509] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1094.844588] ? wait_for_completion_io+0x270/0x270 [ 1094.845652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1094.846774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.847877] do_syscall_64+0x33/0x40 [ 1094.848683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1094.849774] RIP: 0033:0x7f5deeaf2b19 [ 1094.850560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.854496] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1094.856128] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1094.857657] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1094.859171] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1094.860708] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1094.862209] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1094.866896] loop1: detected capacity change from 0 to 41948160 [ 1094.884954] FAT-fs (loop1): bogus number of reserved sectors [ 1094.886277] FAT-fs (loop1): Can't find a valid FAT filesystem 14:52:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x1800) [ 1094.923543] loop7: detected capacity change from 0 to 41948160 14:52:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x12) 14:52:12 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 13) 14:52:12 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) 14:52:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x30}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1095.058833] loop1: detected capacity change from 0 to 41948160 [ 1095.068529] FAT-fs (loop1): bogus number of reserved sectors [ 1095.069878] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1095.082385] FAULT_INJECTION: forcing a failure. [ 1095.082385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.084788] CPU: 1 PID: 7713 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1095.086166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.087815] Call Trace: [ 1095.088360] dump_stack+0x107/0x167 [ 1095.089096] should_fail.cold+0x5/0xa [ 1095.089880] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1095.090953] ? __mark_inode_dirty+0xa19/0xd30 [ 1095.091863] generic_perform_write+0x279/0x4f0 [ 1095.092802] ? page_cache_prev_miss+0x310/0x310 [ 1095.093737] ? down_write_killable+0x180/0x180 [ 1095.094662] ext4_buffered_write_iter+0x232/0x4a0 [ 1095.095625] ? __lock_acquire+0xbb1/0x5b00 [ 1095.096490] ext4_file_write_iter+0x3ab/0x1530 [ 1095.097409] ? __lock_acquire+0x1657/0x5b00 [ 1095.098282] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1095.099210] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1095.100256] ? SOFTIRQ_verbose+0x10/0x10 [ 1095.101108] new_sync_write+0x42c/0x660 [ 1095.101912] ? new_sync_read+0x6f0/0x6f0 [ 1095.102723] ? ksys_write+0x12d/0x260 [ 1095.103489] ? lock_release+0x680/0x680 [ 1095.104284] ? avc_policy_seqno+0x9/0x70 [ 1095.105112] ? selinux_file_permission+0x92/0x520 [ 1095.106099] vfs_write+0x7c0/0xb10 [ 1095.106817] ksys_write+0x12d/0x260 [ 1095.107551] ? __ia32_sys_read+0xb0/0xb0 [ 1095.108375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.109414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.110441] do_syscall_64+0x33/0x40 [ 1095.111180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.112198] RIP: 0033:0x7f72c6759b19 [ 1095.112941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.116590] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1095.118095] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1095.119503] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1095.120919] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.122327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.123744] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1095.166313] FAULT_INJECTION: forcing a failure. [ 1095.166313] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.168670] CPU: 1 PID: 7716 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1095.169996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.171586] Call Trace: [ 1095.172100] dump_stack+0x107/0x167 [ 1095.172812] should_fail.cold+0x5/0xa [ 1095.173548] ? create_object.isra.0+0x3a/0xa30 [ 1095.174432] should_failslab+0x5/0x20 [ 1095.175167] kmem_cache_alloc+0x5b/0x310 [ 1095.175949] create_object.isra.0+0x3a/0xa30 [ 1095.176803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.177783] kmem_cache_alloc+0x159/0x310 [ 1095.178591] xas_alloc+0x336/0x440 [ 1095.179274] xas_create+0x34a/0x10d0 [ 1095.180004] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1095.181021] xas_store+0x8c/0x1c40 [ 1095.181718] __xa_store+0x164/0x2d0 [ 1095.182423] ? xa_delete_node+0x280/0x280 [ 1095.183246] ? trace_hardirqs_on+0x5b/0x180 [ 1095.184085] xa_store+0x31/0x50 [ 1095.184730] __io_uring_add_tctx_node+0x1cf/0x520 [ 1095.185662] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1095.186666] ? alloc_fd+0x2e7/0x670 [ 1095.187372] io_uring_setup+0x1fbb/0x2980 [ 1095.188174] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1095.189160] ? wait_for_completion_io+0x270/0x270 [ 1095.190121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.191110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.192094] do_syscall_64+0x33/0x40 [ 1095.192813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.193778] RIP: 0033:0x7f5deeaf2b19 [ 1095.194482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.197963] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1095.199406] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1095.200764] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1095.202120] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1095.203476] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1095.204829] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:52:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x36}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:52:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:52:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x63) 14:52:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2000) 14:52:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:52:27 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 14) 14:52:27 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) [ 1110.304850] FAULT_INJECTION: forcing a failure. [ 1110.304850] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.307456] CPU: 0 PID: 7740 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1110.309008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.310883] Call Trace: [ 1110.311482] dump_stack+0x107/0x167 [ 1110.312307] should_fail.cold+0x5/0xa [ 1110.313180] ? shmem_alloc_inode+0x18/0x40 [ 1110.314128] should_failslab+0x5/0x20 [ 1110.314992] kmem_cache_alloc+0x5b/0x310 [ 1110.315911] ? shmem_destroy_inode+0x70/0x70 [ 1110.316917] shmem_alloc_inode+0x18/0x40 [ 1110.317831] ? shmem_destroy_inode+0x70/0x70 [ 1110.318820] alloc_inode+0x63/0x240 [ 1110.319639] new_inode+0x23/0x250 [ 1110.320422] shmem_get_inode+0x15e/0xbc0 [ 1110.321354] __shmem_file_setup+0xb8/0x320 [ 1110.322309] ? _copy_from_user+0xfb/0x1b0 [ 1110.323255] __do_sys_memfd_create+0x275/0x450 [ 1110.324292] ? memfd_file_seals_ptr+0x170/0x170 [ 1110.325365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.326554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.327704] do_syscall_64+0x33/0x40 [ 1110.328554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.329724] RIP: 0033:0x7f844779eb19 [ 1110.330564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.334727] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1110.336451] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1110.338075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1110.339686] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1110.341317] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1110.342928] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1110.345338] FAULT_INJECTION: forcing a failure. [ 1110.345338] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.348350] CPU: 1 PID: 7736 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1110.349912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.351785] Call Trace: [ 1110.352385] dump_stack+0x107/0x167 [ 1110.353222] should_fail.cold+0x5/0xa [ 1110.354085] ? ext4_init_io_end+0x23/0x180 [ 1110.355049] should_failslab+0x5/0x20 [ 1110.355910] kmem_cache_alloc+0x5b/0x310 [ 1110.356864] ext4_init_io_end+0x23/0x180 [ 1110.357779] ext4_writepages+0x8ec/0x3350 [ 1110.358730] ? slab_free_freelist_hook+0xa9/0x180 [ 1110.359809] ? __ext4_journal_stop+0xde/0x1f0 [ 1110.360823] ? ext4_da_write_end+0x21e/0x9c0 [ 1110.361810] ? generic_perform_write+0x2bf/0x4f0 [ 1110.362878] ? vfs_write+0x7c0/0xb10 [ 1110.363713] ? ksys_write+0x12d/0x260 [ 1110.364586] ? lock_chain_count+0x20/0x20 [ 1110.365535] ? lock_acquire+0x197/0x470 [ 1110.366431] ? find_held_lock+0x2c/0x110 [ 1110.367341] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1110.368451] ? mark_held_locks+0x9e/0xe0 [ 1110.369383] ? trace_hardirqs_on+0x5b/0x180 [ 1110.370352] ? kmem_cache_free+0xa7/0x2d0 [ 1110.371280] ? __kasan_slab_free+0x122/0x160 [ 1110.372265] ? slab_free_freelist_hook+0xa9/0x180 [ 1110.373365] ? jbd2_journal_stop+0x61f/0xdc0 [ 1110.374351] ? kmem_cache_free+0x249/0x2d0 [ 1110.375319] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1110.376417] do_writepages+0xee/0x2a0 [ 1110.377280] ? page_writeback_cpu_online+0x20/0x20 [ 1110.378387] ? __mark_inode_dirty+0x312/0xd30 [ 1110.379408] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1110.380719] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1110.381836] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1110.383052] ? generic_perform_write+0x37d/0x4f0 [ 1110.384129] file_write_and_wait_range+0xb6/0x130 [ 1110.385238] ext4_sync_file+0x225/0xde0 [ 1110.386140] ? ext4_getfsmap+0x990/0x990 [ 1110.387052] vfs_fsync_range+0x13d/0x230 [ 1110.387973] ext4_buffered_write_iter+0x34b/0x4a0 [ 1110.389071] ? __lock_acquire+0xbb1/0x5b00 [ 1110.390022] ext4_file_write_iter+0x3ab/0x1530 [ 1110.391051] ? __lock_acquire+0x1657/0x5b00 [ 1110.392032] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1110.393072] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1110.394366] ? SOFTIRQ_verbose+0x10/0x10 [ 1110.395469] new_sync_write+0x42c/0x660 [ 1110.396370] ? new_sync_read+0x6f0/0x6f0 [ 1110.397299] ? ksys_write+0x12d/0x260 [ 1110.398206] ? lock_release+0x680/0x680 [ 1110.399119] ? avc_policy_seqno+0x9/0x70 [ 1110.400031] ? selinux_file_permission+0x92/0x520 [ 1110.401140] vfs_write+0x7c0/0xb10 [ 1110.401948] ksys_write+0x12d/0x260 [ 1110.402767] ? __ia32_sys_read+0xb0/0xb0 [ 1110.403684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.404872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.406036] do_syscall_64+0x33/0x40 [ 1110.406872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.408011] RIP: 0033:0x7f72c6759b19 [ 1110.408853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.413004] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1110.414712] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1110.416312] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1110.417924] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.419530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.421150] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1110.427796] loop1: detected capacity change from 0 to 41948160 [ 1110.428703] FAULT_INJECTION: forcing a failure. [ 1110.428703] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.431620] CPU: 0 PID: 7738 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1110.433346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.435456] Call Trace: [ 1110.436141] dump_stack+0x107/0x167 [ 1110.437091] should_fail.cold+0x5/0xa [ 1110.437887] ? xas_alloc+0x336/0x440 [ 1110.438491] should_failslab+0x5/0x20 [ 1110.439111] kmem_cache_alloc+0x5b/0x310 [ 1110.439782] xas_alloc+0x336/0x440 [ 1110.440358] xas_create+0x34a/0x10d0 [ 1110.440980] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1110.441791] xas_store+0x8c/0x1c40 [ 1110.442277] __xa_store+0x164/0x2d0 [ 1110.442772] ? xa_delete_node+0x280/0x280 [ 1110.443347] ? trace_hardirqs_on+0x5b/0x180 [ 1110.443941] xa_store+0x31/0x50 [ 1110.444393] __io_uring_add_tctx_node+0x1cf/0x520 [ 1110.445056] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1110.445760] ? alloc_fd+0x2e7/0x670 [ 1110.446260] io_uring_setup+0x1fbb/0x2980 [ 1110.446834] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1110.447518] ? wait_for_completion_io+0x270/0x270 [ 1110.448173] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1110.448926] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1110.449676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.450382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.451087] do_syscall_64+0x33/0x40 [ 1110.451593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.452291] RIP: 0033:0x7f5deeaf2b19 [ 1110.452810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.455295] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1110.456327] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1110.457293] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1110.458259] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1110.459227] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1110.460195] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1110.462154] FAT-fs (loop1): bogus number of reserved sectors [ 1110.463638] FAT-fs (loop1): Can't find a valid FAT filesystem 14:52:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x300) 14:52:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2103) [ 1110.503702] loop7: detected capacity change from 0 to 41948160 14:52:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 5) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1110.556280] FAULT_INJECTION: forcing a failure. [ 1110.556280] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.557912] CPU: 0 PID: 7753 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1110.558876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.560049] Call Trace: [ 1110.560426] dump_stack+0x107/0x167 [ 1110.560949] should_fail.cold+0x5/0xa [ 1110.561489] ? create_object.isra.0+0x3a/0xa30 [ 1110.562134] should_failslab+0x5/0x20 [ 1110.562670] kmem_cache_alloc+0x5b/0x310 [ 1110.563252] create_object.isra.0+0x3a/0xa30 [ 1110.563879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1110.564598] kmem_cache_alloc+0x159/0x310 [ 1110.565199] ? shmem_destroy_inode+0x70/0x70 [ 1110.565820] shmem_alloc_inode+0x18/0x40 [ 1110.566387] ? shmem_destroy_inode+0x70/0x70 [ 1110.567004] alloc_inode+0x63/0x240 [ 1110.567517] new_inode+0x23/0x250 [ 1110.568012] shmem_get_inode+0x15e/0xbc0 [ 1110.568587] __shmem_file_setup+0xb8/0x320 [ 1110.569188] ? _copy_from_user+0xfb/0x1b0 [ 1110.569770] __do_sys_memfd_create+0x275/0x450 [ 1110.570416] ? memfd_file_seals_ptr+0x170/0x170 [ 1110.571076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.571816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.572546] do_syscall_64+0x33/0x40 [ 1110.573086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.573811] RIP: 0033:0x7f844779eb19 [ 1110.574333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.576923] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1110.577993] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1110.578990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1110.579990] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1110.580993] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1110.581991] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 14:52:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 6) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1110.664236] FAULT_INJECTION: forcing a failure. [ 1110.664236] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.666910] CPU: 1 PID: 7759 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1110.668495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.670422] Call Trace: [ 1110.671044] dump_stack+0x107/0x167 [ 1110.671909] should_fail.cold+0x5/0xa [ 1110.672814] ? security_inode_alloc+0x34/0x160 [ 1110.673883] should_failslab+0x5/0x20 [ 1110.674765] kmem_cache_alloc+0x5b/0x310 [ 1110.675709] security_inode_alloc+0x34/0x160 [ 1110.676741] inode_init_always+0xa4e/0xd10 [ 1110.677722] ? shmem_destroy_inode+0x70/0x70 [ 1110.678735] alloc_inode+0x84/0x240 [ 1110.679575] new_inode+0x23/0x250 [ 1110.680387] shmem_get_inode+0x15e/0xbc0 [ 1110.681354] __shmem_file_setup+0xb8/0x320 [ 1110.682342] ? _copy_from_user+0xfb/0x1b0 [ 1110.683303] __do_sys_memfd_create+0x275/0x450 [ 1110.684356] ? memfd_file_seals_ptr+0x170/0x170 [ 1110.685447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.686662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.687857] do_syscall_64+0x33/0x40 [ 1110.688730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.689914] RIP: 0033:0x7f844779eb19 [ 1110.690773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.695046] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1110.696812] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1110.698458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1110.700110] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1110.701774] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1110.703440] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 14:52:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) 14:52:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 7) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:52:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e666174", 0xb}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2400) 14:52:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x3c}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1125.963122] FAULT_INJECTION: forcing a failure. [ 1125.963122] name failslab, interval 1, probability 0, space 0, times 0 14:52:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x940) 14:52:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:52:43 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 15) [ 1125.965636] CPU: 1 PID: 7766 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1125.967260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.969006] Call Trace: [ 1125.969566] dump_stack+0x107/0x167 [ 1125.970330] should_fail.cold+0x5/0xa [ 1125.971133] ? create_object.isra.0+0x3a/0xa30 [ 1125.972092] should_failslab+0x5/0x20 [ 1125.972920] kmem_cache_alloc+0x5b/0x310 [ 1125.973772] ? mark_held_locks+0x9e/0xe0 [ 1125.974647] create_object.isra.0+0x3a/0xa30 [ 1125.975569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.976655] kmem_cache_alloc+0x159/0x310 [ 1125.977561] xas_alloc+0x336/0x440 [ 1125.978317] xas_create+0x34a/0x10d0 [ 1125.979122] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1125.980240] xas_store+0x8c/0x1c40 [ 1125.981037] __xa_store+0x164/0x2d0 [ 1125.981812] ? xa_delete_node+0x280/0x280 [ 1125.982689] ? trace_hardirqs_on+0x5b/0x180 [ 1125.983610] xa_store+0x31/0x50 [ 1125.984315] __io_uring_add_tctx_node+0x1cf/0x520 [ 1125.985347] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1125.986467] ? alloc_fd+0x2e7/0x670 [ 1125.987261] io_uring_setup+0x1fbb/0x2980 [ 1125.988153] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1125.989231] ? wait_for_completion_io+0x270/0x270 [ 1125.990281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.991395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.992490] do_syscall_64+0x33/0x40 [ 1125.993292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1125.994380] RIP: 0033:0x7f5deeaf2b19 [ 1125.995168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.999075] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1126.000692] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1126.002234] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1126.003764] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1126.005293] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1126.006810] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1126.014601] FAULT_INJECTION: forcing a failure. [ 1126.014601] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.017145] CPU: 0 PID: 7776 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1126.018596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.020222] FAULT_INJECTION: forcing a failure. [ 1126.020222] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.020362] Call Trace: [ 1126.020393] dump_stack+0x107/0x167 [ 1126.024017] should_fail.cold+0x5/0xa [ 1126.024826] ? create_object.isra.0+0x3a/0xa30 [ 1126.025803] should_failslab+0x5/0x20 [ 1126.026610] kmem_cache_alloc+0x5b/0x310 [ 1126.027484] create_object.isra.0+0x3a/0xa30 [ 1126.028418] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.029511] kmem_cache_alloc+0x159/0x310 [ 1126.030398] security_inode_alloc+0x34/0x160 [ 1126.031345] inode_init_always+0xa4e/0xd10 [ 1126.032247] ? shmem_destroy_inode+0x70/0x70 [ 1126.033183] alloc_inode+0x84/0x240 [ 1126.033960] new_inode+0x23/0x250 [ 1126.034699] shmem_get_inode+0x15e/0xbc0 [ 1126.035576] __shmem_file_setup+0xb8/0x320 [ 1126.036475] ? _copy_from_user+0xfb/0x1b0 [ 1126.037381] __do_sys_memfd_create+0x275/0x450 [ 1126.038352] ? memfd_file_seals_ptr+0x170/0x170 [ 1126.039347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.040461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.041567] do_syscall_64+0x33/0x40 [ 1126.042362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.043452] RIP: 0033:0x7f844779eb19 [ 1126.044247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.048297] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1126.049925] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1126.051436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1126.052956] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1126.054468] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1126.055977] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1126.057536] CPU: 1 PID: 7778 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1126.059012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.060762] Call Trace: [ 1126.061344] dump_stack+0x107/0x167 [ 1126.062130] should_fail.cold+0x5/0xa [ 1126.062945] ? create_object.isra.0+0x3a/0xa30 [ 1126.063919] should_failslab+0x5/0x20 [ 1126.064737] kmem_cache_alloc+0x5b/0x310 [ 1126.065623] create_object.isra.0+0x3a/0xa30 [ 1126.066561] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.067653] kmem_cache_alloc+0x159/0x310 [ 1126.068550] ext4_init_io_end+0x23/0x180 [ 1126.069427] ext4_writepages+0xee9/0x3350 [ 1126.070322] ? __ext4_journal_stop+0xde/0x1f0 [ 1126.071268] ? ext4_da_write_end+0x21e/0x9c0 [ 1126.072211] ? generic_perform_write+0x2bf/0x4f0 [ 1126.073228] ? ksys_write+0x12d/0x260 [ 1126.074053] ? lock_chain_count+0x20/0x20 [ 1126.074940] ? lock_acquire+0x197/0x470 [ 1126.075784] ? find_held_lock+0x2c/0x110 [ 1126.076647] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1126.077708] ? mark_held_locks+0x9e/0xe0 [ 1126.078587] ? trace_hardirqs_on+0x5b/0x180 [ 1126.079504] ? kmem_cache_free+0xa7/0x2d0 [ 1126.080389] ? __kasan_slab_free+0x122/0x160 [ 1126.081333] ? slab_free_freelist_hook+0xa9/0x180 [ 1126.082359] ? jbd2_journal_stop+0x61f/0xdc0 [ 1126.083289] ? kmem_cache_free+0x249/0x2d0 [ 1126.084206] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1126.085254] do_writepages+0xee/0x2a0 [ 1126.086070] ? page_writeback_cpu_online+0x20/0x20 [ 1126.087115] ? __mark_inode_dirty+0x312/0xd30 14:52:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x3000) [ 1126.088088] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1126.089621] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1126.090683] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1126.091822] ? generic_perform_write+0x37d/0x4f0 [ 1126.092834] file_write_and_wait_range+0xb6/0x130 [ 1126.093868] ext4_sync_file+0x225/0xde0 [ 1126.094714] ? ext4_getfsmap+0x990/0x990 14:52:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x941) [ 1126.095579] vfs_fsync_range+0x13d/0x230 [ 1126.096565] ext4_buffered_write_iter+0x34b/0x4a0 [ 1126.097591] ? __lock_acquire+0xbb1/0x5b00 [ 1126.098490] ext4_file_write_iter+0x3ab/0x1530 [ 1126.099454] ? __lock_acquire+0x1657/0x5b00 [ 1126.100383] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1126.101373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.102480] ? SOFTIRQ_verbose+0x10/0x10 [ 1126.103361] new_sync_write+0x42c/0x660 [ 1126.104217] ? new_sync_read+0x6f0/0x6f0 [ 1126.105091] ? ksys_write+0x12d/0x260 [ 1126.105901] ? lock_release+0x680/0x680 [ 1126.106752] ? avc_policy_seqno+0x9/0x70 [ 1126.107613] ? selinux_file_permission+0x92/0x520 [ 1126.108662] vfs_write+0x7c0/0xb10 [ 1126.109423] ksys_write+0x12d/0x260 [ 1126.110194] ? __ia32_sys_read+0xb0/0xb0 [ 1126.111060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.112169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.113276] do_syscall_64+0x33/0x40 [ 1126.114066] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.115148] RIP: 0033:0x7f72c6759b19 [ 1126.115930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.119808] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1126.121500] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1126.123010] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1126.124613] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.126131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.127729] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1126.133664] loop1: detected capacity change from 0 to 41948160 14:52:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) [ 1126.189516] FAT-fs (loop1): bogus number of reserved sectors [ 1126.190843] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1126.204669] loop7: detected capacity change from 0 to 41948160 14:52:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x42}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:52:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 8) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:52:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x3f00) [ 1126.324222] FAULT_INJECTION: forcing a failure. [ 1126.324222] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.326657] CPU: 0 PID: 7795 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1126.328106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.329865] Call Trace: [ 1126.330426] dump_stack+0x107/0x167 [ 1126.331209] should_fail.cold+0x5/0xa [ 1126.332020] ? xas_alloc+0x336/0x440 [ 1126.332812] should_failslab+0x5/0x20 [ 1126.333624] kmem_cache_alloc+0x5b/0x310 [ 1126.334486] xas_alloc+0x336/0x440 [ 1126.335246] xas_create+0x34a/0x10d0 [ 1126.336070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.337180] xas_store+0x8c/0x1c40 [ 1126.337945] __xa_store+0x164/0x2d0 [ 1126.338706] ? xa_delete_node+0x280/0x280 [ 1126.339588] ? trace_hardirqs_on+0x5b/0x180 [ 1126.340495] xa_store+0x31/0x50 [ 1126.341201] __io_uring_add_tctx_node+0x1cf/0x520 [ 1126.342215] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1126.343313] ? alloc_fd+0x2e7/0x670 [ 1126.344097] io_uring_setup+0x1fbb/0x2980 [ 1126.344989] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1126.346054] ? wait_for_completion_io+0x270/0x270 [ 1126.347104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.348202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.349294] do_syscall_64+0x33/0x40 [ 1126.350081] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.351154] RIP: 0033:0x7f5deeaf2b19 [ 1126.351945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.355817] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1126.357415] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1126.358925] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1126.360432] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1126.361948] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1126.363456] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1126.380640] FAULT_INJECTION: forcing a failure. [ 1126.380640] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.383101] CPU: 1 PID: 7799 Comm: syz-executor.0 Not tainted 5.10.259 #1 14:52:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x60}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:52:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:52:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e666174", 0xb}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x944) [ 1126.384565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.386555] Call Trace: [ 1126.387120] dump_stack+0x107/0x167 [ 1126.387901] should_fail.cold+0x5/0xa [ 1126.388708] ? __d_alloc+0x2a/0x990 [ 1126.389488] should_failslab+0x5/0x20 [ 1126.390299] kmem_cache_alloc+0x5b/0x310 [ 1126.391159] ? init_special_inode+0x1f0/0x1f0 [ 1126.392116] __d_alloc+0x2a/0x990 [ 1126.392866] d_alloc_pseudo+0x19/0x70 [ 1126.393691] alloc_file_pseudo+0xce/0x250 [ 1126.394572] ? alloc_file+0x5a0/0x5a0 [ 1126.395390] ? shmem_get_inode+0x55c/0xbc0 [ 1126.396305] __shmem_file_setup+0x144/0x320 [ 1126.397243] ? _copy_from_user+0xfb/0x1b0 [ 1126.398137] __do_sys_memfd_create+0x275/0x450 [ 1126.399118] ? memfd_file_seals_ptr+0x170/0x170 [ 1126.400122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.401252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.402360] do_syscall_64+0x33/0x40 [ 1126.403153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.404250] RIP: 0033:0x7f844779eb19 [ 1126.405051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.408970] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1126.410589] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1126.412115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1126.413644] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1126.415159] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1126.416676] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1126.432119] loop1: detected capacity change from 0 to 41948160 [ 1126.440741] loop7: detected capacity change from 0 to 41948160 [ 1126.447043] FAT-fs (loop1): bogus number of reserved sectors [ 1126.448376] FAT-fs (loop1): Can't find a valid FAT filesystem 14:52:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x5505) 14:52:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x946) 14:52:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x121}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:52:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e666174", 0xb}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x8004) 14:52:43 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 16) 14:52:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x94a) 14:52:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x600}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1126.759181] FAULT_INJECTION: forcing a failure. [ 1126.759181] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.761745] CPU: 0 PID: 7826 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1126.763223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.765013] Call Trace: [ 1126.765582] dump_stack+0x107/0x167 [ 1126.766368] should_fail.cold+0x5/0xa [ 1126.767188] ? ext4_init_io_end+0x23/0x180 [ 1126.768101] should_failslab+0x5/0x20 [ 1126.768924] kmem_cache_alloc+0x5b/0x310 [ 1126.769806] ext4_init_io_end+0x23/0x180 [ 1126.770673] ext4_writepages+0xee9/0x3350 [ 1126.771578] ? __ext4_journal_stop+0xde/0x1f0 [ 1126.772534] ? ext4_da_write_end+0x21e/0x9c0 [ 1126.773492] ? generic_perform_write+0x2bf/0x4f0 [ 1126.774518] ? ksys_write+0x12d/0x260 [ 1126.775351] ? lock_chain_count+0x20/0x20 [ 1126.776254] ? lock_acquire+0x197/0x470 [ 1126.777121] ? find_held_lock+0x2c/0x110 [ 1126.777995] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1126.779066] ? mark_held_locks+0x9e/0xe0 [ 1126.779952] ? trace_hardirqs_on+0x5b/0x180 [ 1126.780896] ? kmem_cache_free+0xa7/0x2d0 [ 1126.781790] ? __kasan_slab_free+0x122/0x160 [ 1126.782745] ? slab_free_freelist_hook+0xa9/0x180 [ 1126.783789] ? jbd2_journal_stop+0x61f/0xdc0 [ 1126.784731] ? kmem_cache_free+0x249/0x2d0 [ 1126.785669] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1126.786721] do_writepages+0xee/0x2a0 [ 1126.787551] ? page_writeback_cpu_online+0x20/0x20 [ 1126.788586] ? __mark_inode_dirty+0x312/0xd30 [ 1126.789575] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1126.790827] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1126.791906] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1126.793083] ? generic_perform_write+0x37d/0x4f0 [ 1126.794115] file_write_and_wait_range+0xb6/0x130 [ 1126.795156] ext4_sync_file+0x225/0xde0 [ 1126.796018] ? ext4_getfsmap+0x990/0x990 [ 1126.796911] vfs_fsync_range+0x13d/0x230 [ 1126.797797] ext4_buffered_write_iter+0x34b/0x4a0 [ 1126.798834] ? __lock_acquire+0xbb1/0x5b00 [ 1126.799749] ext4_file_write_iter+0x3ab/0x1530 [ 1126.800735] ? __lock_acquire+0x1657/0x5b00 [ 1126.801686] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1126.802677] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.803809] ? SOFTIRQ_verbose+0x10/0x10 [ 1126.804698] new_sync_write+0x42c/0x660 [ 1126.805570] ? new_sync_read+0x6f0/0x6f0 [ 1126.806448] ? ksys_write+0x12d/0x260 [ 1126.807277] ? lock_release+0x680/0x680 [ 1126.808136] ? avc_policy_seqno+0x9/0x70 [ 1126.809021] ? selinux_file_permission+0x92/0x520 [ 1126.810079] vfs_write+0x7c0/0xb10 [ 1126.810849] ksys_write+0x12d/0x260 [ 1126.811629] ? __ia32_sys_read+0xb0/0xb0 [ 1126.812510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.813665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.814783] do_syscall_64+0x33/0x40 [ 1126.815587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.816687] RIP: 0033:0x7f72c6759b19 [ 1126.817497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.821454] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1126.823106] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1126.824638] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1126.826181] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.827712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.829248] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:52:57 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) [ 1140.448221] FAULT_INJECTION: forcing a failure. [ 1140.448221] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.450971] CPU: 1 PID: 7837 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1140.452530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.454419] Call Trace: [ 1140.455030] dump_stack+0x107/0x167 [ 1140.455863] should_fail.cold+0x5/0xa [ 1140.456732] ? create_object.isra.0+0x3a/0xa30 [ 1140.457790] should_failslab+0x5/0x20 [ 1140.458655] kmem_cache_alloc+0x5b/0x310 [ 1140.459580] ? mark_held_locks+0x9e/0xe0 [ 1140.460495] create_object.isra.0+0x3a/0xa30 [ 1140.461504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.462665] kmem_cache_alloc+0x159/0x310 [ 1140.463616] xas_alloc+0x336/0x440 [ 1140.464416] xas_create+0x34a/0x10d0 [ 1140.465284] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1140.466479] xas_store+0x8c/0x1c40 [ 1140.467298] __xa_store+0x164/0x2d0 [ 1140.468119] ? xa_delete_node+0x280/0x280 [ 1140.469068] ? trace_hardirqs_on+0x5b/0x180 [ 1140.470061] xa_store+0x31/0x50 [ 1140.470807] __io_uring_add_tctx_node+0x1cf/0x520 14:52:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xc00}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:52:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:52:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 9) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:52:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:52:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xf000) 14:52:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x98c) 14:52:57 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 17) [ 1140.471901] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1140.473338] ? alloc_fd+0x2e7/0x670 [ 1140.474181] io_uring_setup+0x1fbb/0x2980 [ 1140.475125] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1140.476261] ? wait_for_completion_io+0x270/0x270 [ 1140.477384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.478560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.479729] do_syscall_64+0x33/0x40 [ 1140.480572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.481734] RIP: 0033:0x7f5deeaf2b19 [ 1140.482580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.486718] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1140.488463] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1140.490327] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1140.492172] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1140.494029] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1140.495868] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1140.517344] loop1: detected capacity change from 0 to 41948160 14:52:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x98d) [ 1140.535669] FAULT_INJECTION: forcing a failure. [ 1140.535669] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.538184] CPU: 0 PID: 7846 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1140.539655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.541461] Call Trace: [ 1140.542029] dump_stack+0x107/0x167 [ 1140.542812] should_fail.cold+0x5/0xa [ 1140.543635] ? create_object.isra.0+0x3a/0xa30 [ 1140.544614] should_failslab+0x5/0x20 [ 1140.545458] kmem_cache_alloc+0x5b/0x310 [ 1140.546340] create_object.isra.0+0x3a/0xa30 [ 1140.547279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.548373] kmem_cache_alloc+0x159/0x310 [ 1140.549304] ext4_init_io_end+0x23/0x180 [ 1140.550171] ext4_writepages+0xee9/0x3350 [ 1140.551072] ? __ext4_journal_stop+0xde/0x1f0 [ 1140.552027] ? ext4_da_write_end+0x21e/0x9c0 [ 1140.552967] ? generic_perform_write+0x2bf/0x4f0 [ 1140.554004] ? ksys_write+0x12d/0x260 [ 1140.554829] ? lock_chain_count+0x20/0x20 [ 1140.555717] ? lock_acquire+0x197/0x470 [ 1140.556572] ? find_held_lock+0x2c/0x110 [ 1140.557468] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1140.558525] ? mark_held_locks+0x9e/0xe0 [ 1140.559399] ? trace_hardirqs_on+0x5b/0x180 [ 1140.560327] ? kmem_cache_free+0xa7/0x2d0 [ 1140.561239] ? __kasan_slab_free+0x122/0x160 [ 1140.562185] ? slab_free_freelist_hook+0xa9/0x180 [ 1140.563223] ? jbd2_journal_stop+0x61f/0xdc0 [ 1140.564162] ? kmem_cache_free+0x249/0x2d0 [ 1140.565081] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1140.566148] do_writepages+0xee/0x2a0 [ 1140.566966] ? page_writeback_cpu_online+0x20/0x20 [ 1140.568010] ? __mark_inode_dirty+0x312/0xd30 [ 1140.568979] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1140.570264] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1140.571335] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1140.572485] ? generic_perform_write+0x37d/0x4f0 [ 1140.573530] file_write_and_wait_range+0xb6/0x130 [ 1140.574564] ext4_sync_file+0x225/0xde0 [ 1140.575410] ? ext4_getfsmap+0x990/0x990 [ 1140.576278] vfs_fsync_range+0x13d/0x230 [ 1140.577169] ext4_buffered_write_iter+0x34b/0x4a0 [ 1140.578214] ? __lock_acquire+0xbb1/0x5b00 [ 1140.579121] ext4_file_write_iter+0x3ab/0x1530 [ 1140.580100] ? __lock_acquire+0x1657/0x5b00 [ 1140.581037] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1140.582043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1140.583170] ? SOFTIRQ_verbose+0x10/0x10 [ 1140.584046] new_sync_write+0x42c/0x660 [ 1140.584898] ? new_sync_read+0x6f0/0x6f0 [ 1140.585787] ? ksys_write+0x12d/0x260 [ 1140.586610] ? lock_release+0x680/0x680 [ 1140.587461] ? avc_policy_seqno+0x9/0x70 [ 1140.588325] ? selinux_file_permission+0x92/0x520 [ 1140.589405] vfs_write+0x7c0/0xb10 [ 1140.590172] ksys_write+0x12d/0x260 [ 1140.590953] ? __ia32_sys_read+0xb0/0xb0 [ 1140.591825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.592948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.594078] do_syscall_64+0x33/0x40 [ 1140.594881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.595977] RIP: 0033:0x7f72c6759b19 [ 1140.596771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.600723] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1140.602369] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1140.603890] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1140.605433] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.606953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.608475] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1140.617483] FAT-fs (loop1): bogus number of FAT structure [ 1140.618816] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1140.643475] loop7: detected capacity change from 0 to 41948160 [ 1140.647421] FAULT_INJECTION: forcing a failure. [ 1140.647421] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.650536] CPU: 1 PID: 7855 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1140.652213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.654269] Call Trace: [ 1140.654924] dump_stack+0x107/0x167 [ 1140.655835] should_fail.cold+0x5/0xa [ 1140.656776] ? create_object.isra.0+0x3a/0xa30 [ 1140.657904] should_failslab+0x5/0x20 [ 1140.658838] kmem_cache_alloc+0x5b/0x310 [ 1140.659842] create_object.isra.0+0x3a/0xa30 [ 1140.660934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.662197] kmem_cache_alloc+0x159/0x310 [ 1140.663208] __d_alloc+0x2a/0x990 [ 1140.664063] d_alloc_pseudo+0x19/0x70 [ 1140.664989] alloc_file_pseudo+0xce/0x250 [ 1140.666015] ? alloc_file+0x5a0/0x5a0 [ 1140.666940] ? shmem_get_inode+0x55c/0xbc0 [ 1140.667978] __shmem_file_setup+0x144/0x320 [ 1140.669021] ? _copy_from_user+0xfb/0x1b0 [ 1140.670056] __do_sys_memfd_create+0x275/0x450 [ 1140.671159] ? memfd_file_seals_ptr+0x170/0x170 [ 1140.672297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.673589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.674854] do_syscall_64+0x33/0x40 [ 1140.675753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.676981] RIP: 0033:0x7f844779eb19 [ 1140.677889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.682376] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1140.684199] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1140.685943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1140.687678] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1140.689442] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1140.691193] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 14:53:14 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 14:53:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x1200}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:53:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 10) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1157.705279] FAULT_INJECTION: forcing a failure. [ 1157.705279] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.707728] CPU: 1 PID: 7870 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1157.709172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.710958] Call Trace: [ 1157.711521] dump_stack+0x107/0x167 [ 1157.712277] should_fail.cold+0x5/0xa [ 1157.713070] ? __alloc_file+0x21/0x320 [ 1157.713883] should_failslab+0x5/0x20 [ 1157.714667] kmem_cache_alloc+0x5b/0x310 [ 1157.715517] __alloc_file+0x21/0x320 [ 1157.716287] alloc_empty_file+0x6d/0x170 [ 1157.717126] alloc_file+0x5e/0x5a0 [ 1157.717872] alloc_file_pseudo+0x16a/0x250 [ 1157.718760] ? alloc_file+0x5a0/0x5a0 [ 1157.719550] ? shmem_get_inode+0x55c/0xbc0 [ 1157.720439] __shmem_file_setup+0x144/0x320 [ 1157.721333] ? _copy_from_user+0xfb/0x1b0 [ 1157.722211] __do_sys_memfd_create+0x275/0x450 [ 1157.723162] ? memfd_file_seals_ptr+0x170/0x170 [ 1157.724138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.725229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.726309] do_syscall_64+0x33/0x40 [ 1157.727080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.728142] RIP: 0033:0x7f844779eb19 [ 1157.728912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.732746] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1157.734337] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1157.735828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1157.737316] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1157.738822] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1157.739420] FAULT_INJECTION: forcing a failure. [ 1157.739420] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.740310] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1157.744383] CPU: 0 PID: 7877 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1157.745847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.747593] Call Trace: [ 1157.748159] dump_stack+0x107/0x167 [ 1157.748931] should_fail.cold+0x5/0xa [ 1157.749746] ? xas_alloc+0x336/0x440 [ 1157.750524] should_failslab+0x5/0x20 [ 1157.751329] kmem_cache_alloc+0x5b/0x310 [ 1157.752190] xas_alloc+0x336/0x440 [ 1157.752950] xas_create+0x34a/0x10d0 [ 1157.753758] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1157.754875] xas_store+0x8c/0x1c40 [ 1157.755638] __xa_store+0x164/0x2d0 [ 1157.756416] ? xa_delete_node+0x280/0x280 [ 1157.757300] ? trace_hardirqs_on+0x5b/0x180 [ 1157.758230] xa_store+0x31/0x50 [ 1157.758943] __io_uring_add_tctx_node+0x1cf/0x520 [ 1157.759964] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1157.761075] ? alloc_fd+0x2e7/0x670 [ 1157.761869] io_uring_setup+0x1fbb/0x2980 [ 1157.762753] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1157.763830] ? wait_for_completion_io+0x270/0x270 [ 1157.764878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.765996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.767089] do_syscall_64+0x33/0x40 [ 1157.767884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.768973] RIP: 0033:0x7f5deeaf2b19 [ 1157.769773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.773678] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1157.775286] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1157.776794] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1157.778299] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1157.779798] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1157.781290] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1157.787381] FAULT_INJECTION: forcing a failure. [ 1157.787381] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.789900] CPU: 0 PID: 7878 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1157.791342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.793092] Call Trace: [ 1157.793661] dump_stack+0x107/0x167 [ 1157.794432] should_fail.cold+0x5/0xa [ 1157.795243] ? jbd2__journal_start+0x190/0x7e0 [ 1157.796206] should_failslab+0x5/0x20 [ 1157.797020] kmem_cache_alloc+0x5b/0x310 [ 1157.797889] jbd2__journal_start+0x190/0x7e0 [ 1157.798819] __ext4_journal_start_sb+0x214/0x390 [ 1157.799812] ext4_writepages+0x102d/0x3350 [ 1157.800711] ? lock_chain_count+0x20/0x20 [ 1157.801594] ? lock_chain_count+0x20/0x20 [ 1157.802499] ? ext4_da_write_end+0x21e/0x9c0 [ 1157.803428] ? generic_perform_write+0x2bf/0x4f0 14:53:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x990) 14:53:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x80000) 14:53:14 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 18) 14:53:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:53:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1157.804422] ? ksys_write+0x12d/0x260 [ 1157.805469] ? lock_chain_count+0x20/0x20 [ 1157.806344] ? mark_held_locks+0x9e/0xe0 [ 1157.807203] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1157.808290] ? trace_hardirqs_on+0x5b/0x180 [ 1157.809201] ? SOFTIRQ_verbose+0x10/0x10 [ 1157.810075] ? find_held_lock+0x2c/0x110 [ 1157.810944] ? finish_task_switch+0x126/0x5d0 [ 1157.811892] ? mark_held_locks+0x9e/0xe0 [ 1157.812748] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1157.813811] do_writepages+0xee/0x2a0 [ 1157.814610] ? page_writeback_cpu_online+0x20/0x20 [ 1157.815634] ? finish_task_switch+0xef/0x5d0 [ 1157.816556] ? __switch_to+0x572/0xf70 [ 1157.817374] ? __switch_to_asm+0x3a/0x60 [ 1157.818242] ? __schedule+0x82c/0x1ea0 [ 1157.819062] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1157.820284] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1157.821336] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1157.822477] ? generic_perform_write+0x37d/0x4f0 [ 1157.823473] file_write_and_wait_range+0xb6/0x130 [ 1157.824512] ext4_sync_file+0x225/0xde0 [ 1157.825346] ? ext4_getfsmap+0x990/0x990 [ 1157.826213] vfs_fsync_range+0x13d/0x230 [ 1157.827071] ext4_buffered_write_iter+0x34b/0x4a0 [ 1157.828082] ? __lock_acquire+0xbb1/0x5b00 [ 1157.828972] ext4_file_write_iter+0x3ab/0x1530 [ 1157.829942] ? __lock_acquire+0x1657/0x5b00 [ 1157.830866] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1157.831827] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1157.832920] ? SOFTIRQ_verbose+0x10/0x10 [ 1157.833827] new_sync_write+0x42c/0x660 [ 1157.834679] ? new_sync_read+0x6f0/0x6f0 [ 1157.835536] ? ksys_write+0x12d/0x260 [ 1157.836343] ? lock_release+0x680/0x680 [ 1157.837182] ? avc_policy_seqno+0x9/0x70 [ 1157.838049] ? selinux_file_permission+0x92/0x520 [ 1157.839077] vfs_write+0x7c0/0xb10 [ 1157.839839] ksys_write+0x12d/0x260 [ 1157.840612] ? __ia32_sys_read+0xb0/0xb0 [ 1157.841480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.842588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.843679] do_syscall_64+0x33/0x40 [ 1157.844464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.845564] RIP: 0033:0x7f72c6759b19 [ 1157.846365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.850264] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1157.851890] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1157.853404] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1157.854932] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.856442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.857948] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1157.860133] EXT4-fs (sda): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 16010; err -12 [ 1157.870993] loop1: detected capacity change from 0 to 41948160 [ 1157.878676] FAT-fs (loop1): bogus number of FAT structure [ 1157.879909] FAT-fs (loop1): Can't find a valid FAT filesystem 14:53:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x200000) 14:53:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x992) [ 1157.907120] loop7: detected capacity change from 0 to 41948160 14:53:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) 14:53:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x996) [ 1157.972385] FAULT_INJECTION: forcing a failure. [ 1157.972385] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.974825] CPU: 1 PID: 7895 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1157.976286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.978086] Call Trace: [ 1157.978663] dump_stack+0x107/0x167 [ 1157.979450] should_fail.cold+0x5/0xa [ 1157.980274] ? create_object.isra.0+0x3a/0xa30 [ 1157.981264] should_failslab+0x5/0x20 [ 1157.982101] kmem_cache_alloc+0x5b/0x310 [ 1157.982991] ? mark_held_locks+0x9e/0xe0 [ 1157.983882] create_object.isra.0+0x3a/0xa30 [ 1157.984836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1157.985952] kmem_cache_alloc+0x159/0x310 [ 1157.986852] xas_alloc+0x336/0x440 [ 1157.987624] xas_create+0x34a/0x10d0 [ 1157.988446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1157.989602] xas_store+0x8c/0x1c40 [ 1157.990393] __xa_store+0x164/0x2d0 [ 1157.991189] ? xa_delete_node+0x280/0x280 [ 1157.992097] ? trace_hardirqs_on+0x5b/0x180 [ 1157.993043] xa_store+0x31/0x50 [ 1157.993770] __io_uring_add_tctx_node+0x1cf/0x520 [ 1157.994818] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1157.995952] ? alloc_fd+0x2e7/0x670 [ 1157.996759] io_uring_setup+0x1fbb/0x2980 [ 1157.997686] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1157.998781] ? wait_for_completion_io+0x270/0x270 [ 1157.999846] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1158.000975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1158.002098] do_syscall_64+0x33/0x40 [ 1158.002897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1158.004000] RIP: 0033:0x7f5deeaf2b19 [ 1158.004797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.008759] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1158.010397] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1158.011934] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1158.013487] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1158.015031] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1158.016559] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:53:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 19) 14:53:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 11) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1158.132713] FAULT_INJECTION: forcing a failure. [ 1158.132713] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.135198] CPU: 1 PID: 7902 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1158.136663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1158.138471] Call Trace: [ 1158.139039] dump_stack+0x107/0x167 [ 1158.139831] should_fail.cold+0x5/0xa [ 1158.140659] ? create_object.isra.0+0x3a/0xa30 [ 1158.141651] should_failslab+0x5/0x20 [ 1158.142475] kmem_cache_alloc+0x5b/0x310 [ 1158.143358] create_object.isra.0+0x3a/0xa30 [ 1158.144307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1158.145408] kmem_cache_alloc+0x159/0x310 [ 1158.146319] __alloc_file+0x21/0x320 [ 1158.147130] alloc_empty_file+0x6d/0x170 [ 1158.148008] alloc_file+0x5e/0x5a0 [ 1158.148779] alloc_file_pseudo+0x16a/0x250 [ 1158.149702] ? alloc_file+0x5a0/0x5a0 [ 1158.150526] ? shmem_get_inode+0x55c/0xbc0 [ 1158.151441] __shmem_file_setup+0x144/0x320 [ 1158.152373] ? _copy_from_user+0xfb/0x1b0 [ 1158.153269] __do_sys_memfd_create+0x275/0x450 [ 1158.154261] ? memfd_file_seals_ptr+0x170/0x170 [ 1158.155280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1158.156411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1158.157541] do_syscall_64+0x33/0x40 [ 1158.158344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1158.159456] RIP: 0033:0x7f844779eb19 [ 1158.160257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.164223] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1158.165875] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1158.167412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1158.168959] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1158.170511] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1158.172063] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1158.178936] FAULT_INJECTION: forcing a failure. [ 1158.178936] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.181465] CPU: 1 PID: 7905 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1158.182937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1158.184716] Call Trace: [ 1158.185284] dump_stack+0x107/0x167 [ 1158.186082] should_fail.cold+0x5/0xa [ 1158.186903] ? create_object.isra.0+0x3a/0xa30 [ 1158.187886] should_failslab+0x5/0x20 [ 1158.188707] kmem_cache_alloc+0x5b/0x310 [ 1158.189599] create_object.isra.0+0x3a/0xa30 [ 1158.190543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1158.191652] kmem_cache_alloc+0x159/0x310 [ 1158.192559] jbd2__journal_start+0x190/0x7e0 [ 1158.193525] __ext4_journal_start_sb+0x214/0x390 [ 1158.194555] ext4_writepages+0x102d/0x3350 [ 1158.195477] ? __ext4_journal_stop+0xde/0x1f0 [ 1158.196441] ? ext4_da_write_end+0x21e/0x9c0 [ 1158.197386] ? generic_perform_write+0x2bf/0x4f0 [ 1158.198414] ? ksys_write+0x12d/0x260 [ 1158.199245] ? lock_chain_count+0x20/0x20 [ 1158.200139] ? lock_acquire+0x197/0x470 [ 1158.200990] ? find_held_lock+0x2c/0x110 [ 1158.201870] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1158.202937] ? mark_held_locks+0x9e/0xe0 [ 1158.203816] ? trace_hardirqs_on+0x5b/0x180 [ 1158.204751] ? kmem_cache_free+0xa7/0x2d0 [ 1158.205650] ? __kasan_slab_free+0x122/0x160 [ 1158.206601] ? slab_free_freelist_hook+0xa9/0x180 [ 1158.207640] ? jbd2_journal_stop+0x61f/0xdc0 [ 1158.208582] ? kmem_cache_free+0x249/0x2d0 [ 1158.209515] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1158.210562] do_writepages+0xee/0x2a0 [ 1158.211384] ? page_writeback_cpu_online+0x20/0x20 [ 1158.212433] ? __mark_inode_dirty+0x312/0xd30 [ 1158.213417] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1158.214668] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1158.215742] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1158.216898] ? generic_perform_write+0x37d/0x4f0 [ 1158.217928] file_write_and_wait_range+0xb6/0x130 [ 1158.218968] ext4_sync_file+0x225/0xde0 [ 1158.219822] ? ext4_getfsmap+0x990/0x990 [ 1158.220696] vfs_fsync_range+0x13d/0x230 [ 1158.221610] ext4_buffered_write_iter+0x34b/0x4a0 [ 1158.222653] ? __lock_acquire+0xbb1/0x5b00 [ 1158.223563] ext4_file_write_iter+0x3ab/0x1530 [ 1158.224544] ? __lock_acquire+0x1657/0x5b00 [ 1158.225494] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1158.226479] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1158.227599] ? SOFTIRQ_verbose+0x10/0x10 [ 1158.228481] new_sync_write+0x42c/0x660 [ 1158.229334] ? new_sync_read+0x6f0/0x6f0 [ 1158.230234] ? ksys_write+0x12d/0x260 [ 1158.231059] ? lock_release+0x680/0x680 [ 1158.231913] ? avc_policy_seqno+0x9/0x70 [ 1158.232789] ? selinux_file_permission+0x92/0x520 [ 1158.233849] vfs_write+0x7c0/0xb10 [ 1158.234628] ksys_write+0x12d/0x260 [ 1158.235408] ? __ia32_sys_read+0xb0/0xb0 [ 1158.236285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1158.237424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1158.238556] do_syscall_64+0x33/0x40 [ 1158.239365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1158.240478] RIP: 0033:0x7f72c6759b19 [ 1158.241284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.245274] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1158.246927] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1158.248454] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1158.249974] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.251460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.252958] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:53:30 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 20) 14:53:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:53:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 12) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:53:30 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 14:53:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x1800}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:53:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:53:30 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x9db) 14:53:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x300000) [ 1173.306213] FAULT_INJECTION: forcing a failure. [ 1173.306213] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.309138] CPU: 0 PID: 7914 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1173.310894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1173.312988] Call Trace: [ 1173.313659] dump_stack+0x107/0x167 [ 1173.314605] should_fail.cold+0x5/0xa [ 1173.315570] ? security_file_alloc+0x34/0x170 [ 1173.316709] should_failslab+0x5/0x20 [ 1173.317682] kmem_cache_alloc+0x5b/0x310 [ 1173.318739] security_file_alloc+0x34/0x170 [ 1173.319837] __alloc_file+0xb7/0x320 [ 1173.320785] alloc_empty_file+0x6d/0x170 [ 1173.321825] alloc_file+0x5e/0x5a0 [ 1173.322727] alloc_file_pseudo+0x16a/0x250 [ 1173.323795] ? alloc_file+0x5a0/0x5a0 [ 1173.324765] ? shmem_get_inode+0x55c/0xbc0 [ 1173.325860] __shmem_file_setup+0x144/0x320 [ 1173.326950] ? _copy_from_user+0xfb/0x1b0 [ 1173.328013] __do_sys_memfd_create+0x275/0x450 [ 1173.329186] ? memfd_file_seals_ptr+0x170/0x170 [ 1173.330384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1173.331718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1173.333034] do_syscall_64+0x33/0x40 [ 1173.333991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1173.335086] RIP: 0033:0x7f844779eb19 [ 1173.335867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1173.339739] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1173.341340] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1173.342860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1173.344376] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1173.345901] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1173.347401] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1173.363995] loop7: detected capacity change from 0 to 41948160 [ 1173.371612] FAULT_INJECTION: forcing a failure. [ 1173.371612] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.374144] CPU: 0 PID: 7926 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1173.375592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1173.377337] Call Trace: [ 1173.377928] dump_stack+0x107/0x167 [ 1173.378704] should_fail.cold+0x5/0xa [ 1173.379510] ? xas_alloc+0x336/0x440 [ 1173.380297] should_failslab+0x5/0x20 [ 1173.381102] kmem_cache_alloc+0x5b/0x310 [ 1173.381980] xas_alloc+0x336/0x440 [ 1173.382746] xas_create+0x34a/0x10d0 [ 1173.383546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1173.384653] xas_store+0x8c/0x1c40 [ 1173.385416] __xa_store+0x164/0x2d0 [ 1173.386194] ? xa_delete_node+0x280/0x280 [ 1173.387078] ? trace_hardirqs_on+0x5b/0x180 [ 1173.387993] xa_store+0x31/0x50 [ 1173.388691] __io_uring_add_tctx_node+0x1cf/0x520 [ 1173.389713] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1173.390819] ? alloc_fd+0x2e7/0x670 [ 1173.391600] io_uring_setup+0x1fbb/0x2980 [ 1173.392480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1173.393542] ? wait_for_completion_io+0x270/0x270 [ 1173.394592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1173.395698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1173.396777] do_syscall_64+0x33/0x40 [ 1173.397557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1173.398642] RIP: 0033:0x7f5deeaf2b19 [ 1173.399425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1173.403314] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1173.404908] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1173.406426] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1173.407924] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1173.409426] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1173.410927] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:53:30 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x9de) [ 1173.415968] loop1: detected capacity change from 0 to 41948160 [ 1173.431420] FAULT_INJECTION: forcing a failure. [ 1173.431420] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.433909] CPU: 0 PID: 7930 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1173.435353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1173.437105] Call Trace: [ 1173.437667] dump_stack+0x107/0x167 [ 1173.438446] should_fail.cold+0x5/0xa [ 1173.439254] ? jbd2__journal_start+0x246/0x7e0 [ 1173.439491] FAT-fs (loop1): bogus number of FAT structure [ 1173.440215] should_failslab+0x5/0x20 [ 1173.440237] kmem_cache_alloc+0x5b/0x310 [ 1173.440266] jbd2__journal_start+0x246/0x7e0 [ 1173.441448] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1173.442226] __ext4_journal_start_sb+0x214/0x390 [ 1173.446178] ext4_writepages+0x102d/0x3350 [ 1173.447092] ? __ext4_journal_stop+0xde/0x1f0 [ 1173.448040] ? ext4_da_write_end+0x21e/0x9c0 [ 1173.448970] ? generic_perform_write+0x2bf/0x4f0 [ 1173.449982] ? ksys_write+0x12d/0x260 [ 1173.450798] ? lock_chain_count+0x20/0x20 [ 1173.451687] ? lock_acquire+0x197/0x470 [ 1173.452526] ? find_held_lock+0x2c/0x110 [ 1173.453384] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1173.454439] ? mark_held_locks+0x9e/0xe0 [ 1173.455308] ? trace_hardirqs_on+0x5b/0x180 [ 1173.456218] ? kmem_cache_free+0xa7/0x2d0 [ 1173.457094] ? __kasan_slab_free+0x122/0x160 [ 1173.458040] ? slab_free_freelist_hook+0xa9/0x180 [ 1173.459071] ? jbd2_journal_stop+0x61f/0xdc0 [ 1173.460007] ? kmem_cache_free+0x249/0x2d0 [ 1173.460916] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1173.461954] do_writepages+0xee/0x2a0 [ 1173.462771] ? page_writeback_cpu_online+0x20/0x20 [ 1173.463805] ? __mark_inode_dirty+0x312/0xd30 [ 1173.464764] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1173.465994] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1173.467048] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1173.468198] ? generic_perform_write+0x37d/0x4f0 [ 1173.469213] file_write_and_wait_range+0xb6/0x130 [ 1173.470243] ext4_sync_file+0x225/0xde0 [ 1173.471090] ? ext4_getfsmap+0x990/0x990 [ 1173.471954] vfs_fsync_range+0x13d/0x230 [ 1173.472819] ext4_buffered_write_iter+0x34b/0x4a0 [ 1173.473837] ? __lock_acquire+0xbb1/0x5b00 [ 1173.474737] ext4_file_write_iter+0x3ab/0x1530 [ 1173.475708] ? __lock_acquire+0x1657/0x5b00 [ 1173.476639] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1173.477610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1173.478721] ? SOFTIRQ_verbose+0x10/0x10 [ 1173.479597] new_sync_write+0x42c/0x660 [ 1173.480438] ? new_sync_read+0x6f0/0x6f0 [ 1173.481291] ? ksys_write+0x12d/0x260 [ 1173.482126] ? lock_release+0x680/0x680 [ 1173.482969] ? avc_policy_seqno+0x9/0x70 [ 1173.483831] ? selinux_file_permission+0x92/0x520 [ 1173.484861] vfs_write+0x7c0/0xb10 [ 1173.485621] ksys_write+0x12d/0x260 [ 1173.486397] ? __ia32_sys_read+0xb0/0xb0 [ 1173.487278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1173.488389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1173.489480] do_syscall_64+0x33/0x40 [ 1173.490276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1173.491363] RIP: 0033:0x7f72c6759b19 [ 1173.492155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1173.496023] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1173.497632] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1173.499145] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1173.500642] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.502144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.503652] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1173.505968] EXT4-fs (sda): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 15997; err -12 14:53:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xf0ffff) 14:53:30 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x9e0) 14:53:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x1e00}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:53:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:53:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100047000", 0x13}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1173.661827] loop1: detected capacity change from 0 to 41948160 [ 1173.688563] FAT-fs (loop1): invalid media value (0x00) [ 1173.689849] FAT-fs (loop1): Can't find a valid FAT filesystem 14:53:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x1000000) 14:53:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100047000", 0x13}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:53:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 1188.403047] FAULT_INJECTION: forcing a failure. [ 1188.403047] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.404867] loop1: detected capacity change from 0 to 41948160 [ 1188.405619] CPU: 1 PID: 7962 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1188.407737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.409451] Call Trace: [ 1188.410027] dump_stack+0x107/0x167 [ 1188.410801] should_fail.cold+0x5/0xa [ 1188.411612] ? ___slab_alloc+0x155/0x700 [ 1188.412475] ? create_object.isra.0+0x3a/0xa30 [ 1188.413424] should_failslab+0x5/0x20 [ 1188.414090] FAT-fs (loop1): invalid media value (0x00) [ 1188.414226] kmem_cache_alloc+0x5b/0x310 [ 1188.414255] create_object.isra.0+0x3a/0xa30 [ 1188.414977] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1188.415804] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.415831] kmem_cache_alloc+0x159/0x310 [ 1188.415860] xas_alloc+0x336/0x440 [ 1188.420324] xas_create+0x34a/0x10d0 [ 1188.421129] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.422252] xas_store+0x8c/0x1c40 [ 1188.423029] __xa_store+0x164/0x2d0 14:53:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 13) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:53:45 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) 14:53:45 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x9e4) 14:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:53:45 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 21) [ 1188.423807] ? xa_delete_node+0x280/0x280 [ 1188.424879] ? trace_hardirqs_on+0x5b/0x180 [ 1188.425800] xa_store+0x31/0x50 [ 1188.426515] __io_uring_add_tctx_node+0x1cf/0x520 [ 1188.427527] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1188.428636] ? alloc_fd+0x2e7/0x670 [ 1188.429413] io_uring_setup+0x1fbb/0x2980 [ 1188.430309] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1188.431378] ? wait_for_completion_io+0x270/0x270 [ 1188.432441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.433557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.434685] do_syscall_64+0x33/0x40 14:53:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2000000) [ 1188.435477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.436722] RIP: 0033:0x7f5deeaf2b19 [ 1188.437512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.441427] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1188.443039] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1188.444545] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1188.446064] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1188.447559] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1188.449082] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1188.456282] FAULT_INJECTION: forcing a failure. [ 1188.456282] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.457930] CPU: 0 PID: 7966 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1188.458863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.459968] Call Trace: [ 1188.460327] dump_stack+0x107/0x167 [ 1188.460822] should_fail.cold+0x5/0xa [ 1188.461326] ? create_object.isra.0+0x3a/0xa30 [ 1188.461942] should_failslab+0x5/0x20 [ 1188.462454] kmem_cache_alloc+0x5b/0x310 [ 1188.462993] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1188.463719] create_object.isra.0+0x3a/0xa30 [ 1188.464296] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.464966] kmem_cache_alloc+0x159/0x310 [ 1188.465516] security_file_alloc+0x34/0x170 [ 1188.466115] __alloc_file+0xb7/0x320 [ 1188.466608] alloc_empty_file+0x6d/0x170 [ 1188.467149] alloc_file+0x5e/0x5a0 [ 1188.467620] alloc_file_pseudo+0x16a/0x250 [ 1188.468184] ? alloc_file+0x5a0/0x5a0 [ 1188.468692] ? shmem_get_inode+0x55c/0xbc0 [ 1188.469269] __shmem_file_setup+0x144/0x320 [ 1188.469844] ? _copy_from_user+0xfb/0x1b0 [ 1188.470415] __do_sys_memfd_create+0x275/0x450 [ 1188.471029] ? memfd_file_seals_ptr+0x170/0x170 [ 1188.471649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.472340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.473023] do_syscall_64+0x33/0x40 [ 1188.473344] FAULT_INJECTION: forcing a failure. 14:53:45 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x9e9) [ 1188.473344] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.473517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.473526] RIP: 0033:0x7f844779eb19 [ 1188.473538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.473546] RSP: 002b:00007f8444d13f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1188.473561] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f844779eb19 [ 1188.473568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f84477f80fb [ 1188.473575] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1188.473582] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1188.473589] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1188.491691] CPU: 1 PID: 7970 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1188.493149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.494914] Call Trace: [ 1188.495478] dump_stack+0x107/0x167 [ 1188.496268] should_fail.cold+0x5/0xa [ 1188.497094] ? create_object.isra.0+0x3a/0xa30 [ 1188.498089] should_failslab+0x5/0x20 [ 1188.498909] kmem_cache_alloc+0x5b/0x310 [ 1188.499787] create_object.isra.0+0x3a/0xa30 [ 1188.500734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.501823] kmem_cache_alloc+0x159/0x310 [ 1188.502740] ext4_alloc_io_end_vec+0x1f/0x120 [ 1188.503707] ext4_writepages+0x17a5/0x3350 [ 1188.504615] ? ext4_da_write_end+0x21e/0x9c0 [ 1188.505523] ? generic_perform_write+0x2bf/0x4f0 [ 1188.506532] ? ksys_write+0x12d/0x260 [ 1188.507351] ? lock_acquire+0x197/0x470 [ 1188.508208] ? find_held_lock+0x2c/0x110 [ 1188.509038] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1188.510082] ? mark_held_locks+0x9e/0xe0 [ 1188.510945] ? trace_hardirqs_on+0x5b/0x180 [ 1188.511859] ? kmem_cache_free+0xa7/0x2d0 [ 1188.512727] ? __kasan_slab_free+0x122/0x160 [ 1188.513644] ? slab_free_freelist_hook+0xa9/0x180 [ 1188.514690] ? jbd2_journal_stop+0x61f/0xdc0 [ 1188.515603] ? kmem_cache_free+0x249/0x2d0 [ 1188.516519] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1188.517559] do_writepages+0xee/0x2a0 [ 1188.518372] ? page_writeback_cpu_online+0x20/0x20 [ 1188.519403] ? __mark_inode_dirty+0x312/0xd30 [ 1188.520359] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1188.521577] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1188.522644] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1188.523776] ? generic_perform_write+0x37d/0x4f0 [ 1188.524800] file_write_and_wait_range+0xb6/0x130 [ 1188.525826] ext4_sync_file+0x225/0xde0 [ 1188.526675] ? ext4_getfsmap+0x990/0x990 [ 1188.527554] vfs_fsync_range+0x13d/0x230 [ 1188.528420] ext4_buffered_write_iter+0x34b/0x4a0 [ 1188.529435] ? __lock_acquire+0xbb1/0x5b00 [ 1188.530340] ext4_file_write_iter+0x3ab/0x1530 [ 1188.531307] ? __lock_acquire+0x1657/0x5b00 [ 1188.532233] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1188.533207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.534329] ? SOFTIRQ_verbose+0x10/0x10 [ 1188.535191] new_sync_write+0x42c/0x660 [ 1188.536039] ? new_sync_read+0x6f0/0x6f0 [ 1188.536914] ? ksys_write+0x12d/0x260 [ 1188.537726] ? lock_release+0x680/0x680 [ 1188.538574] ? avc_policy_seqno+0x9/0x70 [ 1188.539438] ? selinux_file_permission+0x92/0x520 [ 1188.540473] vfs_write+0x7c0/0xb10 [ 1188.541237] ksys_write+0x12d/0x260 [ 1188.542016] ? __ia32_sys_read+0xb0/0xb0 [ 1188.542879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 14:53:45 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) [ 1188.544120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.545246] do_syscall_64+0x33/0x40 [ 1188.546044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.547123] RIP: 0033:0x7f72c6759b19 [ 1188.547911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.551822] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1188.553423] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1188.554947] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1188.556460] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.558002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.559498] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1188.572099] loop7: detected capacity change from 0 to 41948160 14:53:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 14) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1188.631007] FAULT_INJECTION: forcing a failure. [ 1188.631007] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.633458] CPU: 1 PID: 7982 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1188.634929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.636690] Call Trace: [ 1188.637256] dump_stack+0x107/0x167 [ 1188.638039] should_fail.cold+0x5/0xa [ 1188.638849] ? xas_alloc+0x336/0x440 [ 1188.639633] should_failslab+0x5/0x20 [ 1188.640276] FAULT_INJECTION: forcing a failure. [ 1188.640276] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.640439] kmem_cache_alloc+0x5b/0x310 [ 1188.640467] xas_alloc+0x336/0x440 [ 1188.643457] xas_create+0x34a/0x10d0 [ 1188.644256] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.645361] xas_store+0x8c/0x1c40 [ 1188.646139] __xa_store+0x164/0x2d0 [ 1188.646911] ? xa_delete_node+0x280/0x280 [ 1188.647815] ? trace_hardirqs_on+0x5b/0x180 [ 1188.648741] xa_store+0x31/0x50 [ 1188.649448] __io_uring_add_tctx_node+0x1cf/0x520 [ 1188.650466] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1188.651581] ? alloc_fd+0x2e7/0x670 [ 1188.652371] io_uring_setup+0x1fbb/0x2980 [ 1188.653255] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1188.654339] ? wait_for_completion_io+0x270/0x270 [ 1188.655386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.656490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.657577] do_syscall_64+0x33/0x40 [ 1188.658364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.659452] RIP: 0033:0x7f5deeaf2b19 [ 1188.660237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.664120] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1188.665733] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1188.667232] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1188.668730] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1188.670235] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1188.671738] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1188.673278] CPU: 0 PID: 7983 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1188.674139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.675159] Call Trace: [ 1188.675491] dump_stack+0x107/0x167 [ 1188.675942] should_fail.cold+0x5/0xa [ 1188.676410] ? getname_flags.part.0+0x50/0x4f0 [ 1188.676970] should_failslab+0x5/0x20 [ 1188.677442] kmem_cache_alloc+0x5b/0x310 [ 1188.677942] ? new_sync_write+0x499/0x660 [ 1188.678484] getname_flags.part.0+0x50/0x4f0 [ 1188.679033] getname+0x8e/0xd0 [ 1188.679432] do_sys_openat2+0xf9/0x4d0 [ 1188.679911] ? build_open_flags+0x6f0/0x6f0 [ 1188.680445] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.681022] __x64_sys_openat+0x13f/0x1f0 [ 1188.681545] ? __ia32_sys_open+0x1c0/0x1c0 [ 1188.682081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.682740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.683377] do_syscall_64+0x33/0x40 [ 1188.683837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.684464] RIP: 0033:0x7f8447751a04 [ 1188.684928] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1188.687192] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1188.688128] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1188.688996] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1188.689875] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1188.690748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1188.691615] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 14:53:45 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 22) 14:53:45 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) 14:53:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100047000", 0x13}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2101}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:53:45 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xa39) 14:53:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x3000000) 14:53:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 1188.766137] FAULT_INJECTION: forcing a failure. [ 1188.766137] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.767773] CPU: 0 PID: 7994 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1188.768582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.769556] Call Trace: [ 1188.769721] FAULT_INJECTION: forcing a failure. [ 1188.769721] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.769872] dump_stack+0x107/0x167 [ 1188.772720] should_fail.cold+0x5/0xa [ 1188.773170] ? ext4_find_extent+0xa77/0xd70 [ 1188.773669] should_failslab+0x5/0x20 [ 1188.774123] __kmalloc+0x72/0x390 [ 1188.774530] ? mark_lock+0xf5/0x2df0 [ 1188.774972] ext4_find_extent+0xa77/0xd70 [ 1188.775476] ext4_ext_map_blocks+0x1c8/0x5870 [ 1188.776019] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.776638] ? SOFTIRQ_verbose+0x10/0x10 [ 1188.777121] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.777730] ? SOFTIRQ_verbose+0x10/0x10 [ 1188.778215] ? __lock_acquire+0x1657/0x5b00 [ 1188.778725] ? ext4_ext_release+0x10/0x10 [ 1188.779210] ? ext4_map_blocks+0x5cd/0x1910 [ 1188.779717] ? lock_release+0x680/0x680 [ 1188.780190] ? ext4_es_lookup_extent+0x485/0xa80 [ 1188.780746] ? lock_downgrade+0x6d0/0x6d0 [ 1188.781244] ? down_write+0xe0/0x160 [ 1188.781678] ? down_write_killable+0x180/0x180 [ 1188.782227] ext4_map_blocks+0x63f/0x1910 [ 1188.782728] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1188.783252] ? trace_hardirqs_on+0x5b/0x180 [ 1188.783761] ? kmem_cache_alloc+0x2a6/0x310 [ 1188.784278] ext4_writepages+0x19bf/0x3350 [ 1188.784781] ? ext4_da_write_end+0x21e/0x9c0 [ 1188.785294] ? generic_perform_write+0x2bf/0x4f0 [ 1188.785848] ? ksys_write+0x12d/0x260 [ 1188.786314] ? lock_acquire+0x197/0x470 [ 1188.786776] ? find_held_lock+0x2c/0x110 [ 1188.787253] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1188.787828] ? mark_held_locks+0x9e/0xe0 [ 1188.788313] ? kmem_cache_free+0xa7/0x2d0 [ 1188.788796] ? __kasan_slab_free+0x122/0x160 [ 1188.789308] ? slab_free_freelist_hook+0xa9/0x180 [ 1188.789875] ? jbd2_journal_stop+0x61f/0xdc0 [ 1188.790391] ? kmem_cache_free+0x249/0x2d0 [ 1188.790901] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1188.791467] do_writepages+0xee/0x2a0 [ 1188.791921] ? page_writeback_cpu_online+0x20/0x20 [ 1188.792494] ? __mark_inode_dirty+0x312/0xd30 [ 1188.793028] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1188.793703] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1188.794291] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1188.794921] ? generic_perform_write+0x37d/0x4f0 [ 1188.795475] file_write_and_wait_range+0xb6/0x130 [ 1188.796041] ext4_sync_file+0x225/0xde0 [ 1188.796501] ? ext4_getfsmap+0x990/0x990 [ 1188.796976] vfs_fsync_range+0x13d/0x230 [ 1188.797455] ext4_buffered_write_iter+0x34b/0x4a0 [ 1188.798020] ? __lock_acquire+0xbb1/0x5b00 [ 1188.798520] ext4_file_write_iter+0x3ab/0x1530 [ 1188.799059] ? __lock_acquire+0x1657/0x5b00 [ 1188.799572] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1188.800104] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.800710] ? SOFTIRQ_verbose+0x10/0x10 [ 1188.801186] new_sync_write+0x42c/0x660 [ 1188.801655] ? new_sync_read+0x6f0/0x6f0 [ 1188.802135] ? ksys_write+0x12d/0x260 [ 1188.802579] ? lock_release+0x680/0x680 [ 1188.803041] ? avc_policy_seqno+0x9/0x70 [ 1188.803511] ? selinux_file_permission+0x92/0x520 [ 1188.804086] vfs_write+0x7c0/0xb10 [ 1188.804501] ksys_write+0x12d/0x260 [ 1188.804921] ? __ia32_sys_read+0xb0/0xb0 [ 1188.805396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.806016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.806615] do_syscall_64+0x33/0x40 [ 1188.807049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.807645] RIP: 0033:0x7f72c6759b19 [ 1188.808079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.810208] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1188.811090] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1188.811911] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1188.812734] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.813563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.814418] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1188.815289] CPU: 1 PID: 7989 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1188.817017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.819065] Call Trace: [ 1188.819733] dump_stack+0x107/0x167 [ 1188.820667] should_fail.cold+0x5/0xa [ 1188.821639] ? ___slab_alloc+0x360/0x700 [ 1188.822679] ? create_object.isra.0+0x3a/0xa30 [ 1188.823828] should_failslab+0x5/0x20 [ 1188.824767] kmem_cache_alloc+0x5b/0x310 [ 1188.825782] create_object.isra.0+0x3a/0xa30 [ 1188.826880] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.828136] kmem_cache_alloc+0x159/0x310 [ 1188.829211] xas_alloc+0x336/0x440 [ 1188.830115] xas_create+0x34a/0x10d0 [ 1188.831083] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1188.832408] xas_store+0x8c/0x1c40 [ 1188.833312] __xa_store+0x164/0x2d0 [ 1188.834232] ? xa_delete_node+0x280/0x280 [ 1188.835301] ? trace_hardirqs_on+0x5b/0x180 [ 1188.836401] xa_store+0x31/0x50 [ 1188.837237] __io_uring_add_tctx_node+0x1cf/0x520 [ 1188.838435] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1188.839733] ? alloc_fd+0x2e7/0x670 [ 1188.840697] io_uring_setup+0x1fbb/0x2980 [ 1188.841919] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1188.843178] ? wait_for_completion_io+0x270/0x270 [ 1188.844423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.845727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.847059] do_syscall_64+0x33/0x40 [ 1188.847990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.849226] RIP: 0033:0x7f5deeaf2b19 [ 1188.850133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.852764] loop1: detected capacity change from 0 to 41948160 [ 1188.854643] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1188.854669] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1188.854682] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1188.854701] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1188.862500] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 14:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2400}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1188.864270] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1188.895135] FAT-fs (loop1): invalid media value (0x00) [ 1188.895856] FAT-fs (loop1): Can't find a valid FAT filesystem 14:53:46 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 23) 14:53:46 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) [ 1188.928703] loop7: detected capacity change from 0 to 41948160 [ 1188.994330] FAULT_INJECTION: forcing a failure. [ 1188.994330] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.995753] CPU: 0 PID: 8006 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1188.996539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.997493] Call Trace: [ 1188.997806] dump_stack+0x107/0x167 [ 1188.998243] should_fail.cold+0x5/0xa [ 1188.998697] ? create_object.isra.0+0x3a/0xa30 [ 1188.999231] should_failslab+0x5/0x20 [ 1188.999681] kmem_cache_alloc+0x5b/0x310 [ 1189.000162] create_object.isra.0+0x3a/0xa30 [ 1189.000665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1189.001264] kmem_cache_alloc+0x159/0x310 [ 1189.001751] ext4_alloc_io_end_vec+0x1f/0x120 [ 1189.002285] ext4_writepages+0x17a5/0x3350 [ 1189.002776] ? ext4_da_write_end+0x21e/0x9c0 [ 1189.003281] ? generic_perform_write+0x2bf/0x4f0 [ 1189.003823] ? ksys_write+0x12d/0x260 [ 1189.004269] ? lock_acquire+0x197/0x470 [ 1189.004720] ? find_held_lock+0x2c/0x110 [ 1189.005185] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1189.005753] ? mark_held_locks+0x9e/0xe0 [ 1189.006241] ? trace_hardirqs_on+0x5b/0x180 [ 1189.006735] ? kmem_cache_free+0xa7/0x2d0 [ 1189.007214] ? __kasan_slab_free+0x122/0x160 [ 1189.007718] ? slab_free_freelist_hook+0xa9/0x180 [ 1189.008276] ? jbd2_journal_stop+0x61f/0xdc0 [ 1189.008784] ? kmem_cache_free+0x249/0x2d0 [ 1189.009276] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1189.009840] do_writepages+0xee/0x2a0 [ 1189.010288] ? page_writeback_cpu_online+0x20/0x20 [ 1189.010853] ? __mark_inode_dirty+0x312/0xd30 [ 1189.011375] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1189.012035] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1189.012607] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1189.013223] ? generic_perform_write+0x37d/0x4f0 [ 1189.013770] file_write_and_wait_range+0xb6/0x130 [ 1189.014335] ext4_sync_file+0x225/0xde0 [ 1189.014790] ? ext4_getfsmap+0x990/0x990 [ 1189.015256] vfs_fsync_range+0x13d/0x230 [ 1189.015722] ext4_buffered_write_iter+0x34b/0x4a0 [ 1189.016271] ? __lock_acquire+0xbb1/0x5b00 [ 1189.016759] ext4_file_write_iter+0x3ab/0x1530 [ 1189.017285] ? __lock_acquire+0x1657/0x5b00 [ 1189.017788] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1189.018319] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1189.018920] ? SOFTIRQ_verbose+0x10/0x10 [ 1189.019389] new_sync_write+0x42c/0x660 [ 1189.019847] ? new_sync_read+0x6f0/0x6f0 [ 1189.020313] ? ksys_write+0x12d/0x260 [ 1189.020755] ? lock_release+0x680/0x680 [ 1189.021214] ? avc_policy_seqno+0x9/0x70 [ 1189.021678] ? selinux_file_permission+0x92/0x520 [ 1189.022251] vfs_write+0x7c0/0xb10 [ 1189.022662] ksys_write+0x12d/0x260 [ 1189.023077] ? __ia32_sys_read+0xb0/0xb0 [ 1189.023541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.024139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.024733] do_syscall_64+0x33/0x40 [ 1189.025163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.025749] RIP: 0033:0x7f72c6759b19 [ 1189.026187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.028295] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1189.029168] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1189.029989] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1189.030811] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.031628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.032446] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1189.090862] FAULT_INJECTION: forcing a failure. [ 1189.090862] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.093274] CPU: 1 PID: 8007 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1189.094726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.096482] Call Trace: [ 1189.097048] dump_stack+0x107/0x167 [ 1189.097817] should_fail.cold+0x5/0xa [ 1189.098642] ? xas_alloc+0x336/0x440 [ 1189.099432] should_failslab+0x5/0x20 [ 1189.100235] kmem_cache_alloc+0x5b/0x310 [ 1189.101111] xas_alloc+0x336/0x440 [ 1189.101867] xas_create+0x34a/0x10d0 [ 1189.102686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1189.103802] xas_store+0x8c/0x1c40 [ 1189.104581] __xa_store+0x164/0x2d0 [ 1189.105350] ? xa_delete_node+0x280/0x280 [ 1189.106243] ? trace_hardirqs_on+0x5b/0x180 [ 1189.107160] xa_store+0x31/0x50 [ 1189.107859] __io_uring_add_tctx_node+0x1cf/0x520 [ 1189.108881] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1189.109989] ? alloc_fd+0x2e7/0x670 [ 1189.110770] io_uring_setup+0x1fbb/0x2980 [ 1189.111656] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1189.112728] ? wait_for_completion_io+0x270/0x270 [ 1189.113781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.114896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.115990] do_syscall_64+0x33/0x40 [ 1189.116784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.117864] RIP: 0033:0x7f5deeaf2b19 [ 1189.118652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.122505] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1189.124107] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1189.125615] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1189.127121] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1189.128608] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1189.130106] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:53:59 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) 14:53:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xa3c) 14:53:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 15) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:53:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4000000) 14:53:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:53:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2a00}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:53:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000208010004700084", 0x14}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:53:59 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 24) [ 1202.429931] loop1: detected capacity change from 0 to 41948160 [ 1202.433095] FAULT_INJECTION: forcing a failure. [ 1202.433095] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.434702] CPU: 0 PID: 8029 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1202.435660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1202.436824] Call Trace: [ 1202.437201] dump_stack+0x107/0x167 [ 1202.437713] should_fail.cold+0x5/0xa [ 1202.438261] ? ___slab_alloc+0x155/0x700 [ 1202.438346] FAULT_INJECTION: forcing a failure. [ 1202.438346] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.438828] ? create_object.isra.0+0x3a/0xa30 [ 1202.438841] should_failslab+0x5/0x20 [ 1202.438853] kmem_cache_alloc+0x5b/0x310 [ 1202.438871] create_object.isra.0+0x3a/0xa30 [ 1202.443502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1202.444218] kmem_cache_alloc+0x159/0x310 [ 1202.444804] xas_alloc+0x336/0x440 [ 1202.445307] xas_create+0x34a/0x10d0 [ 1202.445840] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1202.446583] xas_store+0x8c/0x1c40 [ 1202.447095] __xa_store+0x164/0x2d0 [ 1202.447610] ? xa_delete_node+0x280/0x280 [ 1202.448199] ? trace_hardirqs_on+0x5b/0x180 [ 1202.448811] xa_store+0x31/0x50 [ 1202.449275] __io_uring_add_tctx_node+0x1cf/0x520 [ 1202.449953] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1202.450695] ? alloc_fd+0x2e7/0x670 [ 1202.451222] io_uring_setup+0x1fbb/0x2980 [ 1202.451811] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1202.452524] ? wait_for_completion_io+0x270/0x270 [ 1202.453198] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1202.453964] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1202.454766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1202.455504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.456229] do_syscall_64+0x33/0x40 [ 1202.456750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1202.457475] RIP: 0033:0x7f5deeaf2b19 [ 1202.458002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1202.460573] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1202.461641] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1202.462643] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1202.463636] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1202.464630] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1202.465623] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1202.466659] CPU: 1 PID: 8025 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1202.468116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1202.469611] FAULT_INJECTION: forcing a failure. [ 1202.469611] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.469882] Call Trace: [ 1202.471987] dump_stack+0x107/0x167 [ 1202.472768] should_fail.cold+0x5/0xa [ 1202.473585] ? ext4_mb_new_blocks+0x6a4/0x44b0 [ 1202.474567] should_failslab+0x5/0x20 [ 1202.475377] kmem_cache_alloc+0x5b/0x310 [ 1202.476248] ext4_mb_new_blocks+0x6a4/0x44b0 [ 1202.477195] ? trace_hardirqs_on+0x5b/0x180 [ 1202.478099] ? kasan_unpoison_shadow+0x33/0x50 [ 1202.479072] ? ext4_cache_extents+0x68/0x2d0 [ 1202.480003] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1202.481081] ? ext4_discard_preallocations+0xd80/0xd80 [ 1202.482206] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1202.483210] ? ext4_inode_to_goal_block+0x320/0x430 [ 1202.484318] ext4_ext_map_blocks+0x1a55/0x5870 [ 1202.485455] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1202.486746] ? SOFTIRQ_verbose+0x10/0x10 [ 1202.487742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1202.489028] ? SOFTIRQ_verbose+0x10/0x10 [ 1202.490023] ? __lock_acquire+0x1657/0x5b00 [ 1202.491098] ? ext4_ext_release+0x10/0x10 [ 1202.492115] ? ext4_map_blocks+0x5cd/0x1910 [ 1202.493182] ? lock_release+0x680/0x680 [ 1202.494159] ? ext4_es_lookup_extent+0x485/0xa80 [ 1202.495330] ? lock_downgrade+0x6d0/0x6d0 [ 1202.496371] ? down_write_killable+0x180/0x180 [ 1202.497502] ext4_map_blocks+0x63f/0x1910 [ 1202.498542] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1202.499639] ? trace_hardirqs_on+0x5b/0x180 [ 1202.500706] ? kmem_cache_alloc+0x2a6/0x310 [ 1202.501780] ext4_writepages+0x19bf/0x3350 [ 1202.502841] ? ext4_da_write_end+0x21e/0x9c0 [ 1202.503935] ? generic_perform_write+0x2bf/0x4f0 [ 1202.505096] ? ksys_write+0x12d/0x260 [ 1202.506052] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1202.507405] ? lock_acquire+0x197/0x470 [ 1202.508372] ? find_held_lock+0x2c/0x110 [ 1202.509359] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1202.510562] ? __traceiter_irq_enable+0xc0/0xc0 [ 1202.511701] ? mark_held_locks+0x9e/0xe0 [ 1202.512706] ? kmem_cache_free+0xa7/0x2d0 [ 1202.513723] ? __kasan_slab_free+0x122/0x160 [ 1202.514828] ? slab_free_freelist_hook+0xa9/0x180 [ 1202.516006] ? jbd2_journal_stop+0x61f/0xdc0 [ 1202.517072] ? kmem_cache_free+0x249/0x2d0 [ 1202.518120] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1202.519321] do_writepages+0xee/0x2a0 [ 1202.520251] ? page_writeback_cpu_online+0x20/0x20 [ 1202.521441] ? __mark_inode_dirty+0x312/0xd30 [ 1202.522565] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1202.523970] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1202.525193] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1202.526526] ? generic_perform_write+0x37d/0x4f0 [ 1202.527699] file_write_and_wait_range+0xb6/0x130 [ 1202.528875] ext4_sync_file+0x225/0xde0 [ 1202.529843] ? ext4_getfsmap+0x990/0x990 [ 1202.530856] vfs_fsync_range+0x13d/0x230 [ 1202.531848] ext4_buffered_write_iter+0x34b/0x4a0 [ 1202.533011] ? __lock_acquire+0xbb1/0x5b00 [ 1202.534032] ext4_file_write_iter+0x3ab/0x1530 [ 1202.535162] ? __lock_acquire+0x1657/0x5b00 [ 1202.536234] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1202.537350] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1202.538641] ? SOFTIRQ_verbose+0x10/0x10 [ 1202.539647] new_sync_write+0x42c/0x660 [ 1202.540629] ? new_sync_read+0x6f0/0x6f0 [ 1202.541605] ? ksys_write+0x12d/0x260 [ 1202.542556] ? lock_release+0x680/0x680 [ 1202.543524] ? avc_policy_seqno+0x9/0x70 [ 1202.544526] ? selinux_file_permission+0x92/0x520 [ 1202.545715] vfs_write+0x7c0/0xb10 [ 1202.546607] ksys_write+0x12d/0x260 [ 1202.547484] ? __ia32_sys_read+0xb0/0xb0 [ 1202.548489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1202.549769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.550984] do_syscall_64+0x33/0x40 [ 1202.551827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1202.553184] RIP: 0033:0x7f72c6759b19 [ 1202.554149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1202.559080] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1202.560977] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1202.562827] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1202.564559] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1202.566221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.567826] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1202.569523] CPU: 0 PID: 8028 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1202.570585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1202.571787] Call Trace: [ 1202.572180] dump_stack+0x107/0x167 [ 1202.572698] should_fail.cold+0x5/0xa [ 1202.573264] ? create_object.isra.0+0x3a/0xa30 [ 1202.573948] should_failslab+0x5/0x20 [ 1202.574527] kmem_cache_alloc+0x5b/0x310 [ 1202.575083] create_object.isra.0+0x3a/0xa30 [ 1202.575691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1202.576401] kmem_cache_alloc+0x159/0x310 [ 1202.577012] ? new_sync_write+0x499/0x660 [ 1202.577577] getname_flags.part.0+0x50/0x4f0 [ 1202.578246] getname+0x8e/0xd0 [ 1202.578733] do_sys_openat2+0xf9/0x4d0 [ 1202.579312] ? build_open_flags+0x6f0/0x6f0 [ 1202.579992] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1202.580723] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1202.581456] ? rcu_read_lock_any_held+0x75/0xa0 [ 1202.582084] __x64_sys_openat+0x13f/0x1f0 [ 1202.582653] ? __ia32_sys_open+0x1c0/0x1c0 [ 1202.583229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1202.583938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.584624] do_syscall_64+0x33/0x40 [ 1202.585131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1202.585904] RIP: 0033:0x7f8447751a04 [ 1202.586516] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1202.589078] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1202.590244] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1202.591305] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1202.592331] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1202.593372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1202.594450] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1202.605488] FAT-fs (loop1): invalid media value (0x00) [ 1202.606231] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1202.607248] loop7: detected capacity change from 0 to 41948160 14:53:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x5000000) 14:53:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xa3e) 14:54:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 16) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:54:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 14:54:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x6000000) 14:54:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000208010004700084", 0x14}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:54:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:54:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xa42) 14:54:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 25) [ 1218.115258] loop7: detected capacity change from 0 to 41948160 [ 1218.124914] FAULT_INJECTION: forcing a failure. [ 1218.124914] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.127364] CPU: 1 PID: 8050 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1218.128995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.131098] Call Trace: [ 1218.131779] dump_stack+0x107/0x167 [ 1218.132717] should_fail.cold+0x5/0xa [ 1218.133659] ? create_object.isra.0+0x3a/0xa30 [ 1218.134667] should_failslab+0x5/0x20 [ 1218.135508] kmem_cache_alloc+0x5b/0x310 [ 1218.136412] ? lock_chain_count+0x20/0x20 [ 1218.137337] create_object.isra.0+0x3a/0xa30 [ 1218.138301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1218.139430] __kmalloc+0x16e/0x390 [ 1218.140210] ? mark_lock+0xf5/0x2df0 [ 1218.141025] ext4_find_extent+0xa77/0xd70 [ 1218.141951] ext4_ext_map_blocks+0x1c8/0x5870 [ 1218.142966] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.144114] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.145021] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.146170] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.147081] ? __lock_acquire+0x1657/0x5b00 [ 1218.148046] ? ext4_ext_release+0x10/0x10 [ 1218.148954] ? ext4_map_blocks+0x5cd/0x1910 [ 1218.149889] ? lock_release+0x680/0x680 [ 1218.150796] ? ext4_es_lookup_extent+0x485/0xa80 [ 1218.151866] ? lock_downgrade+0x6d0/0x6d0 [ 1218.152778] ? down_write+0xe0/0x160 [ 1218.153172] FAULT_INJECTION: forcing a failure. [ 1218.153172] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.153595] ? down_write_killable+0x180/0x180 [ 1218.153628] ext4_map_blocks+0x63f/0x1910 [ 1218.153660] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1218.158766] ? trace_hardirqs_on+0x5b/0x180 [ 1218.159715] ? kmem_cache_alloc+0x2a6/0x310 [ 1218.160681] ext4_writepages+0x19bf/0x3350 [ 1218.161657] ? ext4_da_write_end+0x21e/0x9c0 [ 1218.162604] ? generic_perform_write+0x2bf/0x4f0 [ 1218.163626] ? ksys_write+0x12d/0x260 [ 1218.164481] ? lock_acquire+0x197/0x470 [ 1218.165335] ? find_held_lock+0x2c/0x110 [ 1218.166211] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1218.167270] ? mark_held_locks+0x9e/0xe0 [ 1218.168191] ? kmem_cache_free+0xa7/0x2d0 [ 1218.169105] ? __kasan_slab_free+0x122/0x160 [ 1218.170074] ? slab_free_freelist_hook+0xa9/0x180 [ 1218.171164] ? jbd2_journal_stop+0x61f/0xdc0 [ 1218.172135] ? kmem_cache_free+0x249/0x2d0 [ 1218.173064] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1218.174132] do_writepages+0xee/0x2a0 [ 1218.174968] ? page_writeback_cpu_online+0x20/0x20 [ 1218.176045] ? __mark_inode_dirty+0x312/0xd30 [ 1218.177025] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1218.178277] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1218.179355] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1218.180549] ? generic_perform_write+0x37d/0x4f0 [ 1218.181607] file_write_and_wait_range+0xb6/0x130 [ 1218.182635] ext4_sync_file+0x225/0xde0 [ 1218.183527] ? ext4_getfsmap+0x990/0x990 [ 1218.184436] vfs_fsync_range+0x13d/0x230 [ 1218.185355] ext4_buffered_write_iter+0x34b/0x4a0 [ 1218.186381] ? __lock_acquire+0xbb1/0x5b00 [ 1218.187332] ext4_file_write_iter+0x3ab/0x1530 [ 1218.188326] ? __lock_acquire+0x1657/0x5b00 [ 1218.189291] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1218.190324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.191480] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.192377] new_sync_write+0x42c/0x660 [ 1218.193403] ? new_sync_read+0x6f0/0x6f0 [ 1218.194290] ? ksys_write+0x12d/0x260 [ 1218.195165] ? lock_release+0x680/0x680 [ 1218.196066] ? avc_policy_seqno+0x9/0x70 [ 1218.196951] ? selinux_file_permission+0x92/0x520 [ 1218.198053] vfs_write+0x7c0/0xb10 [ 1218.198852] ksys_write+0x12d/0x260 [ 1218.199611] ? __ia32_sys_read+0xb0/0xb0 [ 1218.200489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.201588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.202743] do_syscall_64+0x33/0x40 [ 1218.203539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.204670] RIP: 0033:0x7f72c6759b19 [ 1218.205502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.209365] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1218.211068] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1218.212645] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1218.214245] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.215786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.217378] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1218.218959] CPU: 0 PID: 8055 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1218.220530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.222399] Call Trace: [ 1218.222998] dump_stack+0x107/0x167 14:54:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x3000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1218.223799] should_fail.cold+0x5/0xa [ 1218.224835] ? xas_alloc+0x336/0x440 [ 1218.225643] should_failslab+0x5/0x20 [ 1218.226627] kmem_cache_alloc+0x5b/0x310 [ 1218.227532] xas_alloc+0x336/0x440 [ 1218.228317] xas_create+0x34a/0x10d0 [ 1218.229140] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.230249] xas_store+0x8c/0x1c40 [ 1218.231175] __xa_store+0x164/0x2d0 [ 1218.232115] ? xa_delete_node+0x280/0x280 [ 1218.233187] ? trace_hardirqs_on+0x5b/0x180 [ 1218.234300] xa_store+0x31/0x50 [ 1218.235149] __io_uring_add_tctx_node+0x1cf/0x520 [ 1218.236176] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1218.237301] ? alloc_fd+0x2e7/0x670 [ 1218.238116] io_uring_setup+0x1fbb/0x2980 [ 1218.239022] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1218.240163] ? wait_for_completion_io+0x270/0x270 [ 1218.241261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.242429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.243593] do_syscall_64+0x33/0x40 [ 1218.244403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.245548] RIP: 0033:0x7f5deeaf2b19 [ 1218.246374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.250990] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1218.252923] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1218.254751] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1218.256559] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1218.258367] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1218.260201] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1218.265122] FAULT_INJECTION: forcing a failure. [ 1218.265122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.267683] CPU: 1 PID: 8059 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1218.269181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.271003] Call Trace: [ 1218.271578] dump_stack+0x107/0x167 [ 1218.272354] should_fail.cold+0x5/0xa [ 1218.273174] strncpy_from_user+0x34/0x470 [ 1218.274067] getname_flags.part.0+0x95/0x4f0 [ 1218.275013] getname+0x8e/0xd0 [ 1218.275703] do_sys_openat2+0xf9/0x4d0 [ 1218.276544] ? build_open_flags+0x6f0/0x6f0 [ 1218.277465] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.278470] __x64_sys_openat+0x13f/0x1f0 [ 1218.279355] ? __ia32_sys_open+0x1c0/0x1c0 [ 1218.280448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.281788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.283132] do_syscall_64+0x33/0x40 [ 1218.284094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.285418] RIP: 0033:0x7f8447751a04 [ 1218.286383] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1218.291124] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1218.293097] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1218.294936] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1218.296785] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1218.298633] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1218.300470] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1218.305105] loop1: detected capacity change from 0 to 41948160 14:54:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x7000000) 14:54:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 26) [ 1218.391279] FAT-fs (loop1): invalid media value (0x00) [ 1218.392593] FAT-fs (loop1): Can't find a valid FAT filesystem 14:54:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xa61) 14:54:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 17) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:54:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x8040000) [ 1218.501561] FAULT_INJECTION: forcing a failure. [ 1218.501561] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.504294] CPU: 0 PID: 8075 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1218.505846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.507739] Call Trace: [ 1218.508343] dump_stack+0x107/0x167 [ 1218.509179] should_fail.cold+0x5/0xa [ 1218.510048] ? __alloc_file+0x21/0x320 [ 1218.510939] should_failslab+0x5/0x20 [ 1218.511808] kmem_cache_alloc+0x5b/0x310 [ 1218.512732] __alloc_file+0x21/0x320 [ 1218.513585] alloc_empty_file+0x6d/0x170 [ 1218.514527] path_openat+0xe6/0x2770 [ 1218.515377] ? __lock_acquire+0x1657/0x5b00 [ 1218.516384] ? path_lookupat+0x860/0x860 [ 1218.517322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.518523] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.519447] ? find_held_lock+0x2c/0x110 [ 1218.520391] do_filp_open+0x190/0x3e0 [ 1218.521283] ? may_open_dev+0xf0/0xf0 [ 1218.522162] ? alloc_fd+0x2e7/0x670 [ 1218.523003] ? lock_downgrade+0x6d0/0x6d0 [ 1218.523950] ? do_raw_spin_lock+0x121/0x260 [ 1218.524930] ? rwlock_bug.part.0+0x90/0x90 [ 1218.525912] ? _raw_spin_unlock+0x1a/0x30 [ 1218.526865] ? alloc_fd+0x2e7/0x670 [ 1218.527711] do_sys_openat2+0x171/0x4d0 [ 1218.528621] ? build_open_flags+0x6f0/0x6f0 [ 1218.529616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.530691] __x64_sys_openat+0x13f/0x1f0 [ 1218.531636] ? __ia32_sys_open+0x1c0/0x1c0 [ 1218.532610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.533811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.535007] do_syscall_64+0x33/0x40 [ 1218.535866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.537039] RIP: 0033:0x7f8447751a04 [ 1218.537891] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1218.542094] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1218.543844] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1218.545479] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1218.547117] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1218.548746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1218.550377] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1218.558187] FAULT_INJECTION: forcing a failure. [ 1218.558187] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.560809] CPU: 0 PID: 8076 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1218.562374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.564272] Call Trace: [ 1218.564876] dump_stack+0x107/0x167 [ 1218.565709] should_fail.cold+0x5/0xa [ 1218.566589] ? ext4_mb_new_blocks+0x6a4/0x44b0 [ 1218.567636] should_failslab+0x5/0x20 [ 1218.568508] kmem_cache_alloc+0x5b/0x310 [ 1218.569447] ext4_mb_new_blocks+0x6a4/0x44b0 [ 1218.570483] ? trace_hardirqs_on+0x5b/0x180 [ 1218.571475] ? kasan_unpoison_shadow+0x33/0x50 [ 1218.572518] ? ext4_cache_extents+0x68/0x2d0 [ 1218.573521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1218.574685] ? ext4_discard_preallocations+0xd80/0xd80 [ 1218.575887] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1218.576966] ? ext4_inode_to_goal_block+0x320/0x430 [ 1218.578118] ext4_ext_map_blocks+0x1a55/0x5870 [ 1218.579189] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.580389] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.581316] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.582523] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.583458] ? __lock_acquire+0x1657/0x5b00 [ 1218.584452] ? ext4_ext_release+0x10/0x10 [ 1218.585406] ? ext4_map_blocks+0x5cd/0x1910 [ 1218.586401] ? lock_release+0x680/0x680 [ 1218.587324] ? ext4_es_lookup_extent+0x485/0xa80 [ 1218.588410] ? lock_downgrade+0x6d0/0x6d0 [ 1218.589383] ? down_write_killable+0x180/0x180 [ 1218.590440] ext4_map_blocks+0x63f/0x1910 [ 1218.591411] ? ext4_issue_zeroout+0x1c0/0x1c0 14:54:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x3600}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1218.592434] ? trace_hardirqs_on+0x5b/0x180 [ 1218.593638] ? kmem_cache_alloc+0x2a6/0x310 [ 1218.594644] ext4_writepages+0x19bf/0x3350 [ 1218.595617] ? ext4_da_write_end+0x21e/0x9c0 [ 1218.596619] ? generic_perform_write+0x2bf/0x4f0 [ 1218.597691] ? ksys_write+0x12d/0x260 [ 1218.598584] ? lock_acquire+0x197/0x470 [ 1218.599493] ? find_held_lock+0x2c/0x110 [ 1218.600413] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1218.601533] ? mark_held_locks+0x9e/0xe0 [ 1218.602480] ? kmem_cache_free+0xa7/0x2d0 [ 1218.603421] ? __kasan_slab_free+0x122/0x160 [ 1218.604426] ? slab_free_freelist_hook+0xa9/0x180 [ 1218.605528] ? jbd2_journal_stop+0x61f/0xdc0 [ 1218.606542] ? kmem_cache_free+0x249/0x2d0 [ 1218.607529] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1218.608643] do_writepages+0xee/0x2a0 [ 1218.609521] ? page_writeback_cpu_online+0x20/0x20 [ 1218.610648] ? __mark_inode_dirty+0x312/0xd30 [ 1218.611690] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1218.613011] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1218.614152] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1218.615397] ? generic_perform_write+0x37d/0x4f0 [ 1218.616485] file_write_and_wait_range+0xb6/0x130 [ 1218.617593] ext4_sync_file+0x225/0xde0 [ 1218.618513] ? ext4_getfsmap+0x990/0x990 [ 1218.619448] vfs_fsync_range+0x13d/0x230 [ 1218.620389] ext4_buffered_write_iter+0x34b/0x4a0 [ 1218.621495] ? __lock_acquire+0xbb1/0x5b00 [ 1218.622479] ext4_file_write_iter+0x3ab/0x1530 [ 1218.623528] ? __lock_acquire+0x1657/0x5b00 [ 1218.624530] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1218.625583] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.626793] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.627736] new_sync_write+0x42c/0x660 [ 1218.628652] ? new_sync_read+0x6f0/0x6f0 [ 1218.629582] ? ksys_write+0x12d/0x260 [ 1218.630469] ? lock_release+0x680/0x680 [ 1218.631381] ? avc_policy_seqno+0x9/0x70 [ 1218.632309] ? selinux_file_permission+0x92/0x520 [ 1218.633431] vfs_write+0x7c0/0xb10 [ 1218.634254] ksys_write+0x12d/0x260 [ 1218.635091] ? __ia32_sys_read+0xb0/0xb0 [ 1218.636027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.637229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.638414] do_syscall_64+0x33/0x40 [ 1218.639268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.640433] RIP: 0033:0x7f72c6759b19 [ 1218.641278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.645450] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1218.647182] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1218.648805] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1218.650431] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.652072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.653701] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:54:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xa9e) 14:54:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 14:54:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xc000000) [ 1218.725376] FAULT_INJECTION: forcing a failure. [ 1218.725376] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.728038] CPU: 0 PID: 8085 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1218.729603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.731514] Call Trace: [ 1218.732120] dump_stack+0x107/0x167 [ 1218.732959] should_fail.cold+0x5/0xa [ 1218.733838] ? create_object.isra.0+0x3a/0xa30 [ 1218.734895] should_failslab+0x5/0x20 [ 1218.735773] kmem_cache_alloc+0x5b/0x310 [ 1218.736705] ? mark_held_locks+0x9e/0xe0 [ 1218.737645] create_object.isra.0+0x3a/0xa30 [ 1218.738666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1218.739843] kmem_cache_alloc+0x159/0x310 [ 1218.740809] xas_alloc+0x336/0x440 [ 1218.741636] xas_create+0x34a/0x10d0 [ 1218.742513] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1218.743728] xas_store+0x8c/0x1c40 [ 1218.744565] __xa_store+0x164/0x2d0 [ 1218.745411] ? xa_delete_node+0x280/0x280 [ 1218.746374] ? trace_hardirqs_on+0x5b/0x180 [ 1218.747384] xa_store+0x31/0x50 [ 1218.748149] __io_uring_add_tctx_node+0x1cf/0x520 [ 1218.749253] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1218.750460] ? alloc_fd+0x2e7/0x670 [ 1218.751309] io_uring_setup+0x1fbb/0x2980 [ 1218.752272] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1218.753434] ? wait_for_completion_io+0x270/0x270 [ 1218.754575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.755777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.756968] do_syscall_64+0x33/0x40 [ 1218.757825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.759004] RIP: 0033:0x7f5deeaf2b19 [ 1218.759858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.764078] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1218.765827] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1218.767475] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1218.769112] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1218.770754] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1218.772381] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:54:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000208010004700084", 0x14}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:54:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5f4, 0x0) [ 1218.817792] loop1: detected capacity change from 0 to 41948160 [ 1218.840226] FAT-fs (loop1): invalid media value (0x00) [ 1218.841617] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1218.888066] loop7: detected capacity change from 0 to 41948160 14:54:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 18) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:54:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:54:31 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) 14:54:31 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 27) 14:54:31 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xaa1) 14:54:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x10000000) 14:54:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1234.490916] FAULT_INJECTION: forcing a failure. [ 1234.490916] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.495262] CPU: 1 PID: 8107 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1234.496806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.498662] Call Trace: 14:54:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x3c00}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1234.499277] dump_stack+0x107/0x167 [ 1234.500227] should_fail.cold+0x5/0xa [ 1234.501092] ? xas_alloc+0x336/0x440 [ 1234.501929] should_failslab+0x5/0x20 [ 1234.502807] kmem_cache_alloc+0x5b/0x310 [ 1234.503731] xas_alloc+0x336/0x440 [ 1234.504535] xas_create+0x34a/0x10d0 [ 1234.505387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.506570] xas_store+0x8c/0x1c40 [ 1234.507402] __xa_store+0x164/0x2d0 [ 1234.508229] ? xa_delete_node+0x280/0x280 [ 1234.509178] ? trace_hardirqs_on+0x5b/0x180 [ 1234.510160] xa_store+0x31/0x50 [ 1234.510915] __io_uring_add_tctx_node+0x1cf/0x520 [ 1234.511990] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.513167] ? alloc_fd+0x2e7/0x670 [ 1234.514001] io_uring_setup+0x1fbb/0x2980 [ 1234.514953] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.516094] ? wait_for_completion_io+0x270/0x270 [ 1234.517208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.518393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.519568] do_syscall_64+0x33/0x40 [ 1234.520401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.521558] RIP: 0033:0x7f5deeaf2b19 [ 1234.522395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.523353] FAULT_INJECTION: forcing a failure. [ 1234.523353] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.526799] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.526823] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1234.526846] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1234.533899] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1234.535509] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1234.537107] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1234.538761] CPU: 0 PID: 8115 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1234.540132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.541784] Call Trace: [ 1234.542318] dump_stack+0x107/0x167 [ 1234.543060] should_fail.cold+0x5/0xa [ 1234.543826] ? create_object.isra.0+0x3a/0xa30 [ 1234.544735] should_failslab+0x5/0x20 [ 1234.545497] kmem_cache_alloc+0x5b/0x310 [ 1234.546301] ? ext4_file_write_iter+0x3ab/0x1530 [ 1234.547272] ? new_sync_write+0x42c/0x660 [ 1234.548105] create_object.isra.0+0x3a/0xa30 [ 1234.548976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.549990] kmem_cache_alloc+0x159/0x310 [ 1234.550835] ext4_mb_new_blocks+0x6a4/0x44b0 [ 1234.551728] ? trace_hardirqs_on+0x5b/0x180 [ 1234.552584] ? kasan_unpoison_shadow+0x33/0x50 [ 1234.553493] ? ext4_cache_extents+0x68/0x2d0 [ 1234.554364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.555382] ? ext4_discard_preallocations+0xd80/0xd80 [ 1234.556425] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1234.557362] ? ext4_inode_to_goal_block+0x320/0x430 [ 1234.558365] ext4_ext_map_blocks+0x1a55/0x5870 [ 1234.559304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.560343] ? SOFTIRQ_verbose+0x10/0x10 [ 1234.561151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.562188] ? SOFTIRQ_verbose+0x10/0x10 [ 1234.563009] ? __lock_acquire+0x1657/0x5b00 [ 1234.563871] ? ext4_ext_release+0x10/0x10 [ 1234.564696] ? ext4_map_blocks+0x5cd/0x1910 [ 1234.565558] ? lock_release+0x680/0x680 [ 1234.566349] ? ext4_es_lookup_extent+0x485/0xa80 [ 1234.567312] ? lock_downgrade+0x6d0/0x6d0 [ 1234.568154] ? down_write_killable+0x180/0x180 [ 1234.569071] ext4_map_blocks+0x63f/0x1910 [ 1234.569903] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1234.570818] ? trace_hardirqs_on+0x5b/0x180 [ 1234.571680] ? kmem_cache_alloc+0x2a6/0x310 [ 1234.572550] ext4_writepages+0x19bf/0x3350 [ 1234.573391] ? ext4_da_write_end+0x21e/0x9c0 [ 1234.574244] ? generic_perform_write+0x2bf/0x4f0 [ 1234.575193] ? ksys_write+0x12d/0x260 [ 1234.575961] ? lock_acquire+0x197/0x470 [ 1234.576739] ? find_held_lock+0x2c/0x110 [ 1234.577522] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1234.578484] ? mark_held_locks+0x9e/0xe0 [ 1234.579302] ? kmem_cache_free+0xa7/0x2d0 [ 1234.580127] ? __kasan_slab_free+0x122/0x160 [ 1234.580998] ? slab_free_freelist_hook+0xa9/0x180 [ 1234.581951] ? jbd2_journal_stop+0x61f/0xdc0 [ 1234.582806] ? kmem_cache_free+0x249/0x2d0 [ 1234.583658] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1234.584599] do_writepages+0xee/0x2a0 [ 1234.585357] ? page_writeback_cpu_online+0x20/0x20 [ 1234.586515] ? __mark_inode_dirty+0x312/0xd30 [ 1234.587432] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1234.588563] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1234.589794] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1234.590866] ? generic_perform_write+0x37d/0x4f0 [ 1234.592015] file_write_and_wait_range+0xb6/0x130 [ 1234.592978] ext4_sync_file+0x225/0xde0 [ 1234.593773] ? ext4_getfsmap+0x990/0x990 [ 1234.594580] vfs_fsync_range+0x13d/0x230 [ 1234.595401] ext4_buffered_write_iter+0x34b/0x4a0 [ 1234.596348] ? __lock_acquire+0xbb1/0x5b00 [ 1234.597189] ext4_file_write_iter+0x3ab/0x1530 [ 1234.598088] ? __lock_acquire+0x1657/0x5b00 [ 1234.598965] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1234.599869] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.600895] ? SOFTIRQ_verbose+0x10/0x10 [ 1234.601705] new_sync_write+0x42c/0x660 [ 1234.602489] ? new_sync_read+0x6f0/0x6f0 [ 1234.603298] ? ksys_write+0x12d/0x260 [ 1234.604052] ? lock_release+0x680/0x680 [ 1234.604831] ? avc_policy_seqno+0x9/0x70 [ 1234.605624] ? selinux_file_permission+0x92/0x520 [ 1234.606591] vfs_write+0x7c0/0xb10 [ 1234.607305] ksys_write+0x12d/0x260 [ 1234.608014] ? __ia32_sys_read+0xb0/0xb0 [ 1234.608808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.609826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.610839] do_syscall_64+0x33/0x40 [ 1234.611562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.612557] RIP: 0033:0x7f72c6759b19 [ 1234.613287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.616856] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.618339] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1234.619728] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1234.621110] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.622494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.623881] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1234.629891] loop7: detected capacity change from 0 to 41948160 [ 1234.651310] FAULT_INJECTION: forcing a failure. [ 1234.651310] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.653600] CPU: 0 PID: 8117 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1234.654969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.656648] Call Trace: [ 1234.657197] dump_stack+0x107/0x167 [ 1234.657945] should_fail.cold+0x5/0xa [ 1234.658729] ? create_object.isra.0+0x3a/0xa30 [ 1234.659631] should_failslab+0x5/0x20 [ 1234.660402] kmem_cache_alloc+0x5b/0x310 [ 1234.661339] create_object.isra.0+0x3a/0xa30 [ 1234.662520] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.663770] kmem_cache_alloc+0x159/0x310 [ 1234.664588] __alloc_file+0x21/0x320 [ 1234.665501] alloc_empty_file+0x6d/0x170 [ 1234.666303] path_openat+0xe6/0x2770 [ 1234.667223] ? __lock_acquire+0x1657/0x5b00 [ 1234.668077] ? path_lookupat+0x860/0x860 [ 1234.669106] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.670136] ? SOFTIRQ_verbose+0x10/0x10 [ 1234.671119] ? find_held_lock+0x2c/0x110 [ 1234.671946] do_filp_open+0x190/0x3e0 [ 1234.672704] ? may_open_dev+0xf0/0xf0 [ 1234.673467] ? alloc_fd+0x2e7/0x670 [ 1234.674183] ? lock_downgrade+0x6d0/0x6d0 [ 1234.675012] ? do_raw_spin_lock+0x121/0x260 [ 1234.675882] ? rwlock_bug.part.0+0x90/0x90 [ 1234.676724] ? _raw_spin_unlock+0x1a/0x30 [ 1234.677539] ? alloc_fd+0x2e7/0x670 [ 1234.678266] do_sys_openat2+0x171/0x4d0 [ 1234.679215] ? build_open_flags+0x6f0/0x6f0 [ 1234.680068] ? rcu_read_lock_any_held+0x75/0xa0 [ 1234.681015] __x64_sys_openat+0x13f/0x1f0 [ 1234.681980] ? __ia32_sys_open+0x1c0/0x1c0 [ 1234.682837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.683867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.685140] do_syscall_64+0x33/0x40 [ 1234.685885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.687156] RIP: 0033:0x7f8447751a04 [ 1234.687718] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1234.690372] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1234.691504] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1234.692551] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1234.693591] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1234.694635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1234.695688] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 14:54:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x12000000) [ 1234.705805] loop1: detected capacity change from 0 to 41948160 14:54:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 19) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:54:31 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xaa3) 14:54:31 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) [ 1234.811393] FAULT_INJECTION: forcing a failure. [ 1234.811393] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.814141] CPU: 0 PID: 8129 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1234.815703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.817597] Call Trace: [ 1234.818204] dump_stack+0x107/0x167 [ 1234.819049] should_fail.cold+0x5/0xa [ 1234.819927] ? create_object.isra.0+0x3a/0xa30 [ 1234.820969] should_failslab+0x5/0x20 [ 1234.821843] kmem_cache_alloc+0x5b/0x310 [ 1234.822783] ? mark_held_locks+0x9e/0xe0 [ 1234.823717] create_object.isra.0+0x3a/0xa30 [ 1234.824718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.825883] kmem_cache_alloc+0x159/0x310 [ 1234.826850] xas_alloc+0x336/0x440 [ 1234.827574] FAULT_INJECTION: forcing a failure. [ 1234.827574] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.827668] xas_create+0x34a/0x10d0 [ 1234.831038] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.832233] xas_store+0x8c/0x1c40 [ 1234.833064] __xa_store+0x164/0x2d0 [ 1234.833899] ? xa_delete_node+0x280/0x280 [ 1234.834873] ? trace_hardirqs_on+0x5b/0x180 [ 1234.835868] xa_store+0x31/0x50 [ 1234.836629] __io_uring_add_tctx_node+0x1cf/0x520 [ 1234.837729] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.838929] ? alloc_fd+0x2e7/0x670 [ 1234.839771] io_uring_setup+0x1fbb/0x2980 [ 1234.840732] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.841891] ? wait_for_completion_io+0x270/0x270 [ 1234.843022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.844219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.845399] do_syscall_64+0x33/0x40 [ 1234.846246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.847421] RIP: 0033:0x7f5deeaf2b19 [ 1234.848271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.852467] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.854202] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1234.855830] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1234.857453] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1234.859079] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1234.860700] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1234.862372] CPU: 1 PID: 8130 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1234.863962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.865853] Call Trace: [ 1234.866464] dump_stack+0x107/0x167 [ 1234.867299] should_fail.cold+0x5/0xa [ 1234.868166] ? security_file_alloc+0x34/0x170 [ 1234.869179] should_failslab+0x5/0x20 [ 1234.870039] kmem_cache_alloc+0x5b/0x310 [ 1234.870973] security_file_alloc+0x34/0x170 [ 1234.871949] __alloc_file+0xb7/0x320 [ 1234.872796] alloc_empty_file+0x6d/0x170 [ 1234.873716] path_openat+0xe6/0x2770 [ 1234.874558] ? __lock_acquire+0x1657/0x5b00 [ 1234.875557] ? path_lookupat+0x860/0x860 [ 1234.876483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1234.877672] ? SOFTIRQ_verbose+0x10/0x10 [ 1234.878593] ? find_held_lock+0x2c/0x110 [ 1234.879532] do_filp_open+0x190/0x3e0 [ 1234.880396] ? may_open_dev+0xf0/0xf0 [ 1234.881261] ? alloc_fd+0x2e7/0x670 [ 1234.882085] ? lock_downgrade+0x6d0/0x6d0 [ 1234.883031] ? do_raw_spin_lock+0x121/0x260 [ 1234.884010] ? rwlock_bug.part.0+0x90/0x90 [ 1234.884970] ? _raw_spin_unlock+0x1a/0x30 [ 1234.885906] ? alloc_fd+0x2e7/0x670 [ 1234.886761] do_sys_openat2+0x171/0x4d0 [ 1234.887672] ? build_open_flags+0x6f0/0x6f0 [ 1234.888663] ? rcu_read_lock_any_held+0x75/0xa0 [ 1234.889724] __x64_sys_openat+0x13f/0x1f0 [ 1234.890664] ? __ia32_sys_open+0x1c0/0x1c0 [ 1234.891640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.892827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.894000] do_syscall_64+0x33/0x40 [ 1234.894851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.896011] RIP: 0033:0x7f8447751a04 [ 1234.896855] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1234.901004] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1234.902731] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1234.904338] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1234.905941] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1234.907552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1234.909153] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 14:54:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:54:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 20) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:54:46 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xaa7) 14:54:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x12010000) 14:54:46 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 28) 14:54:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:54:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:54:46 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) [ 1249.789381] FAULT_INJECTION: forcing a failure. [ 1249.789381] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.791885] CPU: 0 PID: 8141 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1249.793341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.795124] Call Trace: [ 1249.795699] dump_stack+0x107/0x167 [ 1249.796483] should_fail.cold+0x5/0xa [ 1249.797298] ? xas_alloc+0x336/0x440 [ 1249.798092] should_failslab+0x5/0x20 [ 1249.798911] kmem_cache_alloc+0x5b/0x310 [ 1249.799798] xas_alloc+0x336/0x440 [ 1249.800561] xas_create+0x34a/0x10d0 [ 1249.801372] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1249.802486] xas_store+0x8c/0x1c40 [ 1249.803273] __xa_store+0x164/0x2d0 [ 1249.804052] ? xa_delete_node+0x280/0x280 [ 1249.804953] ? trace_hardirqs_on+0x5b/0x180 [ 1249.805885] xa_store+0x31/0x50 [ 1249.806596] __io_uring_add_tctx_node+0x1cf/0x520 [ 1249.807636] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1249.808225] FAULT_INJECTION: forcing a failure. [ 1249.808225] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.808752] ? alloc_fd+0x2e7/0x670 [ 1249.808788] io_uring_setup+0x1fbb/0x2980 [ 1249.808822] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1249.813968] ? wait_for_completion_io+0x270/0x270 [ 1249.815007] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1249.816167] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1249.817353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1249.818467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1249.819574] do_syscall_64+0x33/0x40 [ 1249.820363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1249.821452] RIP: 0033:0x7f5deeaf2b19 [ 1249.822239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.826149] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1249.827769] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1249.829285] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1249.830794] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1249.832316] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1249.833850] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1249.835416] CPU: 1 PID: 8149 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1249.836967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.838837] Call Trace: [ 1249.839444] dump_stack+0x107/0x167 [ 1249.840270] should_fail.cold+0x5/0xa [ 1249.841127] ? create_object.isra.0+0x3a/0xa30 [ 1249.841280] FAULT_INJECTION: forcing a failure. [ 1249.841280] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.842147] should_failslab+0x5/0x20 [ 1249.842172] kmem_cache_alloc+0x5b/0x310 [ 1249.842195] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1249.842232] create_object.isra.0+0x3a/0xa30 [ 1249.842250] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1249.849769] kmem_cache_alloc+0x159/0x310 [ 1249.850707] security_file_alloc+0x34/0x170 [ 1249.851689] __alloc_file+0xb7/0x320 [ 1249.852532] alloc_empty_file+0x6d/0x170 [ 1249.853448] path_openat+0xe6/0x2770 [ 1249.854292] ? __lock_acquire+0x1657/0x5b00 [ 1249.855283] ? path_lookupat+0x860/0x860 [ 1249.856206] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1249.857374] ? SOFTIRQ_verbose+0x10/0x10 [ 1249.858280] ? find_held_lock+0x2c/0x110 [ 1249.859224] do_filp_open+0x190/0x3e0 [ 1249.860073] ? may_open_dev+0xf0/0xf0 [ 1249.860935] ? alloc_fd+0x2e7/0x670 [ 1249.861757] ? lock_downgrade+0x6d0/0x6d0 [ 1249.862685] ? do_raw_spin_lock+0x121/0x260 [ 1249.863659] ? rwlock_bug.part.0+0x90/0x90 [ 1249.864629] ? _raw_spin_unlock+0x1a/0x30 [ 1249.865559] ? alloc_fd+0x2e7/0x670 [ 1249.866387] do_sys_openat2+0x171/0x4d0 [ 1249.867291] ? build_open_flags+0x6f0/0x6f0 [ 1249.868275] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1249.869511] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1249.870758] ? rcu_read_lock_any_held+0x75/0xa0 [ 1249.871816] __x64_sys_openat+0x13f/0x1f0 [ 1249.872743] ? __ia32_sys_open+0x1c0/0x1c0 [ 1249.873696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1249.874867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1249.876029] do_syscall_64+0x33/0x40 [ 1249.876859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1249.878004] RIP: 0033:0x7f8447751a04 [ 1249.878832] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1249.882997] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1249.884705] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1249.886294] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1249.887900] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1249.889488] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1249.891093] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1249.892722] CPU: 0 PID: 8142 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1249.894189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.895966] Call Trace: [ 1249.896534] dump_stack+0x107/0x167 [ 1249.897309] should_fail.cold+0x5/0xa [ 1249.898122] ? __es_insert_extent+0xed1/0x1370 [ 1249.899103] should_failslab+0x5/0x20 [ 1249.899911] kmem_cache_alloc+0x5b/0x310 [ 1249.900781] __es_insert_extent+0xed1/0x1370 [ 1249.901743] ext4_es_insert_extent+0x45d/0xf10 [ 1249.902718] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1249.903633] ? lock_downgrade+0x6d0/0x6d0 [ 1249.904528] ? do_raw_read_unlock+0x3b/0x70 [ 1249.905446] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1249.906449] ext4_map_blocks+0x80b/0x1910 [ 1249.907354] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1249.908298] ? trace_hardirqs_on+0x5b/0x180 [ 1249.909217] ? kmem_cache_alloc+0x2a6/0x310 [ 1249.910146] ext4_writepages+0x19bf/0x3350 [ 1249.911069] ? ext4_da_write_end+0x21e/0x9c0 [ 1249.911994] ? generic_perform_write+0x2bf/0x4f0 [ 1249.912995] ? ksys_write+0x12d/0x260 [ 1249.913835] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1249.915008] ? lock_acquire+0x197/0x470 [ 1249.915853] ? find_held_lock+0x2c/0x110 [ 1249.916717] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1249.917756] ? __traceiter_irq_enable+0xc0/0xc0 [ 1249.918757] ? mark_held_locks+0x9e/0xe0 [ 1249.919646] ? kmem_cache_free+0xa7/0x2d0 [ 1249.920529] ? __kasan_slab_free+0x122/0x160 [ 1249.921484] ? slab_free_freelist_hook+0xa9/0x180 [ 1249.922514] ? jbd2_journal_stop+0x61f/0xdc0 [ 1249.923457] ? kmem_cache_free+0x249/0x2d0 [ 1249.924379] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1249.925415] do_writepages+0xee/0x2a0 [ 1249.926237] ? page_writeback_cpu_online+0x20/0x20 [ 1249.927286] ? __mark_inode_dirty+0x312/0xd30 [ 1249.928258] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1249.929503] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1249.930563] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1249.931718] ? generic_perform_write+0x37d/0x4f0 [ 1249.932736] file_write_and_wait_range+0xb6/0x130 [ 1249.933764] ext4_sync_file+0x225/0xde0 [ 1249.934607] ? ext4_getfsmap+0x990/0x990 [ 1249.935486] vfs_fsync_range+0x13d/0x230 [ 1249.936358] ext4_buffered_write_iter+0x34b/0x4a0 [ 1249.937382] ? __lock_acquire+0xbb1/0x5b00 [ 1249.938271] ext4_file_write_iter+0x3ab/0x1530 [ 1249.939252] ? __lock_acquire+0x1657/0x5b00 [ 1249.940182] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1249.941158] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1249.942263] ? SOFTIRQ_verbose+0x10/0x10 [ 1249.943145] new_sync_write+0x42c/0x660 [ 1249.943985] ? new_sync_read+0x6f0/0x6f0 [ 1249.944847] ? ksys_write+0x12d/0x260 [ 1249.945657] ? lock_release+0x680/0x680 [ 1249.946500] ? avc_policy_seqno+0x9/0x70 [ 1249.947366] ? selinux_file_permission+0x92/0x520 [ 1249.948415] vfs_write+0x7c0/0xb10 [ 1249.949169] ksys_write+0x12d/0x260 [ 1249.949939] ? __ia32_sys_read+0xb0/0xb0 [ 1249.950805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1249.951928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1249.953031] do_syscall_64+0x33/0x40 [ 1249.953845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1249.954994] RIP: 0033:0x7f72c6759b19 [ 1249.955830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.959913] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1249.961595] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1249.963184] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1249.964758] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1249.966333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1249.967922] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1249.981294] loop7: detected capacity change from 0 to 41948160 14:54:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x18000000) [ 1249.997692] loop1: detected capacity change from 0 to 41948160 14:54:47 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xaff) 14:54:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:54:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x4200}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1250.108534] loop7: detected capacity change from 0 to 41948160 14:54:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 21) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:54:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x21030000) 14:54:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1250.195807] FAULT_INJECTION: forcing a failure. [ 1250.195807] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.198690] CPU: 0 PID: 8167 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1250.200147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.201907] Call Trace: [ 1250.202473] dump_stack+0x107/0x167 [ 1250.203266] should_fail.cold+0x5/0xa [ 1250.204077] ? __d_alloc+0x2a/0x990 [ 1250.204853] should_failslab+0x5/0x20 [ 1250.205667] kmem_cache_alloc+0x5b/0x310 [ 1250.206529] __d_alloc+0x2a/0x990 [ 1250.207278] ? mark_lock+0xf5/0x2df0 [ 1250.208072] d_alloc+0x46/0x240 [ 1250.208774] d_alloc_parallel+0xe9/0x1a30 [ 1250.209664] ? __d_lookup+0x396/0x760 [ 1250.210479] ? lock_downgrade+0x6d0/0x6d0 [ 1250.211364] ? find_held_lock+0x2c/0x110 [ 1250.212236] ? __d_lookup_rcu+0x6d0/0x6d0 [ 1250.213119] ? __d_lookup+0x3bf/0x760 [ 1250.213935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.215071] lookup_open.isra.0+0x962/0x1270 [ 1250.216015] ? vfs_tmpfile+0x350/0x350 [ 1250.216868] ? __mnt_want_write+0x196/0x280 [ 1250.217789] path_openat+0x972/0x2770 [ 1250.218607] ? path_lookupat+0x860/0x860 [ 1250.219483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1250.220590] ? SOFTIRQ_verbose+0x10/0x10 [ 1250.221446] ? find_held_lock+0x2c/0x110 [ 1250.222322] do_filp_open+0x190/0x3e0 [ 1250.223138] ? may_open_dev+0xf0/0xf0 [ 1250.223957] ? do_raw_spin_lock+0x121/0x260 [ 1250.224869] ? rwlock_bug.part.0+0x90/0x90 [ 1250.225788] ? _raw_spin_unlock+0x1a/0x30 [ 1250.226666] ? alloc_fd+0x2e7/0x670 [ 1250.227462] do_sys_openat2+0x171/0x4d0 [ 1250.228304] ? build_open_flags+0x6f0/0x6f0 [ 1250.229225] ? rcu_read_lock_any_held+0x75/0xa0 [ 1250.230212] __x64_sys_openat+0x13f/0x1f0 [ 1250.231103] ? __ia32_sys_open+0x1c0/0x1c0 [ 1250.232000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.233106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.234196] do_syscall_64+0x33/0x40 [ 1250.234995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.236083] RIP: 0033:0x7f8447751a04 [ 1250.236868] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1250.240745] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1250.242366] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1250.243871] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1250.245378] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1250.246879] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1250.248396] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 14:54:47 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb02) 14:54:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x6000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:54:47 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 29) 14:54:47 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) [ 1250.309253] FAULT_INJECTION: forcing a failure. [ 1250.309253] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.312071] CPU: 1 PID: 8178 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1250.313705] loop1: detected capacity change from 0 to 41948160 [ 1250.315123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.316858] Call Trace: [ 1250.317412] dump_stack+0x107/0x167 [ 1250.318179] should_fail.cold+0x5/0xa [ 1250.318979] ? create_object.isra.0+0x3a/0xa30 [ 1250.319939] should_failslab+0x5/0x20 [ 1250.320729] kmem_cache_alloc+0x5b/0x310 [ 1250.321602] ? mark_held_locks+0x9e/0xe0 [ 1250.322466] create_object.isra.0+0x3a/0xa30 [ 1250.323393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.324482] kmem_cache_alloc+0x159/0x310 [ 1250.325385] xas_alloc+0x336/0x440 [ 1250.326146] xas_create+0x34a/0x10d0 [ 1250.326942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1250.328073] xas_store+0x8c/0x1c40 [ 1250.328866] __xa_store+0x164/0x2d0 [ 1250.329642] ? xa_delete_node+0x280/0x280 [ 1250.330529] ? trace_hardirqs_on+0x5b/0x180 [ 1250.331478] xa_store+0x31/0x50 [ 1250.332189] __io_uring_add_tctx_node+0x1cf/0x520 [ 1250.333212] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1250.334342] ? alloc_fd+0x2e7/0x670 [ 1250.335143] io_uring_setup+0x1fbb/0x2980 [ 1250.336046] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1250.337141] ? wait_for_completion_io+0x270/0x270 [ 1250.338216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.339355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.340465] do_syscall_64+0x33/0x40 [ 1250.341262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.342370] RIP: 0033:0x7f5deeaf2b19 [ 1250.343180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.347160] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1250.348799] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1250.350374] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1250.351950] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1250.353516] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1250.355087] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1250.373413] FAULT_INJECTION: forcing a failure. [ 1250.373413] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.376196] CPU: 1 PID: 8176 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1250.377759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.379666] Call Trace: [ 1250.380272] dump_stack+0x107/0x167 [ 1250.381109] should_fail.cold+0x5/0xa [ 1250.381985] ? kmem_cache_free+0x249/0x2d0 [ 1250.382977] ? create_object.isra.0+0x3a/0xa30 [ 1250.384027] should_failslab+0x5/0x20 [ 1250.384909] kmem_cache_alloc+0x5b/0x310 [ 1250.385858] create_object.isra.0+0x3a/0xa30 [ 1250.386872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.388063] kmem_cache_alloc+0x159/0x310 [ 1250.389042] __es_insert_extent+0xed1/0x1370 [ 1250.390100] ext4_es_insert_extent+0x45d/0xf10 [ 1250.391197] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1250.392210] ? lock_downgrade+0x6d0/0x6d0 [ 1250.393200] ? do_raw_read_unlock+0x3b/0x70 [ 1250.394217] ? ext4_es_lookup_extent+0xc4/0xa80 [ 1250.395342] ext4_map_blocks+0x80b/0x1910 [ 1250.396331] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1250.397401] ? trace_hardirqs_on+0x5b/0x180 [ 1250.398431] ? kmem_cache_alloc+0x2a6/0x310 [ 1250.399478] ext4_writepages+0x19bf/0x3350 14:54:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1250.400498] ? ext4_da_write_end+0x21e/0x9c0 [ 1250.401784] ? generic_perform_write+0x2bf/0x4f0 [ 1250.402959] ? ksys_write+0x12d/0x260 [ 1250.403904] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1250.405221] ? lock_acquire+0x197/0x470 [ 1250.406181] ? find_held_lock+0x2c/0x110 [ 1250.407189] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1250.408380] ? __traceiter_irq_enable+0xc0/0xc0 [ 1250.409518] ? mark_held_locks+0x9e/0xe0 [ 1250.410513] ? kmem_cache_free+0xa7/0x2d0 [ 1250.411534] ? __kasan_slab_free+0x122/0x160 [ 1250.412623] ? slab_free_freelist_hook+0xa9/0x180 [ 1250.413798] ? jbd2_journal_stop+0x61f/0xdc0 [ 1250.414871] ? kmem_cache_free+0x249/0x2d0 [ 1250.415933] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1250.417156] do_writepages+0xee/0x2a0 [ 1250.418105] ? page_writeback_cpu_online+0x20/0x20 [ 1250.419336] ? __mark_inode_dirty+0x312/0xd30 [ 1250.420471] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1250.421903] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1250.423184] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1250.424530] ? generic_perform_write+0x37d/0x4f0 [ 1250.425723] file_write_and_wait_range+0xb6/0x130 [ 1250.426929] ext4_sync_file+0x225/0xde0 [ 1250.427942] ? ext4_getfsmap+0x990/0x990 [ 1250.428966] vfs_fsync_range+0x13d/0x230 [ 1250.429987] ext4_buffered_write_iter+0x34b/0x4a0 [ 1250.431199] ? __lock_acquire+0xbb1/0x5b00 [ 1250.432279] ext4_file_write_iter+0x3ab/0x1530 [ 1250.433423] ? __lock_acquire+0x1657/0x5b00 [ 1250.434551] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1250.435662] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1250.436763] ? SOFTIRQ_verbose+0x10/0x10 [ 1250.437631] new_sync_write+0x42c/0x660 [ 1250.438478] ? new_sync_read+0x6f0/0x6f0 [ 1250.439341] ? ksys_write+0x12d/0x260 [ 1250.440142] ? lock_release+0x680/0x680 [ 1250.440978] ? avc_policy_seqno+0x9/0x70 [ 1250.441839] ? selinux_file_permission+0x92/0x520 [ 1250.442878] vfs_write+0x7c0/0xb10 [ 1250.443639] ksys_write+0x12d/0x260 [ 1250.444396] ? __ia32_sys_read+0xb0/0xb0 [ 1250.445250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.446343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.447440] do_syscall_64+0x33/0x40 [ 1250.448223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.449300] RIP: 0033:0x7f72c6759b19 [ 1250.450082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.453949] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1250.455552] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1250.457067] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1250.458594] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.460110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.461626] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:54:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1250.562813] loop1: detected capacity change from 0 to 41948160 [ 1250.592038] FAT-fs (loop1): invalid media value (0x00) [ 1250.593200] FAT-fs (loop1): Can't find a valid FAT filesystem 14:55:02 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) 14:55:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:55:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:55:02 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 30) 14:55:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb04) 14:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x80000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x24000000) 14:55:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 22) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1265.133833] loop1: detected capacity change from 0 to 41948160 [ 1265.134662] FAULT_INJECTION: forcing a failure. [ 1265.134662] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.137781] CPU: 1 PID: 8204 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1265.139236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.140992] Call Trace: [ 1265.141556] dump_stack+0x107/0x167 [ 1265.142337] should_fail.cold+0x5/0xa [ 1265.143147] ? xas_alloc+0x336/0x440 [ 1265.143941] should_failslab+0x5/0x20 [ 1265.144749] kmem_cache_alloc+0x5b/0x310 [ 1265.144796] FAT-fs (loop1): invalid media value (0x00) [ 1265.145612] xas_alloc+0x336/0x440 [ 1265.145637] xas_create+0x34a/0x10d0 [ 1265.145673] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1265.146948] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1265.147682] xas_store+0x8c/0x1c40 [ 1265.147721] __xa_store+0x164/0x2d0 [ 1265.152417] ? xa_delete_node+0x280/0x280 [ 1265.153308] ? trace_hardirqs_on+0x5b/0x180 [ 1265.154231] xa_store+0x31/0x50 [ 1265.154939] __io_uring_add_tctx_node+0x1cf/0x520 [ 1265.155972] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1265.157086] ? alloc_fd+0x2e7/0x670 [ 1265.157874] io_uring_setup+0x1fbb/0x2980 [ 1265.158768] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1265.159844] ? wait_for_completion_io+0x270/0x270 [ 1265.160887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1265.161999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.163092] do_syscall_64+0x33/0x40 [ 1265.163895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.164795] FAULT_INJECTION: forcing a failure. [ 1265.164795] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.164976] RIP: 0033:0x7f5deeaf2b19 [ 1265.165004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1265.172313] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1265.173924] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1265.175443] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1265.176951] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1265.178464] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1265.179979] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1265.181526] CPU: 0 PID: 8210 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1265.183182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.185189] Call Trace: [ 1265.185829] dump_stack+0x107/0x167 [ 1265.186711] should_fail.cold+0x5/0xa [ 1265.187636] ? create_object.isra.0+0x3a/0xa30 [ 1265.188729] should_failslab+0x5/0x20 [ 1265.189629] kmem_cache_alloc+0x5b/0x310 [ 1265.190597] create_object.isra.0+0x3a/0xa30 [ 1265.191638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1265.192842] kmem_cache_alloc+0x159/0x310 [ 1265.193834] __d_alloc+0x2a/0x990 [ 1265.194655] ? mark_lock+0xf5/0x2df0 [ 1265.195556] d_alloc+0x46/0x240 [ 1265.196355] d_alloc_parallel+0xe9/0x1a30 [ 1265.197343] ? __d_lookup+0x396/0x760 [ 1265.198254] ? lock_downgrade+0x6d0/0x6d0 [ 1265.199242] ? find_held_lock+0x2c/0x110 [ 1265.200211] ? __d_lookup_rcu+0x6d0/0x6d0 [ 1265.201202] ? __d_lookup+0x3bf/0x760 [ 1265.202102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1265.203362] lookup_open.isra.0+0x962/0x1270 [ 1265.204386] ? vfs_tmpfile+0x350/0x350 [ 1265.205335] ? __mnt_want_write+0x196/0x280 [ 1265.206363] path_openat+0x972/0x2770 [ 1265.207299] ? path_lookupat+0x860/0x860 [ 1265.208276] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1265.209516] ? SOFTIRQ_verbose+0x10/0x10 [ 1265.210454] ? find_held_lock+0x2c/0x110 [ 1265.211420] do_filp_open+0x190/0x3e0 [ 1265.212305] ? may_open_dev+0xf0/0xf0 [ 1265.213198] ? do_raw_spin_lock+0x121/0x260 [ 1265.214194] ? rwlock_bug.part.0+0x90/0x90 [ 1265.215197] ? _raw_spin_unlock+0x1a/0x30 [ 1265.216171] ? alloc_fd+0x2e7/0x670 [ 1265.217031] do_sys_openat2+0x171/0x4d0 [ 1265.217966] ? build_open_flags+0x6f0/0x6f0 [ 1265.218978] ? rcu_read_lock_any_held+0x75/0xa0 [ 1265.220083] __x64_sys_openat+0x13f/0x1f0 [ 1265.221047] ? __ia32_sys_open+0x1c0/0x1c0 [ 1265.222029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1265.223250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.224458] do_syscall_64+0x33/0x40 [ 1265.225324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.226511] RIP: 0033:0x7f8447751a04 [ 1265.227381] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1265.231648] RSP: 002b:00007f8444d13ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1265.233408] RAX: ffffffffffffffda RBX: 00007f84477e8970 RCX: 00007f8447751a04 [ 1265.235049] RDX: 0000000000000002 RSI: 00007f8444d14000 RDI: 00000000ffffff9c [ 1265.236700] RBP: 00007f8444d14000 R08: 0000000000000000 R09: ffffffffffffffff [ 1265.238335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1265.239983] R13: 0000000000000004 R14: 0000000020000198 R15: 0000000000000001 [ 1265.250002] FAULT_INJECTION: forcing a failure. [ 1265.250002] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.252474] CPU: 1 PID: 8212 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1265.253916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.255685] Call Trace: [ 1265.256246] dump_stack+0x107/0x167 [ 1265.257019] should_fail.cold+0x5/0xa [ 1265.257827] ? mempool_alloc+0x148/0x360 [ 1265.258682] ? mempool_free_pages+0x20/0x20 [ 1265.259603] should_failslab+0x5/0x20 [ 1265.260409] kmem_cache_alloc+0x5b/0x310 [ 1265.261271] ? mempool_free_pages+0x20/0x20 [ 1265.262180] mempool_alloc+0x148/0x360 [ 1265.263008] ? mempool_resize+0x7d0/0x7d0 [ 1265.263899] ? mempool_resize+0x7d0/0x7d0 [ 1265.264793] bvec_alloc+0xd8/0x2f0 [ 1265.265549] bio_alloc_bioset+0x40a/0x600 [ 1265.266438] ? bvec_alloc+0x2f0/0x2f0 [ 1265.267272] ext4_bio_write_page+0xa79/0x1480 [ 1265.268240] mpage_submit_page+0x14b/0x260 [ 1265.269136] ext4_writepages+0x1f2e/0x3350 [ 1265.270076] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1265.271141] ? perf_trace_lock_acquire+0x3/0x590 [ 1265.272183] ? find_held_lock+0x2c/0x110 [ 1265.273052] ? finish_task_switch+0x126/0x5d0 [ 1265.274007] ? mark_held_locks+0x9e/0xe0 [ 1265.274890] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1265.275946] do_writepages+0xee/0x2a0 [ 1265.276762] ? page_writeback_cpu_online+0x20/0x20 [ 1265.277800] ? finish_task_switch+0xef/0x5d0 [ 1265.278745] ? __switch_to+0x572/0xf70 [ 1265.279589] ? __switch_to_asm+0x3a/0x60 [ 1265.280482] ? __schedule+0x82c/0x1ea0 [ 1265.281319] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1265.282542] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1265.283608] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1265.284759] ? generic_perform_write+0x37d/0x4f0 [ 1265.285785] file_write_and_wait_range+0xb6/0x130 [ 1265.286807] ext4_sync_file+0x225/0xde0 [ 1265.287668] ? ext4_getfsmap+0x990/0x990 [ 1265.288551] vfs_fsync_range+0x13d/0x230 [ 1265.289422] ext4_buffered_write_iter+0x34b/0x4a0 [ 1265.290459] ? __lock_acquire+0xbb1/0x5b00 [ 1265.291379] ext4_file_write_iter+0x3ab/0x1530 [ 1265.292363] ? __lock_acquire+0x1657/0x5b00 [ 1265.293290] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1265.294278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1265.295419] ? SOFTIRQ_verbose+0x10/0x10 [ 1265.296299] new_sync_write+0x42c/0x660 [ 1265.297141] ? new_sync_read+0x6f0/0x6f0 [ 1265.298014] ? ksys_write+0x12d/0x260 [ 1265.298825] ? lock_release+0x680/0x680 [ 1265.299685] ? avc_policy_seqno+0x9/0x70 [ 1265.300559] ? selinux_file_permission+0x92/0x520 [ 1265.301607] vfs_write+0x7c0/0xb10 [ 1265.302374] ksys_write+0x12d/0x260 [ 1265.303159] ? __ia32_sys_read+0xb0/0xb0 [ 1265.304043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1265.305157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.306256] do_syscall_64+0x33/0x40 [ 1265.307044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.308148] RIP: 0033:0x7f72c6759b19 [ 1265.308933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1265.312856] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.314473] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1265.316012] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1265.317530] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.319043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.320568] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1265.376866] loop7: detected capacity change from 0 to 41948160 14:55:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x400000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x3f000000) 14:55:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 31) 14:55:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb08) 14:55:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) 14:55:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 23) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:55:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 1278.344841] FAULT_INJECTION: forcing a failure. [ 1278.344841] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.347560] CPU: 1 PID: 8226 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1278.349106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.350981] Call Trace: [ 1278.351596] dump_stack+0x107/0x167 [ 1278.352421] should_fail.cold+0x5/0xa [ 1278.353281] ? create_object.isra.0+0x3a/0xa30 [ 1278.354316] should_failslab+0x5/0x20 [ 1278.355178] kmem_cache_alloc+0x5b/0x310 [ 1278.356125] create_object.isra.0+0x3a/0xa30 [ 1278.357118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1278.358268] kmem_cache_alloc+0x159/0x310 [ 1278.359212] ? mempool_free_pages+0x20/0x20 [ 1278.360195] mempool_alloc+0x148/0x360 [ 1278.361085] ? mempool_resize+0x7d0/0x7d0 [ 1278.362042] ? __test_set_page_writeback+0x160/0xbb0 [ 1278.363199] bio_alloc_bioset+0x36e/0x600 [ 1278.363464] FAULT_INJECTION: forcing a failure. [ 1278.363464] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.364144] ? bvec_alloc+0x2f0/0x2f0 [ 1278.366241] ? invalid_page_referenced_vma+0x570/0x570 [ 1278.367459] ext4_bio_write_page+0xa79/0x1480 [ 1278.368492] mpage_submit_page+0x14b/0x260 [ 1278.369459] ext4_writepages+0x1f2e/0x3350 [ 1278.370474] ? find_held_lock+0x2c/0x110 [ 1278.371424] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1278.372553] ? mark_held_locks+0x9e/0xe0 [ 1278.373493] ? kmem_cache_free+0xa7/0x2d0 [ 1278.374436] ? __kasan_slab_free+0x122/0x160 [ 1278.375448] ? slab_free_freelist_hook+0xa9/0x180 [ 1278.376537] ? jbd2_journal_stop+0x61f/0xdc0 [ 1278.377533] ? kmem_cache_free+0x249/0x2d0 [ 1278.378519] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1278.379633] do_writepages+0xee/0x2a0 [ 1278.380501] ? page_writeback_cpu_online+0x20/0x20 [ 1278.381609] ? __mark_inode_dirty+0x312/0xd30 [ 1278.382636] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1278.383953] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1278.385090] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1278.386311] ? generic_perform_write+0x37d/0x4f0 [ 1278.387391] file_write_and_wait_range+0xb6/0x130 [ 1278.388477] ext4_sync_file+0x225/0xde0 [ 1278.389383] ? ext4_getfsmap+0x990/0x990 [ 1278.390311] vfs_fsync_range+0x13d/0x230 [ 1278.391239] ext4_buffered_write_iter+0x34b/0x4a0 [ 1278.392345] ? __lock_acquire+0xbb1/0x5b00 [ 1278.393319] ext4_file_write_iter+0x3ab/0x1530 [ 1278.394341] ? __lock_acquire+0x1657/0x5b00 [ 1278.395334] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1278.396401] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1278.397596] ? SOFTIRQ_verbose+0x10/0x10 [ 1278.398535] new_sync_write+0x42c/0x660 [ 1278.399454] ? new_sync_read+0x6f0/0x6f0 [ 1278.400361] ? ksys_write+0x12d/0x260 [ 1278.401251] ? lock_release+0x680/0x680 [ 1278.402157] ? avc_policy_seqno+0x9/0x70 [ 1278.403083] ? selinux_file_permission+0x92/0x520 [ 1278.404210] vfs_write+0x7c0/0xb10 [ 1278.405034] ksys_write+0x12d/0x260 [ 1278.405854] ? __ia32_sys_read+0xb0/0xb0 [ 1278.406795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.407997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.409157] do_syscall_64+0x33/0x40 [ 1278.410027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.411217] RIP: 0033:0x7f72c6759b19 [ 1278.412071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.416219] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1278.417946] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1278.419569] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1278.421187] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1278.422799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.424426] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1278.426076] CPU: 0 PID: 8233 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1278.426873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.427844] Call Trace: [ 1278.428150] dump_stack+0x107/0x167 [ 1278.428571] should_fail.cold+0x5/0xa [ 1278.429014] ? create_object.isra.0+0x3a/0xa30 [ 1278.429541] should_failslab+0x5/0x20 [ 1278.429982] kmem_cache_alloc+0x5b/0x310 [ 1278.430452] ? mark_held_locks+0x9e/0xe0 [ 1278.430924] create_object.isra.0+0x3a/0xa30 [ 1278.431436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1278.432020] kmem_cache_alloc+0x159/0x310 [ 1278.432500] xas_alloc+0x336/0x440 [ 1278.432912] xas_create+0x34a/0x10d0 [ 1278.433350] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1278.433960] xas_store+0x8c/0x1c40 [ 1278.434382] __xa_store+0x164/0x2d0 [ 1278.434804] ? xa_delete_node+0x280/0x280 [ 1278.435289] ? trace_hardirqs_on+0x5b/0x180 [ 1278.435808] xa_store+0x31/0x50 [ 1278.436197] __io_uring_add_tctx_node+0x1cf/0x520 [ 1278.436759] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1278.437362] ? alloc_fd+0x2e7/0x670 [ 1278.437791] io_uring_setup+0x1fbb/0x2980 [ 1278.438274] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1278.438859] ? wait_for_completion_io+0x270/0x270 [ 1278.439436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.440051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.440651] do_syscall_64+0x33/0x40 [ 1278.441098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.441699] RIP: 0033:0x7f5deeaf2b19 [ 1278.442139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.444269] RSP: 002b:00007f5dec068108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1278.445148] RAX: ffffffffffffffda RBX: 00007f5deec05f60 RCX: 00007f5deeaf2b19 [ 1278.445974] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007bb2 [ 1278.446796] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1278.447632] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1278.448455] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1278.450375] FAULT_INJECTION: forcing a failure. [ 1278.450375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.451801] CPU: 0 PID: 8240 Comm: syz-executor.0 Not tainted 5.10.259 #1 [ 1278.452603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.453572] Call Trace: [ 1278.453889] dump_stack+0x107/0x167 [ 1278.454315] should_fail.cold+0x5/0xa [ 1278.454762] _copy_to_user+0x2e/0x180 [ 1278.455209] simple_read_from_buffer+0xcc/0x160 [ 1278.455764] proc_fail_nth_read+0x198/0x230 [ 1278.456272] ? proc_sessionid_read+0x230/0x230 [ 1278.456804] ? security_file_permission+0xb1/0xe0 [ 1278.457367] ? proc_sessionid_read+0x230/0x230 [ 1278.457898] vfs_read+0x228/0x620 [ 1278.458308] ksys_read+0x12d/0x260 [ 1278.458724] ? vfs_write+0xb10/0xb10 [ 1278.459167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.459796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.460398] do_syscall_64+0x33/0x40 [ 1278.460832] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.461431] RIP: 0033:0x7f844775169c [ 1278.461867] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1278.464017] RSP: 002b:00007f8444d14170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1278.464903] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f844775169c [ 1278.465731] RDX: 000000000000000f RSI: 00007f8444d141e0 RDI: 0000000000000003 [ 1278.466565] RBP: 00007f8444d141d0 R08: 0000000000000000 R09: ffffffffffffffff [ 1278.467397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.468236] R13: 00007ffcc09e275f R14: 00007f8444d14300 R15: 0000000000022000 14:55:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x55050000) [ 1278.473375] loop7: detected capacity change from 0 to 41948160 14:55:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb58) [ 1278.534650] loop1: detected capacity change from 0 to 41948160 [ 1278.539316] FAT-fs (loop1): invalid media value (0x00) [ 1278.540189] FAT-fs (loop1): Can't find a valid FAT filesystem 14:55:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x600000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:15 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 32) 14:55:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x80040000) 14:55:15 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) 14:55:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 1278.620025] FAULT_INJECTION: forcing a failure. [ 1278.620025] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.621619] CPU: 0 PID: 8258 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1278.622358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.623296] Call Trace: [ 1278.623607] dump_stack+0x107/0x167 [ 1278.624028] should_fail.cold+0x5/0xa [ 1278.624472] ? vm_area_dup+0x78/0x290 [ 1278.624924] should_failslab+0x5/0x20 [ 1278.625366] kmem_cache_alloc+0x5b/0x310 [ 1278.625844] vm_area_dup+0x78/0x290 [ 1278.626256] ? lock_release+0x680/0x680 [ 1278.626726] ? mark_lock+0xf5/0x2df0 [ 1278.627164] ? lock_chain_count+0x20/0x20 [ 1278.627655] ? mark_lock+0xf5/0x2df0 [ 1278.628091] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1278.628675] ? lock_chain_count+0x20/0x20 [ 1278.629168] ? mark_lock+0xf5/0x2df0 [ 1278.629598] ? vm_area_alloc+0x110/0x110 [ 1278.630076] ? __lock_acquire+0x1657/0x5b00 [ 1278.630586] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1278.631169] ? SOFTIRQ_verbose+0x10/0x10 [ 1278.631646] ? vmacache_find+0x55/0x2a0 [ 1278.632079] __split_vma+0xa8/0x4e0 [ 1278.632474] __do_munmap+0x365/0x1260 [ 1278.632920] ? arch_get_unmapped_area+0x450/0x450 [ 1278.633443] ? lock_release+0x680/0x680 [ 1278.633910] mmap_region+0x7cc/0x1500 [ 1278.634361] do_mmap+0x868/0x1370 [ 1278.634771] vm_mmap_pgoff+0x198/0x1f0 [ 1278.635199] ? randomize_page+0xb0/0xb0 [ 1278.635672] ksys_mmap_pgoff+0x41c/0x560 [ 1278.636147] ? find_mergeable_anon_vma+0x250/0x250 [ 1278.636692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.637301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.637903] do_syscall_64+0x33/0x40 [ 1278.638333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.638932] RIP: 0033:0x7f5deeaf2b62 [ 1278.639369] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1278.641524] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1278.642354] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1278.643124] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1278.643903] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1278.644677] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1278.645456] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:55:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1278.650732] loop7: detected capacity change from 0 to 41948160 [ 1278.714413] loop1: detected capacity change from 0 to 41948160 [ 1278.729883] FAT-fs (loop1): invalid media value (0x00) [ 1278.730552] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1278.775256] FAULT_INJECTION: forcing a failure. [ 1278.775256] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.778207] CPU: 1 PID: 8268 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1278.780068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.782314] Call Trace: [ 1278.782961] dump_stack+0x107/0x167 [ 1278.783837] should_fail.cold+0x5/0xa [ 1278.784721] ? mempool_alloc+0x148/0x360 [ 1278.785802] ? mempool_free_pages+0x20/0x20 [ 1278.786882] should_failslab+0x5/0x20 [ 1278.787782] kmem_cache_alloc+0x5b/0x310 [ 1278.788720] ? mempool_free_pages+0x20/0x20 [ 1278.789721] mempool_alloc+0x148/0x360 [ 1278.790624] ? mempool_resize+0x7d0/0x7d0 [ 1278.791601] ? mempool_resize+0x7d0/0x7d0 [ 1278.792577] bvec_alloc+0xd8/0x2f0 [ 1278.793394] bio_alloc_bioset+0x40a/0x600 [ 1278.794352] ? bvec_alloc+0x2f0/0x2f0 [ 1278.795263] ext4_bio_write_page+0xa79/0x1480 [ 1278.796450] mpage_submit_page+0x14b/0x260 [ 1278.797409] ext4_writepages+0x1f2e/0x3350 [ 1278.798613] ? find_held_lock+0x2c/0x110 [ 1278.799566] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1278.800687] ? mark_held_locks+0x9e/0xe0 [ 1278.801631] ? kmem_cache_free+0xa7/0x2d0 [ 1278.802569] ? __kasan_slab_free+0x122/0x160 [ 1278.803608] ? slab_free_freelist_hook+0xa9/0x180 [ 1278.804717] ? jbd2_journal_stop+0x61f/0xdc0 [ 1278.805717] ? kmem_cache_free+0x249/0x2d0 [ 1278.806748] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1278.807885] do_writepages+0xee/0x2a0 [ 1278.808767] ? page_writeback_cpu_online+0x20/0x20 [ 1278.809880] ? __mark_inode_dirty+0x312/0xd30 [ 1278.810920] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1278.812251] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1278.813398] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1278.814616] ? generic_perform_write+0x37d/0x4f0 [ 1278.815702] file_write_and_wait_range+0xb6/0x130 [ 1278.816797] ext4_sync_file+0x225/0xde0 [ 1278.817688] ? ext4_getfsmap+0x990/0x990 [ 1278.818640] vfs_fsync_range+0x13d/0x230 [ 1278.819583] ext4_buffered_write_iter+0x34b/0x4a0 [ 1278.820683] ? __lock_acquire+0xbb1/0x5b00 [ 1278.821622] ext4_file_write_iter+0x3ab/0x1530 [ 1278.822658] ? __lock_acquire+0x1657/0x5b00 [ 1278.823652] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1278.824693] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1278.825878] ? SOFTIRQ_verbose+0x10/0x10 [ 1278.826829] new_sync_write+0x42c/0x660 [ 1278.827755] ? new_sync_read+0x6f0/0x6f0 [ 1278.828668] ? ksys_write+0x12d/0x260 [ 1278.829559] ? lock_release+0x680/0x680 [ 1278.830458] ? avc_policy_seqno+0x9/0x70 [ 1278.831376] ? selinux_file_permission+0x92/0x520 [ 1278.832486] vfs_write+0x7c0/0xb10 [ 1278.833297] ksys_write+0x12d/0x260 [ 1278.834115] ? __ia32_sys_read+0xb0/0xb0 [ 1278.835042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.836232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.837403] do_syscall_64+0x33/0x40 [ 1278.838261] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.839412] RIP: 0033:0x7f72c6759b19 [ 1278.840245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.844412] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1278.846123] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1278.847752] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1278.849364] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1278.850966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.852596] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:55:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 14:55:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1292.440677] loop1: detected capacity change from 0 to 41948160 [ 1292.446934] FAULT_INJECTION: forcing a failure. [ 1292.446934] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.449917] CPU: 1 PID: 8284 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1292.451701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.453856] Call Trace: [ 1292.454548] dump_stack+0x107/0x167 [ 1292.455500] should_fail.cold+0x5/0xa [ 1292.456501] ? create_object.isra.0+0x3a/0xa30 [ 1292.457677] should_failslab+0x5/0x20 [ 1292.458671] kmem_cache_alloc+0x5b/0x310 [ 1292.459741] create_object.isra.0+0x3a/0xa30 [ 1292.460876] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1292.461367] FAULT_INJECTION: forcing a failure. [ 1292.461367] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.462201] kmem_cache_alloc+0x159/0x310 [ 1292.462234] ? mempool_free_pages+0x20/0x20 [ 1292.465928] mempool_alloc+0x148/0x360 [ 1292.466946] ? mempool_resize+0x7d0/0x7d0 [ 1292.468034] ? mempool_resize+0x7d0/0x7d0 [ 1292.469131] bvec_alloc+0xd8/0x2f0 [ 1292.470055] bio_alloc_bioset+0x40a/0x600 [ 1292.471136] ? bvec_alloc+0x2f0/0x2f0 [ 1292.472152] ext4_bio_write_page+0xa79/0x1480 [ 1292.473338] mpage_submit_page+0x14b/0x260 [ 1292.474433] ext4_writepages+0x1f2e/0x3350 [ 1292.475590] ? find_held_lock+0x2c/0x110 [ 1292.476648] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1292.477923] ? mark_held_locks+0x9e/0xe0 [ 1292.478987] ? kmem_cache_free+0xa7/0x2d0 [ 1292.480073] ? __kasan_slab_free+0x122/0x160 [ 1292.481028] ? slab_free_freelist_hook+0xa9/0x180 [ 1292.481838] ? jbd2_journal_stop+0x61f/0xdc0 [ 1292.482569] ? kmem_cache_free+0x249/0x2d0 [ 1292.483284] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1292.484111] do_writepages+0xee/0x2a0 [ 1292.484740] ? page_writeback_cpu_online+0x20/0x20 [ 1292.485386] ? __mark_inode_dirty+0x312/0xd30 [ 1292.485983] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1292.486742] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1292.487400] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1292.488115] ? generic_perform_write+0x37d/0x4f0 [ 1292.488748] file_write_and_wait_range+0xb6/0x130 [ 1292.489384] ext4_sync_file+0x225/0xde0 [ 1292.489905] ? ext4_getfsmap+0x990/0x990 [ 1292.490442] vfs_fsync_range+0x13d/0x230 [ 1292.490984] ext4_buffered_write_iter+0x34b/0x4a0 [ 1292.491612] ? __lock_acquire+0xbb1/0x5b00 [ 1292.492175] ext4_file_write_iter+0x3ab/0x1530 [ 1292.492775] ? __lock_acquire+0x1657/0x5b00 [ 1292.493341] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1292.493941] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1292.494626] ? SOFTIRQ_verbose+0x10/0x10 [ 1292.495163] new_sync_write+0x42c/0x660 [ 1292.495696] ? new_sync_read+0x6f0/0x6f0 [ 1292.496226] ? ksys_write+0x12d/0x260 [ 1292.496725] ? lock_release+0x680/0x680 [ 1292.497246] ? avc_policy_seqno+0x9/0x70 [ 1292.497777] ? selinux_file_permission+0x92/0x520 [ 1292.498414] vfs_write+0x7c0/0xb10 [ 1292.498883] ksys_write+0x12d/0x260 [ 1292.499354] ? __ia32_sys_read+0xb0/0xb0 [ 1292.499895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.500585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.501264] do_syscall_64+0x33/0x40 [ 1292.501755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.502420] RIP: 0033:0x7f72c6759b19 [ 1292.502882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.505289] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1292.506279] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1292.507160] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1292.508096] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.508974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.509906] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1292.510855] CPU: 0 PID: 8286 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1292.511819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.512961] Call Trace: [ 1292.513265] dump_stack+0x107/0x167 [ 1292.513781] should_fail.cold+0x5/0xa [ 1292.514318] ? create_object.isra.0+0x3a/0xa30 [ 1292.514953] should_failslab+0x5/0x20 [ 1292.515483] kmem_cache_alloc+0x5b/0x310 [ 1292.516055] create_object.isra.0+0x3a/0xa30 [ 1292.516656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1292.517365] kmem_cache_alloc+0x159/0x310 [ 1292.517945] vm_area_dup+0x78/0x290 [ 1292.518456] ? lock_release+0x680/0x680 [ 1292.519011] ? mark_lock+0xf5/0x2df0 [ 1292.519525] ? lock_chain_count+0x20/0x20 [ 1292.520117] ? mark_lock+0xf5/0x2df0 [ 1292.520636] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1292.521363] ? lock_chain_count+0x20/0x20 [ 1292.521937] ? mark_lock+0xf5/0x2df0 [ 1292.522454] ? vm_area_alloc+0x110/0x110 [ 1292.523018] ? __lock_acquire+0x1657/0x5b00 [ 1292.523631] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1292.524364] ? SOFTIRQ_verbose+0x10/0x10 [ 1292.524918] ? vmacache_find+0x55/0x2a0 [ 1292.525461] __split_vma+0xa8/0x4e0 [ 1292.526185] __do_munmap+0x365/0x1260 [ 1292.526712] ? arch_get_unmapped_area+0x450/0x450 [ 1292.527393] ? lock_release+0x680/0x680 [ 1292.527955] mmap_region+0x7cc/0x1500 [ 1292.528484] do_mmap+0x868/0x1370 [ 1292.528979] vm_mmap_pgoff+0x198/0x1f0 [ 1292.529517] ? randomize_page+0xb0/0xb0 [ 1292.530077] ksys_mmap_pgoff+0x41c/0x560 [ 1292.530641] ? find_mergeable_anon_vma+0x250/0x250 [ 1292.531326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.532081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.532807] do_syscall_64+0x33/0x40 [ 1292.533322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.534031] RIP: 0033:0x7f5deeaf2b62 14:55:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:29 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 33) 14:55:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb5a) 14:55:29 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) 14:55:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x80ff20}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x8cffffff) [ 1292.534553] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1292.536933] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1292.537746] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1292.538514] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1292.539278] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1292.540052] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1292.540820] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1292.549303] FAT-fs (loop1): invalid media value (0x00) [ 1292.549947] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1292.558131] loop7: detected capacity change from 0 to 41948160 14:55:29 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 34) [ 1292.604233] FAULT_INJECTION: forcing a failure. [ 1292.604233] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.605670] CPU: 1 PID: 8300 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1292.606495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.607484] Call Trace: [ 1292.607816] dump_stack+0x107/0x167 [ 1292.608256] should_fail.cold+0x5/0xa [ 1292.608708] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.609348] ? create_task_io_context+0x2c/0x430 [ 1292.609912] should_failslab+0x5/0x20 [ 1292.610376] kmem_cache_alloc_node+0x55/0x330 [ 1292.610912] create_task_io_context+0x2c/0x430 [ 1292.611461] submit_bio_checks+0x1366/0x1720 [ 1292.611993] ? mark_held_locks+0x9e/0xe0 [ 1292.612481] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 1292.613213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.613838] ? quarantine_put+0x8b/0x1a0 [ 1292.614320] ? trace_hardirqs_on+0x5b/0x180 [ 1292.614835] ? kmem_cache_free+0xa7/0x2d0 [ 1292.615328] submit_bio_noacct+0x82/0x1010 [ 1292.615887] ? slab_free_freelist_hook+0xa9/0x180 [ 1292.616457] ? blk_queue_enter+0xc30/0xc30 [ 1292.616957] ? kmem_cache_free+0x249/0x2d0 [ 1292.617461] ? mpage_release_unused_pages+0x4a7/0x600 [ 1292.618078] submit_bio+0xf3/0x4e0 [ 1292.618502] ? submit_bio_noacct+0x1010/0x1010 [ 1292.619045] ? up_write+0x191/0x550 [ 1292.619476] ? downgrade_write+0x3a0/0x3a0 [ 1292.619986] ? down_write_killable+0x180/0x180 [ 1292.620530] ext4_io_submit+0x181/0x210 [ 1292.621000] ext4_writepages+0x1265/0x3350 [ 1292.621518] ? find_held_lock+0x2c/0x110 [ 1292.621999] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1292.622585] ? mark_held_locks+0x9e/0xe0 [ 1292.623072] ? __kasan_slab_free+0x122/0x160 [ 1292.623596] ? slab_free_freelist_hook+0xa9/0x180 [ 1292.624174] ? jbd2_journal_stop+0x61f/0xdc0 [ 1292.624691] ? kmem_cache_free+0x249/0x2d0 [ 1292.625195] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1292.625769] do_writepages+0xee/0x2a0 [ 1292.626219] ? page_writeback_cpu_online+0x20/0x20 [ 1292.626804] ? __mark_inode_dirty+0x312/0xd30 [ 1292.627339] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1292.628041] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1292.628615] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1292.629251] ? generic_perform_write+0x37d/0x4f0 [ 1292.629813] file_write_and_wait_range+0xb6/0x130 [ 1292.630378] ext4_sync_file+0x225/0xde0 [ 1292.630847] ? ext4_getfsmap+0x990/0x990 [ 1292.631330] vfs_fsync_range+0x13d/0x230 [ 1292.631821] ext4_buffered_write_iter+0x34b/0x4a0 [ 1292.632386] ? __lock_acquire+0xbb1/0x5b00 [ 1292.632886] ext4_file_write_iter+0x3ab/0x1530 [ 1292.633422] ? __lock_acquire+0x1657/0x5b00 [ 1292.633936] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1292.634485] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1292.635099] ? SOFTIRQ_verbose+0x10/0x10 [ 1292.635590] new_sync_write+0x42c/0x660 [ 1292.636064] ? new_sync_read+0x6f0/0x6f0 [ 1292.636543] ? ksys_write+0x12d/0x260 [ 1292.636994] ? lock_release+0x680/0x680 [ 1292.637465] ? avc_policy_seqno+0x9/0x70 [ 1292.637943] ? selinux_file_permission+0x92/0x520 [ 1292.638520] vfs_write+0x7c0/0xb10 [ 1292.638941] ksys_write+0x12d/0x260 [ 1292.639367] ? __ia32_sys_read+0xb0/0xb0 [ 1292.639864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.640483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.641090] do_syscall_64+0x33/0x40 [ 1292.641530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.642133] RIP: 0033:0x7f72c6759b19 [ 1292.642568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.644746] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1292.645651] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1292.646486] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1292.647323] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.648167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.649003] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 14:55:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa1ffffff) 14:55:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:55:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb5c) 14:55:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x80ffff}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1292.697325] loop1: detected capacity change from 0 to 41948160 [ 1292.704870] FAT-fs (loop1): invalid media value (0x00) [ 1292.705519] FAT-fs (loop1): Can't find a valid FAT filesystem 14:55:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:29 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) 14:55:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb60) 14:55:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xc0ff20}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xe4ffffff) [ 1292.740691] FAULT_INJECTION: forcing a failure. [ 1292.740691] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.742116] CPU: 0 PID: 8313 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1292.743059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.744219] Call Trace: [ 1292.744525] dump_stack+0x107/0x167 [ 1292.745097] should_fail.cold+0x5/0xa [ 1292.745640] ? anon_vma_clone+0xdc/0x590 [ 1292.746141] should_failslab+0x5/0x20 [ 1292.746667] kmem_cache_alloc+0x5b/0x310 [ 1292.747240] anon_vma_clone+0xdc/0x590 [ 1292.747804] __split_vma+0x17c/0x4e0 [ 1292.748328] __do_munmap+0x365/0x1260 [ 1292.748856] mmap_region+0x7cc/0x1500 [ 1292.749393] ? shmem_mapping+0x1/0x50 [ 1292.749921] do_mmap+0x868/0x1370 [ 1292.750410] vm_mmap_pgoff+0x198/0x1f0 [ 1292.750958] ? randomize_page+0xb0/0xb0 [ 1292.751518] ksys_mmap_pgoff+0x41c/0x560 [ 1292.752092] ? find_mergeable_anon_vma+0x250/0x250 [ 1292.752778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.753504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.754218] do_syscall_64+0x33/0x40 [ 1292.754738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.755445] RIP: 0033:0x7f5deeaf2b62 [ 1292.755970] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1292.758507] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1292.759554] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1292.760543] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1292.761532] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1292.762511] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1292.763496] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:55:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1292.815004] loop1: detected capacity change from 0 to 41948160 [ 1292.850189] FAT-fs (loop1): invalid media value (0x00) [ 1292.851762] FAT-fs (loop1): Can't find a valid FAT filesystem 14:55:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) 14:55:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) 14:55:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb9c) 14:55:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xf6ffffff) 14:55:43 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 35) 14:55:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) 14:55:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x1000000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) [ 1306.270554] FAULT_INJECTION: forcing a failure. [ 1306.270554] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.273063] CPU: 1 PID: 8330 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1306.274657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.276413] Call Trace: [ 1306.276977] dump_stack+0x107/0x167 [ 1306.277744] should_fail.cold+0x5/0xa [ 1306.278549] ? create_object.isra.0+0x3a/0xa30 [ 1306.279505] should_failslab+0x5/0x20 [ 1306.280315] kmem_cache_alloc+0x5b/0x310 [ 1306.281180] create_object.isra.0+0x3a/0xa30 [ 1306.282100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.283195] kmem_cache_alloc+0x159/0x310 [ 1306.284087] anon_vma_clone+0xdc/0x590 [ 1306.284913] __split_vma+0x17c/0x4e0 [ 1306.285706] __do_munmap+0x365/0x1260 [ 1306.286512] ? arch_get_unmapped_area+0x450/0x450 [ 1306.287528] ? lock_release+0x680/0x680 [ 1306.288375] mmap_region+0x7cc/0x1500 [ 1306.289191] do_mmap+0x868/0x1370 [ 1306.289938] vm_mmap_pgoff+0x198/0x1f0 [ 1306.290766] ? randomize_page+0xb0/0xb0 [ 1306.291620] ksys_mmap_pgoff+0x41c/0x560 [ 1306.292511] ? find_mergeable_anon_vma+0x250/0x250 [ 1306.293545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1306.294657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1306.295745] do_syscall_64+0x33/0x40 [ 1306.296551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.297648] RIP: 0033:0x7f5deeaf2b62 [ 1306.298440] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1306.302402] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1306.304045] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1306.305575] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1306.307103] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1306.308637] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1306.310175] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1306.315164] FAULT_INJECTION: forcing a failure. [ 1306.315164] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.317662] CPU: 0 PID: 8340 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1306.319119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.320884] Call Trace: [ 1306.321446] dump_stack+0x107/0x167 [ 1306.322227] should_fail.cold+0x5/0xa [ 1306.323033] ? create_object.isra.0+0x3a/0xa30 [ 1306.324005] should_failslab+0x5/0x20 [ 1306.324803] kmem_cache_alloc+0x5b/0x310 [ 1306.325665] create_object.isra.0+0x3a/0xa30 [ 1306.326593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.327669] kmem_cache_alloc+0x159/0x310 [ 1306.328566] ? mempool_free_pages+0x20/0x20 [ 1306.329472] mempool_alloc+0x148/0x360 [ 1306.330306] ? mempool_resize+0x7d0/0x7d0 [ 1306.331182] ? mempool_resize+0x7d0/0x7d0 [ 1306.332083] bvec_alloc+0xd8/0x2f0 [ 1306.332836] bio_alloc_bioset+0x40a/0x600 [ 1306.333710] ? bvec_alloc+0x2f0/0x2f0 [ 1306.334544] ext4_bio_write_page+0xa79/0x1480 [ 1306.335507] mpage_submit_page+0x14b/0x260 [ 1306.336413] ext4_writepages+0x1f2e/0x3350 [ 1306.337355] ? find_held_lock+0x2c/0x110 [ 1306.338212] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1306.339261] ? mark_held_locks+0x9e/0xe0 [ 1306.340138] ? kmem_cache_free+0xa7/0x2d0 [ 1306.341010] ? __kasan_slab_free+0x122/0x160 [ 1306.341939] ? slab_free_freelist_hook+0xa9/0x180 [ 1306.342952] ? jbd2_journal_stop+0x61f/0xdc0 [ 1306.343886] ? kmem_cache_free+0x249/0x2d0 [ 1306.344799] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1306.345826] do_writepages+0xee/0x2a0 [ 1306.346638] ? page_writeback_cpu_online+0x20/0x20 [ 1306.347674] ? __mark_inode_dirty+0x312/0xd30 [ 1306.348640] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1306.349853] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1306.350905] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1306.352056] ? generic_perform_write+0x37d/0x4f0 [ 1306.353060] file_write_and_wait_range+0xb6/0x130 [ 1306.354084] ext4_sync_file+0x225/0xde0 [ 1306.354919] ? ext4_getfsmap+0x990/0x990 [ 1306.355785] vfs_fsync_range+0x13d/0x230 [ 1306.356655] ext4_buffered_write_iter+0x34b/0x4a0 [ 1306.357679] ? __lock_acquire+0xbb1/0x5b00 [ 1306.358575] ext4_file_write_iter+0x3ab/0x1530 [ 1306.359540] ? __lock_acquire+0x1657/0x5b00 [ 1306.360494] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1306.361479] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1306.362581] ? SOFTIRQ_verbose+0x10/0x10 [ 1306.363440] new_sync_write+0x42c/0x660 [ 1306.364301] ? new_sync_read+0x6f0/0x6f0 [ 1306.365154] ? ksys_write+0x12d/0x260 [ 1306.365961] ? lock_release+0x680/0x680 [ 1306.366806] ? avc_policy_seqno+0x9/0x70 [ 1306.367667] ? selinux_file_permission+0x92/0x520 [ 1306.368709] vfs_write+0x7c0/0xb10 [ 1306.369464] ksys_write+0x12d/0x260 [ 1306.370234] ? __ia32_sys_read+0xb0/0xb0 [ 1306.371101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1306.372226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1306.373312] do_syscall_64+0x33/0x40 [ 1306.374103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.375179] RIP: 0033:0x7f72c6759b19 [ 1306.375973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.379831] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1306.381449] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1306.382948] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1306.384468] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.385960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1306.387462] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1306.394987] loop1: detected capacity change from 0 to 41948160 [ 1306.408490] loop7: detected capacity change from 0 to 41948160 14:55:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xb9f) [ 1306.436506] FAT-fs (loop1): invalid media value (0x00) [ 1306.437720] FAT-fs (loop1): Can't find a valid FAT filesystem 14:55:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xfbffffff) 14:55:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:43 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) [ 1306.627361] FAULT_INJECTION: forcing a failure. [ 1306.627361] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.629933] CPU: 1 PID: 8360 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1306.631384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.633157] Call Trace: [ 1306.633725] dump_stack+0x107/0x167 [ 1306.634502] should_fail.cold+0x5/0xa [ 1306.635313] ? vm_area_alloc+0x1c/0x110 [ 1306.636167] should_failslab+0x5/0x20 [ 1306.636975] kmem_cache_alloc+0x5b/0x310 [ 1306.637853] vm_area_alloc+0x1c/0x110 [ 1306.638668] mmap_region+0x982/0x1500 [ 1306.639500] do_mmap+0x868/0x1370 [ 1306.640262] vm_mmap_pgoff+0x198/0x1f0 [ 1306.641096] ? randomize_page+0xb0/0xb0 [ 1306.641952] ksys_mmap_pgoff+0x41c/0x560 [ 1306.642819] ? find_mergeable_anon_vma+0x250/0x250 [ 1306.643884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1306.645004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1306.646098] do_syscall_64+0x33/0x40 [ 1306.646905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.647996] RIP: 0033:0x7f5deeaf2b62 [ 1306.648788] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1306.652709] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1306.654329] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1306.655847] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1306.657359] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1306.658867] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1306.660385] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:55:59 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 66) 14:55:59 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="430000002902001affffff0204009a1f9d2f00000000000096060000000000000901"], 0x43) (fail_nth: 36) 14:55:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xba1) [ 1322.466308] FAULT_INJECTION: forcing a failure. [ 1322.466308] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.468868] CPU: 1 PID: 8368 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1322.470292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.471986] Call Trace: [ 1322.472553] dump_stack+0x107/0x167 [ 1322.473299] should_fail.cold+0x5/0xa [ 1322.474085] ? create_object.isra.0+0x3a/0xa30 [ 1322.475013] should_failslab+0x5/0x20 [ 1322.475804] kmem_cache_alloc+0x5b/0x310 [ 1322.476679] create_object.isra.0+0x3a/0xa30 [ 1322.477600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1322.478637] kmem_cache_alloc+0x159/0x310 [ 1322.479504] vm_area_alloc+0x1c/0x110 [ 1322.480333] mmap_region+0x982/0x1500 [ 1322.481164] do_mmap+0x868/0x1370 [ 1322.481921] vm_mmap_pgoff+0x198/0x1f0 [ 1322.482747] ? randomize_page+0xb0/0xb0 [ 1322.483599] ksys_mmap_pgoff+0x41c/0x560 [ 1322.484476] ? find_mergeable_anon_vma+0x250/0x250 [ 1322.485516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.486627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.487734] do_syscall_64+0x33/0x40 [ 1322.488533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.489612] RIP: 0033:0x7f5deeaf2b62 [ 1322.490408] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1322.494288] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1322.495888] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 14:55:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xfeffffff) 14:55:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x2000000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:55:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) (fail_nth: 1) 14:55:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) lseek(0xffffffffffffffff, 0x0, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200f5f4, 0x0) [ 1322.497392] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1322.499203] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1322.500716] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1322.502224] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 [ 1322.515176] FAULT_INJECTION: forcing a failure. [ 1322.515176] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.517606] CPU: 1 PID: 8369 Comm: syz-executor.6 Not tainted 5.10.259 #1 [ 1322.519063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.520740] loop7: detected capacity change from 0 to 41948160 [ 1322.520859] Call Trace: [ 1322.520887] dump_stack+0x107/0x167 [ 1322.523664] should_fail.cold+0x5/0xa [ 1322.524480] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.525605] ? create_task_io_context+0x2c/0x430 [ 1322.526606] should_failslab+0x5/0x20 [ 1322.527406] kmem_cache_alloc_node+0x55/0x330 [ 1322.528366] create_task_io_context+0x2c/0x430 [ 1322.529340] submit_bio_checks+0x1366/0x1720 [ 1322.530300] ? mark_held_locks+0x9e/0xe0 [ 1322.531172] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 1322.532479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.533587] ? quarantine_put+0x8b/0x1a0 [ 1322.534451] ? trace_hardirqs_on+0x5b/0x180 [ 1322.535359] ? kmem_cache_free+0xa7/0x2d0 [ 1322.536247] submit_bio_noacct+0x82/0x1010 [ 1322.537143] ? slab_free_freelist_hook+0xa9/0x180 [ 1322.538173] ? blk_queue_enter+0xc30/0xc30 [ 1322.539057] ? kmem_cache_free+0x249/0x2d0 [ 1322.539957] ? mpage_release_unused_pages+0x4a7/0x600 [ 1322.541067] submit_bio+0xf3/0x4e0 [ 1322.541818] ? submit_bio_noacct+0x1010/0x1010 [ 1322.542784] ? up_write+0x191/0x550 [ 1322.543556] ? downgrade_write+0x3a0/0x3a0 [ 1322.544453] ? down_write_killable+0x180/0x180 [ 1322.545416] ext4_io_submit+0x181/0x210 [ 1322.546263] ext4_writepages+0x1265/0x3350 [ 1322.547200] ? find_held_lock+0x2c/0x110 [ 1322.548057] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1322.549122] ? mark_held_locks+0x9e/0xe0 [ 1322.550008] ? __kasan_slab_free+0x122/0x160 [ 1322.550935] ? slab_free_freelist_hook+0xa9/0x180 [ 1322.551957] ? jbd2_journal_stop+0x61f/0xdc0 [ 1322.552896] ? kmem_cache_free+0x249/0x2d0 [ 1322.553805] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1322.554849] do_writepages+0xee/0x2a0 [ 1322.555654] ? page_writeback_cpu_online+0x20/0x20 [ 1322.556710] ? __mark_inode_dirty+0x312/0xd30 [ 1322.557682] ? __wb_update_bandwidth.constprop.0+0xe00/0xe00 [ 1322.558908] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1322.559967] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1322.561140] ? generic_perform_write+0x37d/0x4f0 [ 1322.562156] file_write_and_wait_range+0xb6/0x130 [ 1322.563183] ext4_sync_file+0x225/0xde0 [ 1322.564031] ? ext4_getfsmap+0x990/0x990 [ 1322.564915] vfs_fsync_range+0x13d/0x230 [ 1322.565796] ext4_buffered_write_iter+0x34b/0x4a0 [ 1322.566832] ? __lock_acquire+0xbb1/0x5b00 [ 1322.567742] ext4_file_write_iter+0x3ab/0x1530 [ 1322.568729] ? __lock_acquire+0x1657/0x5b00 [ 1322.569656] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1322.570635] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1322.571753] ? SOFTIRQ_verbose+0x10/0x10 [ 1322.572630] new_sync_write+0x42c/0x660 [ 1322.573483] ? new_sync_read+0x6f0/0x6f0 [ 1322.574344] ? ksys_write+0x12d/0x260 [ 1322.575164] ? lock_release+0x680/0x680 [ 1322.576011] ? avc_policy_seqno+0x9/0x70 [ 1322.576876] ? selinux_file_permission+0x92/0x520 14:55:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xfffff000) [ 1322.577922] vfs_write+0x7c0/0xb10 [ 1322.578970] ksys_write+0x12d/0x260 [ 1322.579738] ? __ia32_sys_read+0xb0/0xb0 [ 1322.580613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.581744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.582849] do_syscall_64+0x33/0x40 [ 1322.583641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.584754] RIP: 0033:0x7f72c6759b19 [ 1322.585549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.589445] RSP: 002b:00007f72c3ccf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1322.591068] RAX: ffffffffffffffda RBX: 00007f72c686cf60 RCX: 00007f72c6759b19 [ 1322.592589] RDX: 0000000000000043 RSI: 0000000020000340 RDI: 0000000000000003 [ 1322.594103] RBP: 00007f72c3ccf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.595636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1322.597157] R13: 00007fff0e6fef1f R14: 00007f72c3ccf300 R15: 0000000000022000 [ 1322.635062] FAULT_INJECTION: forcing a failure. [ 1322.635062] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.637762] CPU: 0 PID: 8386 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 1322.639325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.641253] Call Trace: [ 1322.641872] dump_stack+0x107/0x167 [ 1322.642725] should_fail.cold+0x5/0xa [ 1322.643629] ? alloc_pipe_info+0x10a/0x590 [ 1322.644649] should_failslab+0x5/0x20 [ 1322.645563] kmem_cache_alloc_trace+0x55/0x320 [ 1322.646669] alloc_pipe_info+0x10a/0x590 [ 1322.647656] splice_direct_to_actor+0x774/0x980 [ 1322.648802] ? _cond_resched+0x10/0x30 [ 1322.649737] ? inode_security+0x107/0x140 [ 1322.650724] ? pipe_to_sendpage+0x380/0x380 [ 1322.651762] ? avc_policy_seqno+0x9/0x70 [ 1322.652733] ? selinux_file_permission+0x92/0x520 [ 1322.653870] ? do_splice_to+0x160/0x160 [ 1322.654822] ? security_file_permission+0xb1/0xe0 [ 1322.655990] do_splice_direct+0x1c4/0x290 [ 1322.656984] ? splice_direct_to_actor+0x980/0x980 [ 1322.658124] ? avc_policy_seqno+0x9/0x70 [ 1322.659099] ? security_file_permission+0xb1/0xe0 [ 1322.660263] vfs_copy_file_range+0x4f8/0x13c0 [ 1322.661353] ? generic_file_rw_checks+0x240/0x240 [ 1322.662535] __do_sys_copy_file_range+0x193/0x420 [ 1322.663702] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1322.664845] ? ksys_write+0x1a9/0x260 [ 1322.665755] ? __ia32_sys_read+0xb0/0xb0 [ 1322.666717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.667949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.669169] do_syscall_64+0x33/0x40 [ 1322.670045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.671241] RIP: 0033:0x7f56ec895b19 [ 1322.672127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.676486] RSP: 002b:00007f56e9dea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1322.678279] RAX: ffffffffffffffda RBX: 00007f56ec9a9020 RCX: 00007f56ec895b19 [ 1322.679966] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1322.681649] RBP: 00007f56e9dea1d0 R08: 000000000200f5f4 R09: 0000000000000000 [ 1322.683320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.685002] R13: 00007ffddf8067cf R14: 00007f56e9dea300 R15: 0000000000022000 14:55:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xffffff7f) [ 1322.713404] loop1: detected capacity change from 0 to 41948160 14:55:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xba5) 14:55:59 executing program 2: syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 67) [ 1322.759847] FAT-fs (loop1): invalid media value (0x00) [ 1322.762839] FAT-fs (loop1): Can't find a valid FAT filesystem 14:55:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0x4000000}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 1322.792264] FAULT_INJECTION: forcing a failure. [ 1322.792264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1322.794908] CPU: 0 PID: 8398 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1322.796419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.798257] Call Trace: [ 1322.798844] dump_stack+0x107/0x167 [ 1322.799654] should_fail.cold+0x5/0xa [ 1322.800517] __alloc_pages_nodemask+0x182/0x600 [ 1322.801548] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1322.802870] ? walk_mem_res+0x170/0x170 [ 1322.803739] alloc_pages_current+0x187/0x280 [ 1322.804711] pte_alloc_one+0x16/0x1a0 [ 1322.805542] __pte_alloc+0x1d/0x330 [ 1322.806341] remap_pfn_range_internal+0x9a3/0xf60 [ 1322.807398] ? lookup_memtype+0x5b/0x200 [ 1322.808300] ? apply_to_existing_page_range+0x40/0x40 [ 1322.809443] remap_pfn_range+0xcd/0x160 [ 1322.810305] ? remap_pfn_range_notrack+0x70/0x70 [ 1322.811334] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1322.812471] io_uring_mmap+0x398/0x530 [ 1322.813317] mmap_file+0x5e/0xe0 [ 1322.814054] mmap_region+0xc4d/0x1500 [ 1322.814903] do_mmap+0x868/0x1370 [ 1322.815663] vm_mmap_pgoff+0x198/0x1f0 [ 1322.816514] ? randomize_page+0xb0/0xb0 [ 1322.817396] ksys_mmap_pgoff+0x41c/0x560 [ 1322.818277] ? find_mergeable_anon_vma+0x250/0x250 [ 1322.819350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.820489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.821611] do_syscall_64+0x33/0x40 [ 1322.822397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.823459] RIP: 0033:0x7f5deeaf2b62 [ 1322.824268] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1322.828196] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1322.829846] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1322.831397] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1322.832948] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1322.834489] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1322.836026] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:55:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) ftruncate(0xffffffffffffffff, 0x0) 14:55:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x278) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x40) ftruncate(r0, 0x1000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) (fail_nth: 2) [ 1322.845377] ------------[ cut here ]------------ [ 1322.846504] WARNING: CPU: 0 PID: 8398 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1322.848429] Modules linked in: [ 1322.849138] CPU: 0 PID: 8398 Comm: syz-executor.2 Not tainted 5.10.259 #1 [ 1322.850642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.852447] RIP: 0010:get_pat_info+0x216/0x270 [ 1322.853577] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 e1 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 ca 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 75 b0 5a 00 e9 [ 1322.858191] RSP: 0018:ffff8880411c7890 EFLAGS: 00010216 [ 1322.859557] RAX: 00000000000139c1 RBX: ffff88800dbd6000 RCX: ffffc9000662a000 [ 1322.867402] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 1322.869357] RBP: ffff8880411c7948 R08: 0000000000000000 R09: ffff8880411c7818 [ 1322.871172] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1322.872999] R13: 1ffff11008238f12 R14: 0000000000000000 R15: ffff88800dbd6050 [ 1322.874867] FS: 00007f5dec068700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1322.876966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1322.878462] CR2: 00007f6150f0c004 CR3: 0000000042a10000 CR4: 0000000000350ef0 [ 1322.880285] Call Trace: [ 1322.880984] ? pgprot_writethrough+0xc0/0xc0 [ 1322.882123] ? finish_task_switch+0x126/0x5d0 [ 1322.883269] ? finish_task_switch+0xef/0x5d0 [ 1322.884444] untrack_pfn+0xdc/0x240 [ 1322.885356] ? track_pfn_insert+0x150/0x150 [ 1322.886450] ? lock_downgrade+0x6d0/0x6d0 [ 1322.887498] ? uprobe_munmap+0x1c/0x670 [ 1322.888528] unmap_single_vma+0x1bc/0x300 [ 1322.889592] zap_page_range_single+0x2ce/0x450 [ 1322.890745] ? unmap_single_vma+0x300/0x300 [ 1322.891831] ? remap_pfn_range_internal+0xc56/0xf60 [ 1322.893092] ? lookup_memtype+0x5b/0x200 [ 1322.894179] ? apply_to_existing_page_range+0x40/0x40 [ 1322.895527] remap_pfn_range+0x139/0x160 [ 1322.896576] ? remap_pfn_range_notrack+0x70/0x70 [ 1322.897791] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1322.899128] io_uring_mmap+0x398/0x530 [ 1322.900143] mmap_file+0x5e/0xe0 [ 1322.901016] mmap_region+0xc4d/0x1500 [ 1322.902004] do_mmap+0x868/0x1370 [ 1322.902911] vm_mmap_pgoff+0x198/0x1f0 [ 1322.903898] ? randomize_page+0xb0/0xb0 [ 1322.904938] ksys_mmap_pgoff+0x41c/0x560 [ 1322.905968] ? find_mergeable_anon_vma+0x250/0x250 [ 1322.907210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.908571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.909902] do_syscall_64+0x33/0x40 [ 1322.910857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.912152] RIP: 0033:0x7f5deeaf2b62 14:56:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xffffff8c) [ 1322.913088] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1322.917824] RSP: 002b:00007f5dec0680f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1322.919687] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5deeaf2b62 [ 1322.921465] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff8000 [ 1322.923209] RBP: 0000000020ff8000 R08: 0000000000000004 R09: 0000000000000000 [ 1322.924969] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1322.926740] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ff8000 14:56:00 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0xbfd) [ 1322.928554] irq event stamp: 1263 [ 1322.929513] hardirqs last enabled at (1273): [] console_unlock+0x92d/0xb40 [ 1322.931580] hardirqs last disabled at (1282): [] console_unlock+0x839/0xb40 [ 1322.933664] softirqs last enabled at (798): [] asm_call_irq_on_stack+0x12/0x20 [ 1322.935810] softirqs last disabled at (775): [] asm_call_irq_on_stack+0x12/0x20 [ 1322.937979] ---[ end trace 11ddf7ce956aa749 ]--- [ 1323.075922] FAULT_INJECTION: forcing a failure. [ 1323.075922] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.078441] CPU: 0 PID: 8412 Comm: syz-executor.7 Tainted: G W 5.10.259 #1 [ 1323.080205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.082016] Call Trace: [ 1323.082602] dump_stack+0x107/0x167 [ 1323.083388] should_fail.cold+0x5/0xa [ 1323.084216] ? create_object.isra.0+0x3a/0xa30 [ 1323.085207] should_failslab+0x5/0x20 [ 1323.086022] kmem_cache_alloc+0x5b/0x310 [ 1323.086907] create_object.isra.0+0x3a/0xa30 [ 1323.087841] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1323.088933] kmem_cache_alloc_trace+0x151/0x320 [ 1323.089923] alloc_pipe_info+0x10a/0x590 [ 1323.090790] splice_direct_to_actor+0x774/0x980 [ 1323.091773] ? _cond_resched+0x10/0x30 [ 1323.092624] ? inode_security+0x107/0x140 [ 1323.093502] ? pipe_to_sendpage+0x380/0x380 [ 1323.094410] ? avc_policy_seqno+0x9/0x70 [ 1323.095273] ? selinux_file_permission+0x92/0x520 [ 1323.096301] ? do_splice_to+0x160/0x160 [ 1323.097156] ? security_file_permission+0xb1/0xe0 [ 1323.098185] do_splice_direct+0x1c4/0x290 [ 1323.099064] ? splice_direct_to_actor+0x980/0x980 [ 1323.100081] ? avc_policy_seqno+0x9/0x70 [ 1323.100958] ? security_file_permission+0xb1/0xe0 [ 1323.101980] vfs_copy_file_range+0x4f8/0x13c0 [ 1323.102950] ? generic_file_rw_checks+0x240/0x240 [ 1323.103996] __do_sys_copy_file_range+0x193/0x420 [ 1323.105139] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1323.106272] ? ksys_write+0x1a9/0x260 [ 1323.107200] ? __ia32_sys_read+0xb0/0xb0 [ 1323.108193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1323.109463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.110714] do_syscall_64+0x33/0x40 [ 1323.111620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.112867] RIP: 0033:0x7f56ec895b19 [ 1323.113768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.118195] RSP: 002b:00007f56e9e0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1323.120049] RAX: ffffffffffffffda RBX: 00007f56ec9a8f60 RCX: 00007f56ec895b19 [ 1323.121782] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 1323.123496] RBP: 00007f56e9e0b1d0 R08: 000000000200f5f4 R09: 0000000000000000 [ 1323.125224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.126944] R13: 00007ffddf8067cf R14: 00007f56e9e0b300 R15: 0000000000022000 VM DIAGNOSIS: 14:56:00 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822e9e1c RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff8880411c7250 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3f495 R14=fffffbfff0f3f44a R15=dffffc0000000000 RIP=ffffffff822e9e70 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5dec068700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6150f0c004 CR3=0000000042a10000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=5f7a79730a3a30206d6172676f727020 XMM02=38303030303030303066377830282628 XMM03=785c30656c69662f2e273d2930633030 XMM04=6e65706f5f746e6576655f667265700a XMM05=30343030303030303030663778302826 XMM06=30343230303030303030663778302826 XMM07=30383130303030303030663778302826 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=000000000000004c RCX=ffffffff83c6674a RDX=0000000000000000 RSI=ffffffff83bc620d RDI=0000000000000004 RBP=ffff8880089179f0 RSP=ffff888008917630 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000c R11=0000000000000001 R12=ffff888041324bc0 R13=ffff888042e32e48 R14=ffff88801b90145a R15=ffff888042ffcde8 RIP=ffffffff83bc6231 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f433172b128 CR3=000000003eeda000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000